Privacy policy
Last updated: March 20, 2026
1. Who we are and how to contact us
The data controller is Tag Concierge sp. z o.o., KRS 0001056414, Sarego 18, apt. 1, 31-047 Kraków, Poland. You can contact us by email at: hello@souveil.com
2. How and why we process your personal data
We process your personal data in connection with your use of the souveil.com website and the souveil application (hereinafter: the "Service"). By "you" we mean the user of the Service.
We process your personal data in order to:
• perform the contract with you — using our Service constitutes the use of services provided by us electronically, such as access to content, sign-up for a waiting list, and use of the wedding photo gallery;
• fulfill legal obligations arising from consumer protection regulations;
• pursue our legitimate interests, such as ensuring the ability to prove the content and proper performance of the contract in case of dispute.
The legal bases for processing are: Art. 6(1)(b) GDPR (performance of a contract), Art. 6(1)(c) GDPR (legal obligation), and Art. 6(1)(f) GDPR (legitimate interest).
With your separate consent, we may also process your personal data for marketing purposes — e.g., to inform you about the app launch, promotions, and other updates. The legal basis is Art. 6(1)(a) GDPR (consent).
We also automatically process operational data: your IP address, server date and time, technical parameters of your device and software, and the location from which you connect. We use this data for statistical purposes and to improve the Service. Server logs serve as auxiliary material for administration and are not linked to specific users.
Cookies
We use cookies — small text files stored on your device — to ensure the proper functioning of the Service, improve speed and security, and use analytics tools. The legal basis is Art. 6(1)(f) GDPR (legitimate interest). You can manage or delete cookies via your browser settings, though disabling them may affect the Service's functionality.
We process your personal data in order to:
• perform the contract with you — using our Service constitutes the use of services provided by us electronically, such as access to content, sign-up for a waiting list, and use of the wedding photo gallery;
• fulfill legal obligations arising from consumer protection regulations;
• pursue our legitimate interests, such as ensuring the ability to prove the content and proper performance of the contract in case of dispute.
The legal bases for processing are: Art. 6(1)(b) GDPR (performance of a contract), Art. 6(1)(c) GDPR (legal obligation), and Art. 6(1)(f) GDPR (legitimate interest).
With your separate consent, we may also process your personal data for marketing purposes — e.g., to inform you about the app launch, promotions, and other updates. The legal basis is Art. 6(1)(a) GDPR (consent).
We also automatically process operational data: your IP address, server date and time, technical parameters of your device and software, and the location from which you connect. We use this data for statistical purposes and to improve the Service. Server logs serve as auxiliary material for administration and are not linked to specific users.
Cookies
We use cookies — small text files stored on your device — to ensure the proper functioning of the Service, improve speed and security, and use analytics tools. The legal basis is Art. 6(1)(f) GDPR (legitimate interest). You can manage or delete cookies via your browser settings, though disabling them may affect the Service's functionality.
3. What personal data we process
We make every effort to process only the data that is necessary and to the minimum extent. We may process the following personal data:
• email address,
• IP address,
• server date and time,
• device location,
• technical parameters of the device and software,
• photos and images uploaded through the Service.
• email address,
• IP address,
• server date and time,
• device location,
• technical parameters of the device and software,
• photos and images uploaded through the Service.
4. Who we share your personal data with
We share your personal data to the extent required with government authorities entitled to it by law (e.g., tax authorities).
Your personal data is processed in IT systems, some of which are located in cloud computing provided by third parties. In our contracts with these entities, we have ensured that data will not be transferred to third countries (outside the European Economic Area) without appropriate safeguards.
We use specialized third parties that may have access to part of your data — entities providing:
• hosting and cloud infrastructure services,
• IT systems support,
• analytics services,
• email and communication services.
In the relevant agreements we have ensured that the data entrusted to them is protected in accordance with GDPR.
Your personal data is processed in IT systems, some of which are located in cloud computing provided by third parties. In our contracts with these entities, we have ensured that data will not be transferred to third countries (outside the European Economic Area) without appropriate safeguards.
We use specialized third parties that may have access to part of your data — entities providing:
• hosting and cloud infrastructure services,
• IT systems support,
• analytics services,
• email and communication services.
In the relevant agreements we have ensured that the data entrusted to them is protected in accordance with GDPR.
5. How long we will process your data
We process your personal data only for as long as necessary:
• For tax purposes: in accordance with applicable Polish law — for 5 years from the moment the tax liability arose.
• For ongoing cooperation (e.g., account management): for the entire duration of the cooperation.
• For the exercise of rights arising from law or contract (e.g., complaints): for the entire duration of those rights.
• For consent-based processing: until consent is withdrawn.
• For tax purposes: in accordance with applicable Polish law — for 5 years from the moment the tax liability arose.
• For ongoing cooperation (e.g., account management): for the entire duration of the cooperation.
• For the exercise of rights arising from law or contract (e.g., complaints): for the entire duration of those rights.
• For consent-based processing: until consent is withdrawn.
6. Your rights
Under GDPR, you have the following rights regarding your personal data:
• Right of access (Art. 15 GDPR) — obtaining confirmation as to whether your data is being processed, and access to it.
• Right to rectification (Art. 16 GDPR) — requesting correction of inaccurate data or completion of incomplete data.
• Right to erasure (Art. 17 GDPR) — requesting deletion of data when it is no longer needed or when you withdraw consent.
• Right to restriction of processing (Art. 18 GDPR) — requesting restriction of processing in certain circumstances.
• Right to object (Art. 21 GDPR) — objecting to processing based on legitimate interest or for direct marketing.
• Right to data portability (Art. 20 GDPR) — receiving data in a structured, machine-readable format and transferring it to another controller.
To exercise any of these rights, contact us at hello@souveil.com
• Right of access (Art. 15 GDPR) — obtaining confirmation as to whether your data is being processed, and access to it.
• Right to rectification (Art. 16 GDPR) — requesting correction of inaccurate data or completion of incomplete data.
• Right to erasure (Art. 17 GDPR) — requesting deletion of data when it is no longer needed or when you withdraw consent.
• Right to restriction of processing (Art. 18 GDPR) — requesting restriction of processing in certain circumstances.
• Right to object (Art. 21 GDPR) — objecting to processing based on legitimate interest or for direct marketing.
• Right to data portability (Art. 20 GDPR) — receiving data in a structured, machine-readable format and transferring it to another controller.
To exercise any of these rights, contact us at hello@souveil.com
7. Complaint to a supervisory authority
Under Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement. In Poland, the supervisory authority is the President of the Personal Data Protection Office (UODO) — you can submit a complaint by mail to: ul. Stawki 2, 00-913 Warsaw, or by email to kancelaria@uodo.gov.pl. More information: uodo.gov.pl
8. Is providing data necessary?
We collect your personal data primarily to the extent necessary to conclude and perform the contract. Some data is also necessary to fulfill our legal obligations (tax law, accounting law, consumer protection obligations). Not providing personal data will make it impossible to conclude and perform the contract.
9. Where we get your personal data from
We obtain your personal data exclusively from you. Operational data and data related to cookies are obtained automatically. Photos shared through the Service are provided by wedding guests using the Service.
10. Automated processing and profiling
Operational data and data related to cookies are processed automatically and may be subject to profiling within the meaning adopted by GDPR. Other personal data is not processed in this way.