← Back to Home

Privacy Policy

Last updated: 6 November 2025

1. Introduction

Opengraphy SRL (“we”, “our”, “GOONS Studio”) is committed to protecting the privacy and personal data of its users.

This Privacy Policy explains how we collect, use, share, and protect your personal information in accordance with the General Data Protection Regulation (GDPR) and Belgian privacy law.

2. Personal data collected

2.1 Data you provide

Data type	Examples	Purpose
Identification data	Name, surname, alias, email	Account creation, communication
Payment data	Card information (processed by Stripe)	Subscription payments
Profile data	Profile picture, bio, preferences	Personalizing your experience
Music creations	Projects, samples, settings	Delivering the service, cloud storage

2.2 Data collected automatically

• Connection data: IP address, browser type, operating system
• Navigation data: Visited pages, session duration, clicks
• Usage data: Features used, frequency
• Cookies and similar tech: See the Cookie Policy

3. Legal bases & purposes

Purpose	Legal basis (GDPR)
Account creation and management	Performance of a contract (Art. 6.1.b)
Payment processing	Performance of a contract (Art. 6.1.b)
Providing GOONS Studio	Performance of a contract (Art. 6.1.b)
Customer support & technical help	Performance of a contract (Art. 6.1.b)
Transactional communications	Performance of a contract (Art. 6.1.b)
Product improvement & analytics	Legitimate interest (Art. 6.1.f)
Marketing & newsletters (opt-in)	Consent (Art. 6.1.a)
Legal & compliance duties	Legal obligation (Art. 6.1.c)

4. Sharing your data

4.1 Service providers

We share data with third-party processors acting on our behalf:

• Stripe: PCI-DSS certified payment processing
• Hosting providers: Infrastructure and storage
• Email services: Transactional and newsletter delivery (opt-in)
• Analytics tools: Google Analytics and internal metrics (anonymized)

All providers are bound by confidentiality agreements and process data according to GDPR.

4.2 Transfers outside the EU

Some vendors may be based outside the European Union. In such cases we ensure:

• Appropriate safeguards (EU Standard Contractual Clauses)
• Adequacy decisions from the European Commission
• Equivalent protective frameworks for US transfers

4.3 Legal requirements

We may disclose data when required by law or to:

• Comply with legal obligations
• Protect our rights and property
• Prevent fraud or abuse
• Protect user safety

5. Data retention

Data type	Retention period
Active account data	For as long as the account is active
Deleted account data	30 days after deletion (then permanently erased)
Billing data	10 years (Belgian accounting law)
Connection logs	Up to 12 months
Anonymized analytics	Up to 26 months

6. Your GDPR rights

You can exercise the following rights regarding your personal data:

6.1 Right of access (Art. 15)

Request a copy of all personal data we hold about you.

6.2 Right to rectification (Art. 16)

Correct or update inaccurate or incomplete data.

6.3 Right to erasure (Art. 17)

Request deletion of your personal data in specific circumstances.

6.4 Right to restriction (Art. 18)

Request limited processing under certain conditions.

6.5 Right to portability (Art. 20)

Receive your data in a structured, machine-readable format or request direct transfer to another controller.

6.6 Right to object (Art. 21)

Object to processing for direct marketing or based on your particular situation.

6.7 Withdrawal of consent (Art. 7.3)

When processing relies on consent, you may withdraw it at any time.

6.8 Exercising your rights

6.9 Right to lodge a complaint

You may lodge a complaint with the competent supervisory authority:

7. Data security

We implement technical and organizational safeguards:

• Encryption: HTTPS/TLS connections, encrypted sensitive data
• Authentication: Hashed passwords (bcrypt), optional 2FA
• Access control: Data access limited to authorized personnel
• Backups: Regular secure backups
• Monitoring: Intrusion detection and security monitoring
• Training: Staff awareness on data protection

8. Cookies & similar technologies

We use cookies to enhance your experience. See the Cookie Policy for details.

9. Minors

GOONS Studio is not intended for individuals under 16. We do not knowingly collect data from children under 16 without parental consent.

If you believe we collected data from a minor without consent, contact dpo@djgoons.com immediately.

10. Policy updates

We may amend this Privacy Policy at any time. Updates will be posted here with an adjusted “Last updated” date.

For material changes we will notify you by email at least 30 days before they take effect.

11. Contact

For questions about this Privacy Policy or your personal data:

---

Home | Legal Notice | Terms | Cookies