Privacy

Who we are

Second Studio is a service of Kōan Group B.V., Amsterdam, KvK 75354632. We are the controller for the personal data described here. Anything on this page: hello@secondstudio.eu.

What this site puts on your device

Five small things, none of them readable by any other site, none of them advertising, and only the first and the last surviving the tab you closed:

• ss_cc — a cookie set by our CDN holding a two-letter country code, so the rates page opens in the currency of the country you are in.
• ss_ccy — session storage, only if you switch currency yourself. It is gone when you close the tab.
• ss_tags — session storage, only if you arrived on a link we sent you that carried a recipient code. It keeps that code for the tab so the pages you read after the first one are counted against the same link. It is gone when you close the tab.
• An analytics session — session storage. A random number with no name attached, so the three pages you read count as one visit rather than three strangers. It is gone when you close the tab, and coming back tomorrow makes a new one: we cannot tell that it is you again.
• ss_notrack — local storage, only if you opt out of analytics (below).

Analytics

We use PostHog, on their EU servers, served through secondstudio.eu itself — no request from this site goes to a third-party domain. It is configured without cookies. No profile is built, no session is recorded, and clicks are not captured automatically. The only identifier is the random session number above, which lasts until you close the tab and is never joined up with a later visit.

We record six named events: a page view, a currency switch, opening a role description, opening a report cover, clicking an email address, and sending the contact form. With each we record the page, the page that referred you, and your browser and approximate location, derived from your IP address and browser identification. PostHog stores the IP address on the event record. We use it for nothing else and we do not try to work out who you are from it.

To switch it off in this browser for good, add ?notrack=1 to any page on this site. If your browser sends Do Not Track or Global Privacy Control, analytics does not run at all.

Links we send you

A link we email you — to this site or to one of our people — may carry a short code in the address. It tells us that the link we sent was opened, and which pages were read in that visit. It identifies the person we sent it to, nobody else, and we use it to know whether something is of interest before we chase you about it.

The code is held for the tab you opened it in, so the second and third pages count against the same link. Close the tab and it is gone. Strip the ?r= from the address before you open it and we never see it at all.

The contact form

We store what you type — your name, email address, what you need and when — together with the time, your IP address, your browser identification and the page you came from. The record is held in Amazon Web Services in Frankfurt; a copy is emailed to us and posted into our own private Slack.

We keep it for as long as there is a business conversation, and then no longer than we need it for our own accounting. Ask us to delete it and we will.

Who else sees any of this

Amazon Web Services (hosting and email delivery, Frankfurt), PostHog (analytics, EU), Google Workspace (our email) and Slack (our internal notifications). Nobody else. We do not sell data, we do not run advertising, and there is no data broker anywhere in this.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to us holding it. Email hello@secondstudio.eu and we will do it. If we get it wrong, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Changes

Last updated 3 August 2026. If we start collecting something new, this page says so before we do.