Privacy Policy

This notice describes how Vinyl Snatch collects and uses the personal data of people who visit vinylsnatch.com, in line with Regulation (EU) 2016/679 (GDPR) and Italian law.

Data controller

Simone Lonati (natural person)
Corso Italia 10, 66020 Sambuceto (CH), Italy
Phone: +39 085 8963414
Email: e-commerce@vinylsnatch.com

What data we collect

You can use the site without giving us any personal data. The items below only concern the optional features (account, wishlist, alerts) and the normal technical operation of the site.

• Google sign-in: name, email address and profile picture, provided by Google when you sign in. We use these data only to identify you and link your wishlist to you.
• Wishlist: the items you save (title, price, shop, link) linked to your Google account.
• Wishlist alerts: unless you turn them off, we periodically check the prices of your saved items and email you when one drops significantly or is back in stock. You can turn them off at any time with the link in every email.
• Price alerts: the record, the target price you set and your email address, used only to send you the alert you asked for, once, when the price is reached (or when the alert expires).
• Preferred language: if you have an account, we save the language of the site you use, to write to you in the right language.
• Last.fm (optional): if you enter your Last.fm username to see your listening, we use it to query Last.fm and remember it only in your browser.
• Technical and preference cookies, and data in your browser: see the Cookie Policy for the full list.
• Outbound click logs: when you click a link to a shop, we record the shop, URL, artist/album and date/time. We do not record your IP address or any identifier, so this data does not relate to you personally.
• Server logs: IP address and browser user agent, collected automatically for security and diagnostics.

Why we use it and on what basis

• To provide the features you ask for (sign-in, wishlist, alerts, emails): performance of your request, Art. 6(1)(b) GDPR.
• Security and technical operation of the site (logs, abuse protection): legitimate interest, Art. 6(1)(f) GDPR.
• Strictly technical cookies and browser data: necessary for the service you requested, no consent needed.

We do not sell your data to third parties, we do not use it for profiled advertising and we do not make automated decisions about you. Providing data is optional: without signing in with Google you cannot use the wishlist and alerts, but price comparison stays available.

Who we share it with

• Google: receives the standard OAuth authentication requests when you choose to sign in with your account. We do not share with them any other data you have on Vinyl Snatch.
• OVHcloud: provider of the server the site runs on and where the data is stored.
• Cloudflare: protects and delivers the site; it sees the requests (including the IP address) passing through.
• Brevo (France): sends the alert emails on our behalf (email address and message content).
• Last.fm: only if you use the optional feature, it receives the username you enter.
• Record and price information services: covers, tracklists and public information come from services such as iTunes, Deezer, MusicBrainz and Discogs; prices come from the shops' websites, also through technical page-reading services. They only receive the search text (artist, album), never data that identifies you. Images may be loaded directly from their servers, which, as with any web request, receive your IP address.
• Shops and affiliate networks (for example Awin, Amazon): when you click a link to a shop you leave our site, and from then on the shop's and the affiliate network's privacy policy and cookies apply; they may be used to credit us with a commission. We do not send them any personal data.

Data transfers outside the EU

Google and Cloudflare are based in the United States and may process data outside the European Economic Area, on the basis of the standard contractual clauses approved by the European Commission or other mechanisms provided for by the GDPR (such as the Data Privacy Framework).

How long we keep data

• Wishlist, alerts and account data: until you ask us to delete them (see below) or you remove the saved items.
• Price alerts: until they trigger or expire.
• Sign-in session: 30 days, then you have to sign in again.
• Outbound click logs: contain no personal data, kept for statistical purposes.
• Server logs: about 14 days, then deleted automatically.

Your rights

You can ask us at any time to access your data, correct it, delete it (including your account and wishlist), restrict its processing, receive it in a portable format or object to its processing, by writing to e-commerce@vinylsnatch.com. We reply within one month. You can also remove wishlist items and alerts yourself from the pages of the site, and turn off the emails with the link at the bottom of each one. You also have the right to lodge a complaint with the Italian data protection authority (garanteprivacy.it).

Minors

Vinyl Snatch is not intended for children under 16 and we do not knowingly collect data from anyone under that age.

Changes to this notice

We may update this page over time; the date at the top shows the last update. In case of significant changes, we will let you know with a notice on the site.