Last updated: 28 October 2026
This notice explains which personal data www.drycastle.com processes, why and for how long, under Article 13 of the EU General Data Protection Regulation 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018. In short: the site uses no cookies for visitors, does no profiling and shows no advertising.
Data controller
Maurizio Bozzi – Drycastle Records, Via di Castelsecco 8/A, 52100 Arezzo, Italy, VAT IT00875800518. For any question about your data: info@drycastle.com.
What data we process and why
Browsing data. Like any website, the server hosting drycastle.com (Aruba S.p.A., Italy) records technical data about visits in its logs: IP address, requested page, date and time, browser. They are needed to run and secure the site (legitimate interest, Art. 6(1)(f) GDPR) and are kept by Aruba for the period set by the hosting service.
Statistics. We count page views with Koko Analytics, which runs on our own server: it uses no cookies, does not record IP addresses or anything else that identifies visitors, and sends nothing to third parties. Only aggregate numbers remain (for example: how many views a page had on a given day), kept for 5 years (legitimate interest in knowing which content people find useful).
Contact form and email. If you write to us through the form on the Contact page or to one of our email addresses, we process your name, email address and message only to reply to you (Art. 6(1)(b) GDPR: steps taken at your request). The form does not store messages on the site: it forwards them to the info@drycastle.com mailbox, hosted by Aruba. We keep the correspondence for as long as needed to handle your request and any relationship that follows (for example buying a CD or a method book).
Orders. If you order CDs or methods with the form on the Order page, we process your name, email address, shipping address, the titles you chose and your notes, to reply with the total, receive payment and ship (Art. 6(1)(b) GDPR: performance of a contract). The form forwards the order to the info@drycastle.com mailbox; only if the email fails for a technical reason does the order stay saved in the site’s admin area until we handle it, after which we delete it. Sales tax records are kept for 10 years as required by law (Art. 6(1)(c) GDPR).
External content, only when you turn it on
Some content comes from other services, but only when you activate it with a click: before that, your browser does not contact them.
- YouTube videos (Google Ireland Ltd.): when you press a video box, the video is loaded from youtube-nocookie.com. Google privacy policy.
- 30-second audio previews in album tracklists (Apple Distribution International Ltd.): when you press ▶, the audio is loaded from Apple Music servers. Apple privacy policy.
At that point the service receives your IP address and technical browser data and processes them as an independent controller under its own policy, possibly including transfers to the United States (companies certified under the EU-U.S. Data Privacy Framework).
The buttons to Spotify, Apple Music, Amazon Music, Deezer, YouTube Music, Amazon, Facebook, YouTube, X and Google Maps are plain links: nothing loads until you open them, and from there those sites’ policies apply. The map on the Contact page is an image on our own server (© OpenStreetMap). Fonts are hosted on our server too.
Cookies
The site uses no cookies at all, technical or profiling, for visitors; that is why there is no cookie banner. Only the people who manage the site receive WordPress’s technical login cookies when they sign in to the admin area.
While you put an order together, the titles you chose are saved only in your browser (local storage, not a cookie) so you do not lose them when you change page: the site does not read them until you send the form, and they are deleted once it is sent or when you empty the order.
Who sees the data
Data are processed by us and, for technical services only, by Aruba S.p.A. (hosting and email), appointed as data processor. We do not sell or pass on data to third parties and do not use them for automated decisions or profiling.
Your rights
You can ask at any time to access, correct or delete your data, restrict its processing, object to processing based on legitimate interest and receive it in a readable format (Articles 15–22 GDPR) by writing to info@drycastle.com. If you believe your data are not handled correctly, you can lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or the authority of your country.