Privacy Policy
This privacy policy explains what happens with your personal data when you use this website (https://ecstaticmusic.nl/), download a pack, sign up for a live session, request coaching or send a message. Short version: I only collect what I need to deliver what you asked for, I never sell your data, and you can ask me to delete it at any time.
1. Who is responsible
Ecstatic (Wouter van de Ridder), trading as [business name]
[Street and number], [postal code] [city], The Netherlands
Chamber of Commerce (KvK): [number]
Email: info@ecstaticmusic.nl
I am the “controller” for the personal data described below.
2. What I collect, why, and on what legal basis
| When you… | I collect | Why | Legal basis | Kept for |
|---|---|---|---|---|
| Download a free pack | Name or DJ name, email address, which pack, the moment you accepted these terms | To send you the download links and, if you agreed, occasional mails about new releases and tools | Consent (art. 6(1)(a) GDPR) | Until you unsubscribe or ask me to delete it |
| Sign up for a live session | Name or DJ name, email address, which session | To send the Google Meet link, the livestream link and one reminder the day before | Performance of what you asked for (art. 6(1)(b)) and consent for the reminder | Up to 3 months after the session |
| Request coaching | Name, email address, link to your track, your message | To answer you and plan the session | Pre-contractual steps at your request (art. 6(1)(b)) | As long as needed to handle the request; invoicing data 7 years (Dutch tax law) |
| Use the contact form | Name, email address, your message | To reply | Legitimate interest (art. 6(1)(f)): answering people who contact me | Up to 1 year after the last contact |
| Visit the site | Your IP address, briefly, in server logs and in a spam/abuse limiter for the forms | Security and keeping the forms working | Legitimate interest (art. 6(1)(f)) | Rate-limit data: 10 minutes. Server logs: as set by the hosting provider, normally days to weeks |
Everything marked required in a form is genuinely needed for that purpose. Nothing else is collected.
3. Mailings
When you download a pack you agree that I may email you now and then about new music, tools and sessions. Every mail has a way to unsubscribe, and replying “unsubscribe” always works too. I do not buy or rent lists, and I do not send mail on behalf of others.
4. Who else sees your data
I use a small number of service providers (“processors”) that need some data to do their job. They only act on my instructions:
- Hosting: [hosting provider], where the website and its database run (EU).
- Email delivery: [SMTP / email provider], to send the mails described above.
- Google Meet (Google Ireland Ltd.) for live sessions. Google’s own privacy policy applies when you join a call.
- YouTube (Google Ireland Ltd.) for embedded DJ sets and livestreams. Embedded players may set cookies once you start playback.
- Spotify (Spotify AB) for the embedded player on the Music page, under Spotify’s privacy policy.
- SystemOne (booking software used by my agency) for the show agenda. That feed contains show data only, no visitor data.
Bookings are handled by The Bassline Agency; if you contact them, their privacy policy applies. I do not sell or trade personal data and I do not share it with anyone else unless the law requires it.
5. Transfers outside the EU
Google, YouTube and Spotify may process data outside the European Economic Area. These providers rely on the EU-US Data Privacy Framework and/or the European Commission’s standard contractual clauses.
6. Cookies
The site itself sets no tracking or advertising cookies and uses no analytics that identifies you. Embedded YouTube and Spotify players can set their own cookies once you interact with them. A “remember me” cookie may be set only if you log in to the site’s admin area.
7. Your rights
You can ask me at any time to see the data I hold about you, to correct it, to delete it, to limit its use, to receive it in a portable format, or to object to a use based on legitimate interest. Consent you gave (for example for mailings) can be withdrawn at any time; that does not affect what happened before. Mail info@ecstaticmusic.nl and I will respond within one month. If you think I handle your data wrongly, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
8. Security
The site runs over HTTPS, forms are protected against automated abuse, access to the admin area is password-protected and limited to me, and downloaded lists are stored only where needed. No method is 100% secure; if a breach ever affects your data I will inform you and the authorities as the law requires.
9. Children
This site is not aimed at children under 16. If you are under 16, ask a parent or guardian before leaving your details. If I learn that I hold data of a child without consent, I will delete it.
10. Changes
I may update this policy when the site or the law changes. The date at the top of this page tells you when it was last changed. Substantial changes to how I use your data will be announced on the site or by mail where appropriate.