PRIVACY POLICY
Last updated: 26 July 2026
In short
We don't sell your data. We don't share it with anyone except the service providers listed below, and only so they can do their job for us.
Who is responsible for your data
The data controller for alxvndr.com is:
Farkas-Nagy Balázs
Email: [email protected]
If you have any question about this policy, or want to exercise any of the rights listed below, that email address is the fastest way to reach a human. In practice, that human is the person who makes the music.
What we collect, and why
Newsletter
If you sign up for the newsletter, we store your email address, and your first name if you choose to give one. We use it only to send you the newsletter.
- Legal basis: your consent, GDPR Article 6(1)(a)
- Double opt-in: after signing up you'll get a confirmation email. If you don't click the link, we don't add you.
- Leaving: every email has an unsubscribe link. One click, no questions, no "are you sure" screen.
- How long: until you unsubscribe, or until the newsletter stops existing.
We do not sell, rent, swap or share the mailing list with anyone.
Contact form
If you write to us through the contact form, we receive whatever you put in it: typically your name, email address and your message.
- Legal basis: taking steps at your request before entering into a contract, or our legitimate interest in answering people who write to us, Article 6(1)(b) and (f)
- How long: we keep correspondence for up to 12 months after the conversation ends, then delete it. If it turns into a business relationship, we keep it as long as that relationship and any legal obligation requires.
Server logs
Our web server records standard technical information about requests: IP address, browser and device type, the page requested, the time, and the referring page.
- Legal basis: legitimate interest, Article 6(1)(f), in keeping the site secure and working
- How long: 30 days, then deleted
We don't use these logs to build a profile of you or to target advertising.
Cloudflare Turnstile
We use Cloudflare Turnstile on the contact form and administrator login to distinguish legitimate visitors from automated abuse. Turnstile may process technical and interaction signals from your browser, including your IP address, browser and device characteristics, and information about how the security check is completed.
- Purpose: preventing spam, credential attacks and automated misuse of protected forms
- Legal basis: our legitimate interest in protecting the website and its users, GDPR Article 6(1)(f)
- Consent: Turnstile is a strictly necessary security service and loads without analytics or marketing consent
Cloudflare states that Turnstile processes signals for security rather than advertising. More information is available in the Cloudflare Turnstile Privacy Addendum.
Hosting provider
The website is hosted by Contabo GmbH, Aschauer Straße 32a, 81549 Munich, Germany.
Contabo provides the server infrastructure used to deliver the website, store website files and databases, maintain availability and process security-related server logs. In providing these services, Contabo may process technical request data such as IP addresses, request times, requested pages or files, browser and device information, referring pages and response status codes.
- Purpose: hosting the website, delivering requested content, maintaining availability, backups, troubleshooting and protecting the service against misuse or attacks
- Legal basis: our legitimate interest in providing a secure and reliable website, GDPR Article 6(1)(f)
- Role: Contabo acts as a processor for hosting data under GDPR Article 28 where a data processing agreement applies
More information is available in the Contabo Privacy Policy.
Analytics
We use analytics to understand how many people visit, which pages they read, and roughly where they come from. This runs on Google Analytics, and it only loads if you accept analytics cookies.
Legal basis: your consent.
If you decline, no analytics cookies are set and no analytics data about your visit is collected.
We also use Google Search Console, which shows us how the site appears in Google Search results. Search Console reports aggregated data such as which search terms led to the site. It doesn't track you individually and doesn't place anything on your device.
Advertising and social media pixels
We use the Meta Pixel, for Facebook and Instagram, and the TikTok Pixel to measure how people find us and how our content performs, and to reach similar audiences.
Legal basis: your consent.
These only load if you accept marketing cookies. If you decline, they are not loaded and they receive nothing about your visit.
When active, they may share information about your visit with Meta and TikTok, including your IP address and the pages you viewed, and may connect it with an account you hold with those platforms.
Embedded YouTube videos
Some pages embed videos from our YouTube channel. YouTube is operated by Google.
We use the privacy-enhanced embed domain, youtube-nocookie.com, where possible, and embedded videos load only after you accept.
Once a video loads, Google receives your IP address and technical information about your device, and may set cookies. If you're signed in to Google, it may associate the view with your account.
Google's own privacy policy governs what they do with it: policies.google.com/privacy.
Listening and downloading music
You can listen to music on this site without giving us anything. If a track is available to download, downloading it does not require an account and does not attach your identity to the file. Standard server logs apply, as described above.
Cookies and your choices
When you first visit, you'll see a cookie banner with real choices. Here's what sits behind it.
Nothing in the analytics, marketing or embedded categories runs before you agree to it. Declining is a real option and the site works fine without any of them.
You can change or withdraw your choice at any time through the cookie settings link in the site footer. You can also delete cookies in your browser settings at any time.
Who else processes your data
We use a small number of service providers. They act on our instructions and are bound by data processing agreements.
That's the whole list. Nobody else receives your data, and we don't sell it to anyone.
Data leaving the EU
Our hosting provider, Contabo GmbH, is established in Germany. Our hosting and newsletter infrastructure is intended to remain within the European Union.
Cloudflare, Google, Meta and TikTok may process or transfer data outside the EU, including to the United States. Where that happens, it relies on the safeguards those companies have in place, such as the EU-US Data Privacy Framework and the European Commission's Standard Contractual Clauses.
If this matters to you, declining analytics, marketing and embedded content means no data about your visit reaches any of them through these optional services.
Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you
- Correct it if it's wrong
- Delete it, the right to be forgotten
- Restrict how we use it
- Receive a copy in a portable format
- Object to processing based on legitimate interest
- Withdraw consent at any time, without affecting anything done before you withdrew it
To use any of these, email [email protected]. We'll respond within 30 days, and usually a lot faster. We won't charge you and we won't ask you to justify yourself.
If you're not happy with how we handled it, you can complain to the Hungarian data protection authority:
Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH1055 Budapest, Falk Miksa utca 9-11
Postal address: 1363 Budapest, Pf. 9.
Phone: +36 1 391 1400
Email: [email protected]
Web: naih.hu
You also have the right to go to court.
Children
This site isn't aimed at children, and we don't knowingly collect data from anyone under 16. If you believe a child has given us personal data, email us and we'll delete it.
Security
The site is served over HTTPS. Access to the mailing list and the contact inbox is protected by strong authentication. We keep the amount of data we collect deliberately small, because data you never collected is data that can never leak.
No system is perfectly secure, and we won't claim otherwise. If a breach ever occurs that puts your rights at risk, we'll notify the authority within 72 hours and tell you directly where the law requires it.
Changes to this policy
If we change how we handle data, we'll update this page and change the date at the top. If the change is significant and you're on the mailing list, we'll tell you by email rather than quietly editing the page.