Legal
Privacy policy
Last updated:
1. Who is the controller
Sound Republic AI, S.L.U., tax ID B26869776, registered office at Calle Valentín Sanz 23, 2º · 38002 Santa Cruz de Tenerife · Spain.
For anything about privacy, or to exercise your rights: legal@soundrepublic.ai or by phone on +34 640 112 637.
2. What data we process
It is worth starting with what does not happen, because that is the unusual part:this site asks you for no data at all. It has no forms, it sets no cookies, it carries no analytics and no advertising pixels, it loads no third-party resources, and the typefaces are served from this same domain.
With that, the only data that comes to exist is of two kinds:
- Technical browsing logs. In serving any page, the hosting provider records the IP address, the user agent, the date and the resource requested. It is inherent to how the web works and it is not used to build a profile of you.
- What you send us. If you call, write on WhatsApp or email us, we process whatever you decide to tell us — name, phone, email, the project you are describing.
3. Why, and on what legal basis
- Serving the site and protecting it from abuse
- Legitimate interest in maintaining the security and availability of the service — art. 6(1)(f) GDPR.
- Answering your enquiry
- Your request, and where applicable steps prior to a contract — arts. 6(1)(a) and 6(1)(b) GDPR.
- Meeting legal obligations
- A legal obligation applying to the controller — art. 6(1)(c) GDPR.
We do no behavioural advertising, we build no profiles and we take no automated decisions with legal effects on you.
4. For how long
- Technical logs: the hosting provider's retention period, in the order of days, and we keep no copies.
- Commercial enquiries: while the conversation is live and up to one year after the last contact. If it ends in a contract, whatever commercial and tax law requires.
5. Who else sees them
We do not sell or transfer personal data. The only third parties involved are providers acting as processors:
- Cloudflare, Inc.
- Hosting and content delivery network
- Server logs: IP address, user agent, date and resource requested.
- USA, under an adequacy decision (EU-US Data Privacy Framework)
- WhatsApp Ireland Ltd. (Meta)
- Messaging channel, only if you choose to write there
- Your phone number and the content of the messages you send.
- Ireland, with transfers to the Meta group in the USA
Public authorities could also have access where a rule requires it. International transfers rely on an adequacy decision or on standard contractual clauses.
If at any point we add a form, a measurement tool or a consent manager, this list and the cookie policy get updated before that goes live, not after.
6. Your rights
You can ask us for access to your data, its rectification or erasure, restriction of or objection to processing, and portability. Where the basis is your consent, you can withdraw it at any time without that affecting processing carried out beforehand.
Write to legal@soundrepublic.ai saying which right you want to exercise. We will reply within one month.
If you are in the United Kingdom, the UK GDPR applies to your data and the supervisory authority is the Information Commissioner's Office — Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, helpline 0303 123 1113. You can complain to them if you believe we have not handled your request properly.
If you are in Spain or elsewhere in the EU, the authority is the Spanish Data Protection Agency (C/ Jorge Juan 6, 28001 Madrid).
Complaining to an authority does not cost you anything and does not require you to have written to us first — though we would rather you did, because we can usually fix it faster.
7. Changes to this policy
When it changes, the date in the header changes. If the change is substantive — a new kind of processing, a new processor — it is also announced in the changelog, with its date.