Legal
Privacy & Cookie Policy
This policy explains how personal data is processed on filippobianchini.com (the “Site”), in accordance with Regulation (EU) 2016/679 (GDPR), the Italian Privacy Code (Legislative Decree 196/2003 as amended) and the guidelines of the Italian Data Protection Authority (Garante) on cookies.
Last updated: 6 November 2026
- Data controller
- What data we process and why
- Who processes the data for us
- Transfers outside the EU
- Cookies and similar technologies
- Your rights
- Security
- Minors
- Changes
1. Data controller
Filippo Bianchini
Email: filipposax1@gmail.com
No Data Protection Officer has been appointed, as it is not required.
2. What data we process and why
| Activity | Data | Purpose | Legal basis (GDPR) | How long we keep it |
|---|---|---|---|---|
| Browsing the Site | IP address, browser and device data, pages visited, date and time (server logs) | Delivering the Site, security, preventing abuse | Legitimate interest, art. 6(1)(f) | Server logs: up to 30 days, unless needed to investigate an incident |
| Writing to us (email or phone) | Name, email address, phone number, content of your message | Answering booking, concert and collaboration requests | Pre-contractual steps at your request, art. 6(1)(b); otherwise legitimate interest, art. 6(1)(f) | Up to 24 months after the last contact, unless a contract follows |
| Buying CDs in the online shop | Name, shipping and billing address, email, phone, order details, payment status, any notes you add (e.g. a dedication) | Processing and shipping your order, customer communication, after-sales | Performance of a contract, art. 6(1)(b) | For the time needed to complete the order and handle any claims |
| Accounting and tax obligations for orders | Order and payment data | Bookkeeping and tax compliance | Legal obligation, art. 6(1)(c) | 10 years (art. 2220 Italian Civil Code) |
| Order attribution (online shop) | How you reached the Site (direct visit, search engine, social network or other website, campaign parameters), device type, number of pages viewed in the session, saved with the order | Understanding which channels bring orders, in aggregate form | Consent, art. 6(1)(a) | Cookies: for the browsing session. Data saved with an order: as long as the order data |
| Statistics (Google Analytics) | Pseudonymous identifiers, device and browser data, pages visited, approximate location | Understanding how the Site is used, in aggregate form | Consent, art. 6(1)(a) | 2 months (Google Analytics retention setting) |
| Embedded content (YouTube, Spotify) and automatic translation | Data your browser sends to those services when they load | Showing videos and music, translating pages | Consent, art. 6(1)(a), given through the cookie banner or by pressing play / choosing a language | Set by each provider (see their policies) |
| Website backups | Copies of the Site database, which may include order and contact data | Restoring the Site after a fault or attack | Legitimate interest, art. 6(1)(f) | Rolling copies, kept up to 2 months |
Providing your data is voluntary. Without the data marked as required at checkout we cannot accept and ship an order.
Payments. Orders are paid only by bank transfer. The Site does not collect or store card or bank-account data: you make the transfer from your own bank to the account shown at the end of the order.
We do not use your data for automated decision-making or profiling, and we do not sell it. We will only send you marketing emails if you ask to receive them.
3. Who processes the data for us (recipients)
We share data only with service providers acting on our behalf as data processors, or as independent controllers for their own services, and only as far as needed:
- Hosting provider: hosts the Site and its database.
- Postal / courier services: name and address, only to deliver your order.
- Google (Google Ireland Ltd / Google LLC): Google Analytics (statistics, only with your consent), Gmail (email inbox), YouTube (videos, only with your consent or when you press play), Google Translate (only when you choose another language), Google Drive (backups).
- Spotify AB (Sweden): music players, only with your consent or when you press play.
- Meta Platforms (Instagram): the Instagram feed. Images are copied to and served from our server; your browser connects to Instagram only if you click on a post.
- Accountant / tax advisor: order data needed for tax obligations.
4. Transfers outside the European Union
Some providers (for example Google LLC and Meta Platforms Inc.) may process data in the United States. Such transfers rely on the European Commission’s adequacy decision for the EU-US Data Privacy Framework, where the provider is certified, or on the Standard Contractual Clauses approved by the Commission (art. 46 GDPR).
5. Cookies and similar technologies
Technical cookies always active
- Cookie-banner cookies (
CookieLawInfoConsent,cookielawinfo-checkbox-*,viewed_cookie_policy): remember your choices. 12 months. - Online-shop cookies (
woocommerce_cart_hash,woocommerce_items_in_cart,wp_woocommerce_session_*): keep your cart during your visit. Session, up to 2 days. - WordPress cookies (
wordpress_*,wp-settings-*): only for logged-in administrators.
Statistics cookies only with consent
- Google Analytics (
_ga,_ga_*): count visits and pages in aggregate form. Up to 2 years. - Order attribution (
sbjs_migrations,sbjs_current_add,sbjs_first_add,sbjs_current,sbjs_first,sbjs_udata,sbjs_session): set by the online shop (WooCommerce) to record how you reached the Site; if you place an order, this information is saved with it. Session cookies;sbjs_sessionexpires after 30 minutes of inactivity.
Third-party content only with consent or when you press play
- YouTube (served from youtube-nocookie.com where possible), Spotify and Google Translate may set their own cookies or similar technologies once loaded.
When you first visit the Site, a banner lets you accept all, reject all or choose by category. Closing the banner without choosing keeps only technical cookies. You can change your choice at any time from the link below, or delete cookies from your browser settings.
Third-party policies: Google · YouTube · Spotify · Meta / Instagram · WooCommerce (Automattic)
6. Your rights
You can ask us at any time, free of charge, to:
- access your data and receive a copy (art. 15);
- correct it (art. 16);
- delete it (art. 17), unless we must keep it by law;
- restrict its processing (art. 18);
- receive it in a portable format (art. 20);
- object to processing based on legitimate interest (art. 21);
- withdraw your consent at any time, without affecting what happened before (art. 7).
Write to filipposax1@gmail.com. We will reply within one month.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the authority of the EU country where you live or work.
7. Security
The Site uses an encrypted connection (HTTPS), access to the administration area is restricted, and the Site is backed up regularly. No system is completely secure, but we take reasonable measures to protect your data.
8. Minors
The Site is not aimed at children. Online orders are reserved for adults or must be placed with the consent of a parent or guardian.
9. Changes
We may update this policy, for example when we add new services. The date at the top always shows the latest version.