Privacy Policy
Last updated: 1 October 2026
1. Who we are
This Privacy Policy explains how personal data is processed on s84.world and in related communication with the s84 music label. It is issued under Regulation (EU) 2016/679 (GDPR) and the Polish Act of 10 May 2018 on the protection of personal data.
The data controller is S84 Sp. z o.o., registered in the National Court Register (KRS) under number 0001182654, NIP 6751815964, REGON 542189549, registered office: ul. Olszańska 7, 31-513 Kraków, Poland ("s84", "we", "us").
Contact for all privacy matters: info@s84.world (subject line: "GDPR"). We have not appointed a Data Protection Officer, as we are not required to under Art. 37 GDPR.
2. What data we collect
We collect only the data you give us and a minimum of technical data needed to run the website. We do not sell personal data and do not use it for automated decision-making or profiling.
Contact form: name, e-mail address, message content. Required to reply to you.
Demo submission: name or artist name, e-mail, links to your tracks or profiles and any other information you include. Required to review the demo.
E-mail to info@s84.world: e-mail address, name, message and attachments. Voluntary.
Website visit: IP address, browser and device type, pages viewed, referrer, date and time. Collected automatically.
Campaign source: UTM tags from the link you used, the referring page and the landing page. Stored in your browser and attached to the forms you submit (see section 4).
Please do not send us special categories of data (health, beliefs, etc.). We do not need them.
3. Why we process it and on what legal basis
Answering your enquiry: Art. 6(1)(f) GDPR, our legitimate interest in responding to people who contact us; Art. 6(1)(b) where the enquiry concerns a contract.
Reviewing demos and talking to artists: Art. 6(1)(b), steps taken at your request before entering into a contract (e.g. a release or management deal).
Running and securing the website: Art. 6(1)(f), our legitimate interest in a working, secure site.
Website statistics and campaign measurement: Art. 6(1)(f), understanding how the site is used and which campaigns bring enquiries and demos (see section 4).
Legal claims and record-keeping: Art. 6(1)(f), establishing or defending claims; Art. 6(1)(c) where the law requires us to keep records.
Where we rely on legitimate interest, you may object at any time (section 7).
4. Cookies and analytics
s84.world does not use advertising cookies and does not run marketing pixels (Meta, TikTok, Google Ads). The site is hosted on Framer, which may use strictly necessary technical storage to deliver pages and cookieless, aggregated visit statistics.
When you arrive through a link with campaign tags (UTM parameters), the site saves these tags, the referring page and the landing page in your browser's local storage under the key "s84_utm_data". If you then send a form, this information is submitted with it, so we know which campaign brought you. Nothing is sent to us unless you submit a form. You can delete this data at any time by clearing your browser's site data for s84.world.
Links to Spotify, YouTube, SoundCloud, Instagram, TikTok, Telegram and Discord are plain links. Once you click them you leave our site, and the privacy policy of that platform applies.
If we add analytics or marketing cookies in the future, we will ask for your consent through a cookie banner before setting them and will update this policy.
5. Who receives your data
Your data is accessed only by the s84 team and by service providers that process it on our behalf under a data processing agreement (Art. 28 GDPR):
Framer B.V. (Amsterdam, Netherlands): website hosting and form submissions. Its sub-processors (including Amazon Web Services) may process data in the USA under the EU–US Data Privacy Framework and Standard Contractual Clauses.
Label Backstage, our own label management platform, hosted by Vercel Inc. (USA): receives and stores demo submissions. Data may be processed in the USA under the EU–US Data Privacy Framework and Standard Contractual Clauses.
GoDaddy: e-mail for info@s84.world. Data may be processed in the USA under Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.
We may also share data with public authorities when the law requires it, and with our legal or accounting advisers bound by confidentiality. If a demo leads to cooperation, we may share your contact details with distributors or partners only as needed to carry out that cooperation.
When data is transferred outside the European Economic Area, we rely on an adequacy decision (Art. 45 GDPR) or Standard Contractual Clauses (Art. 46 GDPR). You can request a copy of these safeguards at info@s84.world.
6. How long we keep it
Contact form and e-mail enquiries: 12 months after the conversation ends, then deleted.
Demos we decide not to pursue: 12 months from submission, then deleted.
Demos that lead to cooperation: for the duration of the contract, then up to 6 years (limitation period for claims, Art. 118 of the Polish Civil Code).
Technical server logs: up to 30 days, unless needed to investigate a security incident.
Accounting documents (if a contract is signed): 5 years from the end of the tax year, as required by Polish tax law.
If you object or ask for deletion earlier, we delete the data unless we must keep it for legal claims or a legal obligation.
7. Your rights
You have the right to:
access your data and receive a copy (Art. 15 GDPR);
rectify inaccurate data (Art. 16);
erase your data, the "right to be forgotten" (Art. 17);
restrict processing (Art. 18);
data portability for data processed under a contract (Art. 20);
object to processing based on legitimate interest (Art. 21);
withdraw consent at any time, where processing is based on consent, without affecting earlier processing.
To use any of these rights, write to info@s84.world. We reply within one month; this can be extended by two months for complex requests, and we will tell you if so. We may ask you to confirm your identity.
You can also lodge a complaint with the Polish supervisory authority, Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl, or with the authority in your EU country of residence.
8. Security, minors and changes
Security. We use HTTPS across the site, limit access to submissions to the s84 team, and work only with providers that offer GDPR-compliant safeguards.
Minors. If you are under 16, please send a demo or enquiry only with the knowledge of a parent or legal guardian. Any contract with a minor is signed by their legal representative.
Changes. We may update this policy when the website or our services change. The current version and its date are always published on this page.