Privacy Policy

1. Who We Are

The AI Studio is an applied AI engineering consultancy based in Amsterdam, the Netherlands. We provide AI transformation consulting, engineering transformation services, and AI development services to organizations across Europe and internationally.

For the purposes of applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 ("GDPR"), The AI Studio is the data controller for the personal data collected through our website (theai.studio), our AI Maturity Assessment survey, and related services.

If you have any questions about this policy or how we handle your personal data, contact us at privacy@theai.studio.

2. What This Policy Covers

This policy explains what personal data we collect and why, how we use your data, the legal bases for processing under GDPR, how long we keep your data, who we share it with, your GDPR rights, how we protect your data, and our cookie policy.

This policy applies to all visitors of our website, respondents to our AI Maturity Assessment survey, newsletter recipients, and anyone who communicates with us through our contact forms, email, or scheduling tools.

3. What Personal Data We Collect

3.1 Website Visitors

When you visit our website, we may collect technical data such as your IP address, browser type, operating system, referring URL, pages visited, and duration of visit. This data is collected automatically through standard web technologies and analytics tools.

3.2 AI Maturity Assessment Survey Respondents

When you register for and complete our AI Maturity Assessment, we collect registration data (full name, work email address, job title, company name, company size), survey response data (your answers including free-text responses), and derived data (scores, maturity tier classifications, and analytical outputs generated from your responses).

3.3 Contact Form and Scheduling

When you contact us or book a consultation through our website or scheduling tools (such as Cal.com), we collect your name and email address, any information you voluntarily include in your message, and scheduling data such as the date and time of your appointment.

3.4 Email Communication

When we communicate with you via email, we collect your email address, the content of your correspondence, and email engagement data such as whether an email was opened or a link was clicked, where applicable.

4. How We Use Your Data

4.1 AI Maturity Assessment

We use your data to generate your personalized report and deliver it to the email address you provide. We may also send a limited number of follow-up emails related to your results. We may use anonymized and aggregated survey data to improve our assessment methodology and produce industry benchmarks — in all such cases, data is stripped of all identifying information.

4.2 Marketing Communications

By completing the AI Maturity Assessment registration, you agree to receive emails from The AI Studio related to your assessment results and relevant AI adoption content. You may unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us at privacy@theai.studio.

4.3 Website Analytics

We use website analytics data to understand how visitors interact with our website and to improve its content and functionality. This data is processed in anonymized or pseudonymized form wherever possible.

5. Legal Bases for Processing

Under Article 6 of the GDPR, we process your personal data on the following legal bases:

• Consent (Article 6(1)(a)): Marketing communications, where you may withdraw consent at any time.
• Legitimate Interest (Article 6(1)(f)): Delivering your assessment report, website analytics, and anonymized research and benchmarking.
• Contractual Necessity (Article 6(1)(b)): Where you engage The AI Studio as a client, processing necessary for the performance of our contract.

6. Data Retention

6.1 AI Maturity Assessment Data

Personal data and individual survey responses are retained for a maximum of six (6) months from the date of survey completion, after which they are permanently deleted. Anonymized and aggregated data may be retained indefinitely for research purposes. You may request early deletion at any time by contacting privacy@theai.studio — we will process your request within 30 days.

6.2 Contact and Communication Data

Contact form submissions and email correspondence are retained for up to 12 months unless an ongoing business relationship exists, in which case data is retained for the duration of the relationship plus 12 months.

6.3 Website Analytics Data

Analytics data is retained in accordance with the retention settings of the analytics tools we use, typically no longer than 14 months in anonymized or pseudonymized form.

7. Who We Share Your Data With

We do not sell, rent, or trade your personal data to third parties. We may share data with the following categories of recipients only to the extent necessary:

• Service providers — website hosting, email delivery, analytics, scheduling tools, and cloud storage. All are bound by GDPR-compliant data processing agreements.
• Legal requirements — where required by law, regulation, or governmental request.
• Business transfers — in the event of a merger or acquisition, with prior notice to you.

Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

8. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights:

• Right of Access (Art. 15) — request a copy of the personal data we hold about you.
• Right to Rectification (Art. 16) — request correction of inaccurate or incomplete data.
• Right to Erasure (Art. 17) — request deletion of your personal data. AI Maturity Assessment data is automatically deleted after six months regardless.
• Right to Restriction (Art. 18) — request restriction of processing in certain circumstances.
• Right to Data Portability (Art. 20) — receive your data in a structured, machine-readable format.
• Right to Object (Art. 21) — object to processing based on legitimate interest or direct marketing at any time.
• Right to Withdraw Consent (Art. 7(3)) — withdraw consent at any time without affecting prior lawful processing.

To exercise any of these rights, contact us at privacy@theai.studio. We will respond within 30 days.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), Bezuidenhoutseweg 30, 2594 AV The Hague.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including TLS/SSL encryption in transit and at rest, access controls limiting who can access personal data, regular review of our data processing practices, and use of GDPR-compliant service providers with appropriate security certifications.

10. International Data Transfers

The AI Studio is based in the Netherlands within the EEA. Where we use service providers that process data outside the EEA, we ensure appropriate safeguards are in place under Chapter V of the GDPR, including European Commission adequacy decisions (Article 45), Standard Contractual Clauses (Article 46(2)(c)), or other approved transfer mechanisms.

11. Cookies

Cookies are small text files placed on your device when you visit a website. We use the following types of cookies:

• Strictly Necessary Cookies — required for the website to function, including session management and cookie consent preferences. Cannot be disabled.
• Analytics Cookies — help us understand how visitors use our site. Data is collected in anonymized or pseudonymized form wherever possible.
• Functional Cookies — enable enhanced functionality such as remembering your preferences during a visit.

We do not use advertising or tracking cookies. We do not serve ads. We do not participate in cross-site tracking or behavioral advertising. You can manage cookie preferences through the consent mechanism on our website or through your browser settings. See also our Cookie Policy for more detail.

12. AI Maturity Assessment — Specific Terms

By completing the registration form and proceeding to the survey, you confirm that the information you provide is accurate, agree to receive your personalized report via the email address provided, and consent to receiving follow-up and marketing communications from The AI Studio. You may withdraw this consent at any time.

Your individual responses and personal data will never be shared publicly, with other respondents, or with third parties for their marketing purposes. Your organization's name and identifying details will never appear in any published research or marketing material without your explicit written consent.

Your AI Maturity Assessment report is confidential to you. We do not share it with anyone other than the email address you provided at registration.

13. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties and encourage you to review their privacy policies.

14. Children's Privacy

Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, contact us at privacy@theai.studio and we will promptly delete it.

15. Changes to This Policy

We may update this privacy policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or site notice.

16. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or our data protection practices, please contact us:

The AI Studio
Email: privacy@theai.studio
Location: Amsterdam, the Netherlands

For complaints about how we handle your data, you may also contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.