Privacy policy
Last updated: 26 October 2026
This notice explains how we process the personal data of people who visit theclimaxshow.com or write to the band, under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
Data controller
Maurizio Murciato, on behalf of the band Climax. For any request about your data, write to [email protected].
What data we process
- Browsing data. When you visit the site, the servers that host it log technical data such as IP address, browser, pages requested and time. This is needed to run the site and keep it secure.
- Statistics. Only if you consent, Google Analytics 4 collects information about how the site is used (pages viewed, duration, device, approximate location) through cookies. Google Analytics 4 does not log or store the full IP address.
- Data you send us. If you write to [email protected], we process your email address, your name and what you write in the message, for example the details of a gig or an interview.
- Spotify player. Only if you turn it on, the embedded player loads content from Spotify’s servers, and Spotify processes your data under its own privacy policy.
Why we process it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Running the site and protecting it from abuse | Legitimate interest (Art. 6(1)(f) GDPR) |
| Measuring visits in aggregate form | Consent (Art. 6(1)(a) GDPR), which you can withdraw at any time |
| Replying to booking, press or information requests | Pre-contractual measures and legitimate interest (Art. 6(1)(b) and 6(1)(f) GDPR) |
| Showing the Spotify player | Consent (Art. 6(1)(a) GDPR) |
We do not use your data for advertising profiling and we do not sell it.
Who we share it with
To run the site and the email we rely on providers that process data on our behalf, as data processors:
- Cloudflare, Inc.: hosting of the site (Cloudflare Pages) and of the videos (Cloudflare R2), domain management and email forwarding.
- Google Ireland Ltd / Google LLC: Google Tag Manager and Google Analytics 4 (only with consent), and the Gmail inbox that receives the email.
- Sendinblue SAS (Brevo), France: sending replies from [email protected].
The Spotify player, if you turn it on, is run by Spotify AB as an independent controller: see its privacy policy.
The Instagram, Spotify and Bandcamp pages linked from the site are external services with their own policies: when you open them, their rules apply.
Transfers outside the European Union
Some providers (Cloudflare and Google) may process data in the United States. Both take part in the EU-U.S. Data Privacy Framework, which the European Commission has found adequate, and apply standard contractual clauses.
How long we keep it
- Browsing data: for the technically necessary time, according to the hosting provider’s logs.
- Google Analytics statistics: for the period set in the Google Analytics property, at most 14 months.
- Email: for as long as needed to handle the request and, if a collaboration follows, for the duration of that relationship. Then it is deleted.
Your rights
At any time you can ask to access, correct or delete your data, restrict its processing, object to it, receive it in a portable format and withdraw your consent, without affecting processing already carried out (Articles 15–22 GDPR). Write to [email protected].
If you believe the processing breaks the law, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali, or with the authority in your country.
Cookies
For the cookies used by the site and to change your choices, read the cookie policy.
Changes
We may update this notice. The date at the top shows the latest version.
This is a translation. If it differs from the Italian version, the Italian version prevails.