Steerner

Privacy policy

Last updated: 10 September 2026

Who we are

The data controller is Widing Group AB, trading as Steerner. Contact address: Artillerigatan 81, 114 45 Stockholm, Sweden. Privacy contact: steerner@live.com.

Information we collect

Depending on how you use the website, we may process information such as your name and email address, artist and project name, project instructions and messages, selected service, project, reference and delivery links, order and payment information, communication and revision history, and consent and marketing preference records where applicable.

For general enquiries, we may receive your name, email, message, an optional reference URL and an optional uploaded audio file.

We do not store full payment card numbers or CVC codes in our own database.

Certain information, such as your name, email address and information necessary to administer your project, is required for us to accept and provide the requested service. If this information is not provided, we may not be able to accept or complete your project.

How and why we use personal data

We use personal data to:

  • respond to enquiries;
  • review and manage project submissions;
  • provide mixing and mastering services;
  • communicate with customers;
  • manage revisions and final delivery;
  • process and verify payments;
  • maintain accounting and transaction records;
  • protect the service and prevent misuse;
  • handle legal and privacy requests; and
  • send marketing communications where permitted.

Depending on the processing, we rely on the following legal bases under GDPR:

  • Contract / pre-contractual steps - for handling project submissions, providing the requested service and communicating about the project.
  • Legal obligations - for accounting, tax and other records we are required to maintain.
  • Legitimate interests - where appropriate for operating, securing and administering the service, provided those interests are not overridden by your rights and interests.
  • Consent - where processing specifically relies on consent, such as certain marketing communications.

If you choose to receive marketing communications from us, we may use your email address to send occasional offers, discounts, promotions and news about MixedBySteerner. Marketing consent is optional and does not affect your ability to submit a project or use our services.

You can withdraw your marketing consent at any time by using the unsubscribe link in a marketing email or by contacting us at steerner@live.com. Withdrawing marketing consent does not affect necessary transactional or service-related communications about an active project or order.

Consent is not the legal basis for ordinary order processing. Transactional and service-related emails about an existing project are separate from marketing communications.

Project files and links

Customers normally provide project files through external links such as Dropbox, Google Drive, WeTransfer, Filemail or similar services. MixedBySteerner stores the submitted URL but does not host or control the underlying file when it remains with an external provider.

Preview, revision and final delivery links may also point to external providers. Removing such a URL from MixedBySteerner does not itself delete the underlying file from the external provider.

If a file is uploaded directly to our private storage, it is subject to the retention periods described below.

Payments

Payments are processed through Stripe. Stripe may process payment card details, billing information, tax information and authentication information required to complete a payment.

We do not store full payment card numbers or CVC codes in our own database. We may retain transaction information such as the amount and currency, payment status, transaction or payment references, and payment dates. Stripe Tax or automatic tax calculation may be used where applicable.

Service providers and international transfers

We use service providers necessary to operate the website and deliver the service:

  • Lovable - website/application platform and managed transactional email/platform services.
  • Cloudflare - edge infrastructure used as part of the website/application platform.
  • Supabase - database and private file storage. The primary database region is in Ireland / EU.
  • Stripe - payment processing, billing and tax-related services.

Where personal data is transferred outside the EU/EEA, appropriate safeguards are used in accordance with applicable data protection law, such as an adequacy decision, Standard Contractual Clauses or other recognised transfer mechanisms where applicable.

How long we keep information

Enquiries

Audio uploaded through the general enquiry/contact form is automatically deleted from our private storage after 30 days. The remaining enquiry record, such as name, email, message and reference URL, is automatically deleted after 12 months from the enquiry date.

Project files stored by us

Project files directly uploaded to our private storage are automatically deleted after 90 days from the order submission date. This does not mean that files hosted by external services such as Dropbox, Google Drive, WeTransfer or Filemail are deleted by us.

Completed projects

Unnecessary operational project data is automatically cleaned 180 days after the project is marked completed. This may include project/download links, reference links, preview links, revision links, final delivery links, project messages, internal project notes, and unnecessary personal/project information contained in activity history. Projects that have not been marked completed are not subject to this specific 180-day automated cleanup.

Accounting and transaction records

Order and payment records are retained for as long as required under applicable Swedish bookkeeping, tax and other legal obligations. Other personal data is retained only for as long as necessary for the purposes described in this Privacy Policy.

Marketing preferences

Marketing preferences are retained as necessary to manage your subscription choices and demonstrate consent where applicable. If you unsubscribe, we may retain limited information about your opt-out to ensure that we respect your preference and do not send you further marketing unless you later choose to opt in again.

Cookies and browser storage

The website uses necessary browser session storage for technical functionality, such as keeping your booking progress while you fill in the form. The admin area uses a necessary authentication and security cookie.

When you choose to pay, Stripe may use cookies or similar technologies for payment functionality, security and fraud prevention.

The Spotify player on the Listen page is not loaded automatically. Only if you click to load it does your browser connect to Spotify, which may then use cookies or similar technologies according to Spotify’s own policies.

Fonts are served directly from this website. We do not use Google Analytics, Google Tag Manager, Meta Pixel, TikTok Pixel, Hotjar, Microsoft Clarity, session replay, advertising networks or behavioural profiling. Newsletter consent is separate from, and has no effect on, cookies or browser storage.

Security

We use appropriate technical and organisational measures designed to protect personal data.

Your rights

Under GDPR, depending on the circumstances, you may have rights including access, rectification, erasure, restriction of processing, objection, data portability, and withdrawal of consent where processing is based on consent.

A deletion request does not necessarily require deletion of information that we are legally required to retain, for example certain accounting or tax records. Where appropriate, unnecessary personal data may instead be removed or minimised while required records are retained.

Requests can be sent to steerner@live.com. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).

Contact

Widing Group AB, trading as Steerner
Artillerigatan 81, 114 45 Stockholm, Sweden
steerner@live.com