Italiano

Radio Mine Privacy Policy

Version of 13 October 2026 · applies in the European Union (GDPR, Regulation (EU) 2016/679) and in Australia (Privacy Act 1988 and Australian Privacy Principles).

1. Who handles your data

The data controller is MendCast, ABN 42 571 072 596, 102/570 Swanston St, Carlton VIC 3053, Australia. Phone: +61 492 898 253 · +39 393 916 5323. Use these contact details for any question about your data or to exercise your rights.

2. What we collect, and why

People who use Radio Mine for their station (our customers):

• Account: first and last name, email, username, password (stored only in hashed form, nobody can read it). Needed to provide the service (legal basis: contract, Art. 6(1)(b) GDPR).
• Station and tax details you choose to enter (company, VAT number or ABN, address, licence, coverage areas): for the service and invoicing (contract and legal obligations).
• Acceptance of the terms of use: date and time, IP address and browser, to prove you accepted them.
• Security: login attempts and visits to restricted pages with IP address, to protect accounts (legitimate interest, Art. 6(1)(f)).
• Content you upload (music from your Drive, jingles, ads, news, recordings): it remains yours; we process it only to put it on air.
• Questions to the assistant: the text of your question and of the page you are viewing is sent to the AI service that answers (see section 4). Please do not include other people's personal data in your questions.

Listeners using the app or the stream:

• an anonymous code created by the phone, to count listeners and remember likes and skips: it contains no name, email or phone number;
• the city, region and country you listen from, derived from your internet address when you connect (IP Geolocation by DB-IP): the internet address is not stored, only the city name, once a day;
• your location, only if you allow it and only when you ask for traffic news: rounded to about one kilometre, used to choose the bulletin for your area and not stored (consent, Art. 6(1)(a); you can withdraw it at any time in your phone settings);
• the IP address the server receives to send you the audio, kept only in technical logs.

Businesses contacted by the sales agent on behalf of a station: business name, address, website, business phone and email taken from public sources (OpenStreetMap), used to offer advertising on the station (legitimate interest, Art. 6(1)(f) and Art. 14 GDPR). You can object at any time and you will not be contacted again. The demo ad stays available for 8 days, then the file is deleted.

3. Cookies

We use only technical cookies: the login cookie and the one that remembers your language. Some preferences (volume, colours, text size) stay in your phone or browser. No profiling cookies, no targeted advertising, no third-party analytics: that is why there is no cookie banner. The page font and the map are served from our own server, not from external services.

4. Who receives the data

We do not sell data or share it for advertising. The following providers process it on our behalf, only to run the service:

• DigitalOcean – the server hosting pages, database and audio (Frankfurt data centre, Germany, EU);
• Anthropic (United States) – the AI behind the assistant, the newsroom proofreader and the sales agent;
• the AI voice services a station chooses to connect (ElevenLabs, OpenAI, Google, Microsoft), only for texts to be read aloud;
• OpenStreetMap – map tiles, only on the sales agent page;
• Google Drive – to read the music file names of a station that connects it and, if the station connects it for recordings, to write its broadcast recordings there (see «Google user data»).

5. Data outside the EU and outside Australia

Some providers (section 4) are in the United States. For the EU, transfers rely on GDPR safeguards (European Commission standard contractual clauses or the EU-US Data Privacy Framework). For Australia (APP 8), we take reasonable steps so that recipients handle the information consistently with the Australian Privacy Principles. The controller is in Australia; the server is in Germany.

6. How long we keep it

• account and station data: while the service is active; deleted within 12 months after closure, except what the law requires us to keep (tax records and proof of accepted terms, up to 10 years);
• technical and security logs: up to 90 days;
• database backups: 14 days, then overwritten;
• demo ads: 8 days;
• location for traffic news: not kept.

7. Your rights

In Europe (GDPR): access, rectification, erasure, restriction, portability, objection to processing based on legitimate interest, and withdrawal of consent at any time. You can complain to your data protection authority (in Italy: www.garanteprivacy.it).
In Australia (Privacy Act): access your information and ask for it to be corrected (APP 12 and 13), and make a complaint. We reply within 30 days; if you are not satisfied you can contact the Office of the Australian Information Commissioner (www.oaic.gov.au).
To exercise your rights use the contact details in section 1; account holders can also write to us from "Your requests".

8. Security and breaches

Encrypted connections (https), passwords stored only in hashed form, optional second code from a phone app, logged access to restricted areas, nightly backups. If a data breach is likely to cause you serious harm, we will notify you and the regulator as required by the GDPR (Art. 33 and 34) and the Australian Notifiable Data Breaches scheme.

9. Children

Radio Mine is a tool for people who run a radio station and is not directed at children under 16. Listening to a station requires no personal data.

10. Changes

If this policy changes, the new version is published here with its date; we will tell you about important changes.

11. Google user data

A station can connect its own Google Drive to Radio Mine to keep its broadcast recordings there. In that case Radio Mine asks Google for one permission only, "see, edit and create only the specific Google Drive files that Radio Mine creates" (drive.file), plus the account email address to show which Drive the station is connected to.

• Radio Mine writes to the connected Drive only that station's hourly broadcast recordings, in its own folder, and removes the ones older than the period chosen by the station (at most 100 days).
• Radio Mine does not read, open or see any other file on the Drive: the drive.file permission does not allow it.
• Google user data is not sold, not transferred to third parties, not used for advertising and not used to train artificial intelligence models. The access key stays on our server, is not visible to anyone else and is used only to write the recordings.
• The station can disconnect the Drive at any time, from Radio Mine ("Registrazione H24") or from its Google account (myaccount.google.com → Security → Third-party apps): from then on Radio Mine can no longer write anything.

Radio Mine's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.