1. Data controller
- Controller: Juan Francisco García Suárez (Frank García).
- Tax ID (NIF): 44312831L.
- Address: Calle Lentisco, 20, Almatriche Alto, 35018 — Las Palmas de Gran Canaria.
- Privacy email: info@wavecollective.com.
2. Data we process and for what purpose
We only process the data you provide through the forms and the data needed for the site to work:
- Sending demos: artist name, email, country, listening link and message. Purpose: to assess your music for a possible release on the label.
- Contact / booking / press: the data you include in your message. Purpose: to respond to your request.
- Newsletter ("Join the wave"): email (and, optionally, name and country). Purpose: to keep you informed of the label's news and releases.
- Browsing data: only what is strictly necessary to serve the site (technical cookies). We do not use analytics or advertising tracking.
3. Legal basis
The basis is your consent (art. 6.1.a GDPR), which you give when submitting the relevant form, and our legitimate interest in keeping the site secure. For technical cookies, the basis is their necessity for providing the service.
4. Retention
We keep your data for as long as the purpose for which it was collected lasts (e.g. assessing your demo or your newsletter subscription) and, afterwards, for the legally required periods. You can unsubscribe or request deletion at any time.
5. Recipients and data processors
We do not share your data with third parties except where legally required. To provide the service we rely on providers acting as data processors:
- Hosting and infrastructure: our own VPS server (Plesk) and object storage (DigitalOcean Spaces).
- Email: our own mail server on the domain.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, as well as withdraw your consent at any time, by writing to info@wavecollective.com. If you believe the processing does not comply with the regulations, you can file a complaint with the Spanish Data Protection Agency (aepd.es).
7. Security
We apply reasonable technical and organisational measures to protect your data (encryption in transit via HTTPS, restricted access and a hardened server).
