Privacy and Cookie Policy

Last updated: 19 September 2026

Who we are

This policy explains how VASIPAP Records, based at 15 Egnatia Street, Thessaloniki, 54630, Greece, uses personal data through vasipap.gr. It covers website visitors and people who contact us about artists, releases, collaborations or other enquiries.

VASIPAP Records is the controller for these activities. For privacy questions or to exercise your rights, contact [email protected] or write to the address above.

What data we collect

• Enquiries: your name, email, phone number if supplied, subject, enquiry type and message, together with subsequent correspondence. Required fields are marked in the form.
• Technical information: IP address, browser and device information, access times, page addresses and error details, to the extent recorded by the website and its providers.
• Preferences: language choice, cookie choices and your preference for pausing movement on the website.
• Music catalogue: artist names, photographs, biographies and release information published as part of our record-label activities. Contact us to request a correction.

Please do not send payment details, identity documents or sensitive personal data through the contact form.

Why we use your data

We use contact details to answer enquiries and discuss possible collaborations. Where an enquiry concerns a contract or steps you request before entering one, processing is based on Article 6(1)(b) GDPR. General correspondence, presenting our catalogue and protecting the website rely on our legitimate interest in operating the company, while respecting your rights, under Article 6(1)(f).

Article 6(1)(c) applies where we must meet a specific legal obligation. Optional analytics cookies require your prior consent under Article 6(1)(a). Sending an enquiry does not subscribe you to marketing emails.

Cookies and stored preferences

The website uses cookies and browser local storage for functional preferences. The NEXT_LOCALE cookie concerns language. The cookie-consent and vasipap-motion-paused local-storage entries record your cookie choice and motion preference respectively. These local-storage entries have no automatic application expiry and remain until you change them or clear the website's browser data.

Protected preview and administration also use access cookies. No account is needed to browse the public website.

If Google Analytics is enabled, its code loads only after you accept analytics cookies. Browsing alone does not constitute consent. You can change your choice using Cookie settings at the bottom of each page. Declining does not prevent browsing or submitting an enquiry. Your browser settings also let you manage cookies and local storage.

Maps, spam protection and external links

The contact page contains an embedded Google Maps map. It loads automatically as it approaches the visible part of the page and connects your browser to Google. Technical information such as your IP address may be transmitted and Google technologies may be used. Declining analytics cookies does not prevent this loading. See Google's Privacy Policy.

The form uses Cloudflare Turnstile to limit automated and unwanted messages. This service processes technical signals from your device and browser for that check. See the Turnstile Privacy Addendum and Cloudflare's Privacy Policy.

Homepage video clips are hosted on our own website. Following a link to YouTube, Apple Music, Deezer, Spotify, Amazon Music or a social network takes you to a third-party service with its own privacy policy.

Who has access

Authorised team members can access enquiries, as can hosting and technical-support providers to the extent needed to supply their services. We use Zoho Mail for business correspondence, Cloudflare for website delivery and security, and Sentry to diagnose technical errors. Optional default personal-information collection is disabled in error reporting, but technical diagnostic data may still constitute personal data.

We do not sell your personal data. We may disclose it to professional advisers or competent authorities where necessary to meet legal obligations or establish or defend legal claims.

Some providers may process data outside the European Economic Area. Such transfers require safeguards provided for by the GDPR, such as an adequacy decision or standard contractual clauses. You can request information about recipients and applicable safeguards at [email protected]. See also the privacy policies of Zoho and Sentry.

How long we keep data

We keep active enquiries and related correspondence for as long as needed to handle them. In the website's system, archived enquiries are automatically deleted after 365 days from archiving. That period is not measured from submission and does not apply to separate email correspondence.

Messages relating to an ongoing collaboration, legal obligation or legal claim may need to be retained longer. Technical logs, provider data and backups have separate retention and deletion cycles. Backups are periodically replaced, not kept as a permanent archive. You can request specific information about the retention of your data.

Your rights

Subject to the applicable GDPR conditions, you can request access, correction, erasure, restriction or portability of your data, and object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing.

Send your request to [email protected]. We may need reasonable information to verify your identity. We normally respond within one month and will explain if a lawful extension is needed. You can also contact the Hellenic Data Protection Authority.

Security, children and policy updates

We use HTTPS encryption, access restrictions and technical website-security measures. No system can guarantee absolute security. We do not use the website to make decisions based solely on automated processing that produce legal or similarly significant effects for you.

The website is not specifically directed at children. Contact us if you believe we have received personal data about a child that we should not retain.

We update this policy when services or processing practices change. The date of the latest update appears at the beginning of this page.