Privacy Policy

I. Introductory provisions II. Legal basis for processing III. What data we process IV. Purposes of processing V. Retention period VI. Data recipients VII. Your rights VIII. How to exercise your rights IX. Security X. Cookies XI. Supervisory authority XII. Changes to the Policy

I. Introductory provisions

1. This Privacy Policy describes how we process the personal data of users of the songlab.cz web platform.

2. The data controller is:

Suvenýry u Ježka s.r.o.
Company ID: 09263896
Registered office: Jaurisova 515/4, Michle, 140 00 Praha 4
Registered in: C 333508, Municipal Court in Prague
E-mail: info@songlab.cz

II. Legal basis for processing

The processing of personal data is based on the following legal grounds under the GDPR (EU Regulation 2016/679):

Performance of a contract

Art. 6(1)(b) GDPR

Legal obligation

Art. 6(1)(c) GDPR

Legitimate interest

Art. 6(1)(f) GDPR

Consent

Art. 6(1)(a) GDPR

III. What personal data we process

A. Data from the buyer

Data	Purpose
First and last name	Identification, communication
E-mail address	Delivery of goods, invoicing
Billing address	Tax document
Song title, dedication	Content creation
Service rating (comment, publication consent)	Customer rating, consent to publication

B. Data obtained automatically

Data	Purpose
IP address	Security, fraud prevention
Browser type and OS	Technical optimisation
Date and time of visit	Traffic analysis
Cookies	Website functionality

C. Payment data

Payment data is processed by Stripe (Stripe Payments Europe Ltd.). We do not have access to payment card numbers.

IV. Purposes of processing

Processing and delivery of your order (creating the song, sending it by e-mail).
Issuing and sending the tax document (invoice).
Communicating with you regarding the order and support.
Operating and improving the web platform.
Fulfilling legal obligations (accounting, taxes).
Protecting our legitimate interests (resolving disputes, recovering receivables).
Processing customer ratings and issuing the rating reward (discount coupon).

V. Retention period

Buyer data: For 10 years from the last business relationship (Accounting Act).
Visitor data: For 13 months (analytics cookies) or until consent is withdrawn.
Marketing data: Until consent is withdrawn.
Rating data: Published ratings until the publication consent is withdrawn; unpublished ratings for 12 months from submission.

VI. Data recipients

We may pass your personal data to the following recipients:

Stripe – payment gateway (payment processing).
Suno AI – music generation (only the text prompt, no personal data).
Hosting provider – operation of the web platform.
Accounting software – bookkeeping.
State authorities – in the case of a legal obligation (tax office, court).
OpenAI – conversion measurement from ChatGPT ads (anonymised identifier only, no personal data).

VII. Your rights (GDPR)

Right of access

Art. 15 GDPR – a copy of your data

Right to rectification

Art. 16 GDPR – correction of inaccuracies

Right to erasure

Art. 17 GDPR – "right to be forgotten"

Right to restriction

Art. 18 GDPR

Right to portability

Art. 20 GDPR

Right to object

Art. 21 GDPR

⚠️ Exception: The right to erasure does not apply to data we are required to keep by law (invoices, accounting – 10 years).

VIII. How to exercise your rights

Contact

E-mail: info@songlab.cz
In writing to the controller's registered office

Time limit

We will handle your request within 1 month (extendable by 2 months).

IX. Security

Communication takes place over an encrypted connection (HTTPS/TLS).
Only authorised persons have access to the data.
We regularly update the system security.
We store data on secure servers in the EU.

X. Cookies

Detailed information about the use of cookies can be found in a separate document: Cookie Policy.

XI. Supervisory authority

If you believe that your data has been processed in breach of the GDPR, you have the right to lodge a complaint with:

Office for Personal Data Protection (ÚOOÚ)

Address: Pplk. Sochora 727/27, 170 00 Prague 7

Web: uoou.cz

E-mail: posta@uoou.cz

XII. Changes to the Policy

The controller reserves the right to change this Policy at any time. We will inform you of any change by e-mail or by a notice on the web platform.

This Policy becomes effective on 9 Aug 2026.

Contact details

Suvenýry u Ježka s.r.o.

Company ID: 09263896

Jaurisova 515/4, Michle, 140 00 Praha 4

E-mail: info@songlab.cz

Web: songlab.cz

Back to the home page