Privacy policy

HOW WE HANDLE YOUR DATA

This English version is an informative translation. In the event of any discrepancy, the Czech version prevails.

We run an e-shop at shop.nextgenaudio.cz and the label website at nextgenaudio.cz.

To provide our services, sell goods and operate our websites, we process some personal data.

The processing of personal data is governed in particular by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the General Data Protection Regulation, "GDPR") and Act No. 110/2019 Coll., on Personal Data Processing.

Who the controller is

Depending on where you provide your data, a different person is the controller.

E-shop shop.nextgenaudio.cz — orders, payments, delivery, complaints and accounting:

Zdeněk Rokos, Company ID (IČO) 23964120 V Třešňovce 389, 280 02 Veltruby, Czech Republic shop@nextgenaudio.cz · +420 605 700 426

Website nextgenaudio.cz, newsletter and reward gate:

Vojtěch Palatý, Company ID (IČO) 09739475 Veselská 189/3, 742 35 Odry, Czech Republic label@nextgenaudio.cz

The two controllers act independently, each for its own processing. If you are unsure who to contact, write to either address and we will forward your request.


1. Processing of personal data

1.1 Enquiries and contact

If you enquire about our products or contact us with a question, we will work with the contact details you provide: name, email address, and where applicable phone number and the content of your message.

Why? To get back to you and discuss the goods and services.

On what legal basis? Article 6(1)(b) GDPR — negotiation of a contract, or steps taken at your request prior to entering into a contract.

For how long? If no further cooperation follows, for a maximum of 2 years from our last communication.

1.2 Purchases

If you buy from us, we will work with the data you fill in. These are mainly billing and delivery details: name, surname, billing address, delivery address or pick-up point, email address, phone number, and further the contents and number of the order, the amount and method of payment, the transaction identifier and the chosen carrier.

Why? We need the data to perform our contract — to deliver your goods or provide digital content. We also use the contact details to communicate with you about the status of your order, complaints or questions.

We also process personal data to meet our statutory obligations (mainly accounting and tax purposes, and handling complaints).

On what legal basis? Article 6(1)(b) GDPR — performance of a contract, and Article 6(1)(c) GDPR — compliance with our legal obligation.

For how long? For the duration of our service and then 4 years from the last delivery of goods or provision of digital content (limitation period). Data on tax documents is retained for 10 years from the end of the tax period in which the document was issued, as required by law.

Payment data. Payment takes place within the Shoptet Pay gateway. We have no access to your payment card details and do not store them.

1.3 Complaints, withdrawal and legal claims

If you make a claim or withdraw from a contract, we will work with the order data, the content of the claim or withdrawal, our correspondence, any photographs of the defect and the bank account number for the refund.

On what legal basis? Article 6(1)(b) and (c) GDPR — performance of the contract and our legal obligations, and Article 6(1)(f) GDPR — our legitimate interest in establishing, exercising and defending legal claims.

For how long? 4 years from settlement.

1.4 Newsletters (commercial communications)

If you subscribe to our news, we will work with your email address, optionally your name and the role you selected (e.g. producer, DJ, promoter), and the date and time of subscription and its confirmation.

If you are a purchasing customer and did not opt out during the purchase, we will use your email address to send our news without a separate subscription.

On what legal basis? Where you subscribe, your consent under Article 6(1)(a) GDPR. For purchasing customers, Section 7(3) of Act No. 480/2004 Coll., on certain information society services, together with our legitimate interest under Article 6(1)(f) GDPR, provided you did not opt out during the purchase.

For how long? Until consent is withdrawn or you unsubscribe; inactive contacts are removed after 3 years without interaction. You can unsubscribe at any time using the link in every email or by writing to label@nextgenaudio.cz. Withdrawal of consent does not affect the lawfulness of prior processing.

1.5 Reward gate (unlocking content via SoundCloud and Spotify)

The reward gate is a feature of nextgenaudio.cz that unlocks a download or other content once you complete certain steps — for example follow, like, repost, saving a track or subscribing to the newsletter.

We will work with the following data: email address (if you provide one), gate and step identifiers, verification results and timestamps. For SoundCloud or Spotify steps also with the identifier of your account with that service, the access and refresh tokens (OAuth) and whether the action was completed.

Why? To verify that the conditions were met and unlock your reward. For pre-saves, to save the track to your account on release day.

On what legal basis? Article 6(1)(b) GDPR — providing the service you requested. For account linking, your consent under Article 6(1)(a) GDPR, given in the platform's authorisation dialogue.

What exactly do we do with your account? When you link it, the platform informs you of the permissions requested (e.g. following artists, saving tracks, managing playlists). We perform only the actions listed as steps of the specific gate. We do not read your listening history, do not post anything on your behalf and do not access your data beyond the above.

How to revoke the connection? At any time in your account settings on SoundCloud (Settings → Connections) or Spotify (Account → Apps). You may also ask us to delete the stored tokens at label@nextgenaudio.cz.

For how long? Email and unlock record for 12 months from the unlock. Tokens until the connection is revoked, at most 12 months from the last activity; for pre-saves, at most 30 days after the release date.

1.6 Traffic statistics on nextgenaudio.cz

On nextgenaudio.cz we measure only an aggregate count of page views per day. We do not store IP addresses or device identifiers and do not use cookies for this purpose; individual visitors cannot be identified from this data.

On what legal basis? Article 6(1)(f) GDPR — our legitimate interest in a basic overview of traffic and in developing the content.

For how long? 24 months. The data contains no personal data.


2. Who gets access to the data

Your data stays with us. Even so, some companies and other persons work for us and gain access because they help run our e-shop and website. They are:

  • the operator of the Shoptet e-commerce platform — Shoptet, a.s., Dvořeckého 628/8, Břevnov, 169 00 Prague 6, ID 289 35 675, registered with the Municipal Court in Prague, Section B, File 25 395;
  • companies involved in shipping goods — Zásilkovna s.r.o., ID 284 08 306, Českomoravská 2408/1a, Libeň, 190 00 Prague 9; PPL CZ s.r.o., ID 251 94 798, K Borovému 99, Jažlovice, 251 01 Říčany;
  • companies involved in processing payments — Shoptet, a.s. (the Shoptet Pay service) and its partner payment services provider Adyen N.V., Amsterdam, Netherlands;
  • the email marketing provider — UAB "Sender.lt" (sender.net), code 302820904, Lvivo st. 25, Vilnius, Lithuania;
  • the cloud infrastructure provider — Google Cloud EMEA Limited (Ireland) and Google LLC (USA); the backend and database of nextgenaudio.cz, including reward gate data, run on this infrastructure;
  • an external accountant or tax adviser, where used by the controller.

Your personal data may further reach the following entities:

  • SoundCloud Global Limited & Co. KG, Berlin, Germany, and Spotify AB, Stockholm, Sweden — if you link your account in the reward gate. These companies act as independent controllers under their own privacy policies;
  • public authorities, only to the extent required by law.

We do not sell personal data and do not share it with third parties for their own marketing purposes.


3. Transfers outside the European Union

Data from the e-shop is processed only within the European Union. For nextgenaudio.cz and the reward gate, transfers outside the EU occur as follows:

United States. The backend of nextgenaudio.cz runs on Google Cloud infrastructure in the us-central1 region, i.e. in the USA. Google LLC is certified under the EU–US Data Privacy Framework; the transfer relies on the European Commission's adequacy decision and, additionally, on standard contractual clauses approved by the European Commission.

United Kingdom. Where we deliver goods to the United Kingdom, your delivery details are passed to the local delivery partner. The European Commission has issued an adequacy decision for the United Kingdom, renewed on 19 December 2025 and valid until 27 December 2031; no additional safeguards are therefore required.


4. What else you should know

We have not appointed a data protection officer, as the processing does not meet the conditions of Article 37 GDPR.

No decisions are made on the basis of automated processing or profiling producing legal effects concerning you.

We do not process special categories of personal data under Article 9 GDPR (health data, religious beliefs and the like).

Children and young people. Neither the e-shop nor the website is targeted exclusively at children, but people under 18 may purchase from us to the extent appropriate to their intellectual and volitional maturity. Consent to processing in connection with information society services — in particular newsletter subscription and account linking in the reward gate — may be validly given by a person over 15 years of age under Section 7 of Act No. 110/2019 Coll. If you are under 15, you need the consent of a parent or other legal guardian to subscribe. If we discover that we have obtained the data of a child under 15 without a guardian's consent, we will delete it without undue delay.

Security. We have adopted technical and organisational measures appropriate to the nature of the processing, in particular encrypted data transfer (HTTPS/TLS), access control, storage of passwords as cryptographic hashes and separation of the administration from the public part of the website. Only people who need the data for their work have access to it.

If you have any questions about personal data, contact us at shop@nextgenaudio.cz (e-shop) or label@nextgenaudio.cz (website and reward gate), or call +420 605 700 426.


5. Use of cookies

Cookies are text files containing a small amount of information that are downloaded to your device when you visit our websites. They are then sent back on each subsequent visit to the website, or to another website that recognises them.

Cookies serve various purposes — for example they enable efficient navigation between pages, remember your preferences and generally improve the user experience. They can also ensure that ads displayed online are better tailored to you and your interests.

5.1 E-shop shop.nextgenaudio.cz

We use the following categories of cookies in the e-shop:

  • Strictly necessary cookies: required for the operation of the website — for example to keep the contents of the basket, complete the checkout process, remember your cookie choice and provide security functions. This category cannot be disabled and does not require your consent.
  • Analytics/statistics cookies: allow us, for example, to recognise and count visitors and to see how visitors use the website. They help us improve how the site works. We run these only with your prior consent.
  • Advertising cookies: used to track preferences and to display advertising and other content best matching your interests and online behaviour. We run these only with your prior consent.

Please note that third parties (including providers of external services such as Google Ireland Limited, Meta Platforms Ireland Limited, Seznam.cz a.s. or Heureka Group a.s.) may also use cookies and access data collected by cookies on the website.

The current list of specific cookies used, including their issuer, purpose and lifetime, is available in the cookie settings in the shop footer.

Consent may be given through the checkbox in the cookie banner, pursuant to Section 89(3) of Act No. 127/2005 Coll., on Electronic Communications. You may withdraw consent at any time in the cookie settings in the shop footer; withdrawal does not affect the lawfulness of prior processing. You may also refuse cookies in your browser settings, or allow only some of them.

5.2 Website nextgenaudio.cz

The label website uses no analytics or advertising cookies. Traffic measurement is cookie-free and aggregate only (see Article 1.6).

We store your choice regarding third-party embedded content in the browser's localStorage and, if you are signed in to the administration, your session token. This is technical storage necessary for the website to function, or for a service you have expressly requested.

Third-party embedded content (SoundCloud and Spotify players, Zonerama galleries) loads only after you consent to it. Until then only a placeholder is shown and no connection to those services' servers is made. Once you consent, those services may process your IP address and set their own cookies under their own privacy policies. You may change your choice at any time using the Cookies button in the website footer.

5.3 Managing cookies in browsers

  • Google Chrome — https://support.google.com/chrome/answer/95647
  • Firefox — https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
  • Safari — https://support.apple.com/en-gb/guide/safari/sfri11471/mac
  • Microsoft Edge — https://support.microsoft.com/en-us/microsoft-edge
  • Opera — https://help.opera.com/en/latest/security-and-privacy/

6. Your rights in connection with the processing of personal data

The GDPR gives you, among other things, the right to contact us and ask what personal data we process about you, to request access to that data and have it updated or corrected, to request restriction of processing, to request a copy of the personal data processed, to request erasure in certain situations, and in certain cases to data portability. You may object to processing based on legitimate interest; if you object to direct marketing, we will stop processing your data for that purpose immediately. You may withdraw any consent you have given at any time.

We will handle your request without undue delay and no later than one month; in complex cases we may extend this by a further two months and will notify you. Exercising your rights is free of charge. Where we have reasonable doubts about your identity, we may ask for additional verification.

If you believe we are not handling your data properly, you have the right to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz, or to pursue your claims in court.


This policy is effective from 1 September 2026.