Privacy Policy (newsletter)

Effective from: 30.08.2025

1) Data controller

The controller of your personal data is Dralban ("Controller").
Contact: dralban3m@gmail.com.

2) Data scope

We process only the data provided in the newsletter signup form:

• email address,
• and technical metadata related to registration of consent (e.g. date and time, IP address/event ID) – solely to document the fact of consent and defend claims.

3) Purposes and legal bases of processing

Sending the newsletter/email communication (information about concerts, releases, merch, offers): based on your consent – Article 6(1)(a) GDPR.

Compliance with obligations arising from electronic communication laws (in PL: requirement of prior consent for email marketing): fulfilled through the above consent.

Securing and pursuing claims and keeping a consent log: our legitimate interest – Article 6(1)(f) GDPR.

Giving consent is voluntary but necessary to receive the newsletter.

4) Retention period

Data for sending the newsletter: until consent is withdrawn.

Data confirming giving/withdrawing consent (logs): until the expiry of claims limitation periods (as a rule up to 6 years in Poland) to demonstrate compliance with the law.

5) Data recipients (processors)

Data may be entrusted to trusted entities processing it solely on our behalf:

• provider of the newsletter tool, hosting/website provider,
• provider of anti-spam/anti-bot solution,
• providers of email and IT services. We have a data processing agreement with each such entity.

7) Your rights

You have the right to:

• access data and obtain a copy,
• rectify data,
• erase data ("right to be forgotten"),
• restrict processing,
• data portability (where technically feasible),
• object to processing based on legitimate interest,
• withdraw consent at any time (this does not affect the lawfulness of processing before withdrawal).

To exercise your rights – write to us at dralban3m@gmail.com.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).

8) Automated decisions and profiling

We do not make automated decisions producing legal effects concerning you. The newsletter may occasionally be segmented (e.g. by language or frequency of opens) solely to send more relevant content; the basis is your consent to email communication.

9) Data security

We apply organizational and technical measures appropriate to the risk (including HTTPS/TLS encryption, access control, event logs, the principle of minimization). We choose providers that meet GDPR requirements.

10) Cookies and related technologies

Our website may use cookies necessary for its operation (e.g. load balancing, anti-bot protections).

If we enable analytics/marketing (e.g. pixels, statistics), before activating them we will ask for consent via a cookie banner. Details can be found in [Cookie Policy / cookie section of this policy – to be completed].

11) Policy changes

We may periodically update this policy to reflect changes in law or in our processes. The latest version is always available on this page; changes apply from the date of publication.