What we collect, and what we don't

Who is responsible

Tornante Studio (Tornante Group is a tradename of Carrossa Holding, KVK nr. 73165131) decides what is collected on this website and why. For anything in this statement, write to hello@tornante.studio and you will get a real answer from a person.

If you only look around

Before you make a cookie choice, no cookies are placed and you are not recognised. Two things still happen, because a website cannot work without them.

• Our host, Webflow, records the usual server data for every request: your IP address, the page you asked for, your browser and the time. This is how the site is delivered and kept secure.
• Google Analytics receives one signal without cookies and without any identifier, which tells Google only that a page was opened. We use it to estimate how busy the site is. It cannot be traced back to you.

If you say yes to analytics

Google Analytics then places two cookies and starts recognising your browser between pages and visits. We use it to see which pages are read, which are ignored, and where people give up. We look at patterns, never at individuals, and the reports contain no names or email addresses.

If you say yes to company recognition

We use OnlineSucces, a Dutch service that looks up which organisation an IP address belongs to. It tells us that someone from, say, a car manufacturer read the scanning page. It does not tell us who you are, and it places no cookie on this site. If you visit from home, it almost never recognises anything.

We use this to decide which work to show and which enquiries to follow up on. Nothing else.

Your cookie choice itself

When you accept or refuse, we record the choice: a random identifier for your browser, the time, which categories you allowed, which version of the banner text you saw, and the page you were on. We keep this because the law requires us to be able to show that consent was given, and a refusal is recorded just as carefully as an acceptance.

You can change your mind whenever you like through your cookie settings.

If you ask us something

The forms on this site ask for what we need to answer you, and nothing beyond it.

• Requesting a 3D scan: your name, company, email, phone number, the vehicle and parts involved, the postcode where the car is, your preferred date, and anything you type in the free-text fields.
• Unlocking the price list: your email address.
• Contacting us: whatever you put in the form.

We use this to prepare a quote and to get back to you, which we need to do before we can enter into an agreement. Enquiries land in our own dashboard and in the tools we plan work with. We also check submissions for spam with Cloudflare Turnstile, which looks at how the form was filled in rather than at who filled it.

Photos you upload

If you add photos to a scan request, they are stored with our hosting provider and used only to judge the job and quote it. Tell us when you want them gone and they are gone.

What is stored on your device

The last two are stored in your browser rather than as cookies, and they are never sent to anyone except with the record of your own choice. The analytics cookies appear only after you allow them.

Who else sees your data

We keep the list short on purpose. These parties process data on our behalf, or because they deliver part of the page.

• Webflow — hosts this site, stores form submissions, and runs the optimisation service that is part of their platform.
• Google — Analytics, and the fonts and code libraries the pages load.
• OnlineSucces — company recognition, only with your consent.
• Cloudflare — spam protection on the scan request form.
• Vercel — runs our own dashboard and stores uploaded photos.
• Linear and Slack — where an enquiry lands so we can act on it.
• Sketchfab — shows the 3D models on the scanning page, and only loads when you scroll to them.
• jsDelivr and unpkg — deliver code libraries used by the scanning page.

Several of these are American companies, so your data can be processed outside the European Union. Where that happens it is covered by the European Commission's standard contractual clauses or by the EU-US Data Privacy Framework.

How long we keep things

• Enquiries that do not lead to work: two years after our last contact.
• Quotes, invoices and anything our accountant needs: seven years, because Dutch tax law says so.
• Scan data and the photos that belong to it: one year after delivery, unless we agree otherwise.
• Your cookie choice: for as long as we rely on it, and a period afterwards so we can still show it was given.
• Analytics: as set in Google Analytics, which does not identify you by name at any point.

What you can ask of us

You can ask to see what we hold about you, to correct it, to delete it, to limit what we do with it, to object to it, or to receive it in a form you can take elsewhere. If we are relying on your consent, you can withdraw it without having to explain yourself.

Write to hello@tornante.studio. We answer within a month and usually a lot sooner. If you think we are handling this badly, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

When this changes

If we add or remove something that touches your data, this page is updated and the date at the top changes with it. If the change means your earlier choice no longer covers what we do, we ask you again rather than assume.