
Learn how we collect, process, and protect your personal data
Privacy Policy for DMXDesktop
Effective Date: 15-08-2025
Version: 2.0
This Privacy Policy explains how DMXDesktop – Michael Lines ("we", "our", or "us") collects, processes, and protects your personal data when you use our website (dmxdesktop.com), the DMXDesktop software application ("Software"), and any related services (collectively, the "Services"). We are committed to ensuring the privacy and security of your personal information in accordance with the EU General Data Protection Regulation (GDPR), Polish data protection laws, and other applicable data protection laws globally.
By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.
1. Data Controller Information
Controller: Michael Lines doing business under the name of: DMXDesktop – Michael Lines
Address: Ekologiczna 41, 72-006 Mierzyn, Poland
NIP: PL8513317812
REGON: 529577980
Registration Authority: CEIDG (Central Register and Information on Economic Activity kept by minister in charge of economy)
Telephone number: +48 512 464 764
Email: [email protected]
Contact Form: https://www.dmxdesktop.com/contact
2. Definitions
Personal Data: Any information relating to an identified or identifiable natural person ('data subject').
Processing: Any operation or set of operations performed on personal data, whether automated or not (e.g., collection, recording, organisation, retrieval, use, disclosure, restriction, erasure, destruction).
GDPR: EU General Data Protection Regulation 2016/679.
Data Controller: Michael Lines.
Processor: A third party that processes personal data on our behalf.
3. Data Protection Officer
We are not required to appoint a Data Protection Officer under GDPR. For all data-related questions, contact [email protected].
4. Personal Data Collected and Legal Basis
We collect and process:
Identification Data: Name, email address
Purpose: Account creation, authentication, licensing and subscription management, critical updates and notifications
Legal basis: Contract performance; Legitimate interests
Login Authentication: Google or Facebook tokens
Purpose: Account creation, authentication, licensing and subscription management
Legal basis: Contract performance; Legitimate interests
Subscription Details: Plan type, billing cycle
Purpose: Licensing and subscription management
Legal basis: Contract performance; Legitimate interests
Payment Processing: Via Stripe (no full card details stored); addresses for verification, billing, tax compliance
Purpose: Licensing, subscription management, fraud prevention
Legal basis: Contract performance; Legal obligation
Usage Data: Crash reports, performance logs (pseudonymized)
Purpose: Functionality, compatibility, reliability, support
Legal basis: Legitimate interests; Contract performance
Support / Debug Logs: Voluntarily provided for support
Purpose: Diagnose and resolve issues
Legal basis: Consent; Legitimate interests
Cloud Backup Data: Data you choose to store in our cloud
Purpose: Backup storage per your instruction
Legal basis: Contract performance; Consent
Technical and Usage Data: IP, device details, OS, software version, approximate location, aggregated usage data
Purpose: Functionality, improvements, support, security, licensing validation
Legal basis: Legitimate interests; Contract performance
Security Data: Login attempt data, security alerts
Purpose: Account and service protection
Legal basis: Legitimate interests
Legal bases may also include:
- Art. 6(1)(a) GDPR – Consent
- Art. 6(1)(b) GDPR – Contract performance
- Art. 6(1)(c) GDPR – Legal obligation
- Art. 6(1)(f) GDPR – Legitimate interests
5. Consent Handling
Where consent is required:
- We explain clearly what data is collected
- Consent is voluntary and given through a clear, affirmative action
- You can withdraw consent at any time
- Consent records are time-stamped and versioned
Withdrawing consent does not affect the lawfulness of prior processing.
6. Payments and Processors
Payments are processed by Stripe, Inc. — see: https://stripe.com/privacy
We do not store your full credit/debit card details.
7. Cookies and Analytics
We use cookies and analytics to understand user behavior.
Includes:
- Google Analytics (if enabled)
- Squarespace default analytics
Users are informed via a cookie banner and can manage settings.
Legal basis:
- Consent (for non-essential cookies)
- Legitimate interests (for necessary cookies)
You can change cookie preferences at any time via our site or your browser.
8. Your Rights under GDPR
You have the right to:
- Access your personal data (Art. 15)
- Rectify inaccuracies (Art. 16)
- Request erasure (Art. 17)
- Restrict processing (Art. 18)
- Data portability (Art. 20)
- Object to processing (Art. 21)
- Withdraw consent (Art. 7)
- Not be subject to automated decision-making (Art. 22)
- Lodge a complaint with a supervisory authority (UODO in Poland)
How to exercise: Email [email protected] with details. We will respond within 1 month, extendable by up to 2 months if necessary.
9. Data Security
Measures include:
- TLS encryption
- Data minimization
- Access restrictions
- Breach procedures
- Processor contracts
If a breach occurs, we will notify affected parties and authorities as required.
10. Children's Data
Not intended for children under 16. If we learn a child's data has been collected without consent, we delete it.
11. Sensitive Data
We do not process special categories of data unless required and with explicit consent.
12. Automated Decision-Making and Profiling
We do not use automated decision-making or profiling with significant effects.
13. Obligation to Provide Data
Certain data is required for:
- Account creation
- Payment processing
- Granting access to content
Failure to provide required data may prevent service use.
14. International Data Transfers
We may transfer data outside the EEA, including to the US (Google, Stripe).
Transfers rely on:
- Adequacy decisions (e.g., US-EU Data Privacy Framework)
- Standard Contractual Clauses (SCCs)
15. Record of Processing Activities
We maintain records as required under Art. 30 GDPR.
16. Data Retention
Retention depends on data type:
- Account/Billing: While account is active + legal retention period (e.g., tax = 7 years)
- Cloud Backups: Until deleted or subscription ends
- Technical Data: Indefinite if anonymized; personal data only as needed for security/support
- Debug Logs: Typically 90 days after issue resolved
- Cookies: Per cookie settings
17. Changes to This Policy
We may update this policy with 14 days' notice before changes take effect.
We keep a record of policy versions and acceptance timestamps.
18. Contact
Email: [email protected]
Form: https://www.dmxdesktop.com/contact
Mail: Michael Lines, Ekologiczna 41, 72-006 Mierzyn, Poland
Last Updated: 01-09-2025
