Privacy Policy
Last updated: 27 September 2026
This page explains what personal data I collect through this website, why, and what your rights are.
Who is responsible
Hayden Arp, Vienna, Austria. Email: hello@haydenarp.com
Tour RSVPs and my mailing list
When you RSVP for a city on my tour page, I collect your first and last name, your email address, your phone number (only if you give it), the city you picked, the time you signed up, and a record of your consent. I use this to see where people want me to play, to plan the tour, and to email you about the tour and my music.
The legal basis is your consent (Art. 6(1)(a) GDPR). Before anything is added to my mailing list, you get an email asking you to confirm your address (double opt-in).
Services I use
Brevo (Sendinblue SAS, France) sends my emails and stores my mailing list. Google (Google Sheets and Apps Script) stores the RSVP list I use to plan the tour. Google may process data in the USA under the EU-US Data Privacy Framework. This website is hosted by Squarespace, which may set cookies and collect basic visitor statistics; see Squarespace's privacy policy for details.
How long I keep your data
Until you unsubscribe or ask me to delete it.
Your rights
You can ask me for a copy of your data, or ask me to correct, delete or restrict it, or to hand it over in a portable format. You can withdraw your consent at any time using the unsubscribe link in any email, or by writing to hello@haydenarp.com. This doesn't affect anything done before you withdrew it. You also have the right to complain to the Austrian Data Protection Authority (Datenschutzbehörde, dsb.gv.at).