Privacy policy
This policy explains how we process personal data on epk.aeppli.dev. It is based on the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies, the rights set out below apply as well.
1. Controller
Sascha Aeppli
Arvenweg 13
8404 Winterthur
Switzerland
info@aeppli.dev
2. Who is responsible for what
We are responsible for user accounts and for running the platform. The creators (artists) are solely responsible for the content of their promo pages and decide for themselves which content they publish and which contacts they store in their contact list. For this data they are the controller and we process it on their behalf. Contact data in the contact list is never published.
3. Data we process
- User account: name, email address, interface language, password (stored only as a cryptographic hash).
- Artist content: artist profile, booking contact, photos, press texts, reviews, gigs, tech riders and links. This content is public once a promo page is published.
- Contacts and contact history: names, contact details and notes on promoters, clubs etc. that artists enter themselves. Visible only to the artist's team.
- Visitors to promo pages: we don't keep access logs with IP addresses and use no analytics or tracking tools. Technical error logs (without content data) are deleted after 14 days at the latest.
4. Cookies
We only use technically necessary cookies (session and protection against cross-site request forgery). They expire after two hours of inactivity; if you choose “remember me” when logging in, a login cookie remains until you log out. We don't use advertising or tracking cookies.
5. Embedded content from third parties
Artists can embed players from SoundCloud, Mixcloud, YouTube (in privacy-enhanced mode), Vimeo and Spotify on their promo page. When such a page is opened, your browser connects directly to these providers, which may receive your IP address and set their own cookies. Some of these providers are based in the USA. Their privacy policies apply.
6. Service providers and hosting
- Hosting: our own server in Switzerland (connection via Init7 (Switzerland) Ltd., Winterthur).
- Sending emails (confirmation, password reset): Infomaniak Network SA, Geneva, Switzerland.
We don't sell or rent data and only pass it on to the service providers listed above, as far as necessary.
7. Retention
We keep account and content data as long as the account exists. When you delete content or ask us to delete your account, the data is removed. Backups are overwritten after 14 days.
8. Purpose and legal basis
We process data to provide the platform (contract), to secure our systems (legitimate interest) and to send emails you requested. Under the GDPR the legal bases are Art. 6(1)(b) and (f).
9. Your rights
You can request access to your data, correction, deletion and a copy of your data, and object to processing. Just send an email to info@aeppli.dev. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, with your local data protection authority.
10. Changes
We may update this policy when the platform changes. The current version is published on this page.