Privacy
What personal data this website processes, why, and what rights you have. Short version: very little.
Data controller
The controller of your personal data is:
- Ivan Ćurić
- Email: [email protected]
What we process, why and for how long
Emails to [email protected], including promo submissions from bands, labels and PR. Data: name, email address, band, label or company, the content of your message and its links. Purpose: to read and answer your message and to write about releases you send. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Legitimate interest: replying to people who get in touch and covering the releases they send. Retention: until we have answered your message and the conversation has ended, and at the latest 12 months after our last contact, unless it leads to a contract.
Visiting the website. Data: IP address, browser and device type, pages requested and the time of the request. Purpose: to deliver the website, its images and its posts to your browser and protect it from attacks. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Legitimate interest: running a secure and working website. Retention: only as long as needed for delivery and security, under the hosting provider's own retention rules.
Recipients
We do not sell your data. The following service providers process it on our behalf, only for the purposes above:
- Atekatu d.o.o., Croatia: building and maintaining the website and hosting its posts and images; location: EU
- Cloudflare, Inc.: website hosting and protection against attacks; location: EU and USA (global network)
Third party services
When you use the following features, the provider of that service also receives data as an independent controller:
- Google Ireland Ltd. (YouTube): video player in privacy-enhanced mode, loaded only after you press play; preview images come through this website, not from YouTube; location: EU and USA
- Bandcamp, Inc.: music player, loaded only after you press "Load the player"; location: USA
- Spotify AB: music player, loaded only after you press "Load the player"; location: EU and USA
Transfers outside the EU
Some of these providers also process data outside the European Economic Area. These transfers rely on:
- Cloudflare, Inc.: EU-U.S. Data Privacy Framework and Standard Contractual Clauses
- Google Ireland Ltd. (YouTube): EU-U.S. Data Privacy Framework
Links to other websites
Posts link to band pages, labels, Bandcamp, YouTube and other sites. Nothing is loaded from those sites until you click a link or start a player. After that, the privacy policy of that site applies.
Your rights
You have the right at any time to:
- access your personal data and receive a copy
- have inaccurate data corrected
- have your data erased
- restrict processing
- object to processing based on legitimate interest
- receive your data and have it transferred to another controller
- withdraw consent where processing is based on consent, without affecting processing before the withdrawal
You can send a request to [email protected].
We do not carry out automated decision-making or profiling.
You can lodge a complaint with the supervisory authority: Croatian Personal Data Protection Agency (AZOP), Ulica Metela Ožegovića 16, 10000 Zagreb, Croatia, [email protected].
Changes
This notice may change. The current version is always published on this page.
Last updated: 2026-11-01.