Privacy policy

Who is responsible

DEEPSYSTEM is responsible for the personal information handled through this website. To contact us about privacy, use the contact form and put “Privacy request” in the subject. Include enough information to explain your request; please do not send card details, passwords or identity documents in an initial message.

Information we use and why

Enquiries and support

The contact form asks for your name, email address, subject and message. We use these to answer your enquiry, discuss a request or help with a download. The basis is our legitimate interest in responding to correspondence, or taking steps you request before a contract and providing support for a purchase.

The form uses Google reCAPTCHA to help prevent spam. A short-lived anti-abuse counter derived from the request IP address uses a one-hour expiry setting. Connection information, such as IP address, browser details, requested pages and time, is also processed by the website and its infrastructure to deliver and secure the service. This supports our legitimate interest in preventing abuse and maintaining a working website.

Accounts, orders and digital downloads

When you create or use an account or buy music, we process the account and login information, name, email address, country and any billing address details requested by the chosen payment method. We also keep the items ordered, order and transaction references, payment status, download access and the digital-delivery acknowledgement recorded at checkout. These are used to provide the account, complete the purchase and supply downloads. Required transaction records are also kept to meet applicable accounting, tax and consumer-protection obligations.

Payment is offered through PayPal’s card and wallet services. Card entry uses PayPal-hosted fields. PayPal processes the payment details, and the website receives billing, transaction and status information needed to manage the order. PayPal also handles information for its own payment, fraud-prevention and legal purposes under its privacy statement.

If you choose Google sign-in, the information you authorise in Google’s sign-in flow is used to connect or create your website account. Using this option is voluntary; Google’s own privacy information also applies to its service.

Release-update emails

If you subscribe, your email address and subscription preferences are used to send DEEPSYSTEM release updates through the MailPoet form and mailing service at mail.deepsystem.ro. The basis for these marketing emails is your consent. You can unsubscribe using the link in an email or ask us through the contact form. Withdrawing consent does not affect processing that was lawful before withdrawal.

Newsletter open and link-click measurement requires a separate opt-in. If you allow it, MailPoet can record those interactions to help us understand interest in the updates. This measurement is off until you allow it, including for existing subscribers; MailPoet’s cookie-based engagement tracking is disabled. You can change your email-tracking choice through your subscription preferences or contact us for help.

Optional analytics and video players

If you allow Audience analytics in Privacy choices, Google Analytics can receive page views, browser/device information and clicks on music-service and social-profile links. We use this to understand visits and interest in the music. Optional analytics are based on your consent.

Embedded YouTube players connect to YouTube after you allow YouTube players and activate a video. The player uses YouTube’s privacy-enhanced embed host, but YouTube can still receive technical and usage information when it loads. Opening an external music or social link takes you to that service, where its own privacy policy applies.

Saved releases

The Saved feature keeps release identifiers in browser storage on the device where you save them. It requests public release information to display your collection. This collection is device-local; the feature does not create a server-side saved-music list for your account. You can remove a saved release or clear the site’s browser data.

Services that receive information

We use website hosting, security and email-delivery services to run the site and handle correspondence. Information needed for a requested feature is also handled by PayPal for payments, Google for sign-in and reCAPTCHA, MailPoet for release-update subscriptions, and Google Analytics or YouTube when you choose those optional features. Information may also need to be disclosed to authorities, advisers or other recipients where required by law or necessary to establish, exercise or defend a legal claim.

Google, PayPal and Automattic operate internationally and may process information in the United States and other countries outside the European Economic Area. Google describes adequacy decisions and standard contractual clauses in its data-transfer frameworks. PayPal describes contractual and other transfer safeguards in its privacy statement; Automattic describes European Commission-approved contractual arrangements. These are the providers’ published arrangements for their services, rather than a claim that every transfer uses the same mechanism. Contact us for further information about the recipients and safeguards relevant to your information.

• Google privacy information, including YouTube and reCAPTCHA
• PayPal privacy information
• MailPoet / Automattic privacy information

Cookies and your choices

Necessary cookies and session features support sign-in, security, the shopping cart and checkout. Browser storage also keeps your privacy choices and any releases you save. Saved releases and choices remain on that browser until changed or cleared.

Use Privacy choices in the footer to review or change optional analytics, advertising-related permissions and YouTube players. Optional choices start off unless you choose otherwise. Withdrawing an optional choice stops future use governed by that choice; it does not automatically remove information already held by a provider. Your browser also offers controls to clear or block storage, although blocking necessary storage can stop account or checkout features working. See the cookie information page for related information.

How long information stays

We retain information for the purpose for which it was collected and for applicable legal, accounting or claims requirements. The relevant criteria are:

• Enquiries: the time needed to respond, handle follow-up and keep a record where a customer issue or claim remains relevant.
• Subscriptions: while you remain subscribed, with any minimal suppression information needed to honour an unsubscribe request.
• Accounts and orders: the account and download service you request, and any period required for transaction, accounting or legal records. Closing an account does not necessarily require deletion of records that must be retained by law.
• Security information: the time needed to investigate and prevent abuse; the contact form’s short-lived rate-limit counter is configured to expire after one hour.
• Device storage: until you remove saved releases, change choices or clear the site’s browser data.

Provider-side information is also subject to the relevant provider’s settings and retention rules. Contact us if you need the retention information that applies to a particular request or record.

Your privacy rights

Under applicable data-protection law, you may have rights to access your information, correct it, request erasure or restriction, object to processing, and receive information in a portable format where the conditions for that right are met. You can withdraw consent for consent-based processing. Where applicable, you can also request human review of a decision based solely on automated processing that produces legal or similarly significant effects. These rights can be subject to legal conditions and record-retention obligations.

Contact, account and payment information marked as required is needed to provide the feature you request. If you do not provide it, we may be unable to answer, create the account or complete the purchase. You can browse the public music pages without subscribing or buying a download.

Spam and payment services use automated security checks. If you believe a legitimate enquiry or order has been blocked, contact us so the issue can be reviewed. General information about your rights is available from the European Commission.

Requests and complaints

Send a request through the DEEPSYSTEM contact form with “Privacy request” in the subject. We may ask for proportionate information to confirm identity before disclosing or changing personal information. Requests are handled without undue delay and normally within one month; where a lawful extension is needed because of complexity or number of requests, we will explain it within that period.

You can also complain to a data-protection supervisory authority, including the authority in the EU country where you live or work or where the alleged infringement occurred. In Romania, you can use the ANSPDCP complaints procedure.

Changes to this policy

We update this page when the website’s services or data handling change. The date above identifies this revision. Where a change requires new consent or a specific notice, that requirement applies separately.