Privacy Policy
If you've made it this far, you care about the security of your data. We take care to handle the personal data of all our customers properly.
I. General Information
The controller of your personal data is PHU Paweł Kobus, Korpele 31b, 12-100 Korpele, Poland, NIP: 7451856801.
We process data in accordance with the General Data Protection Regulation (GDPR, 2016/679). Providing your data is voluntary but necessary to fulfill your order. We process the data you provide only to the extent and for the purpose for which it was provided.
Contact regarding personal data: contact@melodygifted.com
II. Your Rights
In connection with the processing of your data, you have the following rights:
1. Access to your data
You have the right to access the data we store. You can obtain it by contacting us at our email address.
2. Changing, correcting or deleting your data
You can update, correct or delete your data by contacting us. The right to deletion can be exercised when the data is no longer needed for the purposes for which it was collected, or when you withdraw your consent to processing.
3. Withdrawing consent
Where processing is based on your consent, you can withdraw it at any time by sending a message to: contact@melodygifted.com
4. Right to restrict or object to processing
You have the right to object at any time to the processing of your data on grounds relating to your particular situation, unless the processing is required by law.
5. Right to data portability
You have the right to transfer your data to another controller if the processing is based on consent or a contract and is carried out by automated means.
6. Complaints
If you have any questions or concerns, please contact us. You also have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
III. Purposes of Processing
1. Processing orders
When you order a song, you provide the data needed to fulfill it: your email address (for delivery) and the details in the form (the recipient's name, the occasion, memories, music style). Providing this data is voluntary but necessary to place an order.
We process this data to fulfill your order, communicate with you, and for archiving and accounting purposes. We keep it for as long as needed to fulfill the order and for 5 years for accounting purposes.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract), Art. 6(1)(c) GDPR (legal obligation), Art. 6(1)(f) GDPR (legitimate interest).
2. Contact
When you contact us, you provide the data needed to respond. We process this data solely for communication purposes, based on your consent, which you can withdraw at any time.
3. Marketing
We may use your contact details to tell you about news and offers, but only if you have given your consent. You can withdraw your consent at any time.
4. Photo for the card
In the order form you can add a photo (optional). We use it only to fulfill your order: we print it on the card with the QR code and show it on your song page. Anyone who has the link to the song page or the card can see the photo. Only add a photo you are allowed to use — if other people are in it, make sure they agree to it being shared.
We do not use photos in advertising or on our website. We keep the photo for as long as your song page exists. You can ask us to delete it at any time at contact@melodygifted.com — after that, the song page and the card are shown without the photo. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
IV. Sharing Data with Processors
Your data may be processed by third parties we entrust with specific services. These parties guarantee appropriate security measures:
- Shopify Inc. – e-commerce platform (order and payment processing)
- Przelewy24 / PayPro SA – payment gateway
- Google Analytics – traffic analytics
- Meta (Facebook Pixel) – marketing and advertising
- Accounting firm – handling accounting records
- Cloudflare, Inc. – storage of photos added to orders
We do not sell your personal data or share it with third parties for commercial purposes.
V. Cookies
The Website uses cookies — small pieces of information stored on your device. We use two types:
- Session cookies – temporary, deleted when you close your browser
- Persistent cookies – stored for a set period or until you delete them
We use cookies to keep the store working properly, to analyze traffic (Google Analytics) and for remarketing (Facebook Pixel). You can block cookies in your browser settings, but this may affect some features of the Website.
VI. How Long We Keep Your Data
- Data processed based on consent – until consent is withdrawn
- Data processed based on a contract – for the duration of the service and 5 years for accounting records
- Data processed based on legitimate interest – until that interest ceases or you object
VII. Changes to This Privacy Policy
We reserve the right to change this Privacy Policy if required by applicable law or technological changes. The current version is always available on the Website.