Data protection
What we do, and don’t do, with your data: which data, why and for how long.
In short
This website asks you for nothing, sets no advertising cookies and uses no tracking tools. In the apps, we only keep what they need to work: username, email address, scores. You sign in with a six-digit code sent by email, so we don’t keep any password. Your scores stay private until you choose to publish them, and you can export and then delete your data whenever you like. Write to us: contact@alphornstudio.ch.
1. Controller
The controller for the processing described in this policy is:
AlphornStudio
Switzerland
Contact regarding personal data: contact@alphornstudio.ch
The Swiss Federal Act on Data Protection (Swiss FADP) gives data subjects in particular the right to know which data concerning them are processed and, where the conditions are met, to request their correction or deletion.
2. Data processed
AlphornStudio applies the principle of processing only the information needed for its services to work.
AlphornScore and AlphornTrainer accounts. When an account is created or used, the following data may be processed:
- username;
- email address;
- information needed for authentication;
- data relating to scores, favourites, playlists and other features used.
Sign-in can be done using a temporary six-digit code sent by email. AlphornStudio therefore does not store any user password as part of this authentication system.
The username may become visible when the user shares or publishes content.
AlphornTuner. AlphornTuner does not currently require a user account.
Microphone. AlphornTuner uses the device’s microphone only to recognise the note being played. The sound is analysed on the device; it is neither recorded nor sent anywhere. The settings (key, reference A, volume, language…) stay on the device.
AlphornZik and AlphornSpots. These services are not yet offered in their final version. This policy will be updated if their operation involves new data processing.
3. Files and scores
Depending on the features available, users may import or save in particular:
- scores;
- PDF files;
- MusicXML files;
- scans of scores.
This content is private by default. The user may voluntarily choose to share it or make it public.
4. Public publication
When a score is published, the user may be asked to fill in the corresponding credits, in particular:
- title;
- subtitle;
- composer;
- lyricist;
- arranger;
- licence;
- copyright information.
Before each public publication, the user must confirm: “I confirm that I have the necessary rights to publish this score.”
The author can decide whether their public score may only be viewed or may also be downloaded. They can delete their publication whenever they wish.
5. Purposes
The data are used in particular to:
- create and manage accounts;
- authenticate users;
- save scores and preferences;
- enable synchronisation between devices;
- enable the voluntary sharing of content;
- ensure the operation and security of the services;
- respond to requests sent via the contact form;
- diagnose technical errors.
6. Contact form
The form may ask for:
- name or username;
- email address;
- message.
This information is sent by email to AlphornStudio. It is not stored separately in a database dedicated to the form.
Messages received are kept for a maximum of six months, then deleted once they are no longer needed.
No address is currently used for a newsletter or for marketing.
7. Hosting and location
Data may be hosted or processed on the AlphornStudio infrastructure, located in particular:
- in Switzerland, with KreativMedia;
- in Austria, with Netcup GmbH.
The Swiss FADP imposes in particular duties of care and security when a controller holds personal data and when it uses processors or transfers data.
8. Technical logs
The infrastructure generates certain logs needed for operation and security.
Application logs. They may contain errors, technical events and diagnostic information. The current configuration provides for rotation over about three 10 MB files per application: depending on activity, their actual lifespan can range from a few days to a few weeks. They are then replaced automatically.
Server logs. The server also keeps system logs and their archives. At the time of writing this policy, no uniform maximum duration has yet been configured for these logs. This configuration will be reviewed in order to set a reasonable retention period.
Security of administration access. Administrative login attempts on the server may record the date and time, the IP address and information about the attempt. Intrusion protection may analyse this information and temporarily block repeated attempts.
User sign-ins. During the check carried out on the current infrastructure, no IP address was recorded in the entries examined concerning user sign-ins.
Website visits. The web server does not currently have a configured access log that would make it possible to build a history of the site’s visitors.
9. Account retention period
An account is kept for as long as the user wishes to keep it. It is not currently deleted automatically after a period of inactivity. The user can delete it themselves.
10. Deletion
Users can delete themselves:
- their account;
- their scores;
- their files;
- their other personal data accessible via the service.
When an account is permanently deleted, AlphornStudio does not currently plan to keep a backup copy of the deleted data.
11. Data export
Users can export a copy of their data before deleting their account.
12. Users’ rights
Under applicable law, a person may in particular ask:
- whether AlphornStudio processes data concerning them;
- for access to their data;
- for their correction;
- for their deletion where the conditions are met.
The right of access allows a person to keep control over the information collected about them. Requests can be sent to: contact@alphornstudio.ch
13. Minor users
The services may be used by people of different ages. AlphornStudio does not currently ask for a date of birth, an age or a profile photo.
Where a minor is not legally able to carry out a particular act alone, the involvement of their legal representative may be required under applicable law.
14. Security
AlphornStudio implements technical and organisational measures to protect data in particular against unauthorised access, loss, unauthorised modification and misuse.
However, absolute security of an IT system can never be guaranteed.
15. Cookies
This website uses no advertising cookies and no analytics tools. It only remembers, in your browser and without sending it anywhere, whether you chose to hide the mascot.
A detailed check of cookies and any analytics tools in the apps is still to be completed; this page will be updated once that check is done.
