Skip to content
Subroom Records
Send a demo

Privacy policy

In effect from 9 October 2026.

This page explains what data subroomrecords.com collects, why, how long we keep it and what your rights are.

1. Who is responsible for your data

The controller of the personal data collected by this website is Subroom Records (Wojciech Tuszyński, Berlińska 25, 58-500 Jelenia Góra, NIP 6922466767). For anything about your data, email info@subroomrecords.com or call +48 730 059 672.

2. What we collect and why

Contact form

Your full name, email address, phone number, subject and message. We use them only to reply to you. Legal basis: your consent given in the form (Art. 6(1)(a) GDPR) and our legitimate interest in handling correspondence (Art. 6(1)(f) GDPR).

Demo form

Your name, email address, track title, links to the track and to your profiles (Spotify, Instagram, TikTok, Facebook) and your message. We use them to listen to your music, reply and talk about a possible release. Legal basis: your consent (Art. 6(1)(a) GDPR) and steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).

Newsletter

Your email address. We use it to send news about our releases and the label. After signing up you get an email asking you to confirm your address, and you are on the list only once you click the link in it. Brevo sends the newsletter and keeps the addresses for us (section 4). Legal basis: the consent you give when signing up (Art. 6(1)(a) GDPR and the Polish Electronic Communications Law). You can withdraw it at any time with the link in every email or by writing to us.

Spam protection for the forms

To limit how many submissions come from one place, we keep a one-way hash of your IP address for one hour. We never store the address itself. Legal basis: our legitimate interest in protecting the site (Art. 6(1)(f) GDPR).

Statistics and advertising

If you agree in the cookie banner, we use Google Analytics (visit statistics) and the Meta pixel (measuring and targeting our ads on Facebook and Instagram). Details in section 5. Legal basis: your consent (Art. 6(1)(a) GDPR).

Without that consent the Meta pixel does not load, and Google Analytics stores no cookies and does not recognise you on later visits. It only receives which pages were viewed, with no identifier, which lets us estimate the number of visits. Legal basis: our legitimate interest in knowing how many people visit (Art. 6(1)(f) GDPR).

Server logs

The server that runs the site automatically records your IP address, the date and time of the visit, the address visited and your browser type. This keeps the site working and secure. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).

3. How long we keep it

  • Messages from the contact and demo forms: until the matter is dealt with. If we do not end up working together, we delete them no later than 2 years after our last contact.
  • Your email address on the newsletter: until you unsubscribe or withdraw consent. If Brevo does not answer when you sign up, the address waits on our server for at most 24 hours, then it is passed to Brevo or deleted.
  • The IP address hash used by the forms: 1 hour.
  • The record of your choice in the cookie banner: 1 year.
  • Google Analytics and Meta cookies: as listed in section 5.
  • Server logs and site backups: as long as needed to keep the site secure, following the hosting provider's settings.

4. Who we share it with

We never sell your data. Only companies that help us run the site can access it, and only as far as they need to:

  • our hosting provider, whose servers run the site and store form data,
  • Sendinblue SAS (Brevo), France: sending the newsletter and keeping the subscribers' addresses,
  • our email provider, through which we send and receive messages,
  • Google Ireland Limited: Google Analytics, Google Tag Manager and Google Fonts (when the fonts load, Google sees your IP address),
  • Meta Platforms Ireland Limited: the Meta pixel, only with your consent,
  • CookieYes Limited: the tool that records your choices in the cookie banner,
  • Spotify AB: the player on the front page, which connects to Spotify when you open that page.

Google and Meta may transfer data to the United States. They do so under the European Commission's adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses.

Links to music services and release pages (such as Spotify, Apple Music and Hypeddit) lead to outside services with their own privacy policies.

5. Cookies

Cookies are small files stored in your browser. On your first visit the banner asks for your consent. Without it we only use the cookies the site needs to work.

  • Necessary: remember your choice in the banner (cookieyes-consent and wp_consent_*, 1 year) and the language you picked. No consent needed.
  • Analytics: Google Analytics (_ga, _ga_*, up to 2 years) tells us how many people visit and what interests them. Only with your consent.
  • Marketing: the Meta pixel (_fbp, 3 months) measures how well our Facebook and Instagram ads work and lets us show them to people who visited the site. Only with your consent.

Change your choice at any time with the cookie settings button in the bottom left corner of the page. You can also delete or block cookies in your browser settings.

6. Your rights

You have the right to:

  • access your data and get a copy of it,
  • have it corrected,
  • have it deleted,
  • restrict its processing,
  • take it to another provider (data portability),
  • object to processing based on our legitimate interest,
  • withdraw your consent at any time (this does not affect what we did lawfully before you withdrew it).

To use any of these rights, email info@subroomrecords.com. We reply within one month. You can also complain to the Polish data protection authority, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl.

7. Do you have to give us your data

No, it is voluntary. Without an email address, though, we cannot reply to you or sign you up for the newsletter.

8. Automated decisions

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you.

9. Changes

When the way the site works changes, we update this policy. The date at the top shows the version in effect.