Privacy Policy

1. Who is responsible

the team behind Metal Festivals ("we", "us") is the data controller of the personal data described in this policy. You can reach us at the contact form on this site. Questions and requests about your data can be sent to info@metalfestivals.top.

2. What we collect

Metal Festivals is a guide you read: there are no accounts and no login. The catalogue of festivals, artists, countries and subgenres is published from our own records and is not personal data.

We process personal data in two cases only: the measurement of the use of the Site, which runs only after you accept it, and the messages you send us through the contact form.

• the pages you visit, the festivals, artists and countries you look at, the searches you type and the links you click;
• technical information about your browser and device, such as the browser type, the screen size and the approximate location derived from your IP address;
• a random identifier assigned by the analytics provider so that the pages of one visit can be counted together.

3. The contact form

The contact form lets you tell us what is missing or what is wrong in the guide. When you send a message, we receive and keep:

We use that information only to answer your message and to keep the guide accurate. The legal basis is our legitimate interest in answering you and in correcting the catalogue. We do not use it for advertising, we do not build a profile of you and we do not pass it to anyone else.

The message is kept for as long as it takes to answer it and, once it is answered, for a maximum of 12 months. After that it is deleted. You can ask us to delete it sooner at any time.

• your name and your email address, so we can answer you;
• the topic you chose and the fields that topic asks for, such as the festival, the artist, the country or the website, and the message you write;
• the page of the Site the message was sent from, the browser identification and a hashed form of your IP address, used to keep the form free of automated traffic.

4. The security check of the form

The contact form is protected by Cloudflare Turnstile, a check that tells us whether the message comes from a person and not from an automated program. The check runs on Cloudflare, which may process technical data about your connection for that purpose. It is not measurement and it does not depend on the analytics consent.

5. Analytics with Google Analytics

With your permission we use Google Analytics 4 to understand how the Site is used. The measurement is loaded only after you accept it: if you reject, nothing is sent to Google and no analytics cookie is set.

We determine the purposes and means of the measurement. Google acts as a processor for us, and Google Ireland Limited acts as the controller of the personal data processed by Google in the European Union. You can read how Google uses the data in "How Google uses our partners sites and apps" (https://www.google.com/policies/privacy/partners/), in the Google privacy policy (https://policies.google.com/privacy) and in the Google Analytics terms of service (https://business.safety.google/adsprocessorterms/).

• Google does not store complete IP addresses: the last octets are discarded before the data is saved;
• we do not enable Google Signals or advertising personalisation, and we do not run remarketing or any advertising audience;
• we do not send any data that identifies you personally: no names, no e-mail addresses, no account identifiers;
• the event data is kept by Google for 2 months by default, and can be extended to 14 months.

6. Cookies

We use a first-party cookie to remember your choice about the cookies themselves, the security check of the contact form may set its own technical cookies, and, if you accept them, Google Analytics sets its own cookies. The list and how to control them are in the Cookie Policy.

7. Why we are allowed to do it

The legal bases are the following:

• consent, for the measurement of the use of the Site: it only runs once you accept it, and you can withdraw it at any time;
• legitimate interest, for the basic operation and the security of the Site;
• legitimate interest, for answering the messages sent through the contact form and for correcting the catalogue with the information they carry;
• legal obligation, when the law requires us to keep certain records.

8. International transfers

The measurement data is processed by Google, which may store it outside the European Economic Area. Where that happens, Google relies on the Standard Contractual Clauses approved by the European Commission and on its own transfer safeguards.

The security check of the contact form is processed by Cloudflare, and the messages are sent through Resend, the provider of our e-mail. Both may process the data outside the European Economic Area under their own transfer safeguards. The messages themselves are kept in our own database.

9. How long we keep it

The consent cookie is kept for 12 months. The analytics data is kept by Google for 2 months by default (it can be extended to 14 months). When you withdraw your consent, the measurement stops immediately and the identifiers are deleted by Google at the end of their retention period.

The messages of the contact form are kept until they are answered and, afterwards, for a maximum of 12 months. The technical data of the security check is kept by Cloudflare for the time it needs to run it.

10. Your rights

You have the right to ask us for access to your personal data, to have it corrected, to have it erased, to restrict or to object to the processing, to receive it in a portable format and to withdraw your consent. You also have the right to complain to your local data protection authority.

To exercise any of these rights, write to info@metalfestivals.top. We answer within one month.

11. Withdrawing your consent

You can change your mind at any time: the "Cookie settings" link in the footer opens the banner again. Choosing "Reject all" stops the measurement immediately.

12. Children

The Site is not directed at children, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, write to us and we will delete it.

13. Changes to this policy

We update this policy when the Site or the tools behind it change. The date at the top of this page shows the last update.

14. Contact

Write to info@metalfestivals.top with any question about your data or this policy.