Privacy policy

This is a personal website. It collects as little as possible: no cookies, no profiling, no ads. Below is, in plain words, what happens to your data.

Who is responsible

The data controller is Victor Beda. For any question or request about your data, write to vic.b@hotmail.it.

When you visit the site

Hosting. The site is hosted by Vercel Inc. (USA). To deliver the pages, Vercel's servers receive technical data such as your IP address, browser and the page you request, and may keep it briefly in logs, including for security. Legal basis: legitimate interest in running the site securely (Art. 6(1)(f) GDPR).

Statistics. I use Vercel Web Analytics and Cloudflare Web Analytics (Cloudflare Inc., USA). Both work without cookies and only show me aggregate data, such as the number of visits and the most read pages: I can't identify you. Legal basis: legitimate interest in understanding how the site is used (Art. 6(1)(f) GDPR).

Visit counter. The "You are visitor" box on the home page counts each visitor once a day. Your IP and browser are combined with a random key that changes every day into an irreversible fingerprint (hash). The fingerprint and the key are deleted at midnight; the IP is never stored. Only the total number remains. The data is hosted by Upstash in Frankfurt (EU).

Cover art and fonts. Record, book and playlist covers and the typefaces are served directly by vctrbd.com: your browser doesn't contact Google, Tidal, Discogs, Hardcover or Last.fm.

If you sign the guestbook

What I collect. Name, message and date; optionally your website and your email. Legal basis: your consent, given by ticking the box on the form (Art. 6(1)(a) GDPR), which you can withdraw at any time.

What gets published. Name, website (if given), message, date and message number, only after I approve it. Your email is never published.

Moderation. When you send a message I get a notification on Telegram (Telegram Messenger Inc., outside the EU) with the text and, if you gave it, your email, so I can approve it and reply. The email is not stored in the site's database: it only exists in that notification, in my Telegram chat. If the message isn't approved the notification is erased; otherwise I'll delete it if you ask.

Spam protection. The "I'm not a robot" check (ALTCHA) runs on this site's server, with no external services and no cookies. To limit messages to 3 per day I use the same daily fingerprint as the visit counter, deleted at midnight.

How long. Published messages stay until you ask me to remove them or I remove them. Messages I don't approve are deleted right away.

Content from other services

On the About page you can open playlists in Tidal's player. The player only loads when you click a playlist: from then on Tidal receives your IP and may use its own cookies, under its privacy policy. The same goes for links to other sites, such as LinkedIn or Instagram.

What your browser stores

The site uses no cookies. If you change the accessibility widget settings (theme, text size and similar), your preferences are saved only in your browser so they're remembered next time, and are never sent to me or anyone else.

Transfers outside the EU

Vercel, Cloudflare and Telegram may process data outside the European Union. When that happens, the transfer relies on the safeguards provided by the GDPR, such as the EU–US Data Privacy Framework or standard contractual clauses.

Your rights

You can ask me at any time to access, correct or delete your data, restrict or object to its use, and withdraw the consent you gave for the guestbook. Just email vic.b@hotmail.it. You also have the right to lodge a complaint with a data protection authority, in Italy the Garante per la protezione dei dati personali.

Changes

If I change how the site handles data, I'll update this page and the date at the top.