PASCAL NANLOHY

GDPR · transparency

Privacy & cookies.

This page explains how PSG Music processes data when you use this website, Studio Notes, the AI chat or the project form.

Last updated: 8 September 2026
01

Controller

PSG Music is the data controller for this website and its contact features.

Dutch Chamber of Commerce: 24366305

Privacy questions or requests: pascal@psgmusicpublishing.org

02

What data we use and why

Website and security: IP address, request and device characteristics may be processed technically to provide a secure and reliable website. The legal basis is PSG Music's legitimate interest in security and effective service.

AI chat: session number, language, time and the content of up to the last 18 chat messages are used to answer your question. The legal basis is taking steps at your request before a possible agreement and our legitimate interest in answering enquiries efficiently.

Live with Pascal: when you choose this option, we process your name, email address and question to enable direct contact.

Project enquiry: name, email, requested service, schedule and any private link are used to assess your enquiry and, where relevant, prepare a proposal. FormSubmit sends the enquiry directly to Pascal by email; the website does not store the project enquiry in its own database.

03

AI chat and human handoff

The digital assistant uses the OpenAI API. Recent messages are sent to OpenAI to generate an answer, with model-side storage disabled. PSG Music does not use chat content for automated decisions that produce legal or similarly significant effects.

Do not share contracts, identity documents, bank details, sensitive personal data or unreleased music in the chat. Only use a private link in the project brief for music.

If you choose live contact, Pascal can view and answer the conversation, your name and your email address in the protected inbox.

04

Studio Notes

When you sign up, we process your email address, preferred language, the consent wording shown to you and the time of consent so we can send Studio Notes and record your consent. The legal basis is your explicit consent.

You can unsubscribe on the website at any time. The submitted email address is then removed from the active subscriber list immediately. You can also email pascal@psgmusicpublishing.org.

The list is stored securely by the website's hosting and database providers. PSG Music may use an email provider for future mailings; this notice will be updated when a permanent provider is selected.

05

Who receives data

OpenAI to generate AI answers; OpenAI Sites and Cloudflare for hosting, security and network traffic; FormSubmit for email notifications when a live handoff is requested and for project enquiries; and the email provider for receiving and replying.

FormSubmit states that form submissions may remain available for up to 30 days. External providers process data under their own terms and privacy safeguards.

Some providers may process data outside the European Economic Area. Where this occurs, the transfer mechanisms in their applicable terms apply, such as an adequacy decision or standard contractual clauses.

06

Retention

Chat conversations, including live-contact details, are automatically removed from the chat database after 90 days without activity.

Enquiries that do not become an assignment are generally retained for no more than 12 months after the last contact. If an assignment starts, data is retained as needed for delivery, rights administration, disputes or legal obligations. Financial records are retained for the applicable statutory period.

Data is removed sooner when it is no longer needed, unless a legal obligation or justified need requires continued retention.

07

Cookies and external media

The website uses no marketing cookies and PSG Music has not installed advertising or analytics tracking.

Cloudflare may set the strictly necessary __cf_bm security cookie. It helps prevent automated abuse and, according to Cloudflare, expires after 30 minutes of inactivity.

When you use the chat, a necessary HttpOnly pn_chat_session cookie is set for up to 90 days. It only remembers the secure link to your conversation.

YouTube videos and the Spotify player load only after you press the relevant play button. YouTube uses the more privacy-friendly youtube-nocookie.com mode. Once activated, Spotify may set cookies and process technical data. Album covers may load directly from Apple Music, Deezer or Spotify image networks. Those providers may receive technical data such as your IP address. External platforms are governed by their own privacy policies.

08

Your privacy rights

You may request access, correction, deletion, restriction, portability or object to processing where the GDPR gives you that right. Send requests to pascal@psgmusicpublishing.org. We may ask for additional information to verify your identity.

You may also lodge a complaint with the Dutch Data Protection Authority. This notice may be updated when the website or services change.

Back to Pascal Nanlohy Ask a privacy question