LEGAL PRIVACY // GDPR

Privacy statement

The short version. This site sets no cookies and has no accounts. It counts page views — how many, which page, roughly where from — with a counter that runs on our own domain and writes nothing to your device. Nothing else you do here is measured, and there is still no banner to click away, because there is still nothing on your machine to consent to.

Three things do involve you. Our host keeps ordinary server logs. If you email us, we have your email. And we publish photos from our nights, where people are recognisable.

If you are in a photo and want it gone, write to monarkamsterdam@gmail.com. We take it down. You do not have to explain why.

1. Who is responsible

The controller for the personal data described here is:

Monark Worldwide VOF — Galgenstraat 11, 1013 LT Amsterdam, The Netherlands — KvK 42062645

Everything on this page reaches us at monarkamsterdam@gmail.com. We are a small crew in Amsterdam, not a company with a privacy department, so that address is the whole route in. We are not required to appoint a data protection officer and we have not appointed one.

2. What happens automatically: server logs and a page counter

This site is a set of static files. It is hosted by Vercel Inc., and two things happen by themselves when your browser asks for a page: their server writes an access log, and our page counter records one view. Those are the only two, and neither is joined to the other.

The access log. Like every web server, theirs writes a line per request.

  • What is in it: your IP address, your browser and device string (user agent), the page or file you requested, the date and time, the response the server gave, and, if your browser sends one, the address you came from.
  • Why: to actually deliver the page to you, to keep the site up, and to see abuse, attacks and outages when they happen.
  • Legal basis: legitimate interest, article 6(1)(f) GDPR — running a website securely and reliably. Without a log, a server cannot be operated.
  • What we do not do with it: we do not export it, copy it, or build profiles from it. It is never joined to the page counts below, and nothing in it tells us who you are.

The page counter. We use Vercel Web Analytics to see how many people read which page. It is the only measurement on this site, and it is the quietest one we could find.

  • What it records: the page you are on, the site you came from if your browser sends one, and coarse technical facts — country, device type, operating system, browser, screen size.
  • What it does not do: it sets no cookie and writes nothing to local or session storage. No identifier of you is kept on your device, so nothing about this visit survives the tab. To tell two visitors apart on the same day, Vercel derives a hash from the incoming request on their own servers and changes the input daily, so a count cannot be carried from one day to the next and cannot be turned back into a person.
  • Where it runs: on this domain. The script is served from monarkams.com and reports to monarkams.com. Nothing is fetched from another company, so no third party learns your IP address from loading these pages — the same reason the fonts are self-hosted.
  • Legal basis: legitimate interest, article 6(1)(f) GDPR — knowing which nights and which pages people actually read. Because nothing is stored on or read from your device, article 11.7a of the Telecommunicatiewet does not ask for your consent, and neither do we. A banner would have to remember your answer, which would mean writing to your device in order to avoid counting you.
  • What we see: totals in a dashboard — views per page, per country, per device. There is no per-visitor view of it and we cannot single you out in it.

That is the whole of it: a log we never copy, and a count with no name on it. Nothing else runs in the page.

3. If you write to us

The form on our contact page does not submit anywhere. It checks the fields in your own browser, then opens your own mail app with the text already filled in. Nothing is stored on this site and nothing is transmitted by this site — you decide whether to press send, and it travels through your own mail provider.

If you do send it, or write to us directly, the message arrives in our mailbox at monarkamsterdam@gmail.com, which runs on Google's mail service. We then have your name, your email address and whatever you chose to put in the message.

  • Legal basis: article 6(1)(b) GDPR where you are asking about a booking, a venue or a collaboration, because answering is a step towards an agreement between us. Otherwise legitimate interest, article 6(1)(f) — answering people who write to us.

4. Photos from the nights

We photograph our own events and publish a selection across this site — the gallery, the individual night pages, the videos page, and as the wide images behind several section headers. Each night's full album sits in a Google Drive folder, linked from that night's page. People are recognisable in a lot of these images. That makes them personal data and we treat them as personal data.

  • Legal basis: legitimate interest, article 6(1)(f) GDPR — documenting our own events and showing people what the nights are.
  • How we keep that fair: the photos are taken openly, at our own events, by a photographer working in the room. We do not caption anyone by name, we do not tag anyone, and we do not run face recognition or any other identification over them. The only people named on this site are the four of us who run it and the artists on the line-ups, and no name anywhere is attached to a face in a photograph.
  • Your say: you have an absolute right to object under article 21 GDPR, and we go further than the law asks. Ask and the photo comes down, no reason needed and no argument.

To get a photo removed, email monarkamsterdam@gmail.com with the page or album it is on and enough detail to find you in the frame — the night, roughly where in the album, what you were wearing. We remove it from the site and from the Drive album. The full route is on our legal page.

If the photo is of a minor, say so and it jumps the queue.

5. What this site does not do

Worth stating plainly, because most sites cannot say it:

  • No cookies. None at all. See the cookie statement.
  • No local storage, no session storage, nothing written to your device by us.
  • One counter and nothing more: the cookieless page count in section 2, served from this domain. No heatmaps, no session recording, no tracking pixels, no advertising, no retargeting, no profiles.
  • No third-party scripts, no embeds, no iframes, no social widgets, no comment system. Every file these pages load comes from this domain, the counter script included.
  • No fonts loaded from anyone else. Anton and Space Mono are served from this domain, so your IP address is not handed to a font server when the page loads.
  • No accounts, no logins, no newsletter database, no contact database.
  • We never sell, rent or trade personal data, and there is no profiling and no automated decision-making about anyone.

6. Who else touches it

Two companies, both as processors acting on our instructions, and nobody else:

  • Vercel Inc. — hosts the site, holds the server logs in section 2, and runs the page counter described there.
  • Google — runs the mailbox that receives anything you send us, and hosts the Drive photo albums linked from the night pages.

We also link out to Instagram, TikTok, WhatsApp, Spotify and Google Drive. Those links load nothing while you are here; they only matter when you click one. At that point you are on their site, under their rules and their privacy policy, and we have no part in it.

We will hand data to the police or a court if we are legally obliged to. That has never happened.

7. Data leaving the EU

Vercel and Google are United States companies, and their networks are global, so some of this data is processed outside the European Economic Area. Those transfers rest on the European Commission's adequacy decision for the EU–US Data Privacy Framework where the company is certified under it, and otherwise on the Standard Contractual Clauses, which form part of each company's own data processing terms.

8. How long we keep things

  • Server logs: we never take a copy. They live with Vercel and expire on Vercel's own rolling retention window, which is short and measured in weeks, not years.
  • Page counts: they live with Vercel too, as totals. We never take a copy of those either, and the dashboard only reaches back over a rolling window on our plan. There is nothing in them that points at a person, so there is nothing in them to expire about you.
  • Email: as long as the conversation is useful. A question that is answered and closed gets cleared out; a booking or venue thread stays for as long as we work together, and afterwards for as long as we might reasonably need it. Ask us to delete a thread and we delete it.
  • Photos: they stay up as part of the archive of the nights, which is the point of them, until you ask for one to come down.

9. Your rights

Under the GDPR you can ask us to:

  • Access — tell you what personal data of yours we hold and give you a copy.
  • Rectify — correct it if it is wrong.
  • Erase — delete it. This is the one behind the photo takedown.
  • Restrict — freeze it while something is disputed.
  • Object — article 21, against anything we do on legitimate interest, which is the logs, the page counts and the photos.
  • Port — receive what you gave us in a machine-readable file, or have it sent on.

All of it goes to monarkamsterdam@gmail.com. It is free, and we answer inside one month. If we need something to be sure it is really you, we ask for the least we can get away with — usually just a reply from the address the mail came from.

One honest limit: for server logs we hold nothing that ties an IP address to a person, so for a log-only request there is often nothing we can hand over or delete without more information from you than the log itself contains.

10. If you think we got it wrong

Tell us first, we would rather fix it. But you always have the right to complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens — autoriteitpersoonsgegevens.nl, Postbus 93374, 2509 AJ Den Haag. If you live in another EU country, you can complain to your own authority instead.

11. Children

This site is not aimed at children and we do not knowingly collect data about them. Our nights are for an adult crowd and run under the venue's own admission rules. If you are a parent or guardian and your child appears in a photo here, email us and it comes down immediately — that request goes to the front of the queue.

12. Changes

If what the site does changes, this page changes first. That is what happened here: the page counter in section 2 was added on 16 September 2026, and this statement and the cookie statement were rewritten in the same change, before it went live.

The line we hold is your device. Anything that stores or reads data on your machine — a cookie, a tracking pixel, a video embed, a ticketing widget — gets a real consent request before it runs, with a working way to say no. Nothing on this site does that today, which is why you are not being asked.

Last updated