1. Data Controller
The data controller responsible for the processing of your personal data on this website and across Bedroom Community communications is:
Valgeir Sigurðsson ehf. (trading as Bedroom Community)
Greenhouse Studios, Vogaseli 9, 109 Reykjavík, Iceland
Kennitala (Company Registration): 641199-2659
Data protection contact: herro@bedroomcommunity.net
Bedroom Community operates in Iceland, within the European Economic Area (EEA), and processes personal data under the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the Icelandic Data Protection Act (Act No. 90/2018).
2. Personal Data We Collect & Why
We collect and process minimal personal data necessary to provide our music, manage tour announcements, and understand how our audience engages with the label.
Newsletter & Announcements
When you join our mailing list on the website or during campaign initiatives, we collect your email address, optional first name, and optional country.
- Purpose: Sending updates on releases, live concerts, archival projects, and special editions.
- Legal basis: Consent (GDPR Article 6(1)(a)).
- Platform: Hosted via Mailjet (ISO 27001 certified, EU data hosting).
- Retention: Retained until you withdraw consent. Every newsletter contains an immediate one-click unsubscribe link.
Website Analytics & Performance
We measure website traffic and editorial readership to understand which releases and stories resonate with listeners.
- Purpose: Monitoring page performance, reading engagement, and aggregate site health.
- Legal basis: Legitimate interests (GDPR Article 6(1)(f)) in analysing and optimising our web presence.
- Platform: Google Analytics 4 (Measurement ID:
G-HX101X26DQ). - Retention: Event-level user data retention is strictly limited to 14 months, with IP anonymisation enforced.
Outbound Intent & Campaign Measurement
Our website links directly to our official artist stores, concert halls, and streaming providers. We measure clicks departing to external partners to evaluate release and tour campaigns.
- Purpose: Understanding listener departures to Bandcamp, concert ticketing box offices, and digital streaming platforms.
- Legal basis: Legitimate interests (GDPR Article 6(1)(f)) to track campaign effectiveness.
- Platforms: First-party server-side Measurement Protocol and Meta Conversions API (Dataset ID:
1503949138166964) with unique event-level deduplication. - Data processed: Pseudonymous event identifier, outbound destination host, timestamp, and standard browser network headers.
Direct Enquiries & Licensing
When you contact us regarding synchronization, licensing, press materials, distribution, or general questions, we receive your email and message contents.
- Purpose: Responding to enquiries and fulfilling business agreements.
- Legal basis: Performance of a contract or preliminary contract steps (GDPR Article 6(1)(b)), or legitimate interests (GDPR Article 6(1)(f)).
- Retention: Maintained for the duration of the enquiry or commercial relationship, plus statutory accounting retention periods where relevant.
3. Third-Party Services & External Destinations
We deliberately avoid carrying financial transactions or commercial payment gateways directly on bedroomcommunity.net. Instead, transactions occur through specialist third parties:
- Bandcamp: Official physical merchandise, vinyl records, and digital album downloads are hosted and processed through Bandcamp. Some Bedroom Community artists maintain independent storefronts. Purchases made on Bandcamp are governed by Bandcamp’s Privacy Policy.
- Tour Venues & Ticketing Box Offices: Ticket links for concerts (including London Southbank Centre, Tampere Hall / Tiketti, National Concert Hall Dublin, Espoo Cultural Centre, and Turku Music Festival) direct visitors to the official box office of each venue. Transactions are processed under each venue’s respective privacy terms.
- Streaming Providers: Embedded audio players and outbound streaming links connect to Spotify, Apple Music, YouTube Music, SoundCloud, and TIDAL under their individual privacy policies.
- Worldwide Distribution: Physical records are distributed worldwide by The State51 Conspiracy, and by Forced Exposure in North America.
4. Cookies & Tracking Technologies
Cookies are small text files placed on your device to ensure site functionality and measure performance.
| Cookie | Provider | Purpose | Duration |
_ga, _ga_* | Google Analytics 4 | Distinguishes unique users and persists session state across pageviews. | Up to 14 months |
_fbp, _fbc | Meta Technologies | Measures advertising effectiveness and campaign referral attribution. | Up to 90 days |
You can control or block cookies at any time through your browser settings. Blocking measurement cookies will not affect your ability to browse our catalogue or access articles.
5. Your Legal Rights
Under the General Data Protection Regulation (GDPR) and the Icelandic Data Protection Act, you have the following rights regarding your personal data:
- Right of Access (Article 15): You have the right to request a copy of the personal data we hold about you.
- Right to Rectification (Article 16): You may ask us to correct inaccurate or incomplete data.
- Right to Erasure (Article 17): You may request the deletion of your personal data ("right to be forgotten").
- Right to Restriction of Processing (Article 18): You may request that we suspend processing your data in certain circumstances.
- Right to Data Portability (Article 20): You may request to receive your personal data in a structured, machine-readable format.
- Right to Object (Article 21): You may object at any time to processing based on legitimate interests.
- Right to Withdraw Consent: Where processing is based on consent (such as our newsletter), you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
To exercise any of these rights, please email us directly at herro@bedroomcommunity.net. We respond to all verified requests promptly within statutory time limits (normally 30 days).
6. Supervisory Authority
If you believe that our processing of your personal data infringes data protection regulations, you have the right to lodge a complaint with the Icelandic Data Protection Authority:
If you reside elsewhere in the European Union or the United Kingdom, you may also lodge a complaint with your local supervisory authority (e.g. the Information Commissioner’s Office in the UK).
