Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

König, Köse GbR – YEY
represented by David König and Ugur Köse
Bauamtsgasse 8, 69117 Heidelberg, Germany
Email: kontakt@yeymusic.de

2. Hosting

This website is hosted by Febas (Inhaber: Roman Baumgärtner), Ostlandstraße 5, D-49565 Bramsche, Germany. When you visit this site, our hosting provider automatically collects information in server log files, which may include your IP address, browser type, the pages visited and the date and time of access. This processing is based on our legitimate interest (Art. 6(1)(f) GDPR) in the secure and reliable operation of this website. Server log data is generally retained only as long as necessary for this purpose and is not merged with other data sources. More information on how Febas processes data on our behalf is available in Febas's own privacy policy at febas.de/datenschutz.

All fonts, stylesheets and images of this website are served from our own server. No external font, script or CDN services are loaded when you visit the site.

3. Newsletter — what data we collect

When you sign up for our newsletter, we collect the following personal data:

• Email address

4. Purpose of processing

We use your data exclusively to send you:

• Updates about new music
• Insights into our creative process
• Information about upcoming shows

5. Legal basis

The processing of your data for the newsletter is based on your consent in accordance with Art. 6(1)(a) GDPR. Where we process data to operate this website securely (see Section 2), we rely on our legitimate interest under Art. 6(1)(f) GDPR.

6. Newsletter service provider

We use Mailchimp, a service of The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA, as our email marketing platform.

Your data is stored and processed on Mailchimp's servers. Mailchimp may process data in countries outside the European Union, including the United States. Mailchimp is certified under the EU–U.S. Data Privacy Framework and provides appropriate safeguards for such data transfers. More information: mailchimp.com/legal/privacy.

7. Double opt-in

We use a double opt-in procedure. After signing up, you will receive an email asking you to confirm your subscription. This ensures that no one else can sign up with your email address.

8. Data retention

We store your data for as long as you remain subscribed to the newsletter. You can unsubscribe at any time using the link in our emails. Your data will then be deleted or blocked from further processing.

9. Embedded YouTube videos

We embed videos from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) on this site, using YouTube's privacy-enhanced mode (youtube-nocookie.com). The preview images shown before you click play are stored on our own server, so no data is sent to YouTube when you merely visit the page. In this mode, YouTube does not store cookies on your device unless you actively click play. Once you start a video, YouTube may process data about your device and usage in accordance with its own privacy policy, and may transfer data to servers in the United States. This processing is based on your consent, given by clicking play (Art. 6(1)(a) GDPR). More information: policies.google.com/privacy.

9a. Contact form

If you contact us through the contact form on this website, we process the details you enter (name, email address and your message) solely to answer your request. The form is sent to us as an email via our hosting provider's mail server (see Section 2). We do not use cookies for this, and the data is not passed on to third parties. To protect the form against automated spam, it contains a hidden field and a minimum fill-in time check; neither stores any additional personal data.

The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract or pre-contractual measures (for example a booking enquiry), and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We delete your message once your request has been fully handled, unless statutory retention obligations apply (for example for business correspondence relating to a contract).

10. Your rights

You have the right to:

• Access your stored data
• Request correction or deletion
• Restrict processing
• Data portability
• Withdraw your consent at any time, with effect for the future
• Lodge a complaint with a supervisory authority — for us, the competent authority is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg

11. Contact

If you have any questions about data protection, please contact: kontakt@yeymusic.de