Privacy Policy
1. Controller
Hitstop Audio
Owner: André Molkenthin
Justinianstraße 1
50679 Köln
Germany
Email: andre.molkenthin@outlook.com
2. Hosting and server log files
This website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. When you open the site, the host automatically processes the data your browser transmits, in what are known as server log files: IP address, date and time of the request, the file requested, the volume of data transferred, the HTTP status code, the page previously visited (referrer), and details of your browser and operating system (user agent).
This processing is technically necessary in order to deliver the website and to keep it running securely and reliably. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in exactly that delivery and protection. A data processing agreement pursuant to Art. 28 GDPR is in place with the host.
3. Transfer of data to the USA
Netlify, Inc. is based in the USA, that is, in a third country. Processing of your data there therefore cannot be ruled out.
Netlify, Inc. is certified under the EU-U.S. Data Privacy Framework. The transfer is accordingly covered by an adequacy decision of the European Commission pursuant to Art. 45(1) GDPR. In addition, Netlify uses the European Commission's Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR (Implementing Decision 2021/914).
4. Fonts
The fonts used on this site are served from our own server. No
connection is made to Google Fonts, to fonts.googleapis.com or to
fonts.gstatic.com. No data is transmitted to Google when the
fonts are loaded.
5. Video embed (Vimeo)
A video hosted by Vimeo.com, Inc., New York, USA, is embedded on this site. The video is not loaded automatically. No connection whatsoever to Vimeo is established when you open the page; only a preview image is shown, and that image is served from our own server.
Only when you click the play button is the Vimeo player loaded. At that point
Vimeo receives your IP address together with information about your browser
and device, and may process it in the USA. The player is embedded with the
parameter dnt=1 ("do not track"); according to Vimeo's own
statements, this means it refrains from tracking for analytics purposes.
The legal basis for this transfer is your consent pursuant to Art. 6(1)(a) GDPR, which you give by clicking the play button. You may withdraw that consent at any time with effect for the future by reloading the page and not starting the video again (Art. 7(3) GDPR). Further information at vimeo.com/privacy.
6. Cookies
This website sets no cookies of its own and embeds no analytics or tracking
services. There is therefore no cookie banner. To control the opening
sequence, a technical value is stored in your browser's
sessionStorage; that value stays on your device only, is never
transmitted, and is deleted when you close the browser tab.
If you start the video, Vimeo may set cookies of its own. That happens only after your click (see section 5).
7. Your rights
In respect of the personal data concerning you, you have the following rights against us:
The right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR) and the right to data portability (Art. 20 GDPR). Where we rectify or erase data or restrict its processing, we will notify every recipient to whom the data has been disclosed (Art. 19 GDPR).
Right to object (Art. 21 GDPR): where we process data on the basis of a legitimate interest under Art. 6(1)(f) GDPR — which here concerns the server log files — you have the right to object to that processing at any time on grounds relating to your particular situation.
An informal message to the email address given above is sufficient to exercise any of these rights.
8. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint about our processing of your personal data with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia)
Postfach 20 04 44
40102 Düsseldorf, Germany