Privacy Policy

Privacy Policy

Last updated: 23 July 2026

This Privacy Policy explains how personal data is collected, used and protected when you visit aciopono.pl, use the contact form or interact with content embedded from external platforms.

The website is a personal portfolio and promotional website for the electronic music artist and producer Acio Pono.

1. Data Controller

The controller responsible for the processing of personal data through this website is:
Operating under the artist name: Acio Pono
Email: contact@aciopono.pl
Address: aciopono.pl

Questions concerning privacy or the processing of personal data may be sent to the email address listed above.

2. Personal Data We Collect

Depending on how you use the website, we may collect the following categories of information.

Contact form information

When you contact us using the website’s contact form, we may collect:

• your name
• your email address
• the subject of your enquiry
• the content of your message
• any other information that you voluntarily include in your message

Please do not provide sensitive personal information through the contact form unless it is necessary for your enquiry.

Technical and server information

When you visit the website, the hosting server may automatically record technical information, including:

• IP address
• browser type and version
• device type
• operating system
• date and time of access
• visited pages
• referring website
• server error and security logs

This information is used to operate the website, maintain its security, diagnose technical problems and prevent abuse.

Analytics information

Subject to your consent, the website may use GOOGLE ANALYTICS to understand how visitors use the website.

Analytics information may include:

• viewed pages
• session duration
• approximate geographical location
• browser and device information
• traffic source
• interactions with website elements
• anonymised or pseudonymous identifiers

Non-essential analytics should only be activated after the visitor has provided valid consent. Consent under the GDPR must be freely given, specific, informed and capable of being withdrawn.

3. Purposes and Legal Bases for Processing

We may process personal data for the following purposes:

Responding to enquiries

Information submitted through the contact form is processed to respond to questions, booking enquiries, collaboration proposals, licensing requests and other messages.

The legal basis is:

• taking steps at the request of the data subject before entering into a contract
• our legitimate interest in responding to enquiries and managing professional communication

Website operation and security

Technical logs may be processed to maintain the website, prevent attacks, detect errors and protect the website and its visitors.

The legal basis is our legitimate interest in maintaining a secure and functional website. Reliance on legitimate interest requires balancing the controller’s interests against the rights and freedoms of the individual.

Analytics

Analytics data is processed to measure website traffic, understand visitor behaviour and improve the website.

Where analytics cookies or similar technologies are used, the legal basis is your consent.

Embedded media

YouTube and Spotify content may be displayed to allow visitors to watch music videos, listen to releases and access Acio Pono profiles.

Where an embedded service stores cookies, reads information from your device or transfers personal data to a third party, the content should be activated only after consent, unless the processing is strictly necessary.

4. Cookies and Similar Technologies

Cookies are small files stored on your device when you visit a website.

The website may use the following categories of cookies:

Essential cookies

These cookies are required for the website to function correctly, maintain security or remember privacy choices. They cannot normally be disabled through the website’s consent panel.

Analytics cookies

Analytics cookies help measure traffic and understand how visitors interact with the website. They should only be used after you have provided consent.

Third-party media cookies

YouTube, Spotify or other external platforms may use cookies or similar technologies when embedded content is displayed or played.

You can accept, reject or change your cookie preferences through the cookie consent tool available on the website.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn. You may also delete cookies through your browser settings.

5. YouTube Embedded Content

The website may contain videos embedded from YouTube, a service operated by Google.

When YouTube content is loaded, Google may receive information including:

• your IP address
• browser and device information
• the page containing the embedded video
• information about your interaction with the player
• information connected to your Google account if you are logged in

Where technically possible, YouTube videos should use privacy-enhanced mode. According to YouTube, this mode limits the use of embedded video views for personalising the viewer’s YouTube experience.

Google processes information in accordance with its own privacy policy and acts as an independent controller for its processing activities.

6. Spotify Embedded Content

The website may contain tracks, albums, playlists or artist profiles embedded from Spotify.

When Spotify content is loaded, Spotify may receive technical and interaction information, such as:

• IP address
• browser and device information
• the page from which the embed was loaded
• interaction with the embedded player
• Spotify account information if you are logged in

Spotify embeds are interactive external services that allow music and other Spotify content to be displayed and played on third-party websites.

Spotify processes personal data in accordance with its own privacy policy and may act as an independent controller for its processing activities.

7. Recipients of Personal Data

Personal data may be made available to service providers that support the operation of the website, including:

• website hosting providers
• website administrators and technical support providers
• contact form and email service providers
• analytics providers
• cookie consent management providers
• Google and YouTube
• Spotify
• security, backup and performance optimisation providers

These parties only receive information necessary to provide their services.

Personal data may also be disclosed to public authorities where required by law or necessary to establish, exercise or defend legal claims.

8. International Data Transfers

Some service providers, including Google, YouTube and Spotify, may process personal data outside the European Economic Area.

Where personal data is transferred outside the EEA, the transfer should be based on an applicable legal mechanism, such as:

• an adequacy decision issued by the European Commission
• Standard Contractual Clauses
• another safeguard permitted under the GDPR

Details concerning international transfers carried out by third-party providers are available in their respective privacy policies.

9. Data Retention

Personal data is retained only for as long as necessary for the purpose for which it was collected.

Contact form correspondence may be retained until:

• the enquiry has been fully resolved
• the related cooperation or contractual relationship has ended
• the applicable limitation period for potential claims has expired
• retention is no longer required by law

Server and security logs are normally retained for a limited period unless longer storage is necessary to investigate a security incident.

Analytics data is retained according to the settings configured in GOOGLE ANALYTICS

10. Your Data Protection Rights

Under the GDPR, you may have the right to:

• request access to your personal data
• request correction of inaccurate or incomplete information
• request deletion of your personal data
• request restriction of processing
• object to processing based on legitimate interests
• receive certain data in a portable format
• withdraw consent at any time
• lodge a complaint with a competent supervisory authority

The GDPR provides individuals with rights including access, rectification, erasure and withdrawal of consent.

To exercise your rights, contact:

contact@aciopono.pl

We may need to verify your identity before responding to a request.

11. Right to Lodge a Complaint

You have the right to lodge a complaint with the data protection authority responsible for your place of residence, work or the location of the alleged infringement.

Where the controller is established in Poland, the competent supervisory authority is:

President of the Personal Data Protection Office
Urząd Ochrony Danych Osobowych – UODO
Warsaw, Poland

Information about submitting complaints is available through the official UODO website.

12. Security

Reasonable technical and organisational measures are used to protect personal data against:

• unauthorised access
• accidental loss
• alteration
• disclosure
• destruction
• misuse

However, no method of transmitting or storing information online can guarantee absolute security.

13. Automated Decision-Making

The website does not use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects.

Basic analytics may be used to create aggregated or pseudonymous statistics about website traffic.

14. External Links

The website may contain links to external websites and social media platforms.

Once you leave aciopono.pl, the processing of your personal data is governed by the privacy policy of the external website. We are not responsible for the privacy practices, security or content of third-party websites.

15. Changes to This Privacy Policy

This Privacy Policy may be updated when:

• website functionality changes
• new services or plugins are introduced
• analytics or embedded media providers change
• legal requirements are updated

The current version will always be published on this page together with the date of the latest update.

16. Contact

For questions concerning this Privacy Policy or the processing of personal data, contact:

Acio Pono
Email: contact@aciopono.pl