Last updated: 3 September 2026
Data controller
This website (https://evariveramusic.com) belongs to Eva Rivera, based in Montreal (Quebec, Canada). For any question relating to your personal information, you can write to web@evariveramusic.com.
Applicable legislation
The processing of personal information carried out through this site is governed by the laws of Quebec and Canada, in particular Law 25 on the protection of personal information in the private sector and the Personal Information Protection and Electronic Documents Act (PIPEDA). For visitors located in the European Economic Area, the safeguards provided for in the General Data Protection Regulation (GDPR) also apply, as set out below.
What we collect and why
This site collects personal information only through the form on the contact page. You are asked for your name, your email address, a subject and a message. This information is used solely to read your message and reply to you: it is not used to send you commercial communications, nor is it shared with third parties for advertising purposes.
Processing is based on your consent, which you give by ticking the corresponding box before submitting the form. You may withdraw it at any time by writing to the address given above.
Protecting the form against spam
The contact form is protected by Cloudflare Turnstile, a verification service that distinguishes people from automated systems without asking you to solve any puzzle. To do this, Cloudflare, Inc. processes technical data from your browser, such as your IP address, its configuration characteristics and your interaction with the page, from the moment the contact page loads, even if you never send a message. Cloudflare does not use this information for advertising purposes or to build user profiles. You can find the details in Cloudflare’s privacy policy.
The legal basis for this processing is the legitimate interest in protecting the site and the mailbox against automated and abusive submissions. During verification, this service may store technical information in your browser; you will find the details in our cookie policy.
Hosting
This website is hosted by Likuid on servers located in Montreal (Quebec, Canada), acting as a service provider and processing the information solely on behalf of the controller.
How long we keep your information
Messages sent through the form are not stored in the website’s database: they are forwarded directly by email and kept in the inbox for as long as they are needed to deal with your enquiry. After that, they are deleted.
Who we share your information with
We do not sell or transfer your information. Technical access is limited to the hosting provider (Likuid), the email service provider used to receive and reply to messages, and Cloudflare, Inc., which verifies form submissions as described above. All of them act as service providers.
Embedded content from other websites
The music page includes embedded Spotify players. Once loaded, these players behave just as if you were visiting Spotify directly: they may collect data about your browsing, install their own cookies and record your interaction with the content, particularly if you have an account and are signed in to that service. This processing is governed by Spotify’s privacy policy, which is independent of this website.
Cookies
This site does not install its own tracking cookies and does not use analytics tools. The third-party services mentioned above, namely the Spotify players and Cloudflare’s verification system, may store information in your browser. You can find the details in our cookie policy.
Your rights over your information
You may at any time request access to the personal information we hold about you, as well as its correction or deletion. To exercise these rights, write to web@evariveramusic.com.
If you are not satisfied with the response you receive, you may file a complaint with the Commission d’accès à l’information du Québec (CAI) or with the Privacy Commissioner of Canada.
Visitors from the European Economic Area
If you are located in the European Economic Area, you also have the rights to restriction of processing, data portability and objection to processing, which you may exercise by writing to the same address. The legal basis for processing the information you provide in the form is your consent (Article 6(1)(a) GDPR); the legal basis for the anti-spam measures described above is legitimate interest (Article 6(1)(f) GDPR).
The information you provide in the form is processed in Canada, a country covered by an adequacy decision of the European Commission (Decision 2002/2/EC), so the transfer is based on Article 45 GDPR. The technical data processed by Cloudflare, Inc. for verification purposes may be processed outside the European Economic Area; Cloudflare states that it applies the standard contractual clauses approved by the European Commission for these transfers.
You have the right to lodge a complaint with the supervisory authority in your country of residence.