Privacy Policy

1. Data controller

The controller of your personal data is Bonzan (DJ & producer), Warsaw, Poland (“Controller”).

For any data-protection matter, contact the Controller through the booking form (write “Personal data” in the message) or via direct message on Instagram.

2. Booking form

We collect the data you provide: name / role, email address, phone number, club and city, event date, set format, proposed fee, booth setup and your message.

Purpose: replying to your request and arranging the booking. Legal basis: Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract) and Art. 6(1)(f) GDPR (legitimate interest – handling correspondence).

Providing data is voluntary, but we cannot reply without the required fields. Your request is delivered to the Controller’s mailbox and a copy is stored in the website’s admin panel.

3. Technical data and spam protection

The hosting server automatically logs technical data (e.g. IP address, browser type, date and time of visit) to keep the website secure and working – Art. 6(1)(f) GDPR.

To limit spam, when the form is sent we store a one-way hash of your IP address for up to 1 hour – the address itself cannot be read from it.

4. Statistics – Google Analytics 4

We use Google Analytics 4 (Google Ireland Ltd.) to understand how visitors use the website (e.g. page views, track plays, rider downloads, booking requests sent). GA4 uses cookies (_ga, _ga_*) and processes data in pseudonymised form. Legal basis: Art. 6(1)(f) GDPR (traffic analysis and improving the website).

Data may be transferred to the USA under the European Commission’s adequacy decision for the EU-US Data Privacy Framework. GA4 data is retained for up to 14 months.

You can block or delete cookies in your browser settings or install the Google Analytics Opt-out Add-on.

5. Third-party content

YouTube: videos use privacy-enhanced mode (youtube-nocookie.com) and load only after you click a thumbnail. From that moment Google processes data under its own privacy policy.

Music, fonts, dates: audio files and fonts are hosted on our own server. Dates from Bandsintown are fetched by our server – your browser does not connect to Bandsintown.

Links: once you follow a link to Spotify, SoundCloud, Instagram, YouTube, Facebook, Beatport, Apple Music or Resident Advisor, their privacy policies apply.

6. Browser storage

The audio player remembers the last track, playback position (until you close the tab) and volume in your browser. This contains no personal data and is never sent anywhere.

7. Recipients

Data may be processed by service providers acting for the Controller: the hosting provider, the email provider and Google (Google Analytics). We never sell data or share it for marketing.

8. Retention

Booking correspondence is kept for as long as needed to handle it and then until potential claims expire (generally up to 3 years after the last contact), or until you successfully object.

9. Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability, and to object to processing based on legitimate interest.

You may also lodge a complaint with the Polish supervisory authority – President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.

We do not use automated decision-making or profiling that produces legal effects concerning you.