Published: 15 March 2025
Effective: 15 March 2025
Last Updated: 15 March 2025
This Privacy & Cookie Policy explains how TerraSonic2 (“we,” “us,” “our”) collects, uses, discloses, and protects personal data when you visit www.terrasonic2.com (the “Website”), purchase merchandise or tickets, subscribe to our newsletter, or otherwise interact with us.
This Policy is intended to comply with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the ePrivacy Directive (2002/58/EC), as implemented in Ireland.
1. Data Controller
The Data Controller responsible for your personal data is:
TerraSonic2
Email: contact@terrasonic2.com
For all privacy-related inquiries, including exercising your rights, please contact us at the email above.
PART I – PRIVACY POLICY (GDPR)
2. Categories of Personal Data Collected
We may collect and process the following categories of personal data:
2.1 Identity Data
Full name
2.2 Contact Data
Email address
Telephone number (if provided)
Billing address
Shipping address
2.3 Transaction Data
Order details
Payment confirmation data (processed securely via third-party providers; we do not store full payment card numbers)
2.4 Technical Data
IP address
Browser type and version
Device type
Time zone setting
Operating system
2.5 Usage Data
Pages visited
Interaction with Website features
Referral source
2.6 Marketing & Communications Data
Newsletter subscription status
Communication preferences
3. Legal Bases for Processing (Article 6 GDPR)
We process personal data under the following lawful bases:
Article 6(1)(b) – Performance of a contract (e.g., processing orders, delivering merchandise)
Article 6(1)(c) – Compliance with legal obligations (e.g., tax record retention)
Article 6(1)(f) – Legitimate interests (e.g., Website security, fraud prevention, service improvement)
Article 6(1)(a) – Consent (e.g., newsletter subscriptions, non-essential cookies)
Where processing is based on consent, you may withdraw consent at any time.
4. Purposes of Processing
We use your personal data to:
Process ticket and merchandise orders
Provide order confirmations and shipping updates
Respond to inquiries
Send newsletters where consent has been given
Improve Website functionality and performance
Prevent fraud and ensure Website security
Comply with legal obligations
5. Newsletter & Direct Marketing
Where you subscribe to our newsletter, we process your name and email address based on your explicit consent.
You may withdraw consent at any time by:
Clicking “unsubscribe” in any email; or
Contacting contact@terrasonic2.com
Withdrawal does not affect the lawfulness of prior processing.
6. Data Sharing & Third-Party Processors
We use carefully selected third-party service providers to operate our Website and business, including:
Shopify (e-commerce infrastructure)
Gelato (merchandise fulfillment)
Meta Platforms (social media services)
YouTube (video hosting)
Spotify (music integration)
These providers act as data processors or independent controllers depending on the service provided.
Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:
Standard Contractual Clauses (SCCs) approved by the European Commission;
Adequacy decisions where applicable.
7. Data Retention
We retain personal data only as long as necessary:
Order and tax records: retained for 7 years (Irish tax compliance)
Newsletter data: retained until consent is withdrawn
Technical and analytics data: retained according to cookie duration (see Part II)
After retention periods expire, data is securely deleted or anonymised.
8. Your Rights Under GDPR
If you are located in the EU/EEA, you have the following rights:
Right of access (Article 15)
Right to rectification (Article 16)
Right to erasure (Article 17)
Right to restrict processing (Article 18)
Right to data portability (Article 20)
Right to object (Article 21)
Right to withdraw consent
Right to lodge a complaint
In Ireland, complaints may be submitted to:
Data Protection Commission
9. Security Measures
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
Encrypted communications (SSL/TLS)
Restricted administrative access
Secure hosting infrastructure
Access control policies
However, no system can guarantee absolute security.
PART II – COOKIE POLICY (ePrivacy Directive Compliance)
10. What Are Cookies?
Cookies are small text files placed on your device when you visit a website. Cookies may store information about your browsing activity and preferences.
Under the ePrivacy Directive, we may only place non-essential cookies with your prior informed consent.
11. Categories of Cookies We Use
11.1 Strictly Necessary Cookies
These cookies are required for Website functionality (e.g., shopping cart operation, security).
Legal basis: Article 6(1)(f) GDPR (legitimate interest).
Consent is not required under the ePrivacy Directive.
11.2 Analytics Cookies
Used to understand Website traffic and improve performance.
Legal basis: Article 6(1)(a) GDPR (consent).
Activated only after user consent via cookie banner.
11.3 Marketing & Tracking Cookies
Used to deliver relevant advertisements and track engagement across platforms.
Legal basis: Article 6(1)(a) GDPR (explicit consent).
May include services connected to:
Meta Platforms
Google
Spotify
These cookies are not set unless you actively opt in.
12. Cookie Consent Mechanism
When you first visit the Website:
You are presented with a clear cookie banner.
Non-essential cookies are disabled by default.
You may accept, reject, or customise preferences.
Consent is granular and documented.
You may modify or withdraw consent at any time via the cookie settings link on the Website.
13. Cookie Duration
Cookies may be:
Session cookies (deleted when browser closes)
Persistent cookies (stored for a defined period)
Specific durations are disclosed in the cookie settings panel.
14. Third-Party Cookies
Third-party services embedded on our Website may place their own cookies. We do not control these cookies. Please review their respective privacy policies.
15. Do Not Track Signals
Our Website does not automatically respond to “Do Not Track” browser signals. Users must manage preferences through the cookie consent tool.
16. Updates to This Policy
We may update this Privacy & Cookie Policy to reflect legal, operational, or technical changes. Updates become effective upon publication.
17. Contact
For all privacy, cookie, or data protection inquiries:
Privacy & Cookie Policy
T E R R A S O N I C 2
Down-2-Earth handcrafted Rock Music
NEWSLETTER