Privacy Notice
No noise. Only announcements.
Last updated: 1 August 2026
This notice explains what personal data we collect on kirliancamera.com, why, and what rights you have. It is written to be read by people who like music, not by lawyers. Where a specific law applies, we name it.
Who we are
The controller of your data is:
Division K-Pax di Elena Fossi, a sole proprietorship (impresa individuale) under Italian law, with registered seat in Parma (PR), Italy — VAT no. IT02830520348 — represented by its holder, Elena Fossi.
Registered address: Piazza delle Terramare 5, 43126 Parma (PR), Italy.
You can reach us about privacy at privacy@kirliancamera.com.
Our full identification details are on our Legal Notice / Impressum page.
What this notice covers — and what it doesn't
This site does not sell anything and does not process orders or payments. Our music and merchandise are sold on Bandcamp, on separate accounts. When you buy there, Bandcamp is the controller of your purchase data under its own privacy policy — this notice does not cover it.
The only thing we collect on this site is the announcement list.
The announcement list
If you sign up, we send you occasional announcements: live dates and record releases. Nothing else.
What you give us: your name, your country, and your email address.
How sign-up works (double opt-in): when you submit the form, we create a pending entry and send you a confirmation email with a link. The link expires after 48 hours. Only when you click it do we confirm your subscription and send a welcome message. If you never confirm, we delete the pending entry after 7 days.
What we store for each subscriber: name, country, email, the page or element you signed up from, the IP address at the moment you signed up, the date and time, a confirmation token and its expiry, and flags recording whether the confirmation and welcome message happened.
Why the IP address: we keep it as part of the record that proves you consented. See How long we keep your data.
Legal basis: your consent (Article 6(1)(a) GDPR). You can withdraw it at any time — see Your rights.
Keeping the list clean and safe
To stop bots and abuse, the sign-up form uses a hidden anti-bot field, checks that the email is well-formed, and limits sign-ups to 6 attempts per 10 minutes from the same IP address. This briefly processes your IP address for security (Article 6(1)(f) GDPR — our legitimate interest in preventing abuse).
Server logs
Our web server records standard technical logs, including visitors' IP addresses, for security and to keep the site running (Article 6(1)(f) GDPR). We keep these logs for 7 days, unless we need to keep specific entries longer to investigate a security incident.
Where your data lives, and who can access it
- The website runs on a dedicated server (VPS) hosted by OVH, in a data centre in France (EU). We administer the server ourselves.
- Your subscriber details are stored in a file on that same server — we do not use any third-party mailing service.
- Confirmation and announcement emails are sent through Aruba S.p.A. (Italy, EU), our email provider.
OVH and Aruba act as our processors under Article 28 GDPR. Your data stays within the EU.
Cookies, fonts and local storage
We do not use cookies. No analytics, no pixels, no tag managers, no tracking of any kind.
Fonts: the site serves its fonts from our own server. No fonts are loaded from Google or any other third party, so no information about you is sent to them.
Local storage: your browser stores two small pieces of information on your device only, for convenience:
- your scroll position when you switch language, and
- whether you have already subscribed, so we don't show you the invitation again.
This information never leaves your device and is not used to track you. This is why there is no cookie banner. (Under §25 TDDDG in Germany and Article 122 of the Italian Privacy Code, this functional local storage is covered by this notice.)
Bandcamp "follow" button: the button loads only if you click it (click-to-load). Before you click, your browser makes no request to Bandcamp and no third-party cookie is set. If you click, Bandcamp loads its content and its own privacy policy applies.
How long we keep your data
- Your subscription record (name, country, email): for as long as you stay subscribed. If you unsubscribe, we delete it within 30 days.
- Proof of your consent (sign-up and confirmation timestamps, source, confirmation token): for the duration of your subscription plus 3 years, so we can answer any challenge about whether you consented.
- The IP address collected at sign-up: kept as part of that proof for the duration of your subscription plus 1 year, after which the address is shortened so it no longer points to a specific connection.
- Server logs: 7 days (see above).
- Backups: our host (OVH) makes one system backup a day and keeps it for 24 hours on a rolling basis before overwriting it. Backups exist only for disaster recovery, never for everyday use.
Your rights
Under the GDPR you can ask us to:
- access the data we hold about you,
- correct it,
- erase it,
- restrict or object to its processing,
- receive it in a portable format, and
- withdraw your consent at any time — this is as easy as giving it: use the unsubscribe link in every email or write to us.
Withdrawing consent does not affect processing that already happened.
To exercise any right, write to privacy@kirliancamera.com. We reply within one month.
Complaints: you can complain to the Italian supervisory authority, the Garante per la protezione dei dati personali (garanteprivacy.it). If you live in another EU country, you may also complain to your local data protection authority.
Age
This list is for people aged 16 or over. By subscribing you confirm you are at least 16. If you are younger and have subscribed, ask us and we will remove you.
Changes to this notice
If we change how we handle your data, we update this page and change the date at the top. If a change is significant, we will say so in an announcement.
Division K-Pax di Elena Fossi — VAT IT02830520348 — Piazza delle Terramare 5, 43126 Parma (PR), Italy — privacy@kirliancamera.com