Privacy Policy

Last updated: March 30, 2026

This Privacy Policy explains how ROMBO Magazine (“we”, “us”, “our”) collects, uses, stores and protects personal data when you visit https://rombomagazine.com (the “Website”), contact us, submit music or editorial materials, subscribe to communications, create an account, purchase products or memberships, or otherwise interact with our services.

This Privacy Policy applies to users in the European Economic Area and Switzerland.

1. Controller

ROMBO Magazine
Email: info@rombomagazine.com
Website: https://rombomagazine.com

For any privacy-related request, you can contact us at the email address above.

2. Personal data we collect

Depending on how you interact with the Website, we may collect the following categories of personal data:

a) Data you provide directly

Name
Email address
Phone number, if you choose to provide it
Company, artist name, label name, or professional role
Content of your messages, submissions, pitches, or support requests
Billing and account information
Shipping information, if physical products are sold
Payment-related information provided through third-party payment providers
Login credentials and account details, if account registration is available
Any files, links, music releases, press materials, or attachments you send us

b) Data collected automatically

IP address or shortened/processed IP-related data
Browser type and version
Device information
Operating system
Referring URL
Pages viewed
Date and time of access
Interaction data on the Website
Cookie and consent preferences

c) Data from third parties

We may receive personal data from:

analytics providers
social media platforms
embedded content providers
payment providers
membership or e-commerce plugins
partners or publicists who submit material on your behalf

3. Why we process your data

We process personal data for the following purposes:

to operate, maintain and secure the Website
to respond to messages, requests and submissions
to review editorial, music, press, partnership or collaboration inquiries
to manage user accounts, memberships or subscriber areas
to process purchases, orders and payments
to send service communications
to send newsletters or marketing communications where permitted by law
to analyze traffic and improve the Website and user experience
to prevent abuse, fraud and unauthorized access
to comply with legal, tax, accounting and regulatory obligations
to establish, exercise or defend legal claims

4. Legal bases for processing

Where the GDPR applies, we rely on one or more of the following legal bases:

Performance of a contract
when processing is necessary to provide a service, manage an account, process an order, or respond to a request related to a pre-contractual step.
Consent
when you consent to cookies, marketing communications, or other optional processing activities.
Legitimate interests
when processing is necessary for running and improving the Website, handling editorial and business communications, ensuring security, preventing misuse, and managing our operations, provided your rights and freedoms do not override those interests.
Legal obligation
when we must retain or disclose data to comply with applicable law, tax rules, accounting obligations, or requests from competent authorities.

GDPR privacy notices must transparently state the purpose and legal basis of processing.

5. Contact forms, submissions and business communications

If you contact us by email, through a form, or by sending editorial or music submissions, we process the data you provide in order to:

respond to your request
evaluate your submission
communicate with you about editorial, partnership or business opportunities
maintain a record of our correspondence where reasonably necessary

This may include your name, email address, professional details, message content, attachments, and any other information you decide to share.

6. Accounts, memberships and purchases

If the Website offers user accounts, memberships or purchases through tools such as WooCommerce or Paid Memberships Pro, we may process data necessary to:

create and manage your account
authenticate access
process payments
handle invoices and tax records
manage subscriptions, memberships or digital access
provide customer support

Payment transactions are usually processed by third-party payment providers. We do not store full payment card details on our own servers unless explicitly stated.

7. Analytics

We may use analytics tools, including Google Analytics, to understand how visitors use the Website and to improve performance and content.

Google states that for EU users, Analytics drops IP addresses before logging via EU domains and servers, and Google Analytics data retention settings for standard properties include 2 months or 14 months for user-level data.

Analytics cookies and similar technologies are subject to your consent where required by law. More details are provided in our Cookie Policy.

Pages on the Website may include embedded content or integrations from third parties such as:

Instagram
Facebook
X
YouTube
Vimeo
Adobe Fonts
Google Fonts

When you interact with embedded content, these third parties may collect personal data, set cookies, or track your interaction according to their own privacy notices and policies.

9. Cookies and similar technologies

We use cookies and similar technologies to:

ensure the Website functions properly
remember preferences and consent choices
measure traffic and performance
support embedded media and third-party content
improve usability and performance

For full details on the cookies used, categories, providers and consent options, please see our Cookie Policy.

10. Recipients of personal data

We may share personal data with trusted service providers where necessary for the operation of the Website and our business, including:

hosting and CDN providers
website maintenance and security providers
analytics providers
email and communication providers
payment providers
e-commerce and membership service providers
legal, accounting or tax advisors
competent authorities where required by law

We share only the data necessary for the relevant purpose.

11. International transfers

Some service providers or embedded content providers may process personal data outside Switzerland, the EEA or the UK, including in the United States.

Where required, we take steps to ensure an adequate level of protection for transferred personal data, such as relying on:

adequacy decisions where applicable
standard contractual clauses or similar safeguards
additional contractual or organizational measures where appropriate

The Swiss Ordinance on Data Protection provides for recognized transfer safeguards such as standard data protection clauses.

12. Data retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required by law.

Typical retention periods may include:

contact requests and correspondence: up to 24 months after the last relevant contact
editorial and music submissions: up to 24 months, unless a longer relationship develops
customer, order and invoice records: up to 10 years where required for legal, tax or accounting reasons
account data: for as long as the account remains active, and for a limited period afterward where necessary
analytics data: according to the settings configured in the relevant analytics platform
consent records: for as long as needed to demonstrate compliance

Under GDPR, privacy notices should state the retention period or the criteria used to determine it.

13. Security

We implement reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration or disclosure.

No online system can guarantee absolute security. For that reason, while we work to protect your data, transmission over the internet always carries some inherent risk.

14. Your rights

Depending on the applicable law and your location, you may have the right to:

access your personal data
request correction of inaccurate data
request deletion of your personal data
request restriction of processing
object to certain processing activities
withdraw consent at any time where processing is based on consent
receive your data in a portable format, where applicable
lodge a complaint with a competent supervisory authority

GDPR Articles 13 and 14 require that these rights and key transparency details be communicated to users, and the Swiss FADP also requires information about the controller, processed data and purpose.

To exercise your rights, contact us at: info@rombomagazine.com

15. Complaints

If you believe your data has been processed unlawfully, you may contact us first so we can try to resolve the issue.

You also have the right to lodge a complaint with the relevant supervisory authority in your country of residence or place of work, or in Switzerland with the competent data protection authority where applicable.

16. Third-party websites

The Website may contain links to third-party websites, platforms or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy notices separately.

17. Children

The Website is not directed at children under the age required by applicable law for valid consent. We do not knowingly collect personal data from children without appropriate authorization where required.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical or operational changes. The updated version will be posted on this page with a revised “Last updated” date.