4. PRIVACY & DATA PROTECTION POLICY (GDPR)

​

4.1 Data Controller and Ethical Commitment

The Data Controller is Bird Box Records S.r.l.s., located at Strada di Montevenere 10, 00018 Palombara Sabina (RM), Italy. In line with our "Analog Resistance" philosophy, we treat your data with the same artisanal care as our records. We are committed to processing your information with the utmost confidentiality, ensuring every process is focused solely on connecting the artist’s work with the listener.

​

4.2 Types of Data Collected and Purpose

We collect only the data strictly necessary for:

• Order and Shipping Management: Name, delivery address, phone number, and billing details, essential for shipping our physical media and fulfilling tax obligations.

• Digital Content Fulfillment: Your email address is used to provide download links for your purchased digital productions.

• Newsletter (Opt-in): Only with your explicit consent, we will use your email to update you on new limited editions and exclusive pre-orders..

​

4.3 Transaction Security and Payment Partners

Your security is our priority. Therefore:

• Credit Cards and Payment Circuits: We accept all major international circuits (Visa, Mastercard, American Express) processed through secure encrypted gateways such as Stripe and PayPal.

• Bank Transfers: When paying via bank transfer, your banking details are processed exclusively for order reconciliation and accounting purposes.

• Sensitive Data Protection: Bird Box Records does not store or have access to your sensitive credit card information. All financial data is handled directly by PCI-DSS certified payment providers.

• No Commercial Data Sale: We never sell or share your data with third parties for marketing purposes. Your data serves to connect people, not to feed algorithms.

 

4.4 Your Rights

Under EU Regulation 2016/679, you have the right to access, rectify, or request the permanent deletion of your data ("Right to be Forgotten") by writing to: sales@birdboxrecords.com.