Privacy Policy
How Fast Media BV collects, uses, shares and protects your personal data, and the rights you have under the GDPR.
A. Introduction & scope
Fast Media BV ("we", "us") respects your privacy. This policy applies to fastmediahouse.com and the Fast Media platform — including search, licensing, AI tools and your media library. It is governed by the laws of the Netherlands; the EU GDPR applies.
B. What data we collect
You provide directly: name, email address and phone number; billing details and VAT/business registration where applicable; account credentials; the content and metadata you upload; communication preferences.
Collected automatically: IP address and device/browser information; usage patterns (pages visited, searches, session activity); login timestamps and activity logs; session cookies.
Transactions & licensing: licence history, downloaded assets, orders and payment confirmations (payment card details are handled by Stripe and never stored by us).
C. How & why we use your data
We process personal data under contract, legal obligation, consent or legitimate interest, depending on the purpose:
| Purpose | Legal basis |
|---|---|
| User registration & login | Contract |
| Processing image licences | Contract |
| Delivering platform & library services | Contract |
| Payment processing & invoicing | Legal obligation |
| Marketing & updates (opt-in only) | Consent |
| Platform security & fraud detection | Legitimate interest |
| Studio booking & rental agreement | Contract |
| Verifying a studio renter's address and identity | Legitimate interest (protecting the premises and other users) |
| Studio invoices & booking records | Legal obligation |
In short: account data runs your account; licensing and upload metadata track ownership, usage and delivery; billing data meets our legal record-keeping duties; login and activity logs protect your account and our content; and marketing email is sent only if you opted in.
If you book our Amsterdam studio, we additionally hold your name, phone number and address, because a rental is a contract for physical premises and the address goes on your invoice. We also ask you to verify your identity before your first booking. That check is carried out by Stripe Identity: your identity document and selfie are sent to Stripe, not to us. We receive only a reference for the check and whether it passed — we never see, store or have access to the document itself, and we do not hold your date of birth or national identification number. Booking records that have been invoiced are kept for the seven years Dutch tax law requires.
D. Cookies
The platform uses cookies that are strictly necessary to operate it — keeping you signed in and securing your session. With your consent we also set Google Analytics cookies (_ga, _ga_*) to understand how the site is used. We do not use advertising or cross-site tracking cookies, and the advertising signals in Google Consent Mode remain denied whatever you choose. You can change or withdraw your choice at any time via “Cookie settings” in the footer; withdrawing disables analytics immediately and clears those cookies.
E. Data storage & processors
Your data is stored in the EU and processed by trusted third parties who help us operate the platform:
| Processor | Role |
|---|---|
| Supabase | Database, authentication & file infrastructure (EU — Frankfurt) |
| Vercel | Application hosting & delivery |
| Stripe | Payment processing (we never store card details) |
| Stripe Identity | Verifying the identity of studio renters — the document and selfie are processed by Stripe and never reach us; we keep only the check's reference and whether it passed |
| Xero | Accounting & invoicing |
| Google Analytics | Website analytics — only with your consent; disabled and its cookies cleared if you withdraw it |
| Content suppliers (e.g. Solwee, Newscom, Dreamstime) | Content search & licensing fulfilment |
| AI model providers (e.g. OpenAI, Stability, Replicate, Google) | Processing the prompts you submit to AI tools |
All processors are GDPR-compliant or operate under the EU-U.S. Data Privacy Framework where applicable.
F. Your rights under the GDPR
- Access — see what data we hold about you
- Rectification — correct inaccurate or incomplete data
- Erasure — request deletion of your data (where permitted)
- Restriction — limit how we process your data
- Objection — object to specific processing (e.g. marketing)
- Portability — receive a copy of your data in a portable format
- Withdraw consent — at any time, for consent-based processing
To exercise your rights, email team@fastmediahouse.com. We respond within one month. You also have the right to lodge a complaint with the Dutch supervisory authority (Autoriteit Persoonsgegevens).
G. International transfers & retention
Our primary infrastructure is in the EU. Where a processor operates outside the EU, transfers are protected by GDPR-compliant safeguards, including the EU-U.S. Data Privacy Framework where applicable. We keep records only as long as needed for licences, your account, and legal compliance.
H. Children & third-party links
Our services are not intended for users under 16, and we do not knowingly collect personal data from minors. Links to external websites follow their own privacy practices, for which we are not responsible.
I. Changes & contact
We may update this policy as laws change or the platform evolves; updates are posted on this page with a revised effective date.
Fast Media BV · Tussen de Bogen 29, 1013 JB Amsterdam, The Netherlands · team@fastmediahouse.com