Privacy policy

Last updated: July 30, 2026

This page explains what personal data is collected on this site, why, for how long, and how to exercise your rights. It is written in line with Regulation (EU) 2016/679 (GDPR) and the guidance of the Belgian Data Protection Authority (APD/GBA).

1. Data controller

The controller for data collected on this site is the operator identified on the Legal notice page. Contact: booking@winz.fr.

2. Data collected and purposes

Purchasing a track/EP/album: email address and payment status, solely to deliver the purchased file (a time-limited secure download link) and handle order follow-up. Legal basis: contract performance (GDPR art. 6.1.b).

Newsletter signup: email address and, if provided, first name, solely to send release announcements. Legal basis: consent (GDPR art. 6.1.a), given by clicking "Join". Every email includes an immediate unsubscribe link.

Contact form: name, email, and message, solely to reply to the request. Legal basis: consent / legitimate interest in responding to an inquiry (GDPR art. 6.1.a/f).

Cookies and audience measurement: see section 5 below.

No other data (postal address, payment details, ID documents) is collected or stored by this site: payments are processed directly by Stripe, which acts as an independent processor for banking data.

3. Retention period

Orders: kept as long as necessary for business and accounting purposes (legal retention obligations for commercial records), then archived or deleted.

Newsletter subscribers: kept until unsubscription or a deletion request.

Contact messages: kept for the time needed to handle the request, then deleted.

4. Recipients and processors

Data is hosted and processed by the following providers, each acting as a processor under the GDPR: Supabase (database, storage), Vercel (hosting), Stripe (payment), Resend (email delivery). No data is sold or shared with third parties for marketing purposes.

5. Cookies

This site only sets a technical cookie/local storage entry required to remember your consent choice (accepted/declined) — this does not require consent under ePrivacy rules.

A banner lets you accept or decline, with equal visual weight for both choices, any additional audience-measurement cookie should the site enable one; none is currently set. You can change your choice at any time by clearing your browser data for this site.

6. Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, object to, and port your data. To exercise these rights, write to booking@winz.fr.

You may also lodge a complaint with the Belgian Data Protection Authority (APD/GBA): Rue de la Presse 35, 1000 Brussels — contact@apd-gba.be — autoriteprotectiondonnees.be.