Privacy Policy
Last updated:
Who manages your data
Elder Tusk is an independent music band based in Athens, Greece. The members of Elder Tusk jointly manage this website and correspondence sent to the band. For privacy questions or requests, contact all members through management@eldertusk.com.
Contacting the band
If you email us, we process your email address, any name you provide, and the contents and attachments of your message to respond and manage the correspondence. Our legal basis is our legitimate interest in communicating with people who contact the band. Where your request concerns entering into a contract with you, processing necessary to take steps at your request before that contract is based on Article 6(1)(b) GDPR.
All band members have access to the shared mailbox. We retain incoming messages for six months from receipt and then delete them from the mailbox. This period concerns our handling of messages; the provider's technical records have separate retention periods described below.
Providing information by email is voluntary, but we need a reply address and enough information to respond to your request. Please only send information necessary for your enquiry.
Hosting, email and technical records
Our website and email services are provided through Papaki. Technical data is processed to deliver these services, maintain security and diagnose problems. Our legitimate interest is operating and protecting the website and band communications.
Papaki documents the following categories of records, whose availability depends on the service:
- Access logs, which can contain IP addresses, dates and times, requests and browser user-agent information.
- Error logs relating to web-server and application errors.
- FTP/SFTP logs relating to administrative access and file transfers.
- Email logs and usage statistics. Email traffic metadata can include sender and recipient details, IP addresses, mail-server information and connection times.
According to Papaki's privacy notice, traffic data is retained for one year under the legislation cited by the provider, and website logs are retained for a maximum of two years on the basis of its legitimate interest in protecting hosted websites. These are the provider's stated retention periods, rather than a claim that every log category is retained for the same duration. See also Papaki's information on available service data.
External resources and links
The main website loads Google Fonts and icon resources from Google, cdnjs (Cloudflare) and unpkg. When your browser requests these resources, the providers receive your IP address and technical request information. These resources supply the website's typography and icons.
The website also links to services such as YouTube and SoundCloud. Following a link takes you to that service, where its own privacy policy applies. The website's background videos are hosted as website files, rather than embedded third-party players.
External providers may process data outside the European Economic Area. Their applicable processing locations and transfer safeguards depend on the service. Information is available in the privacy notices of Google, Cloudflare and unpkg, and in Papaki's privacy notice for hosting and email.
Cookies and tracking
We use Cookie Script to display our cookie consent banner and manage cookie preferences. Loading this service connects your browser to Cookie Script's servers, which receive your IP address and technical request information. The consent service may store information needed to remember your choices.
We have not added analytics or advertising trackers to the website's own code. Technical records generated by hosting and external resource requests are described above.
Your rights
Subject to the conditions of the GDPR, you may request access to, correction or deletion of your personal data, restriction of processing, and data portability where applicable. You may object to processing based on legitimate interests. If processing is based on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.
Send requests to management@eldertusk.com. We normally respond within one month; if a lawful extension is necessary, we will inform you within that month. We may request proportionate information to verify your identity.
You may lodge a complaint with the Hellenic Data Protection Authority or another competent supervisory authority. We do not use your correspondence for automated decisions producing legal or similarly significant effects.
Changes to this policy
We will update this page when our data-handling practices change. The date above identifies the latest update.