In accordance with Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR"), this page describes the management methods of the website regarding the processing of personal data of users who consult it.

1. Data Controller

The Data Controller is Jazzamuri Band.
Controller contact email: jazzamuriband@gmail.com

2. Types of Data Collected

Among the Personal Data collected by this Website, independently or through third parties, are:

Data voluntarily provided by the user: First Name, Last Name, Email, Phone Number, Nationality, event details provided via the quote request form (contact form).
Usage Data: IP addresses, browser type, domain names of computers used, time of request, the method used to submit the request to the server, the size of the file obtained in response, and other parameters relating to the operating system and the user's computer environment.
Cookies and Usage Data (via third-party services): The site may integrate external services such as YouTube, Spotify, and Cloudflare Turnstile, which may process cookies, usage data, and technical information necessary for their operation. Any non-technical analytics or marketing tools will be listed in this policy only when they are actually active.

3. Legal Basis and Purposes of Processing

The Controller processes Personal Data relating to the User if one of the following conditions exists:

Execution of pre-contractual or contractual measures: To respond to quote requests, provide information on musical services, and manage subsequent booking phases (e.g., submission via contact form).
Consent: If non-technical analytics or marketing tools are enabled in the future, they will be used only on the basis of the user's consent, where required by applicable law.
Legitimate interest: To ensure site security, prevent fraud, or spam.

4. Methods of Processing and Storage

Processing is carried out using IT and/or telematics tools, with organizational methods and logic strictly related to the stated purposes. Data is processed at the Controller's operating offices and in any other place where the parties involved in the processing are located.

Retention period:

Data collected for quote requests not followed by a contract will be deleted after a maximum of 24 months.
Data relating to concluded contracts will be kept for 10 years in compliance with regulatory and fiscal obligations.
Data collected through third-party cookies follows the retention times defined by the respective privacy policies.

5. Details on Third-Party Services

We use the following third-party tools that may process personal data:

Analytics and marketing

We use Google Analytics 4, a web analytics service provided by Google LLC (USA) through Google Ireland Limited (EU). The cookies _ga and _ga_ (2-year duration) are set to collect aggregate, anonymous statistics about site usage. The IP address is anonymized (GA4 default). Data may be transferred to the USA based on Standard Contractual Clauses (SCC) and Data Privacy Framework (DPF). Legal basis: consent (GDPR Art. 6.1.a). You can revoke your consent at any time via "Cookie preferences" in the footer. More info: Google Privacy Policy and Browser Add-on Opt-out.

Security and anti-spam protection

Cloudflare Turnstile (Cloudflare, Inc.):
Service used in the booking form to reduce spam and automated abuse. It may process usage data, IP address, and browser or device technical information strictly necessary for verification.
Personal Data processed: Usage Data and technical information.
Privacy Policy: Cloudflare Privacy Policy.

Embedded content from external platforms

YouTube Video Widget (Google Ireland Limited):
The site may embed YouTube videos within some pages. Displaying the player may result in requests to Google servers and the processing of Cookies and Usage Data according to the provider's privacy policy.
Personal Data processed: Cookies and Usage Data.
Privacy Policy: Google Privacy Policy.

Spotify embed (Spotify AB):
On the Music page the site may embed Spotify players. Displaying the widget may result in requests to Spotify servers and the processing of Cookies and Usage Data according to the provider's privacy policy.
Personal Data processed: Cookies and Usage Data.
Privacy Policy: Spotify Privacy Policy.

Image hosting and CDN

Cloudinary (Cloudinary Ltd.):
CDN service used to host and deliver site images. To serve content to visitors, Cloudinary processes the IP address and browser technical information. It does not set cookies on the site domain.
Personal Data processed: IP address and Usage Data.
Privacy Policy: Cloudinary Privacy Policy.

6. Data Transfer Abroad

Data is primarily processed within the European Union. However, some providers (Google LLC for Analytics, Cloudinary Ltd. for image CDN) may transfer data to the United States or other non-EU countries. Such transfers are based on Standard Contractual Clauses (SCC) approved by the European Commission and, for Google, on the EU-US Data Privacy Framework (DPF), ensuring a level of protection equivalent to the European one.

7. User Rights

Users can exercise certain rights with reference to the Data processed by the Controller. In particular, the User has the right to:

Withdraw consent at any time.
Object to the processing of their Data.
Access their Data.
Verify and request rectification.
Obtain restriction of processing.
Obtain deletion or removal of their Personal Data.
Receive their Data or have it transferred to another controller (Data portability).
Lodge a complaint with the competent personal data protection supervisory authority or take legal action.

To exercise these rights, Users can direct a request to the Controller's email address: jazzamuriband@gmail.com. Requests are free of charge and processed by the Controller as quickly as possible, in any case within one month.