1. Data Controller
The administrator of personal data is Igor Oprządek.
Bągart 14A, Poland
E-mail: glitchedwaves@weborbiton.com
2. Data Protection Officer
No Data Protection Officer has been appointed.
3. Scope of Processed Data
Using our website and submitting music requires providing basic information through our external form processor. In connection with this, the following data may be processed:
- Contact Data: e-mail address, artist name/alias.
- Submission Data: track links, social media profiles, and any messages included in the form.
- Technical Data: IP address (exclusively for technical, security, and diagnostic purposes), browser and device type, date and time of request.
4. Analytics – PriviMetrics
The service uses its own analytical system, PriviMetrics, which is privacy-first and self-hosted.
- no cookies / no user tracking
- privacy-first aggregated data (number of visits, country, browser type)
5. Purposes and Legal Basis (GDPR)
- evaluating music submissions and communicating with artists – Art. 6(1)(b) GDPR
- ensuring the security and technical operation of the service – Art. 6(1)(f) GDPR
- privacy-focused traffic analysis – Art. 6(1)(f) GDPR
6. Server Logs
The server records technical logs containing the IP address exclusively for technical stability, debugging, and security purposes (e.g., preventing DDoS attacks).
7. Data Recipients and Sub-processors
We use the following external service providers. We do not sell, share, or transfer user data to any third party for advertising, profiling, or commercial purposes.
- Hostinger – hosting provider (server infrastructure). Physical service files and logs are stored on servers located in Lithuania (primary), with backup copies maintained in France. Both locations are strictly within the European Economic Area (EEA).
- Tally.so (Tally B.V.) – form processor used for demo submissions and contact requests. Data entered into forms on our site is securely processed by Tally in compliance with GDPR.
8. Cookies and Local Storage
Our website uses browser localStorage strictly for the technical operation of the Service (such as remembering your preferred light/dark UI theme). No advertising, tracking, or third-party analytics cookies are used. All UI preferences are stored locally in your browser, are not transmitted to our servers, and are not shared with any third party.
9. Retention Period
- Technical logs: up to 30 days
- Submission data: for the duration necessary to review the demo or maintain the promotional relationship
- Analytical data (PriviMetrics): up to 12 months (aggregated and anonymous)
10. User Rights
Under the GDPR, you have the right to: access your data, request rectification or deletion,
restrict processing, data portability, and the right to object to processing. You also have the
right to lodge a complaint with a supervisory authority (in Poland: PUODO – Polish Personal Data
Protection Office).
Contact: glitchedwaves@weborbiton.com
11. Voluntariness of Data and Profiling
Providing data via forms is voluntary, but necessary to submit music or contact us. The service does not use user profiling or automated decision-making affecting users (Art. 22 GDPR).
12. Data Transfer Outside the EEA
Service files and website logs are physically hosted within the European Economic Area (EEA). However, our infrastructure may utilize global Content Delivery Networks (CDNs) for static asset delivery (scripts, stylesheets, fonts). CDN edge nodes may be located outside the EEA; no personal user data is stored or processed at CDN nodes. All transfers involving personal data are carried out in accordance with Chapter V of the GDPR using appropriate legal safeguards.