Privacy Policy
Effective Date: December 2nd, 2025

This Privacy Policy describes how Magnus Bakken (the “Artist,” “we,” or “us”) collects, uses, discloses, and protects personal information on our Wix-based website. We are the data controller for information collected on this site. You can contact us for privacy matters at contact@magnusbakken.com.

Note on mailing address: As a sole proprietor working from a private residence, we do not publicly list a physical mailing address. A postal address for data protection purposes will be provided upon legitimate request.

If you have a question or complaint about your data, you may also contact the relevant data protection authority in your country (e.g., Norway’s Data Protection Authority or other EU/US authorities).

Data Collected

We collect the following types of personal information:

Identity Data: Name, username, date of birth, gender.
Contact Data: Email address, postal address, phone number (collected via contact forms, account signup, or purchases).
Account Data: Account username and password (securely hashed) if you register in the Members Area.
Payment Data: Billing address, transaction records, and payment method details (credit card info is processed securely by Stripe and is not stored on our servers).
Transactional Data: Products purchased (merchandise, CDs, vinyl), order dates, delivery details.
Technical Data: IP address, device and browser type, operating system, and site usage statistics (collected via analytics and cookies).
Social and Marketing Data: Data from social logins (if used), likes, comments, and interactions on our blog or social media feeds, and data collected via the Facebook/Meta Pixel or YouTube embeds (e.g., viewing behavior).

This site also uses analytics tools (planned Google Analytics use) and marketing tools (Meta Pixel). These may collect usage data (e.g., page views, device information) and set cookies on your device. See our separate Cookie Policy (and the cookie consent banner you agreed to) for details on cookies and tracking technologies. We obtain active consent for non-essential cookies as required by law. If you refuse cookies, some site features (like shopping carts or membership functions) may not work.

How We Collect Data

Forms and Accounts: When you fill out a Wix Contact Form, register in the Wix Members Area, subscribe to our newsletter, or comment on blog posts, you provide personal data directly (e.g., name, email, message content).
E-commerce Transactions: Through Wix Stores, when you purchase merchandise, CDs, or vinyl, we collect data you submit (shipping address, billing address, payment details, email). Payment card data is handled by Stripe (a PCI-compliant processor).
Automatic Collection: We use Wix and Google Analytics to collect technical and usage data (pages visited, time spent, referral source, etc.) via cookies and web beacons. If you watch embedded YouTube videos, Google may collect data under its own policy. The Meta Pixel collects data for targeted advertising and retargeting if you have a Facebook/Meta account.
Third-Party Sources: We may receive data from third-party services (e.g., data you choose to sync from social logins, or analytics aggregators).

We only collect data necessary for the purposes described below, in line with the GDPR principle of data minimization.

Legal Bases for Processing (GDPR)

For visitors from the EU/EEA (including Norway), we rely on the following lawful bases under Article 6 GDPR:

Consent: You have given clear consent for us to process your personal data for a specific purpose (e.g., subscribing to newsletters, consenting to cookies for analytics or marketing). Consent can be withdrawn at any time.
Contract Performance: Processing is necessary to fulfill a contract with you (e.g., processing your order or payment).
Legal Obligation: Processing is required to comply with a legal obligation (e.g., tax, accounting, and financial record-keeping requirements).
Legitimate Interests: We may process data for our legitimate interests, provided these do not override your rights. Legitimate interests include improving our website, marketing our music, and protecting the security of our site. You have the right to object to processing based on legitimate interests.
Vital/Public Interest: Not typically applicable to this site, but GDPR recognizes these bases (e.g., protecting health or performing a public task).

We inform you of the lawful basis we rely on at the time of data collection (e.g., in form disclosures or cookie notices).

How We Use Your Data

Providing Services: To manage orders (process payments via Stripe, ship merchandise), provide customer support, and communicate about purchases or accounts.
Site Operation: To run and maintain the website (manage accounts, store membership information, enable shopping carts, etc.).
Communication: To send requested information and updates, including responding to contact form inquiries and sending newsletters or marketing emails if you have opted in. You can withdraw consent at any time.
Marketing & Analytics: To analyze and improve our site and marketing. This includes Facebook/Meta Pixel retargeting and Google Analytics. If you object to marketing, we will stop these activities.
Legal Compliance: To comply with laws and enforce our Terms of Use.

We do not sell personal information. Under California law, “sale” is broadly defined, but we do not engage in selling or renting your data.

COPPA Compliance: If we learn that a visitor is under 13, we will not collect personal data without verifiable parental consent. Parents may access, review, and delete their child’s data.

Sharing Your Data

Service Providers: Wix, Stripe, shipping carriers, email newsletter providers, and other vendors who help operate the site. They are bound by contract to keep your data secure.
Social and Advertising Platforms: Google, Facebook/Meta, and YouTube for analytics and advertising. Their use of data is governed by their privacy policies.
Legal Authorities: To comply with laws (e.g., court orders or law enforcement requests) or to protect our rights.

We may share aggregate or anonymized data that cannot reasonably identify you. We do not sell, trade, or otherwise disclose personal information outside the above purposes.

Data Transfers

Our website is hosted in the EU/EEA, but many service providers (Stripe, Google, Meta) are in the United States. Transfers outside the EU/EEA follow GDPR safeguards:

Adequacy Decisions: Transfers to countries with EU adequacy decisions are permitted.
Standard Contractual Clauses: We use EU-approved Standard Contractual Clauses for other countries.
Other Safeguards: We may rely on binding corporate rules or certifications as appropriate.

Your Privacy Rights

GDPR (EU/EEA/Norway): Access, correct, erase, restrict, object to processing, data portability, withdraw consent, lodge complaints.
CCPA/CPRA (California residents): Right to know, delete, opt out of sale/sharing (we do not sell), correct inaccurate data, limit sensitive info use, non-discrimination.
Other jurisdictions: Users may have local rights.

To exercise rights, contact contact@magnusbakken.com with “Privacy Rights Request” in the subject. Requests are verified and responded to promptly.

Do Not Track: We do not currently honor browser-based Do Not Track signals.

Children’s Privacy

We do not knowingly collect personal information from children under 13 without verifiable parental consent. Parents can contact us to review, withdraw consent, or delete their child’s data at contact@magnusbakken.com.

Data Retention and Security

We retain data only as long as necessary or required by law. Data is securely deleted or anonymized after this period.

We implement technical and organizational measures to protect data, including HTTPS, encryption, access controls, and staff training.

Updates to This Policy

We may update this policy to reflect new services or legal requirements. The Effective Date will be revised, and significant changes may be posted on the homepage or sent to subscribers.

How to Contact Us

Email: contact@magnusbakken.com
Postal address will be provided upon legitimate request.

You can also view our Cookie Policy for information on cookie management. For EU/Norway residents, complaints may be lodged with your local data protection authority.

Identity Data: Name, username, date of birth, gender.

Contact Data: Email address, postal address, phone number (collected via contact forms, account signup, or purchases).

Account Data: Account username and password (securely hashed) if you register in the Members Area.

Payment Data: Billing address, transaction records, and payment method details (credit card info is processed securely by Stripe and is not stored on our servers).

Transactional Data: Products purchased (merchandise, CDs, vinyl), order dates, delivery details.

Technical Data: IP address, device and browser type, operating system, and site usage statistics (collected via analytics and cookies).

Social and Marketing Data: Data from social logins (if used), likes, comments, and interactions on our blog or social media feeds, and data collected via the Facebook/Meta Pixel or YouTube embeds (e.g., viewing behavior).

Forms and Accounts: When you fill out a Wix Contact Form, register in the Wix Members Area, subscribe to our newsletter, or comment on blog posts, you provide personal data directly (e.g., name, email, message content).

E-commerce Transactions: Through Wix Stores, when you purchase merchandise, CDs, or vinyl, we collect data you submit (shipping address, billing address, payment details, email). Payment card data is handled by Stripe (a PCI-compliant processor).

Third-Party Sources: We may receive data from third-party services (e.g., data you choose to sync from social logins, or analytics aggregators).

We only collect data necessary for the purposes described below, in line with the GDPR principle of data minimization. Legal Bases for Processing (GDPR) For visitors from the EU/EEA (including Norway), we rely on the following lawful bases under Article 6 GDPR:

Consent: You have given clear consent for us to process your personal data for a specific purpose (e.g., subscribing to newsletters, consenting to cookies for analytics or marketing). Consent can be withdrawn at any time.

Contract Performance: Processing is necessary to fulfill a contract with you (e.g., processing your order or payment).

Legal Obligation: Processing is required to comply with a legal obligation (e.g., tax, accounting, and financial record-keeping requirements).

Vital/Public Interest: Not typically applicable to this site, but GDPR recognizes these bases (e.g., protecting health or performing a public task).

We inform you of the lawful basis we rely on at the time of data collection (e.g., in form disclosures or cookie notices). How We Use Your Data

Providing Services: To manage orders (process payments via Stripe, ship merchandise), provide customer support, and communicate about purchases or accounts.

Site Operation: To run and maintain the website (manage accounts, store membership information, enable shopping carts, etc.).

Communication: To send requested information and updates, including responding to contact form inquiries and sending newsletters or marketing emails if you have opted in. You can withdraw consent at any time.

Marketing & Analytics: To analyze and improve our site and marketing. This includes Facebook/Meta Pixel retargeting and Google Analytics. If you object to marketing, we will stop these activities.

Legal Compliance: To comply with laws and enforce our Terms of Use.

Service Providers: Wix, Stripe, shipping carriers, email newsletter providers, and other vendors who help operate the site. They are bound by contract to keep your data secure.

Social and Advertising Platforms: Google, Facebook/Meta, and YouTube for analytics and advertising. Their use of data is governed by their privacy policies.

Legal Authorities: To comply with laws (e.g., court orders or law enforcement requests) or to protect our rights.

Adequacy Decisions: Transfers to countries with EU adequacy decisions are permitted.

Standard Contractual Clauses: We use EU-approved Standard Contractual Clauses for other countries.

Other Safeguards: We may rely on binding corporate rules or certifications as appropriate.

Your Privacy Rights

GDPR (EU/EEA/Norway): Access, correct, erase, restrict, object to processing, data portability, withdraw consent, lodge complaints.

CCPA/CPRA (California residents): Right to know, delete, opt out of sale/sharing (we do not sell), correct inaccurate data, limit sensitive info use, non-discrimination.

Other jurisdictions: Users may have local rights.

Email: contact@magnusbakken.com

Postal address will be provided upon legitimate request.

You can also view our Cookie Policy for information on cookie management. For EU/Norway residents, complaints may be lodged with your local data protection authority.

We only collect data necessary for the purposes described below, in line with the GDPR principle of data minimization.

Legal Bases for Processing (GDPR)

For visitors from the EU/EEA (including Norway), we rely on the following lawful bases under Article 6 GDPR:

We inform you of the lawful basis we rely on at the time of data collection (e.g., in form disclosures or cookie notices).

How We Use Your Data