Privacy Policy (EU)

1. Data Controller

The data controller is Noise Symphony S.r.l., with registered office in Rome. Contact email: [email protected]. The controller is responsible for processing personal data collected through the website www.noisesymphony.com and the Indieffusione platform.

2. Types of Data Collected

During use of the platform, the following data may be collected: identifying data (first name, last name, artist name, email, social media contacts or website), data related to uploaded content (tracks, images, texts, artistic descriptions), technical browsing data (IP address, browser type, operating system, cookies), and statistical platform usage information (in aggregated and anonymous form).

3. Purposes of Processing

Data is processed to enable account registration and management, provide editorial and promotional services, send communications relating to opportunities or events promoted by Indieffusione, fulfil legal obligations, and improve service quality.

4. Legal Basis for Processing

Processing is based on the performance of the platform membership contract (Art. 6(1)(b) GDPR), the user’s express consent for promotional activities (Art. 6(1)(a) GDPR), and compliance with legal obligations (Art. 6(1)(c) GDPR).

5. Processing Methods

Data is processed in digital form and, where necessary, in paper form, with appropriate technical and organisational measures to ensure its security and confidentiality. Access is permitted only to authorised Noise Symphony and Indieffusione staff and to technical partners bound to the service.

6. Data Retention

Data is retained for the time necessary to provide services or fulfil legal obligations. Uploaded content remains associated with the account as long as the artist maintains an active subscription. Upon cancellation, data will be removed or anonymised within 30 days.

7. Data Communication and Disclosure

Data will not be transferred or sold to third parties. It may be shared with technical service providers, authorised editorial partners, or competent authorities, only within the limits provided by law and with the artist’s prior authorisation.

8. Data Subject Rights

Users may exercise the rights provided under Articles 15–22 of the GDPR: access, rectification, erasure, restriction, objection, portability, and withdrawal of consent. Requests should be sent to [email protected] and will be fulfilled within 30 days.

9. Cookies and Tracking Tools

The website uses technical cookies and, with prior consent, analytical and third-party cookies. For more information or to change your preferences, please visit the ‘Cookie Management’ section on the dedicated page.

10. Minors

Use of the platform is reserved for users aged 16 or over. Registrations by minors must be accompanied by parental or legal guardian consent.

11. Updates

This policy may be updated periodically. The most recent version will always be available at www.noisesymphony.com/en/privacy-policy-eu/. Last updated: November 2025.

12. International Data Transfers

Some personal data may be processed through services located outside the European Union, in particular through platforms such as Google Analytics and Brevo (analytics and communication services). In such cases, data transfers comply with Articles 44 et seq. of Regulation (EU) 2016/679 (GDPR), on the basis of European Commission adequacy decisions or Standard Contractual Clauses that ensure an adequate level of protection.

13. Complaints to the Supervisory Authority

Users have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali), headquartered in Rome, Piazza Venezia 11 – www.garanteprivacy.it, if they believe that the processing of their personal data violates the provisions of Regulation (EU) 2016/679 (GDPR).

Last updated: November 2025 (full version with additions).