Datenschutz

DRAFT – this text must be reviewed by a lawyer or data protection officer before publication. Fill in the details in square brackets.

Controller

[Company name], [address], Company ID: [ID], e-mail: [e-mail]. [If a data protection officer has been appointed, provide their contact.]

What data we process

• e-mail address and name (to deliver the song and issue the invoice),
• billing country and other billing details entered in the payment gateway,
• details entered in the configurator (names, memories, messages) to create the song,
• payment data (payment identifier, amount, currency, not card details),
• messages from the contact form,
• technical data: IP address and the country derived from it.

Purposes and legal bases

• Performance of contract: creating and delivering the song, communication about the order.
• Legal obligation: issuing and archiving invoices and accounting records.
• Legitimate interest: preventing abuse and fraud, showing prices and language by country, answering contact form enquiries.

Data about other people

If you enter details about another person in your order (for example the birthday person's name), you are responsible for being entitled to do so. Please do not enter sensitive data, such as health information.

Recipients

We share data only with processors that help us provide the service: the Stripe payment gateway, hosting provider [name], e-mail service provider [name], cloud storage [name], Cloudflare (security and website delivery) and artificial intelligence providers [names], to whom we send configurator details to create the song. Some of them may process data outside the EU; in that case on the basis of standard contractual clauses or an adequacy decision. [Verify and complete.]

Retention

• order data and the song: [e.g. 12 months] after delivery,
• invoices: 10 years as required by accounting law,
• contact form messages: [e.g. 2 years],
• unpaid orders: 7 days.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and the right to object to processing based on legitimate interest. Send your request to [e-mail]. You also have the right to lodge a complaint with a supervisory authority, in Slovakia the Office for Personal Data Protection of the Slovak Republic, or the authority in your country of residence.

Cookies

Information about cookies is available on the Cookies page.