EN DE

Privacy

1. Controller

The controller responsible for data processing on this website is:
R.Rotter & M.Hartmann, Heiligenberger Straße 28, 10318 Berlin, Germany.
Contact:

2. Data we collect

When you visit our website, the following data is processed:

  • Server logs: Your IP address (anonymized after short time), browser type, OS, referrer URL, time of access — necessary for technical operation and security.
  • Contact form: Name, email address, message text, and any additional information you voluntarily provide. Legal basis: Art. 6 (1) (b) and (f) GDPR.
  • Newsletter: Email address and language, with double opt-in. Legal basis: Art. 6 (1) (a) GDPR. You can unsubscribe at any time via the link in each newsletter.
  • Newsletter open-tracking (optional, with separate consent): If you actively opt-in to open-tracking when subscribing, each newsletter we send to you will contain a 1×1 pixel image. When your mail client loads the image, we record: that a specific newsletter was opened, an anonymized hash of your IP address (SHA-256, salted — your real IP is never stored), and your user-agent string. We use this only to measure overall newsletter performance (open rate). Legal basis: Art. 6 (1) (a) GDPR. You can revoke your consent at any time by replying to any newsletter or unsubscribing.
  • Page views: We track anonymous page views (no IP storage, no cookies) for statistical purposes. Legal basis: Art. 6 (1) (f) GDPR.

3. Cookies & Consent

We only use strictly necessary technical cookies by default (session, language preference, CSRF protection). These cookies do not require consent. We do not use tracking cookies.

For embedded third-party content (Bandcamp player, YouTube videos), we use a consent banner. Until you give consent, no data is transmitted to those providers. Your consent decision is stored in a 1st-party cookie mrc_consent for 365 days. You can revoke or change your choice at any time via the "Cookie settings" link in the footer.

4. YouTube videos

On our release detail pages, we offer optional YouTube embeds using a click-to-load mechanism. The video is only loaded after you actively click on it. Thumbnail images are served exclusively from our own server — not from Google. For playback, we use the privacy-enhanced youtube-nocookie.com domain. When you click to play, data is transmitted to Google LLC. See Google's privacy policy.

5. Bandcamp embeds

On our release detail pages, we also offer the Bandcamp player using a click-to-load mechanism. Before clicking, no content is loaded from Bandcamp and no data transfer takes place. Only when you click the player will the embedded Bandcamp widget be loaded. At that point, data (in particular your IP address) is transmitted to Songtradr Inc., 130 W. Union St., Pasadena, CA 91103, USA, who operates Bandcamp. See Bandcamp's privacy policy. Legal basis: Art. 6 (1) (a) GDPR (consent through active click).

5b. Pre-Save links (DistroKid Hyperfollow)

For Pre-Save functionality (e.g. "Pre-Save on Spotify"), we use the service DistroKid Hyperfollow. When you click a Pre-Save link, you leave our website and are redirected to a service operated by DK Global, Inc. (DistroKid), 8605 Santa Monica Blvd #80594, West Hollywood, CA 90069, USA. There, you can authorize the service with your Spotify account. We ourselves do not store any Pre-Save data; data processing is performed exclusively by DistroKid and Spotify according to their privacy policies: DistroKid Privacy and Spotify Privacy Policy. Legal basis: Art. 6 (1) (a) GDPR (consent through active click).

5c. Listening Club application (testing form)

On /en/listening-club you can apply for access to our closed listener area. We process the following data:

  • First name (mandatory)
  • Email address (mandatory)
  • Motivation — your free-text explanation why you want to join (mandatory)
  • Genre selection — which musical styles interest you (optional)
  • Privacy consent — you must actively agree

Applications are processed exclusively for internal review and not shared. If accepted, you will receive a separate invitation with credentials to the Listening Club. If rejected or no response, your application data is deleted after max. 12 months. Legal basis: Art. 6 (1) (a) and (b) GDPR (consent and pre-contractual measures).

6. Fonts

We use the fonts Inter and Space Mono on our website. These are served exclusively from our own server — we do not use the Google Fonts service. No data is transmitted to Google.

7. Closed listener area (Listening Club)

At /listen/, we operate a closed listener area for invited preview listeners (testers). Access is granted exclusively through personal credentials after invitation. In the course of use, we process the following data:

  • Account data: Name or pseudonym, email address, password (hashed). Legal basis: Art. 6 (1) (b) GDPR (performance of contract).
  • Ratings and comments on tracks released for preview. Legal basis: Art. 6 (1) (b) GDPR.
  • Listening sessions: Which tracks were listened to and when — for quality control and feedback analysis. Legal basis: Art. 6 (1) (b) GDPR.
  • Login log: Login attempts with IP address and timestamp for brute-force protection. Legal basis: Art. 6 (1) (f) GDPR in conjunction with Art. 32 GDPR.

Listeners can have their account deleted at any time by contacting us. Upon account deletion, all personal data will be removed; ratings will be anonymized.

8. Hosting and email delivery

Our website is hosted by STRATO AG, Pascalstr. 10, 10587 Berlin, Germany. STRATO processes data on our behalf as a data processor (Art. 28 GDPR).

Email delivery: For transactional emails (newsletter confirmation, replies to inquiries, Listening Club invitations), we use the email server of our hosting provider STRATO. No external email service providers (such as Mailchimp, SendGrid, Brevo, etc.) are used.

8b. External links (Social Media)

Our website contains links to our profiles on external platforms such as YouTube, Spotify, Apple Music, SoundCloud, Bandcamp and similar. When you click such a link, you leave our website. From that point on, the privacy policy of the respective provider applies. Before clicking, no data is transmitted to these providers — these are pure text/logo links without tracking pixels.

9. Your rights

Under the GDPR, you have the right to:

  • Access your personal data (Art. 15)
  • Rectification (Art. 16)
  • Erasure (Art. 17)
  • Restriction of processing (Art. 18)
  • Data portability (Art. 20)
  • Object to processing (Art. 21)
  • Lodge a complaint with a supervisory authority

To exercise your rights, contact us at .

10. Retention

We retain your data only as long as necessary for the stated purpose. Contact form submissions: until they are no longer needed (max 2 years). Newsletter subscriptions: until you unsubscribe. Page view statistics: 12 months.

11. SSL encryption

This website uses SSL encryption (HTTPS) for secure data exchange. You can recognize an encrypted connection by the "https://" in your browser's address bar.

12. Updates

This privacy policy may be updated as needed to reflect changes to our services or applicable laws. Last update: 2026-06-29