GDPR Statement

Seller Information: Audio Pink Noise is operated by MILAN INNOVATIONS LLC (the “Seller”), a limited liability company registered in Wyoming, United States.

The company is owned and managed by Milan Lipowski, who creates and releases all audio works under his artist name “Milan Wilkinson”, officially registered with Broadcast Music, Inc. (BMI).

All sales, refunds, customer support, and legal matters are handled exclusively by MILAN INNOVATIONS LLC.

I. Who We Are (Data Controller)

Audio Pink Noise is operated by Milan Lipowski, whose stage name “Milan Wilkinson” is registered with BMI, through MILAN INNOVATIONS LLC (the “Seller”), a United States limited liability company.

For any questions regarding personal data, please use the contact form available on this website.

A Data Protection Officer is not required.

II. Personal Data Collected

When the website is used or a purchase is made, the following types of personal data may be collected:

• Contact details: Name, email address, billing address, shipping address (if applicable)
• Order information: Purchased products, order history, and transaction details
• Payment information: Processed securely by third-party providers (payment card details are not stored on this website)
• Technical data: IP address and basic server logs used only for security and troubleshooting

Only data necessary for the provision of services is collected. No sensitive personal data (such as health data or similar special categories) is collected or processed.

III. Purposes and Legal Basis for Processing

Personal data is processed only where necessary, based on the following legal grounds under GDPR Article 6:

• Contract performance (Art. 6(1)(b))
  Processing orders, delivering digital products, and providing confirmations and invoices
• Legal obligations (Art. 6(1)(c))
  Compliance with tax, accounting, and other legal requirements
• Legitimate interests (Art. 6(1)(f))
  Fraud prevention, basic website security, and order-related communication

Personal data is not used for marketing without explicit consent. No tracking, profiling, or behavioral analytics is performed.

IV. Sharing of Personal Data

Personal data is shared only with service providers strictly necessary for business operation:

• Payment processors: Stripe and PayPal
  These providers process payments securely and act as independent data controllers for payment data under their own privacy policies
• Hosting and email providers:
  Used to operate the website and deliver order-related communication, limited strictly to what is necessary

Personal data is not sold or rented to third parties.

V. International Data Transfers

As the business operates from the United States, personal data may be transferred to and processed in countries outside the European Economic Area (EEA).

Where required, appropriate safeguards such as Standard Contractual Clauses are applied. For details on how payment providers protect data, refer to their respective privacy policies.

VI. Data Retention

Personal data is retained only as long as necessary or required by law:

• Order, payment, and invoicing data is typically retained for 6–7 years to meet tax and legal obligations
• Other data is retained only as long as necessary to complete orders or respond to inquiries

Data is deleted or anonymized when no longer required.

VII. Rights Under GDPR

If located in the EU/EEA, the following rights apply:

• Right to request access to personal data held
• Right to request correction of inaccurate data
• Right to request deletion of personal data
• Right to request restriction of processing
• Right to object to processing
• Right to request a copy of data in a portable format
• Right to withdraw consent (where applicable)

Requests are handled manually via the contact form, as no customer account system is used.

A complaint may be lodged with a relevant data protection authority.

To exercise any of these rights, use the contact form. Requests are handled without unnecessary delay, typically within one month.

VIII. Security

Appropriate technical and organizational measures are applied to protect personal data, including secure transmission (HTTPS) and restricted access.

No system can guarantee absolute security.

IX. Changes to This GDPR Statement

This GDPR Statement may be updated from time to time. The most recent version will always be available on this page.

X. Acknowledgment

By using the website and purchasing products, it is acknowledged that personal data may be processed as described in this GDPR Statement.

Use of the website is also subject to the Privacy Policy and Terms and Conditions, which should be read together with this document.