BEFORE DOORS OPEN ← Back to main pageHome

Privacy Policy

1. Data controller

Before Doors Open is run by Max Alessandrini, based in Italy. You can contact me about anything related to your personal data through the contact form on this website.

2. Data I collect

When you send an enquiry through the contact form, I collect:

  • First and last name
  • Email address
  • What best describes you (DJ, producer, etc.) and your experience level
  • What you would like help with
  • Instagram profile link
  • SoundCloud and Beatport profile links (optional)
  • Press kit link (optional)
  • Any message you choose to include

When you book a session through Calendly or pay through Stripe, I also receive your booking details (date, time, time zone) and payment confirmation details (amount, date, the last four digits and type of your card, and billing country). I use these to deliver your sessions and to issue invoices.

If you request a refund, I process the details you send with your request, including your payment receipt or invoice and, where requested, a copy of an identity document. These are used only to verify and process the refund, and identity documents are deleted once the refund has been completed.

I do not use analytics, tracking pixels or advertising tools, and I do not build profiles of visitors.

3. Why I use your data and legal basis

I use your data only to reply to your enquiry, assess whether a session is a good fit, and arrange and deliver sessions you book.

  • Art. 6(1)(b) GDPR, steps taken at your request before entering into a contract, and the performance of that contract if you book a session.
  • Art. 6(1)(f) GDPR, my legitimate interest in answering enquiries and keeping the website secure.
  • Art. 6(1)(c) GDPR, legal obligations such as keeping invoicing and tax records for paid sessions.

4. Who processes your data

I use a small number of trusted service providers who process data on my behalf:

  • Splitforms, form processing: receives and stores the form submission and delivers it to me by email.
  • Cloudflare, website hosting and security: processes technical data such as your IP address to deliver the site and protect it from abuse.
  • Proton, encrypted email: used to receive and reply to your enquiry.
  • Calendly (calendly.com), appointment scheduling: when you book a call or session, Calendly processes your name, email address, chosen time slot, time zone and any answers you give on the booking form, and sends confirmations and reminders.
  • Stripe (stripe.com), payment processing: when you pay for a session or package, Stripe processes your name, email address, billing details and payment card information. Card details are handled directly by Stripe; I never see or store your full card number. Stripe may also process data to prevent fraud, as an independent controller for that purpose.

Calendly and Stripe each have their own privacy policies, which apply when you use their pages: Calendly Privacy Notice and Stripe Privacy Policy.

Some providers may process data outside the European Economic Area. Where this happens, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses. I never sell or share your data for marketing.

5. How long I keep your data

Enquiries that do not lead to a session are deleted within 12 months. If we work together, I keep the data needed for our sessions for as long as we work together, and invoicing records for the period required by Italian law (currently 10 years).

6. Your rights

Under the GDPR you have the right to:

  • Access the personal data I hold about you
  • Have inaccurate data corrected
  • Have your data deleted
  • Restrict or object to processing
  • Receive your data in a portable format
  • Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, send a request through the contact form. I will reply within one month.

7. Automated decisions

No automated decision-making or profiling takes place. Every enquiry is read personally.

8. Complaints

If you believe your data is not being handled correctly, you can lodge a complaint with the Italian data protection authority, the Garante per la Protezione dei Dati Personali, or with the authority in your EU country of residence.

9. Changes

I may update this policy from time to time. The date at the top shows when it was last changed.