How we collect, use and protect your data.
Last updated:
Kiamazulu Technologies is the controller responsible for processing your personal data within the meaning of the General Data Protection Regulation (GDPR — EU Regulation 2016/679).
Contact: privacy@sonezza.com
We collect the following categories of data:
Connection country: we determine the country (and only the country — never your city or coordinates, no GPS, no fingerprinting) from your connection's network headers, to tailor regional content (trends, contests) and protect the integrity of contest votes. This minimised data is kept at most 24 h in a cookie and, for contest votes, logged with the vote.
Your data is processed for the following purposes:
Your data is never sold. It may be shared with:
In accordance with the GDPR, you have the following rights:
To exercise your rights: privacy@sonezza.com. Response within 30 days. You may also lodge a complaint with the CNIL: cnil.fr
We implement appropriate technical and organizational measures: TLS encryption, password hashing (bcrypt), role-based access control, regular audits. In the event of a data breach, we notify the CNIL within 72 hours and the affected users without delay.
Some of our providers (Vercel, Cloudflare) may process data outside the EU. These transfers are governed by Standard Contractual Clauses (SCC) approved by the European Commission, or an equivalent recognized mechanism.
Data Protection Officer (DPO)<br/>Kiamazulu Technologies<br/>Email: privacy@sonezza.com
