Privacy Policy

Last updated: 26 September 2026

This Privacy Policy explains how personal data is handled when you visit and use driftlabmusic.com (the “Website”). We are committed to protecting your privacy and processing your data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Italian law.

1. Who we are (Data Controller)

The data controller is Manuele Montesanti (“Drift Lab”, “we”, “us”, “our”).

2. What data we collect, and why

a) Messages you send us (contact form)

When you use the contact form, we collect your name, email address, subject and message. We use this information solely to read and respond to your enquiry.

  • Legal basis: your consent and our legitimate interest in replying to you (GDPR Art. 6(1)(a) and (f)); where your message concerns a possible agreement, Art. 6(1)(b).
  • Retention: for as long as needed to handle your request and for a reasonable period afterwards, after which it is deleted.

Spam protection (Google reCAPTCHA). To protect the contact form from spam and automated abuse, we use Google reCAPTCHA v3, provided by Google Ireland Limited. It is loaded only when you start filling in the form, and it collects technical information (such as your IP address, browser and device data, and how you interact with the page) that is sent to Google for analysis. This processing is based on our legitimate interest in keeping the Website secure and free of spam (GDPR Art. 6(1)(f)). Google’s Privacy Policy and Terms of Service apply.

b) Cookies and embedded content

The Website embeds third-party content — YouTube and Spotify players, and Facebook and Instagram feeds in the News section. This content is blocked until you give your consent through our cookie banner. Once you consent, these providers may set cookies and receive data such as your IP address and the page you are viewing. For the full list of cookies and to change your choice at any time, please see our Cookie Policy.

  • Legal basis: your consent (GDPR Art. 6(1)(a)).

c) Server and security logs

Our hosting provider automatically records technical information (such as IP address, browser type, and the date and time of requests) in order to operate the Website securely and reliably.

  • Legal basis: our legitimate interest in the security and proper functioning of the Website (GDPR Art. 6(1)(f)).

We do not use website analytics or advertising tracking, we do not operate a newsletter, and we do not carry out profiling or automated decision-making.

3. Who we share data with

We do not sell your personal data. We share it only with:

  • our hosting and email provider, Aruba S.p.A. (Italy), which processes data on our behalf as a processor;
  • Google (reCAPTCHA), to protect the contact form from spam and abuse;
  • the third-party content providers you consent to: Google (YouTube), Spotify, Meta Platforms (Facebook, Instagram), and the embed services SociableKIT and LightWidget.

These third parties process data under their own privacy policies, as independent controllers or as our processors.

4. International data transfers

Some providers (for example Google, Meta and Spotify) are based outside the European Economic Area (EEA), including in the United States. Where personal data is transferred outside the EEA, it is protected by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

5. Your rights

Under the GDPR you have the right to: access your data; rectify inaccurate data; request erasure; restrict or object to processing; obtain your data in a portable format; and withdraw your consent at any time (without affecting processing carried out before withdrawal). To exercise any of these rights, email us at info@driftlabmusic.com.

You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

6. Data security

We take reasonable technical and organisational measures to protect your personal data against loss, misuse and unauthorised access.

7. Children

The Website is not directed at children under the age of 16, and we do not knowingly collect their personal data.

8. Changes to this policy

We may update this Privacy Policy from time to time. The “last updated” date at the top of this page indicates when it was last revised.

9. Contact

If you have any questions about this Privacy Policy or how your data is handled, contact us at info@driftlabmusic.com.