Privacy Policy

Last updated: 24 July 2026

This Privacy Policy explains how personal data is collected, used, stored and protected when you visit valtyr.com, contact us, subscribe to the High Council newsletter or interact with the services and content provided through this website.

We process personal data in accordance with the Swiss Federal Act on Data Protection and, where applicable, the European Union General Data Protection Regulation.

1. Controller

The controller responsible for the processing of personal data through this website is:

VALTYR OFFILIAL
Trading as: VALTYR


Email: Please use our contact form
Website: https://valtyr.com/

VALTYR is the artistic and project name used on this website. Unless VALTYR is itself a registered legal entity, the natural person or registered business identified above is the legally responsible controller.

2. Scope of This Privacy Policy

This Privacy Policy applies to the website valtyr.com and to personal data submitted directly through forms made available on this website.

The website contains links to independent websites and platforms, including darkelf.com, Spotify, YouTube, Instagram, Facebook, Apple Music, Amazon Music, Deezer and iMusician. When you leave valtyr.com, the privacy policies and terms of the relevant external provider apply.

3. Categories of Personal Data We Process

Depending on how you interact with the website, we may process the following categories of data:

  • technical access and server log data;
  • IP address and approximate location derived from the IP address;
  • browser, operating system and device information;
  • date, time and duration of website access;
  • requested pages, files and referring website;
  • name and email address;
  • contact enquiry category, subject and message;
  • newsletter subscription and consent information;
  • form submission records;
  • cookie and consent preferences;
  • information voluntarily provided by you.

We do not intentionally request sensitive personal data. Please do not submit health information, identification documents, payment card information or other sensitive data unless specifically requested and necessary for a legitimate business matter.

4. Purposes and Legal Bases

We process personal data for the following purposes:

  • to provide, operate and secure the website;
  • to identify and prevent misuse, attacks, spam and technical errors;
  • to respond to contact and business enquiries;
  • to manage newsletter subscriptions and send requested updates;
  • to provide information about VALTYR music, stories, releases and projects;
  • to document consent and privacy preferences;
  • to comply with applicable legal obligations;
  • to establish, exercise or defend legal claims.

Where the GDPR applies, processing is based, depending on the relevant activity, on:

  • your consent under Article 6(1)(a) GDPR;
  • steps taken at your request before entering into a contract or performance of a contract under Article 6(1)(b) GDPR;
  • compliance with legal obligations under Article 6(1)(c) GDPR;
  • our legitimate interests in operating, securing, communicating about and developing the VALTYR project under Article 6(1)(f) GDPR.

Where processing is based on consent, you may withdraw that consent at any time with effect for the future.

5. Hosting and Server Log Files

The website is hosted by:

Hostinger Hosting
Švitrigailos str. 34, 03230 Vilnius
Latvia

When you access the website, the hosting server may automatically record technical information, including:

  • IP address;
  • date and time of access;
  • requested URL, page or file;
  • HTTP status code;
  • amount of data transferred;
  • browser type and version;
  • operating system and device type;
  • referring website;
  • server and security events.

These data are processed to deliver the website, maintain technical stability, detect malicious activity, troubleshoot errors and protect the website and its visitors.

Server logs are retained for approximately 30 days, unless a longer period is required to investigate a security incident, prevent fraud or comply with a legal obligation.

6. WordPress and Elementor Pro

This website is operated using WordPress and Elementor Pro. These systems provide the website structure, page design, contact forms, newsletter forms and related technical functions.

Information submitted through Elementor forms is stored in the protected WordPress administration area under Elementor Submissions and is also transmitted to the designated recipient mailbox.

Administrative access is restricted to authorised persons. Form submissions are used only for the purpose for which they were submitted and are not sold or made available to unrelated third parties.

7. Contact Forms and Business Enquiries

When you contact us through a website form or by email, we process the information you provide. This may include:

  • your name;
  • your email address;
  • the selected enquiry category;
  • the subject of your enquiry;
  • your message;
  • any other information voluntarily included by you.

The information is used to respond to your enquiry, evaluate possible cooperation, licensing, publishing, media or business opportunities, maintain relevant correspondence and protect the contact function against misuse.

Contact and business emails are delivered using:

Hostinger Hosting services

Ordinary enquiries are normally deleted within twelve months after the final response, unless the information remains necessary for an ongoing relationship, a contractual matter, a legal obligation or the establishment, exercise or defence of legal claims.

Business and contractual correspondence may be retained for the duration of the relationship and for applicable statutory retention and limitation periods.

8. High Council Newsletter

You may voluntarily subscribe to the High Council newsletter to receive information about VALTYR music, stories, book news, artwork, releases, events and behind-the-scenes content.

For newsletter administration, we process:

  • your email address;
  • your name, if requested or voluntarily supplied;
  • the date and time of registration;
  • your IP address at the time of registration, where recorded;
  • your consent status;
  • confirmation and unsubscribe information;
  • delivery, bounce and interaction information, where enabled.

The newsletter is technically administered by:

Hostinger Services

Newsletter registration uses a double opt-in procedure. After submitting the form, you receive an email asking you to confirm the subscription. The subscription becomes active only after that confirmation.

You may unsubscribe at any time by using the unsubscribe link included in every newsletter or by contacting us via our contact formular.

Withdrawal of consent does not affect processing that occurred lawfully before the withdrawal.

Newsletter subscription data are retained until you unsubscribe. Limited records may be retained afterwards where necessary to document the consent, honour an unsubscribe request, prevent renewed unwanted contact or comply with legal requirements.

Where newsletter opening and link interaction measurement is enabled, it is used to understand whether newsletter content is being delivered and used and to improve future communications. Such measurement is performed only where legally permitted and, where required, on the basis of consent.

9. Cookies, Local Storage and Consent Preferences

This website uses cookies and similar browser storage technologies. Cookies are small data files stored on your device.

Cookies may be used for the following categories:

  • Strictly necessary: website security, essential functionality, form operation and storage of privacy choices;
  • Functional: optional website features and embedded content;
  • Analytics: measurement of website use, only if such tools are activated;
  • Marketing: advertising or cross-platform measurement, only if such tools are activated.

Strictly necessary technologies may be used without optional consent where permitted by law. Optional cookies, analytics, marketing technologies and third-party media are not activated before the required consent has been provided.

You may accept, reject or manage optional technologies through the cookie consent interface. You may change or withdraw your choice at any time using the cookie settings link available on the website.

Withdrawing consent does not affect the lawfulness of processing performed before the withdrawal.

10. YouTube Trailer and Embedded Video Content

The website provides access to a VALTYR trailer through a YouTube player or lightbox. YouTube is a service provided by Google.

The YouTube player is loaded only after you have provided the required consent or deliberately activated the video. Before activation, no YouTube video player should be loaded.

When the YouTube player is activated, Google may receive information including:

  • your IP address;
  • browser and device information;
  • the page from which the video was opened;
  • video playback and interaction information;
  • cookie or account information, if you are logged into a Google account.

Google may associate your interaction with your Google account if you are signed in. Data may be processed in the European Economic Area, Switzerland, the United States or other locations used by Google and its service providers.

Where technically possible, the video is embedded using privacy-enhanced settings, without autoplay and with prior consent control.

The legal basis, where the GDPR applies, is your consent under Article 6(1)(a) GDPR.

11. Locally Hosted Fonts

Fonts used for the visual presentation of this website are hosted locally on the website server. No connection to Google Fonts or another external font provider is made solely for the purpose of displaying these fonts.

If an external font service is introduced in the future, this Privacy Policy and the cookie consent configuration will be updated before the service is activated.

12. Analytics and Marketing Technologies

At the date of this Privacy Policy, valtyr.com does not intentionally use Google Analytics, Meta Pixel, TikTok Pixel, Microsoft Clarity or comparable non-essential advertising or cross-site tracking technologies.

If analytics or marketing technologies are introduced in the future, they will be configured to respect applicable consent requirements, and this Privacy Policy will be updated before activation.

Administrative tools such as search-engine webmaster services may provide aggregated information about website visibility and search performance. These services do not by themselves require a visitor-side analytics script to be loaded on this website.

13. External Music, Distribution and Social-Media Links

The website contains ordinary external links to services that may include:

  • Spotify;
  • Apple Music;
  • YouTube;
  • Amazon Music;
  • Deezer;
  • iMusician;
  • Instagram;
  • Facebook;
  • darkelf.com.

An ordinary external link does not normally transmit information to the destination service until you select the link. After you select it, the destination provider may process your IP address, browser information, device data, account information and interaction data under its own privacy policy.

We do not control the independent data-processing practices of these external providers. Please review the privacy policy of the relevant service before using it.

14. Recipients and Service Providers

Personal data may be disclosed only where necessary to the following categories of recipients:

  • hosting and technical infrastructure providers;
  • email and newsletter delivery providers;
  • website maintenance and security providers;
  • professional advisers where legally necessary;
  • public authorities where disclosure is required by law;
  • third-party services activated by you, such as YouTube.

Service providers are permitted to process data only for the agreed purposes and subject to applicable confidentiality and data-protection obligations.

We do not sell personal data.

15. International Data Transfers

Some service providers may process personal data outside Switzerland, including in member states of the European Union or European Economic Area, the United Kingdom and the United States.

Where personal data are transferred to a country without a recognised adequate level of data protection, appropriate safeguards are used where required. These may include:

  • an applicable adequacy decision;
  • the Swiss-US or EU-US Data Privacy Framework where the recipient is validly certified;
  • recognised standard contractual clauses;
  • contractual and technical supplementary safeguards;
  • another legally permitted transfer mechanism.

You may contact us for further information about safeguards applicable to a specific transfer.

16. Retention of Personal Data

We retain personal data only for as long as necessary for the purposes for which it was collected or as required by law.

In particular:

  • server logs are retained according to the period stated in Section 5;
  • ordinary contact enquiries are normally deleted within twelve months after completion;
  • newsletter data are retained until unsubscribe, subject to limited proof and suppression records;
  • consent records are retained where necessary to demonstrate compliance;
  • contractual and accounting documents are retained for applicable statutory periods;
  • data connected with disputes or legal claims may be retained until the matter and relevant limitation periods have ended.

Data are deleted or anonymised when they are no longer required, unless continued retention is legally permitted or required.

17. Your Rights

Subject to the conditions and limitations of applicable law, you may have the right to:

  • request information about personal data processed about you;
  • obtain a copy of your personal data;
  • request correction of inaccurate or incomplete data;
  • request deletion of personal data;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • withdraw consent at any time with effect for the future;
  • request data portability where applicable;
  • lodge a complaint with a competent data-protection authority.

To exercise your rights, contact: [[PRIVACY EMAIL ADDRESS]].

We may request reasonable information necessary to verify your identity and protect your data against unauthorised disclosure.

Requests will be handled within the time limits required by applicable law. Certain rights may be restricted where continued processing is required by law, necessary for contractual obligations or justified by overriding rights and interests.

18. Supervisory Authorities

In Switzerland, you may contact the Federal Data Protection and Information Commissioner (FDPIC).

Where the GDPR applies, you may also lodge a complaint with the competent supervisory authority in your country of habitual residence, place of work or the place of the alleged infringement.

19. Automated Decision-Making and Profiling

We do not use personal data collected through this website to make decisions that produce legal effects or similarly significant effects solely through automated processing.

We do not create sensitive personality profiles from contact or newsletter data.

20. Data Security

We use appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, destruction, alteration, unauthorised access, disclosure or misuse.

Measures may include encrypted transmission using HTTPS, access controls, software updates, backups, security monitoring, restricted administrative permissions and confidential handling of enquiries.

No electronic transmission or storage system can guarantee absolute security.

21. Children

This website is not designed to knowingly collect personal data from children who are not legally able to provide valid consent.

If you are a parent or legal guardian and believe that a child has provided personal data without the required authorisation, please contact us so that the information can be reviewed and, where appropriate, deleted.

22. Changes to This Privacy Policy

We may update this Privacy Policy when the website, services, legal requirements or data-processing activities change.

The version published on this page applies. The date of the latest revision appears at the beginning of the document.

Material changes may also be communicated through the website or, where appropriate, by email.

23. Privacy Contact

Questions, requests and concerns relating to this Privacy Policy or the processing of personal data may be sent to us by using the contact formular.

This website stores cookies on your computer. Cookie Policy