Legal · Compliance

Privacy & Cookie Policy

In compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and relevant ePrivacy regulations.

Last updated: October 31, 2026 · Version 2.4

1. Data Controller (Titolare del Trattamento)

The Data Controller responsible for the processing of your personal data collected via this website (musicpromo.it) is:

Listen.to.it S.r.l.
Registered Office: Remanzacco (UD), Italy
VAT / P.IVA: IT04362230965
Contact Email: privacy@listen.to.it · Corporate Portal: www.listen.to.it

2. Categories of Personal Data Collected

We collect and process the following categories of information:

Browsing & Technical Data: IP addresses (anonymized), URI addresses of requested resources, timestamp of requests, HTTP status codes, browser user-agent, operating system details, and server access logs.
Data Provided Voluntarily: Information submitted through our contact forms, campaign submission forms, or DJ pool accreditation applications (including name, professional pseudonym, email address, radio/club residency, phone number, and social profile links).
Tastemaker & Promotional Feedback: When accredited DJs and radio hosts preview or download promotional tracks, we record rating scores, track preferences, play counts, and optional feedback comments to provide aggregate promotional reports to copyright owners and record labels.
Cookies and Identifiers: Technical session cookies, aggregated statistical identifiers, and optional marketing tags (detailed below).

3. Extended Cookie Policy (Informativa Estesa sui Cookie)

Cookies are small text files stored on your device when you browse websites. We categorize our cookies according to the Guidelines of the Italian Data Protection Authority (Garante Privacy) and the European Data Protection Board (EDPB):

Cookie Category	Purpose & Provider	Legal Basis	Retention
Strictly Necessary (Technical)	Core website operation, security, CSRF protection, session handling, and recording cookie consent preferences (e.g. `cookie_consent`).	Art. 6(1)(f) GDPR & Art. 122 Privacy Code (No consent required)	Session / 12 months
Aggregated Analytics	Google Analytics 4 (Google Ireland Limited) with IP anonymization / IP masking enabled. Used exclusively to assess aggregated traffic, pageviews, and technical performance without profiling individual users.	Legitimate Interest / User Consent (where applicable)	Up to 14 months
Marketing & Social Pixels	Meta Pixel (Meta Platforms Ireland Limited) for conversion tracking and campaign attribution of promoted music releases across Facebook and Instagram.	Art. 6(1)(a) GDPR (Explicit User Consent)	Up to 180 days
Third-Party Media Embeds	Embedded audio previews and player widgets from Spotify, Apple Music, Beatport, or YouTube (loaded strictly via privacy-enhanced modes).	Art. 6(1)(a) GDPR (Explicit User Consent)	Persistent

You can modify or withdraw your cookie preferences at any time by clicking the Cookie Preferences link in the footer.

4. Purposes of Processing & Legal Bases

Provision of Services (Art. 6.1.b GDPR): Managing promotional campaigns, evaluating DJ pool accreditation requests, delivering secure digital audio previews, and fulfilling contractual obligations.
Legal Compliance (Art. 6.1.c GDPR): Complying with tax, accounting, anti-fraud, and statutory obligations under Italian and European law.
Legitimate Interests (Art. 6.1.f GDPR): Maintaining network security, preventing abuse or unauthorized leakage of unreleased audio masters, and improving platform usability.
Consent (Art. 6.1.a GDPR): Delivering marketing communications, newsletter updates, and enabling non-essential tracking cookies.

5. Data Retention & Security Measures

Personal data is stored on secure dedicated servers located within the European Union (Germany/Italy). We implement robust technical and organizational security measures, including 256-bit TLS/HTTPS encryption, strict role-based access controls, firewalls, and cryptographic hashing. Data is retained only for the time strictly necessary to fulfill the purposes for which it was collected or to satisfy statutory retention periods (up to 10 years for fiscal/billing data).

6. Your Rights Under GDPR (Articles 15-22)

As a data subject, you have the right to:

Request confirmation of whether your personal data is being processed and obtain a copy (Right of Access).
Request rectification of inaccurate or incomplete personal data.
Request the erasure of your personal data (“Right to be Forgotten”) where permissible by law.
Request restriction of processing or object to processing based on legitimate interests.
Request data portability in a structured, machine-readable format.
Withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Lodge a complaint with a supervisory authority (in Italy: Garante per la Protezione dei Dati Personali — www.garanteprivacy.it).

To exercise any of these rights, please contact our Data Protection Office at privacy@listen.to.it. Requests are handled promptly and free of charge within 30 days.