Privacy Policy

Last updated: July 6, 2026

This Privacy Policy explains how Arnaca Records handles personal data collected through this website.

For the purposes of data protection law, Arnaca Records is the controller for personal data collected through this website, unless a separate notice says otherwise.

This website is powered by Stemwire. Stemwire may process personal data as a service provider for hosting, website operation, security, delivery, support, and related infrastructure.

Depending on how you use this website, we may process:

- contact data, such as your name, email address, phone number, and message content when you contact us; - event and ticket data, such as ticket selection, order details, attendee details, payment status, and delivery details when ticketing is enabled; - technical and usage data, such as IP address, browser type, device information, timestamps, page views, clicks, referral data, and log data; - cookie and consent data, such as your cookie choices and related browser identifiers; - anti-abuse and verification data where security tools such as Google reCAPTCHA are enabled; - analytics and marketing data where optional measurement tools such as Meta Pixel are enabled and permitted; and - any other personal data that you choose to submit through forms, links, messages, or other website features.

We process personal data for these purposes and legal bases:

- to operate this website, show public pages, route messages, handle event and ticket requests, and provide requested features, where processing is necessary to take steps at your request or perform a contract; - to respond to messages, support requests, booking inquiries, and other communications, based on our legitimate interest in managing communications or, where applicable, taking steps before a contract; - to process ticket orders, payment status, receipts, refunds, accounting, tax, and legal records, where processing is necessary for contract performance and legal obligations; - to protect the website, prevent abuse, maintain logs, troubleshoot errors, and improve reliability, based on our legitimate interests in keeping the website secure and functional; - to measure website traffic, understand content performance, and improve the website, based on legitimate interests or consent where consent is required; and - to run optional marketing or advertising measurement, such as Meta Pixel, only where enabled and permitted, based on consent where required.

Where we rely on consent, you may withdraw it at any time for future processing. Withdrawal does not affect processing that happened before consent was withdrawn.

We may share personal data with service providers that help operate this website, including:

- Stemwire, for website hosting, content management, infrastructure, support, and website operations; - Supabase, for database and backend infrastructure; - Cloudflare, for hosting, CDN, DNS, security, and edge infrastructure; - Resend or other email providers, for transactional email delivery; - Stripe or connected payment providers, where ticket payments or other payments are enabled; - Google reCAPTCHA, where anti-abuse verification is enabled; and - Meta Platforms or similar providers, where optional analytics or advertising measurement is enabled and permitted.

We may also disclose personal data where reasonably necessary to comply with law, respond to lawful requests, enforce terms, prevent abuse, protect rights or safety, or handle disputes.

Some providers may process personal data outside your country, including outside the European Economic Area.

Where GDPR applies and personal data is transferred internationally, we rely on lawful transfer mechanisms such as adequacy decisions, Standard Contractual Clauses, or other safeguards available under applicable law.

We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Contact messages are usually kept for as long as needed to respond and manage the relationship. Ticket, payment, tax, accounting, dispute, and legal records may be kept for longer where required or permitted by law. Security logs and technical records are kept for a limited period unless needed to investigate abuse, protect the website, resolve disputes, or comply with legal obligations.

Subject to applicable law, you may have the right to:

- request access to your personal data; - request correction of inaccurate or incomplete data; - request deletion of personal data; - request restriction of processing; - object to processing based on legitimate interests; - receive a portable copy of personal data where portability applies; - withdraw consent where processing is based on consent; and - lodge a complaint with a supervisory authority.

If GDPR applies, you may lodge a complaint with a competent data protection supervisory authority, including in the EU or EEA member state where you live, where you work, or where you believe an infringement took place. The European Data Protection Board provides a list of EU and EEA supervisory authorities: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en

This website may use essential cookies and similar technologies needed for security, session handling, consent choices, checkout, and basic website operation.

Where optional analytics, pixels, or marketing technologies are enabled, they are used only as permitted by applicable law. In regions where consent is required, optional tracking is enabled only after consent. You can change your choice through the cookie settings link in the footer where cookie controls are shown.

You do not have to provide personal data just to browse most public pages.

Some data is required if you choose to contact us, buy a ticket, request access, or use another interactive feature. If you do not provide required data, we may be unable to provide that feature.

We do not use solely automated decision-making, including profiling, that produces legal effects or similarly significant effects on you within the meaning of GDPR Article 22.

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised update date.

For privacy questions, rights requests, complaints, or other data-related matters, contact michal.basar@gmail.com.