1. Who we are

MuziekKompagnie VZW | UT3-Records
VAT: BE 0456.667.882
Email: info@ut3-records.com

We are the data controller for the personal data collected through this website. (www.ut3-records.com)

2. What data we collect

Data	Why	Legal basis
Name, email address, shipping address	To process and ship your order	Contract (Art. 6(1)(b) GDPR)
Payment information	Processed by Stripe — we never store card details	Contract
Email address (newsletter)	To send you news about releases and concerts	Consent (Art. 6(1)(a) GDPR)
Artist profile data (bio, photo, instrument)	To display your public artist profile	Contract / Consent
Session cookies	To keep your cart and language preference active	Legitimate interest (Art. 6(1)(f) GDPR)

3. How long we keep your data

• Order data — kept for 7 years to comply with Belgian accounting law.
• Newsletter subscriptions — until you unsubscribe.
• Artist profile — until your account is deleted upon request.
• Session cookies — expire at the end of your browser session.
• Consent cookie (ut3_consent) — stored for 1 year.

4. Third parties

• Stripe (stripe.com/privacy) — payment processing. Your card data never reaches our servers.
• Biohost / BioHuset — our hosting provider, located in the EU.

We do not sell or rent your personal data to any third party.

5. Your rights (GDPR)

As a resident of the EU/EEA you have the right to:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data ("right to be forgotten"), unless we are legally required to keep it.
• Restriction — ask us to limit how we use your data.
• Portability — receive your data in a machine-readable format.
• Object — object to processing based on legitimate interest.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at info@ut3-records.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Belgian Data Protection Authority:
www.dataprotectionauthority.be

6. Cookies

We use only functional cookies — no tracking, no advertising cookies.

Cookie	Purpose	Duration
PHPSESSID	Session — cart contents, language preference, login state	Browser session
ut3_consent	Records that you accepted this cookie notice	1 year

7. Security

All data is transmitted over HTTPS. Passwords are stored as bcrypt hashes. Payment data is handled exclusively by Stripe and never stored on our servers.

8. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the site after a change constitutes acceptance of the updated policy.