Privacy Policy

Last updated: 29 October 2026

This policy explains what personal data we collect through amprenta.rocks, why we collect it, how long we keep it and what your rights are. We have kept it as simple as possible.

1. Who is responsible for your data

The data controller is Matei Damian-Ulmu, as legal representative of the band Amprenta.

• Email: amprentarockband@gmail.com
• Phone: +40 730 917 310

For any question about your data, write to us at the address above.

2. What data we collect

The booking form

When you send us a booking request, we receive the details you fill in: your name or the name of your organisation, email address, phone number (optional), event type, preferred date, city or venue, and your message.

Technical data

To protect the form from spam, the IP address a request is sent from is used temporarily, in hashed form, to limit the number of messages sent per hour. This data is deleted automatically after one hour at most.

Like any website, the server hosting amprenta.rocks may automatically log technical data about visits (IP address, browser type, pages visited) for security and operation.

Cookies

This site does not use marketing or tracking cookies. WordPress login cookies are used only by band members when they sign in to the Backstage area.

YouTube videos and the Spotify player load only after you press play. Only from that moment can YouTube (Google) or Spotify set their own cookies and process data under their own policies. YouTube videos use privacy-enhanced mode (youtube-nocookie.com).

3. Why we use your data and on what legal basis

• To reply to your booking request and discuss the details of a possible concert. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• For site security and spam protection. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).

We do not use your data for marketing, and we never sell or rent it to anyone.

4. Who has access to your data

• Google (Gmail): booking requests are delivered to the band’s mailbox, hosted by Google. Google may process data outside the European Economic Area, including in the United States, under the safeguards of the EU–US Data Privacy Framework.
• Our hosting provider, which stores the website and its data.
• Band members, only as far as needed to reply to your request.

5. How long we keep your data

We keep booking correspondence for at most 2 years after the last message exchanged, then delete it. If a request turns into a contract, the data may be kept for as long as the law requires (for example, for tax purposes).

6. Your rights

Under Regulation (EU) 2016/679 (GDPR), you have the right:

• to know what data we hold about you (right of access);
• to have incorrect data corrected (right to rectification);
• to have your data deleted (right to erasure);
• to restrict processing;
• to receive your data in a structured format (right to data portability);
• to object to processing based on legitimate interest.

To exercise any of these rights, email us at amprentarockband@gmail.com. We reply within 30 days.

If you are unhappy with how we handle your data, you can lodge a complaint with the Romanian data protection authority, Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28–30, sector 1, Bucharest, www.dataprotection.ro, or with the data protection authority in your own country.

7. Minors

The booking form is meant for event organisers. We do not knowingly collect data from people under 16.

8. Changes

We may update this policy when the way the site works changes. The date of the latest update is shown at the top of this page.