Privacy policy
This English version is a translation for convenience; the German Datenschutzerklärung is the legally binding version.
Controller
The controller details for this website are being completed.
Hosting
The website “CD Check” is provided by djdb (djdb.net) as a processor on behalf of the controller. When you visit it, djdb processes technically necessary access data (IP address, date and time, page requested, browser and device information) to deliver the website and keep it secure. Legal basis: Art. 6(1)(f) GDPR.
Audience measurement
djdb counts page views of this website itself (first-party), without any third-party service, to give the operator statistics. Legal basis: Art. 6(1)(f) GDPR.
Fonts
The fonts on this website are served by djdb itself; services such as Google Fonts are not used.
Ticket sales
Tickets for this website's events are sold through djdb.net. The details you enter at checkout (name, email address, order) are processed for the purchase. Payments are processed by Stripe Payments Europe, Ltd. (Dublin, Ireland). Legal basis: Art. 6(1)(b) GDPR.
Merchandise
Merchandise orders are handled through djdb.net; your name, email and delivery address and the order are processed. Payments are processed by Stripe Payments Europe, Ltd. (Dublin, Ireland). Legal basis: Art. 6(1)(b) GDPR.
Contact and booking requests
If you send a message or booking request through this website, the data you enter (name, email address, message and, for booking requests, event name, date and venue) is stored as an inquiry for the team behind this website and shown to them in their djdb inbox; the team is also notified by email (with your name, without your message). Your IP address is used only briefly to limit abuse (rate limiting) and is not stored with the inquiry. No confirmation email is sent to you; the team may answer you at the email address you gave. Legal basis: Art. 6(1)(b) GDPR (handling your request) and Art. 6(1)(f) GDPR (protection against abuse).
Embedded content
This website embeds no third-party players or widgets. Links to external services (e.g. streaming platforms) are only opened when you click them.
Images from external sources
Images on this website (e.g. cover art, artist, event and gallery images) may be loaded from their original sources. When they are, the servers of those third parties receive your IP address and technical request data (browser, time). Which servers these are depends on the source and cannot be named in advance; they may also be located outside the EU/EEA. Legal basis: Art. 6(1)(f) GDPR (interest in displaying the content).
Retention
Access data in the server and API logs is deleted after 30 days.
The page view counters contain no information about individual people and are kept for statistics only.
Order and payment data is deleted once it is no longer needed for its purpose and no statutory retention obligation applies (e.g. § 147 AO, § 257 HGB: 6 to 10 years for commercial and tax records).
Contact and booking requests are kept in the inbox of the team behind this website for as long as the page exists on djdb and are deleted together with the page. You can ask the team (contact details in the imprint) or djdb (operator contact details on djdb.net) to delete your request earlier.
Otherwise, data is kept as long as necessary for its purpose and then deleted, unless statutory retention obligations apply.
Recipients
djdb (djdb.net) as hosting provider and processor, including self-hosted error monitoring (technical error data, including the IP address; not shared with third parties).
Stripe Payments Europe, Ltd. (payment processing).
Cloudflare, Inc. (USA) as reverse proxy/CDN in front of djdb.net; Cloudflare sees, among other data, your IP address (EU-US Data Privacy Framework).
The providers of the original image sources (see “Images from external sources”).
Data is passed on to other third parties only where there is a legal obligation.
Transfers to third countries
Some of the recipients named above (Cloudflare, Stripe, the providers of external image sources) also process data outside the EU/EEA, in particular in the USA.
Such transfers rely on an adequacy decision of the European Commission (EU-US Data Privacy Framework, where the recipient is certified) or on standard contractual clauses under Art. 46 GDPR.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). Contact the controller named above.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).