Privacy Policy

1. Introduction

This Privacy Policy explains how Durum Records processes personal data through our website, webshop, events, and services (the “Website” and “Services”). It applies to website visitors, webshop customers, event and festival participants, artists and partners, and anyone interacting with Durum Records.

We are committed to protecting your privacy and handling your data responsibly. Because data protection is an ongoing responsibility, we may update this Privacy Policy from time to time.

2. Who is the Controller?

Durum Records is the “Controller” for the personal data we collect. In this policy, “Durum Records”, “we”, “us”, or “our” refers to the company registered in the Netherlands.

As controller, we decide why and how personal data is processed, and we are responsible for safeguarding it in line with applicable law.

3. Which Personal Data We Process and Why

 We collect and use different types of personal data depending on how you interact with us. When you contact us, buy tickets or products, or sign up for our newsletter, we process your contact details such as your name, email address, phone number, and delivery address so that we can respond to your requests, deliver your orders, or send you updates if you have opted in.

If you make a purchase, we also process transaction details such as billing information and order history. Payment card details are handled securely by our payment provider we do not store these ourselves.

When you communicate with us (for example by email or through our website), we may keep records of that correspondence to help us handle your request and improve our services.

We also collect technical information through cookies and similar technologies when you use our website. Essential cookies are needed to make the site work properly, while analytical cookies (placed only with your consent) help us understand how visitors use our website and improve user experience.

In short, we process personal data to:

  • provide and deliver our services, products, and events;
  • communicate with you and respond to your questions;
  • send marketing updates when you have consented;
  • maintain secure and functional website operations; and
  • comply with legal obligations such as tax and accounting rules.

4. Sharing Your Information

We only share your personal data when this is necessary to provide our services. For example, we work with trusted partners who help us run our website, process payments, deliver webshop orders, and send newsletters or event updates. These partners are only allowed to use your data for the tasks we ask them to do, and they must keep it secure.

In some cases, we may also have to share your information with public authorities if the law requires it for instance for tax, fraud prevention, or to respond to legal claims. Outside of these situations, we do not sell or trade your personal data to third parties.

5. International Transfers

Some of our service providers may be located outside the European Economic Area (EEA). Where this is the case, we ensure that adequate safeguards are in place (such as EU adequacy decisions or Standard Contractual Clauses) to protect your data in line with European standards.

6. Your Rights

Under the GDPR, you have the following rights:

  • Access: Request a copy of the data we hold about you.
  • Rectification: Ask us to correct inaccurate or incomplete data.
  • Erasure: Request deletion of your data where legally possible.
  • Restriction: Request that we temporarily stop processing your data.
  • Portability: Request your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interest or to direct marketing.
  • Withdraw Consent: Withdraw your consent at any time (for example, unsubscribing from newsletters).
  • Lodge a Complaint: Contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe your rights have been violated.

You can exercise your rights by contacting us (see Section 10).

7. Data Security

 We implement appropriate technical and organizational measures to keep your data safe, including encryption, secure servers, limited access, and staff training. While we take strong precautions, no system is 100% secure.

8. Data Retention

We only keep personal data as long as necessary for the purposes described above:

  • Webshop orders and transactions: retained as required by tax/accounting law (typically 7 years).
  • Memberships and subscriptions: retained for the duration of your membership plus a short administrative period.
  • Marketing consent: until you withdraw consent.
  • General communications: kept for as long as necessary to resolve the matter.

When data is no longer needed, we delete or anonymize it.

9. Updates to this Policy

 We may update this Privacy Policy to reflect changes in our practices, technologies, or legal obligations. Updates will be posted on our Website with a “last updated” date. For major changes, we will notify you more prominently.

10. Contact Us

If you have questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us:

Durum Records
 Email: sander@durumrecords.com or timo@durumrecords.com
 Location: Magnoliaerf 30, 5038 KP, The Netherlands

11. Cookie Policy

 Our Website uses cookies:

  • Essential cookies (always active) for basic site functionality and security.
  • Analytics cookies (only with your consent) to understand how visitors use our site.

You can change your cookie settings in your browser or via our Cookie Notice on the Website. Please note that disabling cookies may limit functionality.