Effective date: 23 December 2025
AFRICA.ROCKS (“we”, “us”, “our”) respects your privacy and is committed to protecting personal data. This Privacy Policy explains what personal data we collect when you visit africa.rocks, why we collect it, how we use it, and what rights you have under the EU General Data Protection Regulation (GDPR).
1) Data Controller
Controller: Joel Eduardo Moreira Ramos da Costa (sole proprietor)
Address: Unit 162998, PO Box 7169, Poole, BH15 9EL, United Kingdom
Email: joelcosta@africa.rocks
2) Personal data we collect
2.1 Data you provide to us
Email correspondence (promos / press materials / general messages):
If you contact us by email, we process the personal data contained in your message (for example: your email address, name/signature, and any information you include).
We do not provide a contact form, newsletter signup, user accounts, or public comments on the website.
2.2 Data collected automatically
When you access the site, our systems may collect technical data such as:
- IP address (often stored in server logs)
- device and browser information
- approximate location (country/region)
- pages viewed, time spent, referring pages, and similar usage data
This information may be processed via our hosting environment and via analytics tools (see Section 4).
3) Why we process personal data (purposes)
We process personal data to:
- operate and secure the website
- understand how the site is used and improve performance and content
- respond to emails and manage press/promotional communications
- prevent fraud, abuse, and technical incidents
- comply with legal obligations when applicable
4) Cookies and analytics
We use cookies and similar technologies. Details (including cookie categories and how to manage your preferences) are explained in our Cookie Policy:
Cookie Policy (EU): https://africa.rocks/cookie-policy
Google Analytics
We use Google Analytics to measure traffic and usage patterns. Google may set cookies or use similar technologies for analytics, subject to your consent preferences where required.
Google may process data on servers outside the European Economic Area (EEA). Where applicable, transfers are handled using recognised safeguards (for example, Standard Contractual Clauses and/or other lawful transfer mechanisms provided by Google).
5) Embedded content (YouTube, Spotify, Bandcamp)
Some pages may include embedded players or content from third parties, including:
- YouTube
- Spotify
- Bandcamp
When you load a page containing an embed, these providers may collect data (such as your IP address and device information) and may set cookies or use similar technologies. Their processing is governed by their own privacy policies and settings.
Where possible, we rely on consent mechanisms and cookie preferences for non-essential tracking.
6) Advertising (future use, including Google AdSense)
AFRICA.ROCKS does not currently display advertising. We may introduce advertising in the future, including Google AdSense or similar services.
If advertising is enabled, ad partners may use cookies or similar technologies to measure performance, limit frequency, and personalise ads (depending on your consent choices and applicable law). We will update this Privacy Policy and our Cookie Policy if and when advertising is implemented.
7) Legal bases for processing (GDPR)
Depending on the context, we rely on the following legal bases:
- Consent (Art. 6(1)(a))
For non-essential cookies and analytics where consent is required. - Legitimate interests (Art. 6(1)(f))
For website security, basic operational analytics (where permitted), fraud prevention, and maintaining and managing communications. Our legitimate interests are balanced against your rights and freedoms. - Legal obligation (Art. 6(1)(c))
Where we must comply with applicable laws (for example, responding to lawful requests). - Performance of a contract / steps at your request (Art. 6(1)(b))
Where applicable, if you request a service or specific action that requires processing (rare for this site, but included for completeness).
8) Who we share data with
We may share personal data only as needed with service providers that support website operation and communications, such as:
- Hosting provider: ProAlojamento (website hosting and server infrastructure)
- Email providers: Google services and cPanel email services (email delivery and storage)
- Analytics provider: Google Analytics (website usage measurement)
- Content delivery/security tools: caching/performance plugins and related infrastructure as configured on the site
Service providers process data under their own terms or under agreements that support GDPR compliance, depending on the service.
We do not sell personal data.
9) International data transfers
Some providers (for example, Google) may process data outside the EEA. Where this occurs, we rely on recognised safeguards (such as Standard Contractual Clauses and other lawful transfer tools made available by the provider) and we limit data sharing to what is necessary for the service.
10) Data retention
- Email correspondence (promos and press communication): retained indefinitely as part of our editorial and operational records, unless you request deletion and there is no overriding legal or legitimate reason to retain the message.
- Server logs and technical records: retained for a limited period, typically determined by hosting and security needs.
- Analytics data: retained according to Google Analytics settings and our operational needs.
If you want us to delete email correspondence you have sent, contact us at joelcosta@africa.rocks. We will assess the request in line with GDPR and applicable obligations.
11) Your rights (GDPR)
If you are in the EEA/UK (and in other jurisdictions where similar rights apply), you may have the right to:
- access your personal data
- correct inaccurate data
- request deletion (in certain circumstances)
- restrict processing (in certain circumstances)
- object to processing based on legitimate interests
- withdraw consent (where processing is based on consent)
- data portability (where applicable)
To exercise these rights, contact joelcosta@africa.rocks. We may request reasonable information to verify your identity.
You also have the right to lodge a complaint with your local data protection authority. In Portugal, this is the CNPD.
12) Children
AFRICA.ROCKS is not directed to children and we do not knowingly collect personal data from children.
13) Security
We take reasonable technical and organisational measures to protect personal data. No method of transmission or storage is completely secure, but we work to reduce risks through appropriate website and hosting security practices.
14) Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes in services, legal requirements, or site functionality. The effective date at the top will be updated accordingly.
15) Contact
For privacy questions or requests, contact:
joelcosta@africa.rocks
