<div lang="en">
    <h2>Data Controller</h2>

    <p>
        The Data Controller is:<br>
        <strong>Dino Del Moro</strong><br>
        Via Monteverdi 2<br>
        Sant'Egidio alla Vibrata (TE), Italy<br>
        VAT No. IT02124530672<br>
        E-mail: <a href="mailto:dino@dinodelmoro.com">dino@dinodelmoro.com</a>
    </p>

    <h2>Data processed</h2>

    <p>
        Browsing xeur.it may involve the automatic processing of technical data necessary for the operation of the website and internet services, including the IP address, browser type, operating system, date and time of the request, and other technical information relating to the connection.
    </p>

    <p>
        This information may be recorded in the technical logs of the server and hosting infrastructure.
    </p>

    <h2>Purposes and legal basis</h2>

    <p>Technical data are processed solely to:</p>

    <ul>
        <li>ensure the correct operation of the website;</li>
        <li>protect the security of the website and its infrastructure;</li>
        <li>prevent misuse and unauthorised access;</li>
        <li>carry out technical and maintenance activities;</li>
        <li>comply with any applicable legal obligations.</li>
    </ul>

    <p>
        Processing is based on the Data Controller's legitimate interest in ensuring the correct and secure operation of the website and, where applicable, on compliance with legal obligations.
    </p>

    <h2>Cookies and tracking technologies</h2>

    <p>
        xeur.it does not use profiling cookies, advertising systems, behavioural tracking technologies, or third-party analytics services.
    </p>

    <p>
        The website's restricted administration area uses only a technical session cookie required for authentication and panel security. This cookie is not used for profiling or advertising and is deleted when the session is closed or when it expires.
    </p>

    <p>
        If non-essential cookies or other non-technical tracking technologies are introduced in the future, this Privacy Policy will be updated and, where required by applicable law, the user's prior consent will be requested.
    </p>

    <h2>Fonts and resources</h2>

    <p>
        The fonts and graphic resources used by the website are hosted directly on the xeur.it server or embedded in its pages and do not require connections to external services when loaded.
    </p>

    <h2>Links to external services</h2>

    <p>
        The website contains links to external services, including Spotify, Apple Music, iTunes Store, YouTube Music, Amazon Music, Deezer, TIDAL, Beatport, SoundCloud, and artists' social media profiles.
    </p>

    <p>
        Except for any players embedded in the Radio Show section, merely loading xeur.it does not embed content from these platforms. In all other cases, a connection to an external service occurs only after the user chooses to follow the relevant link.
    </p>

    <p>
        After visiting an external service, personal data are processed in accordance with that service's own privacy policy.
    </p>

    <p>
        The Radio Show section may, when configured, contain embedded players provided by external platforms such as YouTube, SoundCloud, or Mixcloud. Where an embedded player is present, the browser may establish a connection with the relevant provider and transmit technical data required to load the content. Any cookies or other identifiers used by those platforms are governed by their respective privacy policies.
    </p>

    <h2>E-mail communications</h2>

    <p>
        The Contact page provides a dedicated address for submitting proposals, new releases, and music promotional material. Privacy-related requests may be sent directly to the Data Controller using the contact details provided in this Privacy Policy.
    </p>

    <p>
        Personal data voluntarily provided by e-mail are used solely to manage the communication received and any related activities. Processing is necessary to respond to the data subject's request or, where applicable, to take pre-contractual steps requested by the data subject.
    </p>

    <h2>Technical providers and recipients of personal data</h2>

    <p>
        Technical browsing data may be processed, to the extent necessary to provide the service, by <strong>Virtual Solution S.r.l. (Server.it)</strong>, the provider of the website's hosting infrastructure.
    </p>

    <p>
        The xeur.it domain also uses <strong>Cloudflare, Inc.</strong> as its authoritative DNS provider. Using Cloudflare nameservers alone does not, by itself, mean that the website's HTTP/HTTPS traffic is routed through Cloudflare's network.
    </p>

    <p>
        If one or more web records are configured in proxied mode, Cloudflare also acts as a reverse proxy and traffic security/delivery provider and may process technical connection data such as IP addresses, request headers, and information required to protect and route traffic.
    </p>

    <p>
        In relation to Cloudflare services, any transfers of personal data outside the European Economic Area are handled by the provider using the mechanisms and safeguards required by applicable law, including, where relevant, adequacy decisions and standard contractual clauses.
    </p>

    <p>
        Personal data are not sold, disclosed to the public, or used by the Data Controller for advertising or profiling purposes.
    </p>

    <h2>Data retention</h2>

    <p>
        Technical data and server logs are retained for the period established by the configuration and terms of the hosting service and, in any event, only for as long as necessary to ensure security, technical diagnostics, and the correct operation of the website, unless a longer period is required by law or to investigate potential misuse.
    </p>

    <p>
        Data voluntarily submitted by e-mail are retained for as long as necessary to manage the request and any related activities, subject to any applicable legal obligations.
    </p>

    <h2>Data subject rights</h2>

    <p>
        In the circumstances provided for by Regulation (EU) 2016/679, data subjects may exercise their rights under applicable law, including access, rectification, erasure, restriction of processing, objection, and data portability, where applicable.
    </p>

    <p>
        Requests may be sent to <a href="mailto:dino@dinodelmoro.com">dino@dinodelmoro.com</a>.
    </p>

    <p>
        Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or with another competent supervisory authority.
    </p>

    <h2>Changes to this Privacy Policy</h2>

    <p>
        This Privacy Policy may be updated following changes to the website, the services used, or applicable law.
    </p>

    <p>Last updated: 4 October 2026.</p>
</div>