LEVION

Privacy

Privacy

Privacy

Privacy Policy – levionmusic.com

 

Changing the Privacy Policy

Under certain circumstances, VIDEOMANIAX S.R.L. may, as a personal data controller, modify this policy on the processing of personal data to reflect changes in legislation, internal practices, and procedures for processing personal data, or technological advances made over a certain period of time. In the event that we make changes in the way your personal data is processed or used, they will be published in the updated policy and the date of entry into force of the policy so amended will be published at the beginning of the processing note updated personal data. Therefore, this Privacy Policy must be consulted periodically in order to keep up with the latest policies and practices in this field.

 

In accordance with the provisions of Regulation (EU) No 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC, known as the “General Data Protection Regulation” or, in short, “GDPR“, we bring you the following aspects regarding the processing of your personal data:

 

  1. Who We Are

The data controller for this website is VIDEOMANIAX S.R.L., a Romanian legal entity.

  • Company Name: VIDEOMANIAX S.R.L.
  •  Headquarters: Bucharest, District 4, 168 Splaiul Unirii, Romania
  • Registration Details: CUI 42940428, Reg. Com. J2020010197400
  • Project Context: This site hosts the artistic project LEVION, founded by Ovidiu Joița and Liviu Căldărescu.
  • Contact details: hello@levionmusic.com / [phone number].

 

  1. Information We Collect

We may collect and process the following types of data when you interact with our website:

  • Contact Information: If you contact us via email or contact forms, we collect your name and email address to respond to your inquiries.
  • Usage Data: Information about how you use our website, including your IP address, browser type, and pages visited, collected through cookies and similar technologies.
  • Newsletter Data: If you subscribe to our updates regarding the album “Embrace the Light” or new video releases, we collect your email address.
  • Transaction Data: When you purchase digital content, we process your name, email address, billing details, and payment-related information necessary for completing the transaction.
  1. Legal Basis for Processing

We process personal data in accordance with Article 6 of the GDPR, based on the following legal grounds:

  • Performance of a Contract – to deliver purchased digital content and provide access to our services.
  • Legal Obligation – to comply with Romanian fiscal and accounting laws.
  • Legitimate Interest – to ensure website security, prevent fraud, and improve user experience.
  • Consent – for sending newsletters and marketing communications.

 

  1. Purpose of Data Processing

We use the collected data for the following purposes:

  • To provide access to the LEVION musical and visual content.
  • To process purchases and deliver digital products.
  • To communicate updates about our Spiritual Cosmic Metal releases and project milestones.
  • To ensure the technical security, functionality, and optimization of the levionmusic.com platform..

 

  1. AI and Data Integrity

Consistent with our AI Music Compliance standards, we do not use your personal data to train Artificial Intelligence models.

  • Our use of AI is strictly limited to music production assistance (sound design and mixing) and does not involve the processing of user-identifiable data for automated decision-making.

 

  1. Data Sharing and Third Parties

We do not sell your data. We may share information with trusted third-party service providers only as necessary to operate our site:

  • Hosting Providers: To keep the site online and secure.
  • Payment Processors (e.g., Stripe, PayPal) – to process secure transactions.
  • Email and Delivery Services – to send download links and communications.
  • Analytics Services: To understand our audience’s interaction with the 12-track Story Arc.
  • Streaming Platforms: If you follow links to listen to LEVION on external services (e.g., Spotify, YouTube), their respective privacy policies will apply.
  • Professional advisers, such as lawyers, accountants, auditors or other consultants who are legally or contractually bound to maintain the confidentiality of personal data.

 

We may also transfer your personal data to public authorities or state institutions, where this is necessary in order to comply with legal obligations or in response to lawful requests from such authorities.

 

If your data will be transferred to other companies in other countries to initiate, conclude, and develop contracts and/or projects with such an entity as, but not limited to travel management and order processing and delivery, you will be informed and the transfer will be done only by ensuring the safeguards provided by art. 44-49 of GDPR.

 

  1. Data Retention

We store your personal data only as long as necessary to fulfil the purposes outlined in this policy.

Transaction-related data is retained in accordance with Romanian accounting legislation.

Newsletter data is stored until you withdraw your consent or unsubscribe.

 

  1. Personal data security

VIDEOMANIAX S.R.L. takes all necessary measures to ensure that its employees, and all companies and organizations it works with, exercise due care and have awareness related to data security. VIDEOMANIAX S.R.L. provides training on data security to its employees when they first start working at the company, and at later stages as well to update their knowledge on this matter. All employees that access personal or sensitive personal data are required to provide a letter of undertaking in relation to the security and privacy of such data.

 

In case of any non-conformity with policies and procedures, disciplinary action is taken. The security of personal data is provided with password-protected protocols, firewalls, and access control mechanisms. Data is classified and labelled. Physical security measures are taken against external and peripheral threats. Changes made in the information systems are recorded. To avoid data losses, the backup of personal data is taken according to the data backup policy. Information systems are regularly scanned for security vulnerabilities, and any detected vulnerability is eliminated. In case of any breach of information security, non-conformities are determined immediately, and all necessary measures are taken to eliminate and prevent recurrence of such non-conformities.

 

  1. Your Rights (GDPR)

You have the following rights in relation to the personal data we hold about you:
Your right to be informed about how your personal data is being used
You have the right to be provided with sufficient information, in a concise, transparent, and easily understandable form, in order for you to gain insight and understanding of our processing activities and thus to ensure transparency of personal data use. For such informational purposes, we have designed and made available to you this Privacy Policy.
This Privacy Policy will keep you informed about how we will use your personal data. All necessary details have been provided hereto, so please read it carefully.

Your right to access

In brief

If you submit an access request to us, we shall confirm whether we are processing your personal data and, if so, provide you with a copy of that personal data (along with certain other details).

In detail

Upon your request, we will confirm that we process your personal data and, if so, we will provide you with a copy of your personal data that is subject to our processing and the following information:

  • the purposes of the processing;
  • the categories of personal data concerned;
  • the recipients or categories of recipients to whom personal data has been or is to be disclosed, in particular recipients from third countries or international organizations;
  • where possible, the period for which personal data are to be stored or, if that is not possible, the criteria used to determine that period;
  • the existence of the right to require the operator to rectify or erase personal data or to restrict the processing of personal data relating to the data subject or the right to object to processing;
  • the right to lodge a complaint with a supervisory authority;
  • where personal data are not collected from the data subject, any available information on their source;
  • the existence of an automated decision-making process including the creation of profiles and, in those cases, relevant information on the logic used and the significance and expected consequences of such processing for the data subject.

 

If we transfer your data outside of the European Economic Area or to an international organization you have the right to be informed of the appropriate safeguards applied.

The first copy of your personal data is provided free of charge. For additional specimens of the same personal data, we may charge a reasonable additional charge, taking into account the related administrative costs. If you submit your request in electronic form, and unless you request otherwise, the information will be provided to you in a commonly used electronic format.

 

Your right to correct personal data

If the personal data that we hold about you is inaccurate or incomplete, you are entitled to have it corrected. You can personally do so by updating your user account information. If you do not want to personally update or you do not have a user account, you can submit a request, and we shall perform the necessary changes.

If we’ve shared your personal data with others, we’ll let them know about the changes where possible. If you ask us, where possible and lawful to do so, we’ll also tell you who we’ve shared your personal data with so that you can contact them directly.

In order to keep personal data accurate, we may request you reconfirm/renew your personal data from time to time.

Your right to delete personal data
In brief

Also known as the “right to be forgotten”, this right enables you to request deletion of your personal data in some circumstances such as where we no longer need it or if you withdraw your consent (where applicable). We shall comply with your request unless we have a reason for keeping your personal data.

If we’ve shared your personal data with others, we shall let them know about the erasure where possible. If you ask us, where it is possible and lawful for us to do so, we shall also inform you who we’ve shared your personal data with so that you can contact them directly.

In detail

You may ask us to delete your personal data and we will respond to your request without undue delay, if one of the following circumstances:

  • Data is no longer required for the purposes for which it was collected or processed;
  • You withdraw consent to the processing of your data when your data processing is based on your consent and there is no other legal basis on which to process your personal data;
  • You oppose the processing of your data on our legitimate interest, including the creation of profiles based on this ground, or you oppose data processing for direct marketing purposes, including the creation of profiles for direct marketing purposes;
  • Your data has been processed unlawfully;
  • Personal data should be deleted to comply with a legal obligation under Union law or national law;
  • Personal data have been collected in connection with the provision of information services to children and the basis of processing is consent.

 

Unless this proves impossible or involves disproportionate efforts, we shall notify each recipient to whom your personal data has been disclosed for erasure purposes. Upon your request, we shall inform you of those recipients.

We reserve the right to refuse the deletion of your data when processing is required:

  1. For the exercise of the right to free expression and information.
  2. In order to comply with a legal obligation that applies to us as a personal data controller.
  3. For purposes of archiving in the public interest, scientific or historical research, or for statistical purposes, insofar as the deletion of the data is likely to render impossible or seriously impair the achievement of the objectives of the processing.
  4. To establish, exercise or defend a right in court.

 

Your right to restrict us from using your data
In brief

In certain circumstances (including where we use legitimate interests as set out below) you can ask us to stop processing your personal data or ask for us to limit the ways in which we process this data. However, we can refuse a request in some cases – we shall provide you with information explaining why we have refused your request if we do this.

In detail

You may ask us to block and restrict the processing of your personal data in one of the following circumstances:

  • Contest the accuracy of the data – in this case, at your request, we will restrict the processing for the period we perform the necessary checks on the accuracy of your data;
  • Data processing is illegal and you do not want to delete your data;
  • We no longer need your data for processing, but processed data about you is necessary to establish, exercise or defend a right in court;
  • You opposed the processing of your data under our legitimate interest, including the creation of profiles based on this basis – in this case, at your request, we will restrict the processing for the period in which we verify that our legitimate rights do not prevail over your rights.

 

If your data processing has been restricted, we shall only be able to store your data. Any other way of processing out of storage will be done only:

  • after obtaining your consent;
  • for finding, exercising, or defending a right in court;
  • to protect the rights of another natural or legal person;
  • for reasons of public interest of the Union or of a Member State.

We will inform you before lifting any processing restriction as set out above.

Unless this proves impossible or involves disproportionate efforts, we will communicate to each recipient to whom your data has been disclosed restricting the processing of such data. At your request, we will inform you of those recipients.

Your right to data portability

You have the right to receive the data that concerns you and that you have provided us with in order to transmit such data to another controller, in the following circumstances:

  • Your data processing is based on your consent or on a contract between us and you;
  • Your data is processed by automatic means.

We will provide your personal data in a structured, commonly used, and machine-readable format.

If technically feasible, you can request that your personal data be transmitted directly to the controller indicated by you.

Your right to object

You may request us not to further process your personal data for reasons relating to your particular circumstances and if the processing of your data is based on our legitimate interest. We will cease processing of your data unless we demonstrate that we have legitimate and compelling reasons that justify processing and those reasons prevail over your interests, rights, and freedoms, or whether the purpose of the processing is to establish, exercise or defend a right in court.

In addition to the above, you may request that we no longer process your personal data for direct marketing purposes, including the creation of profiles related to that direct marketing.

Your rights in relation to automated decision-making and profiling
In brief

You have the right not to be subject to a decision when it is based on automatic processing, including profiling, and if it produces a legal effect or similarly significantly affects you, unless such profiling is necessary for entering into, or the performance of, a contract between you and us.

In detail

You have the right not to be subject to a decision when it is based on automatic processing, including not being profiled, if the automatic decision or profiling has legal effects or significantly affects you, except in the following cases:

  1. the automatic decision is required to conclude or execute a contract between you and us;
  2. the automatic decision is authorized by European Union or national law applicable to VIDEOMANIAX S.R.L. and also provides for appropriate measures to protect the legitimate rights, freedoms, and interests of the data subject;
  3. The automatic decision is based on your express consent.

If the cases indicated in (a) and (c) above apply, you may request that you exercise the following correlative rights:

  • the right to obtain human intervention on our part;
  • the right to express your point of view;
  • the right to challenge the automatic decision.

Your right to withdraw consent

If we rely on your consent as our legal ground for processing your personal data, you are entitled to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of the processing of your personal data on the basis of your consent prior to its withdrawal.

Your right to stop direct marketing.

You are entitled to stop us from using your personal data for direct marketing purposes. You can do this by accessing the unsubscribe link at the bottom of our emails or by sending us a request.

 

Your right to lodge a complaint with the supervisory authority

You have the right to contact the National Supervisory Authority for Personal Data Processing of Romania (“ANSPDCP”) or the supervisory authority from your homeland or workplace if you believe the processing of your data is not in compliance with the applicable law.

More information about ANSPDCP can be obtained by visiting http://www.dataprotection.ro/.

Your right to seek judicial remedy

  • Without prejudice to any other administrative or non-judicial remedy, you have the right to pursue an effective judicial remedy against:
  • a controller/processor that infringed the rights granted to you by the GDPR;
  • a legally binding decision of ANSPDCP or any other supervisory authority.

 

To the extent that you have suffered moral or material damage as a result of GDPR infringement, you have the right to obtain compensation.

How you can exercise your rights as data subject and our data subject requests procedure?

  • Submitting a request.For the exercise of any rights above, please submit your request in writing or by phone, using the contact details indicated below.
  • Identification of the applicant. In order to be able to properly address and manage your request, we urge you to identify yourself as completely as possible. In case we have reasonable doubts as to the identity of the applicant, we will ask for further information to confirm the alleged identity.
  • Response time. We will respond to your requests without undue delay, and in any case within one month from the receipt of the request. Insofar as your application is complex or we are in a position to process a large number of requests, we may reasonably postpone the delivery of your response for up to two months with your prior notice.
  • Providing our answer. We will provide you with our response and any requested information in electronic format unless you request them to be provided in another format.
  • In case of refusal. In so far as we refuse to meet your request, we will inform you of the reasons which led to this decision and of the possibility to submit a complaint to ANSPDCP or another competent supervisory authority and to apply for a judicial remedy.
  • Taxes. Exercising your rights as a data subject is free. However, to the extent that your claims are manifestly unfounded or excessive, especially by taking into account their repetitive character, we reserve the right to refuse the fulfilment of such requests.