Privacy Policy

Last updated: August 14, 2026

This Privacy Policy describes how personal data is collected, used, stored and protected when users visit the official Neural Odyssey website, use the services available on the website, subscribe to the newsletter, create an account or make purchases through the shop.

Personal data is processed in accordance with Regulation (EU) 2016/679, GDPR, applicable Italian data protection legislation and, where applicable, the laws in force in the countries where users are located.

1. DATA CONTROLLER

The Data Controller responsible for personal data collected through the website is: Alessandro Drago

For privacy related requests and to exercise the rights described in this Privacy Policy, users may use the Contact Form available on this website, as described in the Privacy Contact section.

2. TYPES OF DATA COLLECTED

Depending on how the website is used, different categories of personal data may be collected.

Data voluntarily provided by users

When using services available on the website, users may voluntarily provide information such as:

First and last name
Email address
Telephone number, where required
Billing address
Shipping address
Country, city, state, province or region and postal code
Information relating to orders
Content of communications sent through the website
Information necessary to handle customer support requests, returns, refunds or defective products
Photographic documentation submitted to report defective, damaged, incorrect or non conforming products.
Account data

When a user creates an account in the shop, the following information may be processed:

First and last name
Email address
Username, where applicable
Password in a protected and non readable form
Saved addresses
Order history
Preferences and other information associated with the account.

Purchase and order data

When an order is placed through WooCommerce, information necessary to manage the purchase may be processed, including:

Products purchased
Amounts paid
Order date and number
Name and contact details
Billing address
Shipping address
Payment method used
Payment status
Information relating to production, shipping and delivery.

3. PAYMENT DATA

Payments made through the shop are processed using the payment service providers available at the time of purchase.

Information necessary to process a payment may be transmitted directly to the relevant payment provider.

Depending on the service used, this may include information such as the customer’s name, email address, billing address, order amount and transaction identifiers.

Neural Odyssey does not directly store complete payment card details when such information is handled by an external payment service provider.

The relevant provider processes personal data in accordance with its own privacy policy and applicable law.

4. NEWSLETTER

Users may voluntarily subscribe to the Neural Odyssey newsletter.

The email address provided is used to send communications relating to the music project, new releases, content, events, merchandise, initiatives and other Neural Odyssey news.

The legal basis for processing personal data for newsletter purposes is the user’s consent pursuant to Article 6(1)(a) of the GDPR.

Newsletter subscription is optional and is not required to use the website or make purchases.

Users may withdraw their consent and unsubscribe at any time by using the unsubscribe link included in newsletter communications.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

5. ORDER COMMUNICATIONS

The email address and other contact information provided when making a purchase may be used to send communications necessary to manage the order.

These communications may include:

Order confirmation
Payment confirmation
Production updates
Shipping and delivery information
Communications concerning problems with an order
Customer support
Returns, replacements and refunds.

These communications are necessary for the performance of the contract and do not constitute newsletters or promotional communications.

Users may therefore receive communications necessary to manage an order even if they are not subscribed to the Neural Odyssey newsletter.

6. ACCOUNT CREATION AND MANAGEMENT

Where this functionality is available, the shop allows users to create a personal account.

The account may be used to access features provided by the shop, view previous orders and manage information associated with the user’s profile.

Processing of personal data necessary to create and manage an account is carried out in order to provide the service requested by the user and to manage the contractual relationship or pre contractual measures requested by the user.

Creating an account is optional where the shop allows purchases to be made as a guest.

7. PRODUCTION AND FULFILMENT OF ORDERS

Most products available through the shop are manufactured using print on demand services.

In order to manufacture, fulfil and deliver an order, strictly necessary personal data may be transmitted to the partners involved.

This information may include:

Recipient’s name
Shipping address
Telephone number where necessary for delivery
Email address where necessary
Products ordered
Information necessary for production and shipping.

Sharing this information is necessary for the performance of the order.

Service providers process personal data according to their respective role under applicable data protection law and their applicable privacy policies and contractual obligations.

8. SHIPPING

Personal data necessary for delivery may be disclosed to carriers and logistics providers responsible for shipping orders.

Where necessary, this information may include:

First and last name
Shipping address
Telephone number
Email address

Information necessary to identify and deliver the shipment.

Processing is necessary to perform the contract and deliver the purchased products.

9. CONTACT FORMS AND CUSTOMER SUPPORT

When a user contacts us through a form available on the website, we may collect the information entered in the form and any additional information necessary to respond to and manage the request.

Depending on the type of request, this may include:

Name
Email address
Order number
Subject of the request
Message content
Information relating to an order
Attachments voluntarily provided by the user.

For reports concerning defective, damaged, incorrect or non conforming products, photographs of the product, packaging, labels or other elements necessary to assess the issue may be requested.

This information may be shared with the relevant production or fulfilment partner where necessary to verify the reported issue and provide an appropriate solution.

Information submitted through contact forms is used exclusively for the purpose of handling the user’s request and for related administrative, contractual or legal purposes where applicable.

10. PURPOSES AND LEGAL BASES FOR PROCESSING

Personal data may be processed for the following purposes.

Website operation and security

Processing may be based on our legitimate interest in ensuring the security, integrity and proper operation of the website and its services, within the limits provided by Article 6(1)(f) of the GDPR.

Account management

Processing is necessary to provide the service requested by the user and manage the user’s account.

Order management

Processing is necessary for the performance of a contract or to take steps at the request of the data subject prior to entering into a contract pursuant to Article 6(1)(b) of the GDPR.

Payments, production and delivery

Processing is necessary to process and fulfil the customer’s order.

Tax, accounting and legal obligations

Personal data may be stored and processed where necessary to comply with legal obligations pursuant to Article 6(1)(c) of the GDPR.

Customer support and disputes

Personal data may be processed to handle requests relating to orders, warranties, returns, refunds and disputes and, where necessary, for the establishment, exercise or defence of legal claims.

Contact requests

Personal data submitted through a contact form is processed in order to respond to the user’s request and, where applicable, to take steps requested by the user prior to entering into a contract, perform a contract, comply with legal obligations or pursue legitimate interests related to the management and security of communications.

Newsletter and promotional communications

Processing is based on the user’s consent pursuant to Article 6(1)(a) of the GDPR.

11. NEWSLETTER SUBSCRIPTIONS AND PURCHASES ARE SEPARATE

Placing an order does not automatically subscribe the customer to the Neural Odyssey newsletter. Consent to receive the newsletter, where requested, is obtained separately.

Similarly, withdrawing consent to receive the newsletter does not affect the user’s ability to use the shop, maintain an account or receive communications necessary to manage existing orders.

12. RECIPIENTS OF PERSONAL DATA

Personal data may be disclosed, where necessary, to parties involved in the operation of the website and provision of its services.

These may include:

Hosting and infrastructure providers
Technical service providers
WooCommerce and related services, where applicable
Payment service providers
Print on demand production and fulfilment partners
Shipping carriers and logistics providers
Newsletter service providers
Email service providers
Providers of contact form and anti spam services, where applicable
Tax, accounting, legal or technical advisers where necessary
Public authorities where disclosure is required by law.

Personal data is not sold to third parties.

13. INTERNATIONAL DATA TRANSFERS

Some service providers used for the operation of the website, payment processing, newsletters, print on demand production, fulfilment, shipping or other website services may be established or use infrastructure located outside the European Economic Area.

Where a transfer of personal data to a third country is subject to the GDPR, the transfer will be carried out in accordance with Articles 44 and following of the GDPR and using one of the mechanisms permitted by applicable law, such as an adequacy decision by the European Commission, Standard Contractual Clauses or another legally valid transfer mechanism.

14. DATA RETENTION

Personal data is retained for as long as necessary for the purposes for which it was collected and subsequently, where necessary, to comply with legal obligations or protect legal rights.

Data relating to orders and administrative or tax documentation is retained for the period required by applicable law.

Newsletter data is retained until consent is withdrawn or the user unsubscribes, without prejudice to the retention of information strictly necessary to document consent or its withdrawal.

Account data is retained until the account is deleted or for as long as necessary to manage the relationship with the user, without prejudice to order information that must be retained to comply with legal obligations.

Information submitted through contact forms and customer support requests is retained for the period necessary to handle the request and subsequently where necessary to document the actions taken, comply with legal obligations or protect legal rights.

15. COOKIES AND SIMILAR TECHNOLOGIES

The website may use cookies and similar technologies that are necessary for its operation and, where present, cookies or other technologies used for statistical, analytical or other purposes.

WooCommerce also uses technologies necessary for functions such as the shopping cart, user sessions and operation of the shop.

Detailed information about the cookies used, their purposes, duration and how users can manage their consent is provided in the website’s Cookie Policy.

Where required by applicable law, cookies and technologies that are not strictly necessary are used only after obtaining the user’s consent.

16. SECURITY

Reasonable technical and organisational measures are adopted to protect personal data against loss, unauthorised access, alteration, disclosure or destruction.

The website uses secure HTTPS connections when information is transmitted between the user’s device and the server.

However, no information system or method of data transmission can guarantee absolute security.

17. DATA SUBJECT RIGHTS

Where the GDPR applies, users may exercise the rights provided by Articles 15 and following of the Regulation, subject to the conditions established by applicable law.

In particular, users may request:

Access to their personal data
Correction of inaccurate personal data
Deletion of personal data
Restriction of processing
Data portability
Objection to processing where applicable
Withdrawal of consent at any time for processing based on consent.

Users also have the right to lodge a complaint with the competent supervisory authority.

For data subjects in Italy, the competent supervisory authority is the Garante per la protezione dei dati personali.

The exercise of the right to deletion does not necessarily result in the deletion of information that must be retained in order to comply with tax, accounting or legal obligations or for the establishment, exercise or defence of legal claims.

18. INTERNATIONAL USERS

The website and shop may be accessed by users located outside the European Union.

Where local data protection legislation grants users additional mandatory rights beyond those described in this Privacy Policy, those rights remain unaffected to the extent that the relevant legislation applies to the processing.

19. CHILDREN

The Neural Odyssey website and shop are not specifically directed at children and we do not knowingly collect children’s personal data in violation of applicable law.

If we become aware that personal data has been collected in a manner that does not comply with applicable law, appropriate steps will be taken to manage or delete that information.

20. EXTERNAL LINKS

The website may contain links to external websites, music platforms, social networks or other services operated by third parties.

Neural Odyssey does not control personal data processing independently carried out by these external services.

When users leave the Neural Odyssey website and use an external service, personal data processing is governed by the terms and privacy policies of the relevant provider.

21. CHANGES TO THIS PRIVACY POLICY

This Privacy Policy may be updated to reflect changes to the website, shop, services used or applicable law.

The updated version will be published on this page together with the date of the latest update.

Where required by applicable law, appropriate measures may be used to inform users of material changes.

22. PRIVACY CONTACT

For any request concerning the processing of personal data or to exercise rights under applicable data protection legislation, users may contact us using the Contact Form available on this website.

Please select the appropriate subject and provide the information reasonably necessary for us to identify and process the request.

Requests concerning access, rectification, deletion, restriction, portability, objection or withdrawal of consent will be handled in accordance with applicable data protection legislation.

For security purposes, we may request additional information where reasonably necessary to verify the identity of the person making the request.

Requests relating to orders, returns, refunds, shipping, defective products or other merchandise related matters may also be submitted through the Contact Form by selecting the appropriate subject.