Privacy policy

1. Data controller

The controller of personal data collected via soundhike.pl is Soundhike — an artist agency based at ul. Trzcinowa 20/12, 87-100 Toruń, Poland. Tax ID (NIP): 8792248138. Registry number (REGON): 369619251.

Contact for data-protection matters: kontakt@soundhike.pl.

2. What data we collect

The site collects the following categories of data:

• Analytics data (Google Analytics) — anonymous device identifiers, visit duration, pages viewed, traffic source. Only with your explicit consent given via the cookie banner.
• Contact data — when you email kontakt@soundhike.pl we receive your email address and the contents of your message.
• Server logs (held by Vercel as data processor) — IP address, browser type, request timestamp. Used only for security and diagnostics.

3. Purposes and legal bases

• Site analytics — Art. 6(1)(a) GDPR (consent). Basis is your consent given via the cookie banner. You can withdraw it at any time by clearing the site cookies or your browser data.
• Email correspondence — Art. 6(1)(f) GDPR (legitimate interest of the controller) for the purpose of responding to your message.
• Site security — Art. 6(1)(f) GDPR (legitimate interest of the controller) for keeping the site operational and secure.

4. Retention

• Analytics — per Google Analytics defaults (up to 14 months), unless you withdraw consent earlier.
• Email correspondence — for the time needed to reply and any follow-up, no longer than 3 years.
• Server logs — per Vercel policy (default 30 days).

5. Recipients

Your data may be processed by the following processors:

• Google Ireland Ltd. (Google Analytics, Google Tag Manager) — traffic analytics, on the basis of your consent. Google as processor may transfer data to the USA under Standard Contractual Clauses.
• Vercel Inc. — site hosting. Data transferred to the USA under Standard Contractual Clauses.
• Storyblok GmbH — content management system. Data stored in the EU (Germany).

6. Your rights

Under GDPR you have the following rights:

• Right of access (Art. 15 GDPR).
• Right to rectification (Art. 16 GDPR).
• Right to erasure (Art. 17 GDPR).
• Right to restriction of processing (Art. 18 GDPR).
• Right to data portability (Art. 20 GDPR).
• Right to object (Art. 21 GDPR).
• Right to withdraw consent at any time — withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to lodge a complaint with the Polish supervisory authority (uodo.gov.pl).

7. Cookies

The site uses cookies only for traffic analytics (Google Analytics). Analytics cookies load only after your explicit consent given via the cookie banner.

Your consent is stored locally in the browser (localStorage). To change it, clear the soundhike.pl site data — the banner will appear again on your next visit.

8. Push notifications

If you enable notifications about new projects, awards and artists, we store the technical details of your subscription: the endpoint address generated by your browser, the encryption keys required to send a notification, your chosen language, and the dates of sign-up and of the last successful delivery. We do not store your name, e-mail address, or anything else that identifies you personally.

The endpoint address is nonetheless a persistent identifier tied to your device and browser, so we treat it as personal data.

The legal basis is your consent (Article 6(1)(a) GDPR), given by clicking "Enable notifications" and confirming the permission in your browser.

Delivering a notification requires passing it through the push service operated by your browser vendor — Google (Chrome), Apple (Safari), Mozilla (Firefox) or Microsoft (Edge). Those vendors are recipients of this data and act as intermediaries for every delivery.

We delete a subscription as soon as the push service reports that it is no longer valid, and after 12 months without a successful delivery. You may also withdraw consent at any time using the "Turn off notifications" button on the site — no browser-settings change required.

9. Changes to this policy

This policy may be updated — for material changes we will ask for your analytics-cookie consent again.