Privacy policy

The data controller is Sandro Savino. For any privacy question or to exercise your rights, write to sandrosavinomusic@gmail.com.

• Browsing data: when you open a page, the hosting service automatically records some information in its technical logs, such as IP address, browser type, requested page, date and time. It is used only to run and protect the website. The site uses no analytics, advertising or profiling tools.
• Data you send me: if you use the “Request information” form, your name, email and/or phone number, the text of your message and the project it refers to are processed. The same applies if you email me directly. Please do not include unnecessary data in your message, especially data about health, opinions or other special categories.
• Anti-spam check: when you start filling in the form, Cloudflare Turnstile is activated; it analyses some technical characteristics of your browser and device to tell people from automated programs. To limit the number of submissions, your IP address is also kept in memory for about one minute.

• Replying to your request for information or for organising a performance, and possibly preparing a proposal: processing is necessary to act on your request (Art. 6(1)(b) GDPR).
• Keeping the website running and secure and protecting the form from spam and abuse: the controller's legitimate interest (Art. 6(1)(f) GDPR).
• Complying with legal obligations, for example tax obligations, if your request leads to a collaboration (Art. 6(1)(c) GDPR).

Name, message and at least one contact detail are needed to reply to you: without them the request cannot be sent. The checkbox in the form only confirms that you have read this policy: processing is not based on consent.

Your data is not used for newsletters or marketing, is not sold or disclosed, and is not subject to automated decision-making or profiling.

The website relies on a few providers, which process data only for the services listed. Google (Firebase), Cloudflare and Resend act as processors under their data processing agreements (Art. 28 GDPR).

• Google – Firebase Hosting: hosts the website and records browsing logs. Firebase privacy information
• Cloudflare: receives the form data and forwards it by email without storing it. It also runs the Turnstile anti-spam check, for which it also uses technical data as an independent controller to improve its security services. Turnstile privacy policy
• Resend: delivers the email with your request. Resend privacy policy
• Google – Gmail: the mailbox where I receive and keep messages.

If you play a video, your data is processed by YouTube (Google) as an independent controller: see “Cookies and external content”.

Some providers are based in the United States or may process data there. Google, Cloudflare and Resend participate in the EU-U.S. Data Privacy Framework, found adequate by the European Commission in its decision of 10 July 2023; their agreements also include the Standard Contractual Clauses approved by the Commission. Participation can be checked on the official Data Privacy Framework website.

• Messages received through the form or by email: for as long as needed to handle the request and any resulting collaboration, and in any case no longer than 24 months after the last contact, unless the law requires longer retention (for example 10 years for tax records).
• The form does not save messages in any archive or database: it only forwards them by email.
• Hosting and security technical logs: for short periods set by the providers.
• IP address used to limit submissions: about one minute.

The website sets no cookies of its own and uses no cookies or other tools for profiling, advertising or analytics. For this reason no consent banner is shown, as provided by the Italian Data Protection Authority's cookie guidelines of 10 June 2021.

• Fonts: they are served by the website itself, with no connection to Google Fonts.
• YouTube videos: until you press Play you only see a preview image stored on this website, with no connection to YouTube. Only after the click is the video loaded from YouTube in privacy-enhanced mode (youtube-nocookie.com), and Google may collect data and use cookies or similar technologies under its own privacy policy. Alternatively you can open the video directly on YouTube.
• Anti-spam check: Cloudflare Turnstile is activated only when you start filling in the form and uses only technical tools needed for security, which do not require consent.
• Social links: the links to Instagram, Facebook, YouTube and Spotify are plain links; those services process data only if you open them, under their own policies.

At any time you can request access to your data, rectification, erasure, restriction of processing and portability, and you can object to processing based on legitimate interest (Articles 15-22 GDPR). Just write to sandrosavinomusic@gmail.com: you will receive a reply within one month.

If you believe the processing breaches the law, you can lodge a complaint with the Italian Data Protection Authority (Garante) or with the supervisory authority of the country where you live or work.

This policy may be updated, for example if the services used by the website change. The date of the last update is shown at the top.