Privacy policy
Who is responsible for your data
The controller of the personal data collected by the So Much Pięknie website is OpenTopic Technologia Sp. z o.o., registered office in Białystok (15-004), ul. Sienkiewicza 40A, Poland, entered in the National Court Register under KRS 0000647187, NIP 9662107440, REGON 365885932. OpenTopic runs this website.
For personal data matters, write to legal@ot.technology. The controller has not appointed a data protection officer. Below we simply say „we” when we mean the controller.
What this policy covers
This policy covers the So Much Pięknie website in Polish and English. There are no accounts, forms or newsletter on the site, so we don't ask you for any data. We only collect what is described below.
Technical data on every visit
When you open the site, your browser sends our server standard information: your IP address, the date and time, the address of the page and your browser type. The server stores it in its logs. We use them only to keep the site working and secure, for example to spot errors and attacks.
Legal basis: Art. 6(1)(f) GDPR, our legitimate interest (the security and operation of the site). We keep the logs for 7 days.
Visit statistics (Google Analytics)
If you click „Accept” on the cookie banner, we switch on Google Analytics 4 by Google Ireland Limited. It tells us how many people visit the site, which songs and posts are read and on which devices. Google Analytics stores cookies in your browser and collects:
- the identifier from the cookie,
- your approximate location (country, region, city) worked out from your IP address - the IP address itself is not stored,
- your device type, operating system and browser,
- the pages you visit, how long the visit takes and the site you came from.
Without your consent Google Analytics doesn't load at all. Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent whenever you like with the „Cookie settings” button in the footer: we then switch analytics off and remove its cookies. Withdrawing consent doesn't affect the lawfulness of what happened before. We keep the data in Google Analytics for 14 months.
Music videos from YouTube
We show our music videos through YouTube. Until you click „play”, the page only shows a thumbnail of the video, loaded from a YouTube server (i.ytimg.com). Your browser then connects to a Google server and sends it its IP address, but nothing is stored in your browser.
After you click „play”, we load the player from youtube-nocookie.com. This is YouTube's privacy-enhanced mode, but the player may store data in your browser that it needs to play the video. From that moment Google processes the data under its own privacy policy. Legal basis: Art. 6(1)(f) GDPR (showing a video you want to watch).
Links to other services
The site links to Spotify, Apple Music, YouTube Music, Tidal and Deezer, to our profiles on Facebook, YouTube, Instagram and TikTok, and to other websites. The site doesn't load their buttons or scripts. When you click, you go to that service, and its own privacy rules apply from then on.
Cookies and browser storage
Without your consent the site stores no cookies in your browser. It only uses browser storage (localStorage and sessionStorage) for two technical purposes:
- smp-consent (localStorage) - your choice on the cookie banner, so we don't ask again on your next visit. It stays until you change it or clear your browser data.
- smp-listenbar-closed (sessionStorage) - a note that the „Listen” bar at the bottom of the page was closed. It disappears when you close the tab.
After you click „Accept”, Google Analytics stores two cookies:
- _ga - tells visitors apart, valid for 2 years,
- _ga_ followed by our property ID - keeps the session state, valid for 2 years.
You can also delete and block cookies in your browser settings. Turning analytics down doesn't affect how the site works.
Who we share data with
- Amazon Web Services EMEA SARL - hosting the site on servers in the European Union (Frankfurt).
- Google Ireland Limited - Google Analytics (only with your consent) and YouTube (video thumbnails, and the player after you click „play”).
We don't sell personal data.
Transfers outside the European Economic Area
Google may also process data in the United States. This is based on the European Commission's adequacy decision (the EU-US Data Privacy Framework), in which Google LLC takes part, and additionally on the standard contractual clauses approved by the Commission. We'll give you details of the safeguards on request at legal@ot.technology.
Your rights
Under the GDPR you have the right to:
- access your data (Art. 15),
- have your data corrected (Art. 16),
- have your data erased (Art. 17),
- restrict processing (Art. 18),
- data portability (Art. 20),
- object to processing based on our legitimate interest (Art. 21),
- withdraw your consent to analytics whenever you like.
Send your request to legal@ot.technology. We'll reply within a month; in more complex cases this may be extended by two more months, and we'll let you know. We don't know your name or e-mail address, and the data in the logs and Google Analytics doesn't let us easily tell who you are. So we may ask you for more information with your request (Art. 11 GDPR).
You can also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl, or with the authority in your own EU country.
Contact
For personal data matters: legal@ot.technology.
We're happy to talk about the music and lyrics on Facebook. If you write to us there, we see your message and profile name and use them only to reply. Messages on Facebook are also processed by Meta under its own rules.
Changes to this policy
When we change the way we use data, we'll update this page. You'll find the date of the last update at the top.