Privacy policy
Draft – to be reviewed before the public launch.
The controller for data processing on Music Pages is [Name and address to follow]. Contact: [Name and address to follow].
What data we process
- Account: email address, password (stored only as a secure hash), language, when you signed up and last signed in, and – if you came by invitation – who invited you.
- Your website: everything you enter or upload in the editor (texts, gigs, projects, photos, links, contact details, imprint).
- Server logs: technically necessary data such as IP address, time and page requested, to deliver the platform and protect it from abuse. They are deleted after a short time.
- Reports: if you report a website, we store your message and – if given – your email address.
The purpose is running Music Pages (Art. 6(1)(b) GDPR: your account and your website) and protecting it from abuse (Art. 6(1)(f) GDPR).
Cookies
We only set cookies needed for signing in and for your settings (for example, which of your sites you are editing). There are no analytics, advertising or tracking cookies. Musicians' published websites set no cookies at all.
Who helps us
- Hosting: Hetzner Online GmbH, Germany. All data is stored on servers in Germany, including backups.
- Email delivery: Brevo (Sendinblue SAS), France, sends sign-in links and notifications.
Data processing agreements are in place with both. No data is processed outside the EU.
How long
As long as your account exists. If you want your account deleted, write to us and we delete the account and its websites. Backups are overwritten when their retention period ends.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with the Austrian data protection authority (Datenschutzbehörde). Please send requests to [Name and address to follow].