Last updated: 06 October 2025

1. Introduction This Privacy Policy explains how Spied Music (“we”, “us”, “our”) collects, uses, discloses and protects personal data when you visit https://spied-music.ch or interact with our services. We comply with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) where it applies.

2. Data controller Spied Music Website: https://spied-music.ch Contact email: (please add your contact email address) If you are located in the EU/EEA, the UK, or Switzerland and require a dedicated contact or data protection officer, please contact us at the email above.

3. Data we collect

• Comments: When visitors leave comments we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
• Gravatar: An anonymized string (hash) of your email may be provided to the Gravatar service to check for an associated avatar. Gravatar’s privacy policy: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public next to your comment.
• Media: If you upload images to the website, avoid embedding location data (EXIF GPS). Visitors can download images and extract embedded location data.
• Cookies and similar technologies: see section 6 below.
• Account For registered users (if any) we store profile information you provide (e.g., username, email, biographical data).
• Other Usage data, logs and other technical information collected automatically when you visit our site.

4. Legal bases for processing (where GDPR applies) We process your data under one or more of the following legal bases:

• Consent: where you have given consent (e.g., optional cookies, newsletter signup).
• Contractual necessity: to perform services you request (e.g., account management).
• Legitimate interests: to maintain site security, prevent spam and abuse, improve our website, and communicate with you about comments and services — balanced against your privacy rights.
• Legal compliance: to meet legal obligations (e.g., data retention for legal claims).

5. How we use your data

• To publish and moderate comments.
• To provide, maintain and improve the website and services.
• To detect and prevent spam and abuse.
• To respond to inquiries and requests (including password resets).
• For analytics and performance measurement.
• To comply with legal obligations.

6. Cookies and similar technologies We use cookies for the following purposes:

• Comment cookies: If you leave a comment you may opt in to saving your name, email and website in cookies for convenience. These cookies last for one year.
• Login cookies: If you visit our login page we set a temporary cookie to check whether your browser accepts cookies. When you log in we set cookies to save your login and screen display choices. Login cookies last two days; screen options cookies last one year. Selecting “Remember Me” keeps you logged in for two weeks. Logging out removes login cookies.
• Post edit cookie: If you edit or publish an article, an additional cookie storing the post ID is saved; it expires after 1 day.
• Analytics and performance cookies: may be used to measure site usage and improve performance (details provided in any cookie banner or settings). You can manage cookie preferences via your browser settings and any consent banner provided on the site. Blocking some cookies may affect site functionality.

7. Embedded content from other websites Articles on this site may include embedded content (e.g., videos, images, articles). Embedded content behaves as if you visited the other website directly. These sites may collect data about you, use cookies, embed tracking and monitor your interaction if you are logged in to those services.

8. Who we share your data with

• Service providers: We may share data with trusted third-party service providers who perform services on our behalf (hosting, analytics, email delivery, spam detection). They receive only the data necessary to perform their function and must process it in accordance with applicable law.
• Gravatar/Automattic for avatars.
• Spam detection services that may check comments through automated systems.
• Legal/Regulatory: We may disclose information to comply with legal obligations or to protect our rights, property or safety. If you request a password reset, your IP address will be included in the reset email.

9. International transfers Some third-party services we use may process data outside your country (including outside the EU/EEA). When we transfer personal data internationally we ensure appropriate safeguards are in place (e.g., standard contractual clauses, adequacy decisions) or rely on permitted legal grounds.

10. Data retention

• Comments and metaretained indefinitely to recognize and approve follow-up comments automatically unless you request deletion.
• Account retained while the account exists and thereafter as required for legal or legitimate business purposes.
• Other retained only as long as necessary for the purposes described or as required by law. If you want specific data deleted or retained for a limited time, contact us (see Section 2).

11. Your rights Depending on your jurisdiction, you may have rights including:

• Access: request a copy of personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of personal data (subject to exceptions for legal obligations).
• Restriction: request restriction of processing.
• Portability: receive a machine-readable copy of data you provided.
• Objection: object to processing based on legitimate interests.
• Withdraw consent: where processing is based on consent, you may withdraw it at any time. To exercise any right, contact us at the address in Section 2. We will respond in accordance with applicable law. You also have the right to lodge a complaint with a supervisory authority (e.g., the data protection authority in your country).

12. Security We implement reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration or disclosure. However, no internet transmission is completely secure; we cannot guarantee absolute security.

13. Changes to this policy We may update this Privacy Policy from time to time. When significant changes are made we will post a prominent notice on the site and update the “Last updated” date.

14. Automated decision-making We do not use automated decision-making or profiling that produces legal effects concerning you.

15. Where your data is sent / spam checks Visitor comments may be checked through an automated spam detection service. This may involve sending comment data (including IP addresses) to the spam detection provider.