Privacy policy
1. controller
The controller of personal data on dffkt.com is Andrei Cristian Ghițan (private individual, Romania), the artist d¦ffkt. Contact: a direct message on Instagram ↗.
2. what is processed, why, and on what basis
- server logs — IP address, date and time, requested address, browser (user agent), referrer. Purpose: running and securing the site. Basis: legitimate interest (GDPR art. 6(1)(f)). Kept for about 6 weeks (weekly log rotation), then deleted.
- necessary cookies — your cookie choice, the session and the anti-forgery token (details on the cookie page). Basis: legitimate interest / strictly necessary (no consent needed under ePrivacy rules).
- analytics — Google Analytics 4: pages visited, approximate location, device and browser data, interaction events (for example a click on play or follow). Loaded only after you accept in the cookie banner. Basis: consent (art. 6(1)(a)), which you can withdraw at any time from cookies_.
- SoundCloud player — the player is loaded only when you press play. From then on, SoundCloud receives your IP address and browser data and may set its own cookies, as an independent controller under its own privacy policy. Plays are counted by SoundCloud.
- admin and integrations — the admin area and the MCP connector are used only by the operator; their logins and tokens concern only the operator.
The site has no user accounts, no comments, no newsletter and no forms for visitors. Nothing is sold here.
3. recipients
- hosting: Contabo GmbH (Germany, EU) — stores the site and the server logs;
- SoundCloud — when you use the player;
- Google Analytics 4 — only with your consent;
- authorities, only where the law requires it.
4. transfers outside the EU
The site itself is hosted in the EU. SoundCloud and Google may process data outside the EU (for example in the USA) under their own safeguards, such as the EU–US Data Privacy Framework or standard contractual clauses.
5. your rights
You have the right to access, rectify and erase your data, to restrict or object to processing, to data portability and to withdraw consent at any time (withdrawal does not affect earlier processing). Write via a direct message on Instagram ↗. You can also complain to the Romanian data protection authority, ANSPDCP — dataprotection.ro ↗.