ShrtLab Logo
Book demo

Privacy Policy

Our privacy policy and how we use your data

This Privacy Policy describes how EnterPrize Sp z o.o. ("Administrator", "we") processes personal data in connection with the provision of services under the Shorts Lab brand.

§ 1. Personal Data Administrator

  1. The administrator of your personal data is EnterPrize Sp z o.o., NIP: PL6793127683, KRS: 0000615907, ul. Metalowców 14/50, 34-120 Andrychów.
  2. In matters concerning the processing of personal data, you can contact us at the e-mail address: przemyslaw.trybala@shorts-lab.com.

§ 2. Purposes and legal basis of data processing

We process your personal data for the following purposes:

  • Conclusion and performance of the contract (Article 6(1)(b) of the GDPR): in order to provide services, handle orders, communicate and settle accounts.
  • Fulfillment of legal obligations (Article 6(1)(c) of the GDPR): for tax and accounting purposes.
  • Legitimate interest (Article 6(1)(f) of the GDPR): in order to establish, pursue or defend claims, as well as for analytical and statistical purposes.

§ 3. Scope of the processed data

We process the following categories of data:

  • Contact and identification data of our Clients and their representatives (name, surname, company name, NIP, address, e-mail).
  • Data contained in the Source Materials, including the image of persons recorded in photos or videos. In this case, we act as a processor on behalf of the Client, who is the administrator of this data.
  • Data on the use of services ("Usage Data"), such as choices of variants, preferences and other metrics.

§ 4. Data recipients and sub-processing

  1. Your data may be shared with entities we use to provide our services. These are our trusted subcontractors (sub-processors) who process data on our behalf.
  2. We use the services of the following categories of entities:
    • Cloud and hosting service providers (Google Cloud, Hetzner).
    • Providers of tools for project and material management (Airtable, ClickUp).
    • Providers of automation systems (n8n).
    • Providers of AI models for video generation and content preparation (e.g. Google Gemini, Pollo.ai).
  3. All our subcontractors provide an adequate level of data protection and act only on our documented instructions.

§ 5. Data transfer outside the European Economic Area (EEA)

  1. Some of our subcontractors (e.g. Google, Airtable) may process data outside the EEA, in particular in the USA.
  2. In this case, the data transfer is based on appropriate legal safeguards, such as standard contractual clauses (SCC) approved by the European Commission.

§ 6. Rights of data subjects

In connection with the processing of your personal data, you have the following rights:

  • The right to access the content of your data.
  • The right to rectify (correct) your data.
  • The right to erasure of data.
  • The right to restrict the processing of data.
  • The right to data portability.
  • The right to object to the processing of data based on our legitimate interest.
  • The right to lodge a complaint with a supervisory authority (the President of the Personal Data Protection Office).

§ 7. Data retention period

  1. Your personal data will be stored for the duration of the contract and for the period necessary to comply with legal obligations (e.g. tax) and to pursue claims.
  2. Source materials processed by AI subcontractors are deleted immediately after the video generation process is completed.

§ 8. Changes to the Privacy Policy

We reserve the right to make changes to this Privacy Policy. The current version will always be available on our Website.