This Cookie Policy explains how TrackSet uses cookies and similar technologies on its website, campaign pages, shop, artist-submission areas and related online services (together, the “Site”). It should be read with the TrackSet Privacy Policy.
Quick controls
- Use “Accept All” to allow all optional categories shown in the consent interface.
- Use “Reject All” or close the banner to continue with necessary technologies only.
- Use “Manage Preferences” for category-by-category choices.
- Change or withdraw consent at any time through the persistent “Cookie Settings” link.
Refusing optional technologies does not prevent you from browsing essential Site functions, placing an order or submitting an artist application.
1 Who we are and what this policy covers
The controller is Erkan Blattner, Ditta Individuale, trading as “TrackSet”, with registered office at Strada Provinciale 72, 74023 Grottaglie (TA), Apulien, Italien. Privacy contact: privacy@trackset.studio.
This policy covers technologies placed or accessed through the Site by TrackSet or by third parties integrated into it. External sites reached through a normal link apply their own policies once you leave TrackSet.
What “cookies and similar technologies” means
Cookies are small text files stored on or read from a browser or device. Similar technologies may include local storage, pixels, web beacons, scripts, tags, software development kits, device identifiers and other active or passive methods that store information on, or access information from, a user’s device.
| TERM | MEANING |
|---|---|
| First-party | Set or operated by TrackSet or on the TrackSet domain. |
| Third-party | Set or operated by another provider integrated into the Site. |
| Session | Normally expires when the browser session ends. |
| Persistent | Remains until its stated expiry, deletion or withdrawal of consent. |
Information these technologies may process
Depending on the technology, information may include consent choices, session and security identifiers, browser and device data, IP address, approximate location, referral source, pages viewed, interactions, campaign attribution, purchase events and timestamps. The exact technology, provider, purpose and duration must appear in the live Cookie Register before deployment.
2 Categories and purposes
| CATEGORY | TYPICAL PURPOSE | DEFAULT / BASIS |
|---|---|---|
| Strictly necessary | Security, fraud prevention, checkout, account or session continuity, load balancing, consent records and a service explicitly requested by the user. | On only where strictly necessary or otherwise legally exempt. |
| Preferences & functionality | Remembering non-essential settings or enhanced features that are not required to provide the requested core service. | Off until consent, unless a specific function is strictly necessary. |
| Analytics | Measuring visits, use, performance and conversion; understanding how the Site and campaigns work. | Off until consent unless a narrowly configured use qualifies for the Italian technical-cookie exemption. |
| Marketing & attribution | Advertising, retargeting, campaign attribution, audience building and measuring promotional performance. | Off until consent. |
| Social & embedded media | Loading players, feeds, share tools, Bandcamp or streaming embeds and other third-party content. | Blocked or click-to-load until consent where required. |
Analytics exception
Analytics technologies are not automatically “necessary”. TrackSet may treat a narrowly configured analytics tool as equivalent to a technical cookie only after documenting that the Italian requirements are satisfied, including appropriate aggregation and data minimisation and, where a third party is involved, measures preventing combination with other datasets or further independent use. Otherwise prior consent is required.
Legal framework
Access to or storage of information on a user’s device is governed by the Italian rules implementing the ePrivacy framework. Consent, where required, must also meet GDPR standards. Legitimate interests are not used as a substitute for the consent required for non-exempt tracking technologies.
3 How consent works
First visit and default state
On the first relevant visit, the consent interface provides a short notice and access to this detailed policy. Before a valid consent event, TrackSet must prevent optional technologies from loading or transmitting data. Necessary technologies may remain active only to the extent permitted by law.
A valid choice
- “Accept All”, “Reject All” and “Manage Preferences” must be immediate, usable and comparably accessible; the interface must not steer users through deceptive design.
- Optional categories must not be pre-selected. Silence, inactivity, ordinary scrolling or continued browsing alone is not consent.
- Consent must be specific by purpose, informed, unambiguous and recorded so TrackSet can demonstrate the choice.
- Consent to cookies is separate from accepting buyer terms, placing an order, submitting music or subscribing to general services.
- No cookie wall may condition access on optional tracking unless a lawful, genuinely equivalent alternative is available and separately assessed.
Changing or withdrawing consent
A persistent “Cookie Settings” link must allow users to revisit category choices at any time. Withdrawal must be as easy as consent. It does not affect processing that was lawful before withdrawal. TrackSet will stop future optional tracking covered by the withdrawal and instruct the consent tool to remove its own optional cookies where technically supported; users may also delete existing cookies in their browser.
Remembering a refusal or partial choice
TrackSet records the consent state and should not ask again merely because the user returns. A new request may be shown when material processing conditions change, the prior choice can no longer be recognised (for example after browser storage is cleared), or at least six months have passed since the previous banner presentation. Users can reopen Cookie Settings sooner by choice.
4 Third parties, embeds and email tracking
Third-party providers
Where TrackSet selects and configures a provider for Site functions, TrackSet will assess the provider’s role, contract, data use, retention and international-transfer arrangements. Some providers may act as processors; others may act as separate or joint controllers for particular activities. The live Cookie Register and Privacy Policy must describe the applicable arrangement without hiding it behind a generic label.
Embedded content and social features
Embedded audio, video, Bandcamp, streaming, social-media or sharing features may allow the provider to receive device and interaction data. Where consent is required, TrackSet will block the embed or use a click-to-load placeholder until the user enables the relevant category. After activation, the provider’s own privacy information also applies.
Email tracking pixels
Tracking pixels in emails can reveal whether and when a message was opened and may collect IP, device or repeated-opening information. TrackSet will not assume that a website-cookie choice authorises email tracking. Before enabling any email pixel, TrackSet must assess the actual purpose, provider, recipient group and required legal basis; provide specific transparency; obtain prior consent where required; and offer an effective way to refuse or withdraw without losing necessary service emails.
Transactional messages such as order confirmations must not contain optional marketing measurement merely because the message is operational. Where an email provider inserts remote images or tracking by default, TrackSet must configure or disable those functions in line with the documented choice.
External links
A normal link to a third-party website does not itself authorise that third party to track users on TrackSet. Once a user follows the link, the destination site controls its own technologies and notices.
Browser signals
Browser cookie controls can block or delete technologies but may not express a category-specific choice to every service. TrackSet will describe and honour Global Privacy Control, Do Not Track or similar signals only where supported by the production implementation or legally required; this policy does not promise unsupported automated recognition.
5 Retention, data use and your rights
Duration
Each live entry must state a specific lifetime or explain that it is session-based. TrackSet will configure durations no longer than necessary for the stated purpose and will review persistent technologies periodically. A provider’s technical maximum is not automatically TrackSet’s retention period.
International transfers
If a provider processes personal data outside the European Economic Area, TrackSet will use an available lawful transfer mechanism and safeguards as described in the Privacy Policy and, where relevant, in the live provider schedule. A provider must not be activated until this assessment is complete.
Privacy rights
Where information from cookies or similar technologies is personal data, users may have rights of access, correction, erasure, restriction, objection and portability, and the right to withdraw consent. Requests may be sent to privacy@trackset.studio. Users may also complain to the Italian Data Protection Authority (Garante per la protezione dei dati personali) or another competent supervisory authority. Full details appear in the TrackSet Privacy Policy.
Security and access
TrackSet limits access to tracking data to authorised persons and providers who need it for the stated purpose. Consent records, tag-manager access and provider accounts should be protected by appropriate technical and organisational measures. Tracking data must not be repurposed for unrelated third-party advertising without a separate lawful basis and transparent notice.
Changes to this policy
TrackSet may update this policy when technologies, providers, purposes or law change. The effective date and version will be updated, and material changes may trigger a renewed consent request. Previous versions should be retained internally. A change to this text does not retroactively expand an earlier consent.