Privacy Policy

1. Website access and server logs

When you visit this website, the hosting provider processes technical data needed to deliver and securely operate it. This may include your IP address, date and time of access, requested page or file, referrer URL, browser type, operating system, and similar technical information.

This processing supports website delivery, stability, and security. The legal basis is Article 6(1)(f) GDPR.

IONOS SE is the hosting provider.

2. Internal visitor and download statistics

This website uses internal statistics to measure page views, approximate visitor numbers, and MP3 and WAV downloads. No external analytics provider is involved.

To distinguish repeat visits, the server creates and stores a pseudonymised hash from technical access data, particularly the IP address and browser identifier.

This helps us assess the website's reach, maintain content, and understand which songs and downloads are most popular. The legal basis is Article 6(1)(f) GDPR.

3. Consent preferences

To remember and apply your choice about external services, this website stores your consent status in your browser's local storage.

The legal basis is Article 6(1)(f) GDPR. Where access to information on your device is necessary, it is based on Section 25(2)(2) TDDDG.

You can change or withdraw your choice at any time using Privacy settings in the footer.

4. Orders, invoices, accounting, and downloads

If you buy from the song shop, we process the order and billing information you provide, including your name, email address, billing address, purchased content, price, tax details, payment status, order number, and download delivery information.

We process this data to perform the contract, deliver purchased content, issue invoices, and meet statutory record-keeping and documentation obligations. The legal basis is Article 6(1)(b) and (c) GDPR.

Where required for accounting, invoicing, and tax obligations, order and invoice data may also be transferred to internal administration and accounting systems, potentially including a DATEV or accounting interface.

5. Payments via Stripe

Stripe may be used for card payments. If you select this method, data needed to process the payment is sent to Stripe. This may include order and billing details, email address, amount, and technical transaction data.

The legal basis is performance of the contract under Article 6(1)(b) GDPR.

Further information is available in Stripe's privacy policy: https://stripe.com/de/privacy

6. Payments via PayPal

PayPal may be used for payments in the song shop. If you choose PayPal, data needed to process the payment is sent to PayPal.

This may include your name, email address, billing and transaction data, IP address, and other security-related information. The legal basis is Article 6(1)(b) GDPR.

Further information is available in PayPal's privacy policy: https://www.paypal.com/de/legalhub/paypal/privacy-full

7. YouTube videos

YouTube music videos may be embedded on this website. Embeds load only after you have expressly consented to external media. Embeds use the youtube-nocookie.com domain.

After you consent, your IP address, browser and device details, referrer data, and other usage data may be transferred to YouTube or Google.

The legal basis is your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG.

Further information is available in Google's privacy policy: https://policies.google.com/privacy?hl=en

8. External links

This website may link to external services. Merely displaying a link does not, as far as we know, transfer data to the linked provider.

Once you click an external link, you leave this website and the third party's privacy rules apply.

9. Contact by email

If you contact us by email, we process the information you provide, particularly your email address, name, and message, to handle and respond to your inquiry.

The legal basis is Article 6(1)(b) GDPR if your inquiry concerns entering into or performing a contract; otherwise it is Article 6(1)(f) GDPR.

10. Retention periods

• Server logs are retained according to the hosting provider's technical and contractual settings.
• Internal visitor, page-view, and download statistics are retained only as long as needed for analysis and operation.
• Order, invoice, and payment data are retained as required by commercial and tax law.
• Your consent choice remains in your browser's local storage until you change or delete it.
• Emails are retained as long as needed to handle your inquiry or comply with legal obligations.

11. Your rights

Subject to applicable legal requirements, you have the following rights:

• Right of access under Article 15 GDPR
• Right to rectification under Article 16 GDPR
• Right to erasure under Article 17 GDPR
• Right to restrict processing under Article 18 GDPR
• Right to data portability under Article 20 GDPR
• Right to object under Article 21 GDPR
• Right to withdraw consent with future effect

To exercise your rights, send an informal message to jackcole-noracain@web.de.

12. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe the processing of your personal data violates data protection law.

13. No automated decision-making

As far as we know, this website does not use automated decision-making, including profiling, within the meaning of Article 22 GDPR.