Privacy policy
Draft to be completed. This is the English version of the Italian privacy policy for Mastering+ clients: have it checked together with the Italian text and complete the parts in square brackets.
Data controller
Zero Crossing Records di S.P. — Italian VAT no. IT02847220163 — REA 327847 — [registered office address]. You can contact the data controller from your client area or by replying to any email we send you.
Data we collect
With the quote form on the Mastering+ page we collect your name, email, country and, if you give them, artist or band name, phone, VAT number or company tax ID, company name and website, address and notes, together with the services you choose. We use these details to prepare the quote as a PDF, send it to you by email and keep a copy.
If you create a client area account we collect your name or company name, artist name (if you give it), country, address, VAT number or company tax ID (if you buy as a business), phone, email and a password, which we store only in encrypted form. In your client area we also keep your quotes, the status of your orders, the audio files we produce, pro forma invoices, invoices and the documents you upload (signed quote, transfer receipt). To keep you logged in we use a technical session cookie, needed for the client area to work, and we record the date of your last login. We also remember the language you choose.
With Mastering+ we also keep the audio files you send us (stems, bounces, archives) or the links we download them from, and the masters we produce: we use them only for the work you request, we do not publish them and we do not pass them on to third parties. Your files stay on the server for as long as the work and revisions require, and you can ask us to delete them at any time.
Purposes and legal basis
- Sending you a quote and answering your requests (art. 6.1.b GDPR — steps taken before entering into a contract).
- Managing your client area account, orders, file delivery and accounting documents, and applying the discounts reserved for account holders (art. 6.1.b GDPR — performance of a contract and pre-contractual steps).
- Checking whether Italian VAT applies to you, including checking EU VAT numbers on VIES and verifying non-EU businesses (art. 6.1.c GDPR — legal obligation).
- Saving your contact in our client list on Mailchimp to manage communications about your quote (art. 6.1.b GDPR); you receive the newsletter with news and offers only if you ticked the box (art. 6.1.a GDPR — consent), and you can unsubscribe at any time from the link in every email.
- Meeting legal obligations, such as tax and accounting obligations, if the request becomes a contract (art. 6.1.c GDPR).
Retention
We keep your data for as long as needed to handle your request and, if a contract follows, for the periods required by law. [Specify the periods.] Client area accounts stay active until you ask us to delete them; accounts that are never confirmed are deleted automatically after about a week. If you delete your account, tax documents and quotes are kept for the periods required by law.
Third-party services
The site uses external services that may process browsing data or set their own cookies:
- Google Fonts, for the typefaces;
- Mailchimp (Intuit Inc., United States), where we save the contacts of people who request a quote; data is transferred to the United States with the safeguards required by the GDPR [check: EU-US Data Privacy Framework or standard contractual clauses];
- Aruba S.p.A. (Italy), which hosts the site and the client area data, and provides the email service we use to send quotes and updates;
- Fatture in Cloud (TeamSystem S.p.A., Italy), the service we use to issue pro forma invoices and invoices, to which we pass your billing details;
- VIES, the European Commission's service for checking VAT numbers: if you request a quote as a business from another EU country, we send it your VAT number to check that it is valid, as VAT rules require;
- PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg), if you choose to pay the deposit or the balance with PayPal from your client area: the payment takes place on PayPal's site, under its own privacy policy; we receive and keep only the result, the amount, the transaction ID and the email of the paying account.
Your rights
At any time you can ask for access to your data, its correction or deletion, or the restriction of processing, object to the processing and ask for data portability (articles 15–22 GDPR) by writing to the data controller. You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali) or with the authority of the EU country where you live.