Privacy policy
Last updated: 26 October 2026
This policy explains who processes your personal data when you use this site and send a booking enquiry, for what purposes, on what legal basis, and what rights you have. It is prepared under Regulation (EU) 2016/679 (GDPR).
1. Data controller
The controller of your personal data is Subroom Records (Wojciech Tuszyński, Berlińska 25, 58-500 Jelenia Góra, NIP 6922466767).
Data contact: info@subroomrecords.com, +48 730 059 672.
Booking contact: booking@subroomrecords.com.
2. What data we collect
The booking form asks only for what we need to reply and propose a date: the act or format, the date, the city and venue, your name and a phone number or email address, plus, if you like, the type of event and a message. You send the form after ticking your consent to be contacted about this enquiry.
The server keeps standard logs (IP address, browser type, time of visit) for security and diagnostics. The sender's IP address is also included in the enquiry email, so abuse can be recognised.
3. Purposes and legal bases
Handling your booking enquiry and replying: Art. 6(1)(a) GDPR (the consent you tick in the form) and Art. 6(1)(b) and (f) GDPR (steps before a contract and our legitimate interest in answering).
Ad measurement and remarketing (Google Ads, Meta Pixel): only if you accept marketing cookies; Art. 6(1)(a) GDPR (your consent in the cookie banner). Details in section 6.
Site security, protecting the form from spam and server logs: Art. 6(1)(f) GDPR (legitimate interest).
What you type into the form (your name, phone, email, message) is never passed to Google or Meta. If you accept marketing cookies, they learn only that a form was sent, or that the phone number or email was clicked. This form does not sign you up to any newsletter.
4. Who can see the data
Your enquiry goes to the booking@subroomrecords.com mailbox, handled by Subroom Records management. The site and the mailbox are run by a hosting company that processes the data only on our behalf.
The form goes straight to our server, and fonts and footage load from the same server. Without your consent the site connects to no outside service.
Google Ireland Limited (Google Ads) and Meta Platforms Ireland Ltd. (Meta Pixel, Facebook, Instagram): only after you accept marketing cookies. Google LLC and Meta Platforms, Inc. may process data in the USA; such transfers rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework (both are certified under it) and Standard Contractual Clauses.
5. How long we keep it
Enquiry data: up to 24 months from the last contact and, if we work together, for as long as the law requires (e.g. accounting).
Server logs: as the hosting company's rules set.
Your cookie banner choice: 12 months, after which we ask again.
Google Ads and Meta cookies: up to 90 days. Data sent to Google and Meta is kept under their own privacy policies.
6. Cookies and consent
Necessary cookies are always on, because the site and the form do not work without them:
PHPSESSID: a session that makes the form's anti-spam check work. It goes when you close the browser.
agency_lang: your language choice (PL or EN), for 12 months.
In your browser we also keep your cookie banner choice (localStorage, 12 months) and, in this tab's storage (sessionStorage), a note that the logo intro has already played.
Marketing cookies are set only after you accept them in the banner: Google Ads (_gcl_au) and the Meta Pixel (_fbp, _fbc), for up to 90 days. They measure which ads bring enquiries and let us show our ads to people who have visited. The site uses Google Consent Mode v2: until you agree, nothing from Google or Meta loads.
You can change or withdraw your consent any time with “Cookie settings” in the footer. We use no analytics cookies. Links to Spotify, YouTube, Instagram, TikTok and Facebook open those services only when you click them.
7. Your rights
Under the GDPR you have the right to access your data and get a copy, to have it corrected or erased, to restrict processing, to data portability, to object to processing based on legitimate interest, and to withdraw your consent (to be contacted, or to marketing cookies) at any time, without affecting earlier processing.
To use these rights, email info@subroomrecords.com. You may also complain to the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.
8. Providing data is voluntary
Giving your data in the form is voluntary, but without it we cannot answer your enquiry.
9. Changes
We may update this policy. The current version is always at this address, with the date of the last change at the top.