Privacy Policy for the Processing of Personal Data

Pursuant to and for the purposes of Art. 13 of EU Regulation No. 2016/679 concerning the protection of natural persons with regard to the processing of personal data, Art. 13-14 EU Regulation 679/2016 (GDPR).

This Privacy Policy applies when the Data Subject visits or uses the website and the Platform available at https://soundberry.ai (hereinafter also referred to as "Platform").

SoundBerry S.r.l., with registered office at Via Palmiro Togliatti 78, 09028 - Sestu (CA), VAT number IT04179710928, PEC soundberry@pec.it, as Data Controller (hereinafter "Controller"), informs you, pursuant to Art. 13 of EU Regulation 679/2016 (hereinafter "GDPR"), that the data you provide is processed according to the methods and purposes described below.

Data Controller Identification

Pursuant to the Regulation, your personal data will be processed by SoundBerry S.r.l., with registered office at Via Palmiro Togliatti 78, 09028 - Sestu (CA), VAT number IT04179710928, PEC soundberry@pec.it, email info@soundberry.ai.

Data Subject to Processing

The Personal Data subject to processing belongs to the following categories:

Browsing data acquired when you visit or use the website and the Platform; this category includes IP addresses or domain names of computers used by those connecting to the site, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the response status (error, success, etc.) and other parameters relating to the user's operating system and IT environment.
Common and contact data provided by the Data Subject during Platform registration, Service purchase, or by filling in forms available on the site to request information about the services offered by the Controller or to subscribe to the newsletter, including by way of example: first and last name, email address, payment and billing data.
Vocal samples uploaded by the Data Subject within the Platform to use certain features offered therein, falling within the category of biometric data, considered special category data pursuant to Art. 9 GDPR.
Should there be a need to process additional data not falling within the above categories during the execution of the requested activities, the Controller will promptly notify you.

Cookies and Site Tracking

In compliance with EU Directive 2009/136/EC of 25/11/2009, the Controller informs you that this site uses cookies or similar tools to enable us to improve our service and offer users some useful features. This may include cookies from commercial partners that are stored on your computer or device when you visit our site.

Cookies are small text files transferred to your computer or device via your web browser to allow us to recognize the user's browser and help us monitor visitors to our site, enabling us to better understand the products and services most suited to users. A cookie contains useful information to identify the computer or device when visiting our site, with the purpose of assisting the user during navigation and obtaining a better user experience.

Most web browsers automatically accept cookies, but you can modify your browser settings to accept, reject, or delete cookies. If you choose to change these settings, some features and functionalities may not work as expected. The cookies used do not retrieve information stored on your computer or device.

For more information about cookies and how to prevent your browser from accepting them, visit: http://www.allaboutcookies.org.

Purposes and Legal Basis of Processing

Your personal data is processed for the following purposes:

Browsing data: the Controller will process this data to improve the Data Subject's browsing experience on the website. The legal basis is the legitimate interest of the Controller, pursuant to Art. 6.1(f) GDPR.
Common and contact data provided during registration and Service purchase: the purpose of processing is to provide a service to the Data Subject, as well as the performance of a contract between the Parties, pursuant to Art. 6.1(b) GDPR.
Data provided when completing forms for information requests and newsletter subscription: the purpose is to fulfill the Data Subject's requests. The legal basis is the Data Subject's consent, pursuant to Art. 6.1(a) GDPR, provided by checking the appropriate checkbox before submitting the relevant requests.
Contact data for marketing purposes: contact data entered during registration and in newsletter subscription forms may be processed for marketing purposes, pursued by the Controller to promote the Services offered, through the sending of commercial communications by email. The legal basis is the Data Subject's consent, pursuant to Art. 6.1(a) GDPR.
Vocal samples uploaded to the Platform: the purpose is to provide the purchased service. The legal basis is the performance of a contract between the Parties, pursuant to Art. 6.1(b) GDPR, and the Data Subject's consent, pursuant to Art. 6.1(a) GDPR, provided by checking the appropriate checkbox during registration.

Processing Methods and Data Retention

Processing will be carried out using computer systems (cloud, internet, computers and mobile devices) and, residually on paper, using methods adequate to guarantee confidentiality and security.

Data will be stored in the Controller's databases in compliance with the following retention periods:

Browsing data: 24 months from collection.
Common and contact data for registration/Service purchase: 10 years from provision.
Data provided for information requests and newsletter subscription: 24 months from provision.
Contact data for marketing purposes: 24 months from provision.
Vocal samples: strictly the time necessary to process the Data Subject's request and return the appropriate output.

Nature of Data Provision and Consequences of Refusal

The provision of data for Platform registration and Service purchase is mandatory in order to carry out said operations.

The provision of data for information requests and newsletter subscription is optional. However, failure to provide such data will make it impossible to fulfill the Data Subject's requests.

The provision of data for marketing purposes is purely optional, and refusal to consent will not affect the fulfillment of related requests.

Regarding vocal samples, data provision is optional. Should the User not consent to this type of processing during registration, they should not upload vocal samples to the Platform.

Data Access

Your Data will be processed for the purposes and by the methods described above by personnel and/or collaborators of the Controller specifically authorized for processing and on the basis of instructions received, as well as by third parties (e.g., suppliers, professionals, affiliates, commercial partners) where they carry out outsourcing activities on behalf of the Controller, in their capacity as external data processors or controllers.

Data Disclosure

The Controller may disclose your data to Public Entities to comply with obligations under laws, regulations, or EU and national legislation, or imposed by Authorities, who will process them in their capacity as autonomous data controllers.

Data may be disclosed to Third Parties (e.g., suppliers, professionals, partners) where they carry out activities instrumental or ancillary to the requested services and the purposes described above, on behalf of the Controller in their capacity as external data processors or controllers.

An updated list of such parties may be requested from the Data Controller at the addresses indicated above.

Service providers generally operate through data centers located within the European Union.

Should your data be transferred outside the European Economic Area (EEA), for technical management or statistical purposes, this will occur exclusively in full compliance with EU Regulation 2016/679, to third countries for which the European Commission has recognized specific adequacy guarantees or adequate safeguards for the protection of personal data have been provided, through the signing of Standard Contractual Clauses approved by the European Commission.

Data may be disclosed to:

all parties whose right to access such data is recognized by legislative provisions;
our collaborators and employees;
parties appointed as external Data Processors by the Controller for the processing of personal data;
all natural and/or legal persons, public and/or private, when disclosure is necessary or functional to the establishment and management of the relationship, in the manner and for the purposes described above, in particular to: accountants, legal advisors, labor consultants, commercial partners, suppliers, banking institutions, public institutions, administrative staff.

Use of Artificial Intelligence Systems

The service made available on the Platform uses technologies based on Artificial Intelligence (AI) systems. These systems are used exclusively for the purpose of providing the Service.

The use of artificial intelligence takes place in compliance with current legislation on the protection of personal data (EU Regulation 2016/679 - GDPR). Any data processed by AI systems is managed with adequate technical and organizational measures to ensure security and confidentiality, and is not used for automated decision-making processes that produce legal effects on the user without meaningful human intervention.

For further information on the functioning of such systems or to exercise your rights, please contact us at info@soundberry.ai.

Data Subject's Rights

At any time, you may exercise your rights against the Data Controller, pursuant to Articles 15-22 of EU Regulation 2016/679, and in particular:

Right of Access

The data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning them is being processed, and where that is the case, to access the personal data and the information regarding the processing.

Right to Rectification

The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning them. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to Erasure (Right to Be Forgotten)

The data subject has the right to obtain from the controller the erasure of personal data concerning them without undue delay, and the controller has the obligation to erase personal data without undue delay.

Right to Restriction of Processing

The data subject has the right to obtain from the controller restriction of processing where one of the following applies:

the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise, or defense of legal claims;
the data subject has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject.

Right to Data Portability

The data subject has the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used, and machine-readable format and has the right to transmit those data to another controller without hindrance.

Right to Object

The data subject has the right to object, on grounds relating to their particular situation, at any time to processing of personal data concerning them which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions.

Right Not to Be Subject to Automated Decision-Making

The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.

The above rights may be exercised by sending an email to the Controller at info@soundberry.ai.

Last updated: February 2026