Privacy Policy
Last updated: March 20, 2026
1. Who we are and how to find us
The data controller is Tag Concierge sp. z o.o., KRS 0001056414, ul. Sarego 18, lok. 1, 31-047 Kraków, Poland. You can contact us via e-mail at: contact@souveil.com
2. How and why we process your personal data
We process your personal data in connection with your use of the souveil.com website and the souveil application (hereinafter: the "Service"). By "you" we mean the user of the Service.
We process your personal data in order to:
• perform a contract with you — using our Service constitutes using services provided by us electronically, such as accessing content, joining the waitlist, and using the wedding photo gallery;
• comply with legal obligations under consumer legislation;
• pursue our legitimate interests, such as ensuring we can prove the content and proper performance of our contract with you in the event of a dispute.
The legal bases for processing are: Article 6(1)(b) GDPR (contract performance), Article 6(1)(c) GDPR (legal obligation), and Article 6(1)(f) GDPR (legitimate interests).
With your separate consent, we may also process your personal data for marketing purposes — e.g. to inform you about the app launch, promotions, and other updates. The legal basis is Article 6(1)(a) GDPR (consent).
We also process usage data automatically: your IP address, server date and time, technical parameters of your device and software, and the location from which you connect. We use this data for statistical purposes and to improve the Service. Server logs are auxiliary material for administration and are not associated with particular users.
Cookies
We use cookies — small text files stored on your device — to ensure proper functioning of the Service, improve speed and security, and use analytical tools. The legal basis is Article 6(1)(f) GDPR (legitimate interests). You can manage or delete cookies through your browser settings, though disabling them may affect the Service's functionality.
We process your personal data in order to:
• perform a contract with you — using our Service constitutes using services provided by us electronically, such as accessing content, joining the waitlist, and using the wedding photo gallery;
• comply with legal obligations under consumer legislation;
• pursue our legitimate interests, such as ensuring we can prove the content and proper performance of our contract with you in the event of a dispute.
The legal bases for processing are: Article 6(1)(b) GDPR (contract performance), Article 6(1)(c) GDPR (legal obligation), and Article 6(1)(f) GDPR (legitimate interests).
With your separate consent, we may also process your personal data for marketing purposes — e.g. to inform you about the app launch, promotions, and other updates. The legal basis is Article 6(1)(a) GDPR (consent).
We also process usage data automatically: your IP address, server date and time, technical parameters of your device and software, and the location from which you connect. We use this data for statistical purposes and to improve the Service. Server logs are auxiliary material for administration and are not associated with particular users.
Cookies
We use cookies — small text files stored on your device — to ensure proper functioning of the Service, improve speed and security, and use analytical tools. The legal basis is Article 6(1)(f) GDPR (legitimate interests). You can manage or delete cookies through your browser settings, though disabling them may affect the Service's functionality.
3. What personal data we process
We endeavour to process only the data that is necessary and to the minimum extent. We may process the following personal data:
• email address,
• IP address,
• server date and time,
• device location,
• technical parameters of your device and software,
• photos and images uploaded through the Service.
• email address,
• IP address,
• server date and time,
• device location,
• technical parameters of your device and software,
• photos and images uploaded through the Service.
4. To whom we disclose your personal data
We disclose your personal data to the required extent to state administration bodies authorised by law (such as tax authorities).
Your personal data is processed in IT systems, some of which are located in public computing clouds provided by third parties. We have ensured in our contracts with these entities that data will not be transferred to third countries (outside the European Economic Area) without appropriate safeguards.
We use the support of specialised third parties who may have access to some of your data — entities providing:
• hosting and cloud infrastructure services,
• IT system support,
• analytics services,
• email and communication services.
We have ensured in the relevant agreements that the data entrusted to them is protected in accordance with the GDPR.
Your personal data is processed in IT systems, some of which are located in public computing clouds provided by third parties. We have ensured in our contracts with these entities that data will not be transferred to third countries (outside the European Economic Area) without appropriate safeguards.
We use the support of specialised third parties who may have access to some of your data — entities providing:
• hosting and cloud infrastructure services,
• IT system support,
• analytics services,
• email and communication services.
We have ensured in the relevant agreements that the data entrusted to them is protected in accordance with the GDPR.
5. How long we will process your data
We process your personal data only for as long as necessary:
• For tax purposes: in accordance with applicable provisions of Polish law — for 5 years after the tax obligation arises.
• For ongoing cooperation (e.g. maintaining your account): for the entire period of cooperation.
• For exercising rights under law or contract (e.g. complaints): for the entire duration of such rights.
• For consent-based processing: until you withdraw your consent.
• For tax purposes: in accordance with applicable provisions of Polish law — for 5 years after the tax obligation arises.
• For ongoing cooperation (e.g. maintaining your account): for the entire period of cooperation.
• For exercising rights under law or contract (e.g. complaints): for the entire duration of such rights.
• For consent-based processing: until you withdraw your consent.
6. Your rights
Under the GDPR, you have the following rights regarding your personal data:
• Right of access (Art. 15 GDPR) — obtain confirmation of whether your data is being processed and access to it.
• Right to rectification (Art. 16 GDPR) — request correction of inaccurate data or completion of incomplete data.
• Right to erasure (Art. 17 GDPR) — request deletion of your data when it is no longer necessary or when you withdraw consent.
• Right to restrict processing (Art. 18 GDPR) — request limitation of processing in certain circumstances.
• Right to object (Art. 21 GDPR) — object to processing based on legitimate interests or for direct marketing purposes.
• Right to data portability (Art. 20 GDPR) — receive your data in a structured, machine-readable format and transmit it to another controller.
To exercise any of these rights, please contact us at contact@souveil.com
• Right of access (Art. 15 GDPR) — obtain confirmation of whether your data is being processed and access to it.
• Right to rectification (Art. 16 GDPR) — request correction of inaccurate data or completion of incomplete data.
• Right to erasure (Art. 17 GDPR) — request deletion of your data when it is no longer necessary or when you withdraw consent.
• Right to restrict processing (Art. 18 GDPR) — request limitation of processing in certain circumstances.
• Right to object (Art. 21 GDPR) — object to processing based on legitimate interests or for direct marketing purposes.
• Right to data portability (Art. 20 GDPR) — receive your data in a structured, machine-readable format and transmit it to another controller.
To exercise any of these rights, please contact us at contact@souveil.com
7. Complaint to the supervisory authority
Pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place where the alleged infringement took place. In Poland, the supervisory authority is the President of the Office for Personal Data Protection (UODO) — you can lodge a complaint by post to ul. Stawki 2, 00-913 Warsaw, or by email to kancelaria@uodo.gov.pl. More information: uodo.gov.pl
8. Is the provision of data necessary?
We collect your personal data primarily to the extent necessary to enter into and perform a contract. Some data is also necessary to fulfil our legal obligations (tax and accounting regulations, consumer protection). Failure to provide personal data will prevent the conclusion and execution of the contract.
9. Where we got your personal data from
We obtain your personal data exclusively from you. Usage data and data related to cookies are obtained by automated means. Photos shared through the Service are provided by wedding guests who use the Service.
10. Automated processing and profiling
Usage data and data related to cookies are processed by automated means and may be subjected to profiling in the sense adopted by the GDPR. Other personal data are not processed in this way.