Privacy Policy
Privacy Policy
1. Privacy at a Glance
Overview
This privacy policy provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to any information that can be used to identify you personally. For detailed information about data protection, please refer to the complete privacy policy below.
Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the "Responsible Party" section of this privacy policy.
How do we collect your data?
Your data is collected in two ways:
-
Data you provide to us - For example, information you enter into a contact form
-
Automatically collected data - Our IT systems automatically capture technical data when you visit the website, such as:
-
Internet browser type
-
Operating system
-
Time of page access
-
This automatic data collection occurs as soon as you access our website.
What do we use your data for?
We collect data to:
-
Ensure error-free delivery of the website
-
Analyze user behavior and improve our services
What are your rights regarding your data?
You have the right to:
-
Request free information about the origin, recipient, and purpose of your stored personal data
-
Request correction or deletion of your data
-
Withdraw consent for data processing at any time (for future processing)
-
Request restriction of processing under certain circumstances
-
Lodge a complaint with the relevant supervisory authority
For questions about data protection, you can contact us at any time.
2. Hosting
External Hosting
This website is hosted externally. Personal data collected on this website is stored on the servers of our hosting provider, which may include:
-
IP addresses
-
Contact requests
-
Metadata and communication data
-
Contract data
-
Contact information
-
Names
-
Website access data
-
Other data generated through website use
Legal basis for external hosting:
External hosting serves the purpose of contract fulfillment with our potential and existing customers (Art. 6(1)(b) GDPR) and is in the interest of secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR).
Where consent has been requested, processing is based solely on Art. 6(1)(a) GDPR and § 25(1) TTDSG, insofar as consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) within the meaning of TTDSG. Consent can be revoked at any time.
Our hosting provider:
LetsCast.fm Produktgenuss GmbH
Vereinsstraße 51
20357 Hamburg, Germany
Data Processing Agreement
We have concluded a data processing agreement (DPA) with our hosting provider. This legally required contract ensures that they process the personal data of our website visitors only according to our instructions and in compliance with GDPR.
3. General Information and Mandatory Notices
Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.
When you use this website, various personal data is collected. This privacy policy explains what data we collect, what we use it for, and how this is done.
Important: Data transmission over the internet (e.g., email communication) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.
Responsible Party
The responsible party for data processing on this website is:
Rebecca Deacon
Güntherstr. 24a
60528 Frankfurt, Germany
Email: Rebecca.deacon@web.de
The responsible party is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).
Data Retention Period
Unless a more specific retention period is stated in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you make a legitimate request for deletion or revoke consent for data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial retention periods). In such cases, deletion occurs after these reasons cease to apply.
Legal Basis for Data Processing on This Website
Processing is based on:
-
Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR - When you have consented to data processing, including special categories of data under Art. 9(1) GDPR
-
Art. 49(1)(a) GDPR - For explicit consent to transfer personal data to third countries
-
§ 25(1) TTDSG - For consent to cookie storage or access to device information (e.g., device fingerprinting). Consent is always revocable
-
Art. 6(1)(b) GDPR - When data is necessary for contract fulfillment or pre-contractual measures
-
Art. 6(1)(c) GDPR - When processing is necessary to fulfill a legal obligation
-
Art. 6(1)(f) GDPR - When processing is based on our legitimate interests
The specific legal basis applicable in each case is explained in the following sections of this privacy policy.
Recipients of Personal Data
In the course of our business activities, we work with various external parties. This sometimes requires the transmission of personal data to these external parties. We only share personal data with external parties when:
-
It is necessary for contract fulfillment
-
We are legally obligated to do so (e.g., sharing data with tax authorities)
-
We have a legitimate interest under Art. 6(1)(f) GDPR
-
Another legal basis permits data sharing
When using data processors, we only share personal data with our customers based on a valid data processing agreement. In cases of joint processing, a joint processing agreement is concluded.
Withdrawal of Consent for Data Processing
Many data processing operations are only possible with your explicit consent. You can withdraw previously given consent at any time. The legality of data processing that occurred before the withdrawal remains unaffected.
Right to Object to Data Collection
Right to object in special cases and to direct marketing (Art. 21 GDPR):
When data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. This also applies to profiling based on these provisions. The respective legal basis for processing can be found in this privacy policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims (objection under Art. 21(1) GDPR).
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes, including profiling insofar as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection under Art. 21(2) GDPR).
Right to Lodge a Complaint
In the event of GDPR violations, affected persons have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, workplace, or the place of the alleged violation. This right exists regardless of other administrative or judicial remedies.
Right to Data Portability
You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request direct transfer of data to another controller, this will only be done to the extent technically feasible.
Right to Information, Correction, and Deletion
Within the framework of applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of data processing, as well as a right to correction or deletion of this data. You can contact us at any time regarding this and other questions about personal data.
Right to Restriction of Processing
You have the right to request restriction of the processing of your personal data. You can contact us at any time for this purpose. The right to restriction of processing exists in the following cases:
-
If you dispute the accuracy of your personal data stored with us, we generally need time to verify this. For the duration of the review, you have the right to request restriction of processing
-
If the processing of your personal data was/is unlawful, you can request restriction of data processing instead of deletion
-
If we no longer need your personal data, but you need it for exercising, defending, or asserting legal claims, you have the right to request restriction of processing instead of deletion
-
If you have filed an objection under Art. 21(1) GDPR, a balance must be struck between your interests and ours. As long as it has not been determined whose interests prevail, you have the right to request restriction of processing
When you have restricted the processing of your personal data, such data may only be processed—apart from storage—with your consent or for asserting, exercising, or defending legal claims, or for protecting the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.
SSL/TLS Encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the browser address line changing from "http://" to "https://" and by the lock symbol in your browser bar.
When SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.
Objection to Promotional Emails
We hereby object to the use of contact data published as part of our legal notice obligation for sending unsolicited advertising and informational materials. The site operators expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, such as through spam emails.
4. Data Collection on This Website
Contact Form
If you send us inquiries via the contact form, your information from the inquiry form, including the contact details you provided, will be stored by us for processing the inquiry and in case of follow-up questions. We do not share this data without your consent.
Legal basis:
The processing of this data is based on Art. 6(1)(b) GDPR if your inquiry relates to contract fulfillment or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling inquiries directed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if requested. Consent can be revoked at any time.
Data entered in the contact form remains with us until you request deletion, revoke your consent for storage, or the purpose for data storage no longer applies (e.g., after completing your inquiry). Mandatory legal provisions—particularly retention periods—remain unaffected.
Inquiries via Email, Telephone, or Fax
If you contact us by email, telephone, or fax, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for handling your request. We do not share this data without your consent.
Legal basis:
Processing is based on Art. 6(1)(b) GDPR if your inquiry relates to contract fulfillment or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling inquiries (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if requested. Consent can be revoked at any time.
Data sent to us via contact requests remains with us until you request deletion, revoke your consent for storage, or the purpose for data storage no longer applies (e.g., after completing your request). Mandatory legal provisions—particularly statutory retention periods—remain unaffected.
5. Plugins and Tools
Spotify
This website incorporates functions of the Spotify music service.
Provider: Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden
You can recognize Spotify plugins by the green logo on this website. An overview of Spotify plugins can be found at: https://developer.spotify.com
How it works:
When you visit this website, a direct connection is established between your browser and the Spotify server via the plugin. Spotify receives information that you have visited this website with your IP address. If you click the Spotify button while logged into your Spotify account, you can link the content of this website to your Spotify profile. This allows Spotify to associate your visit to this website with your user account.
Important notice about Google Analytics:
When using Spotify, Google Analytics cookies are deployed, which means your usage data may also be passed to Google when using Spotify. Google Analytics is a user behavior analysis tool operated by Google (based in the USA). We, as website operators, have no influence on this processing, which is solely Spotify's responsibility.
Legal basis:
Data storage and analysis are based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the appealing acoustic design of their website. If consent has been requested, processing is based exclusively on Art. 6(1)(a) GDPR and § 25(1) TTDSG, insofar as consent includes cookie storage or device information access (e.g., device fingerprinting). Consent can be revoked at any time.
More information:
For more information, see Spotify's privacy policy: https://www.spotify.com/de/legal/privacy-policy/
If you do not want Spotify to associate your visit to this website with your Spotify user account, please log out of your Spotify account.
Source: https://www.e-recht24.de
