Privacy Policy

Statement the Agency
www.statementtheagency.com
Last updated: March 2026

Statement the Agency ("Statement", "we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our platform at www.statementtheagency.com (the "Platform"). We comply with the General Data Protection Regulation (GDPR) and applicable Dutch data protection law.

1. Data Controller

The data controller responsible for your personal data is Statement the Agency, registered in The Netherlands. For any questions regarding data processing, contact us at legal@statementtheagency.com.

2. What Data We Collect

Account Data
When you register on the Platform, we collect your name, email address, password (encrypted), and role (company or crew member).

Profile Data
For crew members: professional title, biography, skills, tools and software, availability status, rate indication, profile photo, language, and nationality. For companies: company name, logo, industry, location, and description.

Portfolio Data
For crew members: uploaded portfolio images, videos, project descriptions, and case study materials that form part of your public-facing portfolio.

Project Data
Project titles, descriptions, required skills, budgets, deadlines, moodboards, references, and any associated communication through contact requests.

Payment Data
Payment details are processed by our payment provider Mollie. We store transaction references, amounts, payment status, and payout information. We do not store credit card numbers or bank account details directly — these are handled securely by Mollie.

Usage Data
We collect technical information such as IP addresses, browser type, pages visited, time spent on the Platform, and referral sources to improve our service and ensure security.

3. Why We Collect Your Data

We process your personal data for the following purposes:

  • Platform Operation: To create and manage your account, display your profile or portfolio, and enable matching between companies and crew members.
  • Matching & Discovery: To allow companies to discover and connect with relevant creative talent based on skills, availability, and discipline.
  • Payments: To process payments between companies and crew members, hold funds, and manage payouts through Mollie.
  • Communication: To send email notifications about projects, bookings, approvals, and platform updates.
  • Content Safety: To scan messages and content for prohibited information (such as attempts to share contact details outside the platform) in order to protect all users.
  • Legal Obligations: To comply with tax, accounting, and regulatory requirements under Dutch and EU law.

4. Legal Basis for Processing

We process your personal data on the following legal grounds under the GDPR:

  • Contract Performance (Art. 6(1)(b)): Processing necessary to fulfil our contract with you, including providing access to the Platform, processing payments, and managing bookings.
  • Legitimate Interest (Art. 6(1)(f)): Processing necessary for our legitimate interests, such as improving the Platform, preventing fraud, ensuring content safety, and marketing our services — provided these interests are not overridden by your rights.
  • Consent (Art. 6(1)(a)): Where we rely on your consent, such as for optional analytics cookies. You can withdraw consent at any time.
  • Legal Obligation (Art. 6(1)(c)): Processing required to comply with legal obligations, such as tax and accounting laws.

5. Data Sharing

We share your personal data only as follows:

  • Mollie: Our payment provider processes payment transactions. Mollie acts as an independent data controller for payment data. See Mollie's Privacy Policy.
  • Other Users: Approved crew member profiles (name, title, portfolio, skills) are visible to registered companies. Company profiles are visible to approved crew members. Contact details are only shared after a confirmed and paid booking.
  • Service Providers: We use hosting and infrastructure providers (Ploi, TransIP) to operate the Platform. These providers process data on our behalf under data processing agreements.
  • Legal Requirements: We may disclose data if required by law, regulation, or court order.

We do not sell your personal data to third parties. We do not share your data with advertisers.

6. Data Retention

We retain your personal data as follows:

  • Account Data: Retained for as long as your account is active. Deleted upon request after account closure, subject to legal retention obligations.
  • Payment & Transaction Data: Retained for seven (7) years after the transaction, in compliance with Dutch tax and accounting law.
  • Project Data: Retained for as long as the associated account is active and for a reasonable period after project completion.
  • Usage Data: Retained for a maximum of twenty-six (26) months.
  • Content Safety Logs: Retained for twelve (12) months for fraud prevention purposes.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations.
  • Right to Data Portability: Request your data in a structured, machine-readable format for transfer to another service.
  • Right to Restriction: Request that we restrict processing of your data in certain circumstances.
  • Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
  • Right to Withdraw Consent: Where processing is based on consent, withdraw at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at legal@statementtheagency.com. We will respond within one (1) month. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encrypted storage of passwords, secure HTTPS connections, access controls, and regular security reviews. Despite our efforts, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International Transfers

Your data is primarily stored and processed within the European Economic Area (EEA). If any data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

10. Cookies

We use cookies and similar technologies on the Platform. For detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on the Platform. The "last updated" date at the top of this policy indicates when it was last revised.

12. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Statement the Agency
Email: legal@statementtheagency.com
Website: www.statementtheagency.com

Jurisdiction: The Netherlands

We use cookies to improve your experience. Learn more