1. Data controller The data controller for personal data is: POSTAL SOUNDS Contact email: hola@postalsounds.com

As long as there is no formally constituted legal entity, Postal Sounds will act as the controller for all purposes in relation to the processing of personal data.

2. Personal data we collect 

We may collect and process the following categories of data: 

a) Identification data 

● First name and surname 

● Email address 

● Country / city 

b) Usage data 

● Interactions with the platform 

● Routes viewed or booked 

● Musical or cultural preferences (when provided) 

c) Transaction data 

● Information related to route bookings 

● Information related to purchase history (without storing full payment details) 

d) Technical data 

● IP address 

● Device type and browser 

● Browsing data (cookies and similar technologies)

3. Purposes of processing 

We process personal data for the following purposes: 

● Manage access to the Postal Sounds platform 

● Allow the display of the map and musical content 

● Manage bookings of routes and experiences 

● Facilitate communication between users and Postal Sounders 

● Send communications related to the service 

● Improve user experience and quality of service 

● Comply with applicable legal obligations

4. Legal basis for processing The processing of data is based on:

● Execution of a contract (use of the platform and route booking) 

● User consent (for example, for communications) 

● Legitimate interest (service improvement, fraud prevention) 

● Compliance with legal obligations

5. Data retention Data will be retained: 

● As long as an active relationship with the user exists 

● As long as necessary for the described purposes 

● Until the user requests its erasure 

● For the periods required by applicable law

6. Recipients of the data We may share data with: 

● Postal Sounders (only when necessary for carrying out a route) 

● Technology providers (hosting, payment platforms, analytical tools) 

● Public authorities when a legal obligation exists. Under no circumstances do we sell personal data to third parties.

7. International transfers In the event of using providers outside the European Economic Area, an adequate level of protection will be guaranteed through: 

● Standard contractual clauses approved by the European Commission 

● Or equivalent mechanisms under the GDPR

8. Rights of users Users can exercise the following rights: 

● Access to their personal data 

● Rectification of inaccurate data 

● Erasure ("right to be forgotten") 

● Restriction of processing 

● Objection to processing 

● Data portability To exercise these rights, they may contact: hola@postalsounds.com Proof of identity may be requested to verify the request.

9. Data security Postal Sounds adopts appropriate technical and organisational measures to protect personal data against:

● Unauthorised access 

● Loss or destruction 

● Unlawful alteration

10. Cookies The platform may use cookies and similar technologies to: 

● Improve browsing 

● Analyse platform usage 

● Personalise the experience The user will be informed via a specific banner and consent will be requested when necessary.

11. Minors Postal Sounds services are not aimed at children under 16. We do not knowingly collect data from minors without parental consent.

12. Changes to the privacy policy Postal Sounds may update this policy when necessary. Users will be notified in the event of significant changes.

13