1. Controller
EREOO is responsible for the data processing carried out through this website. Our business address is Weimar, Thuringia, Germany. For privacy questions, please use info@hedj.co.
2. Data We Process
When you use the website or order a song, we may process your name, email address, optional WhatsApp number, recipient and occasion details, story details, selected moods and music styles, technical usage data, and payment or transaction data.
3. Purposes and Legal Bases
We process personal data to answer enquiries, create and deliver personalized song orders, handle payments, communicate with customers, comply with legal obligations, and protect and improve the website. Depending on the situation, the legal basis is contract performance, compliance with legal obligations, legitimate interests, or your consent.
4. Stripe Payments
We use Stripe to process online payments. When you start checkout and when payment is confirmed, relevant order and payment details can be transmitted to Stripe or returned to us by Stripe. This can include your name, email address, payment status, payment references, and related technical metadata. Stripe acts under its own privacy terms for the payment service it provides.
5. Email and Service Providers
We use our SMTP mail service to send payment confirmations, order updates, and internal notifications. Additional technical providers can support hosting, security, uploads, or analytics where required to run the website securely and reliably.
6. Content Restrictions
Song requests may be submitted in any language. Religious songs are not offered. Please do not include unnecessary sensitive information in your story details.
7. Storage Period
We store personal data only for as long as needed for the purposes described above, or for longer where legal retention obligations apply. Order records, payment evidence, and business communications may therefore be kept beyond the production period.
8. Your Rights
Subject to applicable law, you may have the right to access, correct, erase, restrict, or object to processing, receive a copy of certain data, and withdraw any consent you previously gave for future processing. You may also lodge a complaint with a competent data protection authority.
9. Security
We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or misuse. This includes access controls, encrypted storage for sensitive credentials, and secured payment workflows.
10. Updates to This Policy
We may update this privacy policy when our services, processes, or legal obligations change. The version published on this page is the current version.