Privacy policy

At a glance

This website runs without tracking, without advertising cookies and without analytics tools. Personal data is only processed when you open the site (technically necessary access data), when you send us something (request, email, withdrawal or cancellation) and when we carry out a contract with you. The details are below.

Controller

Nis Leander Karstens (FADE)
Eißendorfer Grenzweg 32b
21077 Hamburg
Germany
Email: [email protected]
Phone: +49 176 20507509

We have not appointed a data protection officer because there is no legal obligation to do so. For any privacy question, contact us using the details above.

Hosting and delivery of the website

The website, the beat previews and the processing of the forms run on Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (hosting, storage, delivery and protection against attacks). When you open the site, Cloudflare processes technically necessary access data: your IP address, date and time, the requested address, the previously visited page, browser and operating system, the amount of data transferred and the status code.

The purpose is to deliver the site quickly and securely and to prevent abuse. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is stable and secure operation. Cloudflare may set technically necessary cookies to protect against attacks, which is permitted without consent under § 25(2) no. 2 of the German TDDDG. We do not analyse the access data or combine it with other data.

We have a data processing agreement with Cloudflare under Art. 28 GDPR. Cloudflare is certified under the EU-US Data Privacy Framework, so transfers to the USA are covered by the European Commission's adequacy decision (Art. 45 GDPR). Standard contractual clauses have also been agreed.

Request form and email

When you write to us via the request form or by email, we process the details you provide: name, email address, the link to your music, the chosen offer, a selected beat and your message. We use them to answer your request and, where applicable, to send you an offer.

The legal basis is Art. 6(1)(b) GDPR where a possible contract is concerned, and otherwise Art. 6(1)(f) GDPR (our interest in answering requests). The form is processed via Cloudflare (see above) and delivered to us as an email; we do not store the entries on the server. To keep the form from being misused for spam, we limit how many forms can be sent from the same IP address within a short time; the IP address is only processed briefly for this. Our mailbox is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; data may be transferred to Google LLC in the USA, which is also certified under the EU-US Data Privacy Framework.

If no contract follows, we delete your request once it has been dealt with, at the latest after twelve months. If a contract follows, the section "Contracts and payments" applies.

Withdrawal and cancellation via the website

With the functions "Withdraw from contract" and "Cancel contracts here" you can withdraw from or cancel a contract online. We process your name, the contract details, your statement with date and time and the email address to which we send the acknowledgement of receipt. The legal basis is Art. 6(1)(c) GDPR in conjunction with §§ 356a and 312k of the German Civil Code (BGB) and Art. 6(1)(b) GDPR. The declaration is passed on via Cloudflare (see above) to our email inbox; we send you the acknowledgement from there by email. We keep these statements for as long as we need them as proof, usually until the statutory limitation period of three years has expired.

Storage in your browser

We do not set cookies. For two small convenience features, the site stores entries in your browser's storage that are never sent to us:

• fade-language and fade-hint-closed (permanent until you delete them): which language version you chose and that you closed the hint about the other language.
• fade-beat (until you close the tab): the beat you selected in the beat player, so it is already filled in on the request form.

This storage is strictly necessary for the functions you use and therefore permitted without consent under § 25(2) no. 2 TDDDG; the legal basis for the processing is Art. 6(1)(f) GDPR. You can delete the entries in your browser at any time.

Fonts and beat player

All fonts are hosted on our own server; loading the site does not connect to Google or other font providers. The release covers and the beat previews in the beat player also come from our own storage at Cloudflare (see above); loading the site does not connect to Spotify. We do not analyse which beats you listen to.

Links to other sites

The site links to BeatStars and Spotify, among others, for example each cover in the "Produced by FADE." section to the song on Spotify. Only when you click such a link do you leave our site; from then on, the privacy policy of that provider applies. If you buy a licence via BeatStars, BeatStars is responsible for processing that purchase.

Contracts and payments

When you book a service with us, we process the data we need for the contract, its performance and billing: name, address, email address, phone number if provided, details of the service, dates and payments, and the audio files and information you give us for your project. The legal basis is Art. 6(1)(b) GDPR and, where we are legally required to keep records, Art. 6(1)(c) GDPR.

• Live sessions: Sessions take place via Sessionwire, a service of Sessionwire Communications, Inc., based in Canada. You need your own Sessionwire account; Sessionwire processes the resulting data, such as audio and video data of the session, under its own privacy policy (sessionwire.com/privacy). The European Commission has issued an adequacy decision for Canada.
• File exchange: We exchange audio files via the service we agree on with you; its privacy terms apply.
• Payment: If you pay by card or via a payment link, the payment is processed by Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Stripe receives the necessary payment and contact data and also processes it for fraud prevention under its privacy policy (stripe.com/privacy). For bank transfers, our bank sees the payment data.
• Accounting: We pass invoices and payment records to our tax advisor because we are required to do so for tax purposes.

We keep contract and billing data for as long as statutory retention periods require (in particular § 147 of the German Fiscal Code and § 14b of the German VAT Act, up to ten years depending on the document). After that, we delete it.

Your rights

You have the right to access the data we store about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR). Just send us an email.

Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the authority responsible for us: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany.

Further information

You are not obliged to give us any data. Without the details in the form, however, we cannot process your request, and without contract data we cannot conclude a contract. We do not make automated decisions or create profiles. The site is encrypted throughout via TLS. If our processes or the law change, we will update this policy; the version published here applies. In case of doubt, the German version of this policy prevails.