Privacy policy

1. Data controller

music-press.com, published by Patrick Oliveira, sole proprietorship, registered office in Switzerland. Contact: contact@music-press.com.

2. Data collected

• Email address, provided at purchase or login: it is your identifier.
• Display language, so that we can write to you in your language.
• IP address, browser and approximate country at login: necessary for account security, device limitation and abuse detection.
• History of revealed contacts in your area, to redisplay them for you and make the service work.
• Messages that you send us via the contact page.

We collect neither name, nor postal address, nor telephone number. Banking data is processed exclusively by Stripe and never passes through our servers.

3. Purposes

• to provide the access purchased and send you your login codes, confirmations and invoices;
• to secure your account and prevent abusive uses (extraction, account sharing);
• to respond to your requests;
• to measure the effectiveness of our advertising, only if you accept it (see cookies).

We do not send any newsletter or promotional message without your consent, and we never sell your data.

4. Processors and recipients

• Stripe (payment);
• Resend (sending of transactional emails);
• Hetzner Online GmbH, Germany (hosting of the site and the database);
• Cloudflare (domain name management);
• Infomaniak, Switzerland (inbox for contact@music-press.com);
• Meta Platforms (advertising measurement via the Meta pixel), only with your consent.
• PostHog (audience measurement, servers in the European Union), if enabled: without your consent, no data is kept between two visits; with your consent, a visit identifier is stored.

4 bis. Transfers outside Switzerland and the European Union

Stripe, Cloudflare and Meta are American companies. Transfers to the United States rely on the EU-US Data Privacy Framework and, failing that, on the European Commission's standard contractual clauses, recognised by Switzerland. Resend, Hetzner and Infomaniak process the data in the European Union or in Switzerland.

5. Cookies and trackers

The site uses:

• a session cookie, strictly necessary to stay logged in (90 days maximum, 3 devices simultaneously);
• on the payment page, the technical cookies of Stripe, necessary for the security of the transaction;
• a cookie storing your language and your choice regarding trackers (6 months);
• the Meta pixel, an advertising tracker that is loaded only after your agreement in the banner provided for this purpose. It then sets the _fbp and _fbc cookies (90 days). You can refuse without this limiting access to the site, and withdraw your consent at any time via the "Manage cookies" link at the bottom of each page: the pixel's cookies are then deleted.

No other analytics or advertising tool is used.

6. Retention period

Account data is kept as long as access is active. Technical security logs (IP, blocks) are kept for a maximum of 12 months; after this period, the IP addresses associated with reveals, purchase requests and sign-ups are erased. The web server access logs are kept for 30 days. Login codes expire after 15 minutes and are deleted within 24 hours. After deletion of the account, the data is erased within 30 days, unless there is a legal obligation to retain it (invoicing).

7. Your rights

You may at any time request access to your data, its rectification, its erasure, the restriction of its processing or its portability, object to a processing operation, and withdraw a consent given (without effect on the lawfulness of the prior processing), by writing to contact@music-press.com. We respond within 30 days. You may also refer the matter to a supervisory authority: in Switzerland, the Swiss Federal Data Protection and Information Commissioner (FDPIC); in France, the CNIL (France); in the other countries of the European Union, the authority of your country of residence.

8. Security

Encrypted connection (HTTPS), passwordless authentication via temporary code, codes and session tokens stored as a hash, restricted access to the servers and daily backups.

9. Applicable law

This policy is governed by the Swiss Federal Act on Data Protection (FADP). For residents of the European Union, the GDPR also applies.