Privacy

Data controller

Adel Hendaoui, founder of VERIMUSIC, is responsible for processing the data collected on verimusic.com and can be contacted at contact@verimusic.com.

Signing the manifesto

When you sign, you provide your name and email address, and your role and band or organisation if you choose to include them. You also tell us whether you want to appear on the public list of signatories. We use this information to record and count your signature and to send you a single email asking you to confirm it. This processing is based on your consent, which you give by signing. If you tick the box provided, we also use your address to send you Music Provenance, our monthly newsletter. You can withdraw this consent at any time, through the unsubscribe link in every issue or by writing to us, without affecting your signature.

Only your name and, if provided, your role and band or organisation may appear on the public list, and only if you have opted in. Your email address is never published. A signature that has not been confirmed is deleted after 30 days. Once confirmed, it is kept for as long as the manifesto remains online, unless you ask for it to be withdrawn.

Submissions to the observatory

A submission includes a description of the decision you are disputing, your email address and, if you choose to provide them, your name and role. We use this information to document disputes, draw conclusions from the cases taken together and, if you agree, refer to your case. This processing is based on your consent, which you give by ticking the consent box when you submit your account.

No submission is published until it has been reviewed. We refer to your case only with your consent and do so anonymously unless you have asked otherwise. Your email address is never published. Your contact details, meaning your name, email address and role, are kept for three years from the date of submission and then deleted. The account of your case may then remain in the observatory after all information that could identify you has been removed. As long as we hold your contact details, you can ask us at any time to delete your entire submission. Once they have been deleted, we have no way of finding your account, which is no longer linked to you.

Data sharing and protection against abuse

Your data is neither sold nor disclosed to third parties. Only our technical providers have access to it, to keep the site running: Hostinger, which hosts the server, Resend, a US company that sends confirmation emails from its servers in Ireland, and o2switch, which hosts the site's email service in France and takes over these emails when needed. You will receive no newsletter unless you have explicitly asked for one, and the site sets no advertising cookies.

To limit automated submissions, each form submission is linked to a hash of the originating IP address. This hash is deleted after 30 days. The IP address itself is never stored.

Website analytics

We measure visits to the site using Umami, a free and open-source analytics tool installed on our own server, which works without cookies and does not build visitor profiles. It produces only aggregate figures for page views, landing pages, referring sites, the campaign a link came from, device types and countries. There is no way of tracking you from one site to another, and none of this data is shared.

Your rights

You can email contact@verimusic.com at any time to request access to your data, ask for it to be corrected or deleted, or withdraw your signature. If you believe your rights are not being respected, you may lodge a complaint with the CNIL, the French data protection authority (cnil.fr).