Privacy Policy

1. Data Controller

2. Collected Personal Data

We collect the following personal data:

Upon registration:

• Email address (required)
• Name (optional)

During service use:

• User-created repertoires and concert programs
• Search history
• Settings and preferences

Automatically collected data:

• Login timestamps
• IP address
• Browser and device information

3. Purposes of Processing

We use your personal data for the following purposes:

• Providing and maintaining the service
• User account management and authentication
• Development and improvement of the service
• Providing customer service
• Notifying of important changes
• Preventing misuse

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract: Using the service requires creating an account and accepting the terms of service
• Legitimate Interest: Service development, ensuring data security, and preventing misuse
• Legal Obligation: Accounting and tax obligations

5. Data Retention Period

We retain your personal data as follows:

• Account Data: For as long as your account is active
• Log data: 12 months
• After account deletion: Data is removed from the active database immediately. Data is retained in backups for 30 days.
• Billing data: 6 years in accordance with the Accounting Act

6. Data Disclosure to Third Parties

We use the following service providers for personal data processing:

• Hetzner (Finland/Germany): Database and server infrastructure
• Tuta (Germany): Email service for customer communication, support, and privacy matters. All messages are stored encrypted on Tuta servers in Germany.
• Resend (Ireland): Email service for sending transactional messages (such as password reset links).

We do not sell or disclose your personal data to third parties for marketing purposes.

7. Data Subject Rights (GDPR)

You have the following rights regarding the processing of your personal data:

• Right of Access: Right to receive information about what data is stored about you
• Right to Rectification: Right to demand correction of incorrect data
• Right to Erasure: Right to request deletion of your data ("right to be forgotten")
• Right to Restriction: Right to demand restriction of processing in certain situations
• Right to Portability: Right to receive your data in a portable format
• Right to Object: Right to object to data processing in certain situations

You can exercise your rights by contacting privacy@liedhub.com

Right to Complain: You have the right to lodge a complaint with the Data Protection Ombudsman if you believe that the processing of your personal data has violated data protection legislation. Office of the Data Protection Ombudsman: tietosuoja.fi

8. Data Security

We protect your personal data with appropriate technical and organizational measures:

• Data transmission is encrypted (HTTPS/TLS)
• Passwords are stored hashed (bcrypt)
• Access to data is restricted to authorized personnel only
• Regular backups
• Security updates and audits

9. Cookies

We use only strictly necessary cookies to enable service functionality (e.g., login state). We do not use tracking or marketing cookies.

10. Changes to Privacy Policy

We reserve the right to update this privacy policy. Significant changes will be notified via email or within the service.

We recommend checking this policy regularly.

11. Contact Information

For questions related to privacy, please contact:
privacy@liedhub.com