Privacy policy.
In short: no tracking, no analytics tools, no advertising cookies. Personal data is only processed as far as this is necessary to run the website, protect it against misuse and answer requests.
Controller
Christoph Groß-Fengels, 42 Sounds
Barmbeker Straße 27, 22303 Hamburg, Germany
Email: hello@42sounds.de
Phone: +49 170 527 9546
Hosting and server log files
The website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When a page is requested, the server automatically processes technical data:
- IP address of the requesting device
- date and time of access
- requested page and amount of data transferred
- browser, operating system and the previously visited page (referrer)
This data is needed to deliver the website securely and reliably. The legal basis is Art. 6 (1) (f) GDPR. The log files are not combined with other data; they are stored in accordance with the hosting provider’s specifications and then deleted or anonymised. Where required, a data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.
Cookies
The website only sets one technically necessary session cookie. It contains nothing but a random session ID. Linked to it on the server are the selected language and security features that protect the request form against misuse (protection against forged requests, time the page was loaded); in the protected client areas also the sign-in status and the number of sign-in attempts. The cookie is deleted when the browser is closed. The legal basis is § 25 (2) no. 2 TDDDG in conjunction with Art. 6 (1) (f) GDPR. There are no analytics or marketing cookies.
Fonts, images and videos
Fonts, images, videos and scripts are loaded from our own server. Visiting the website does not transfer any data to third parties such as Google Fonts or video platforms.
Contact by email, phone or WhatsApp
When someone gets in touch by email or phone, the details are processed to answer the request (Art. 6 (1) (b) GDPR for requests about a possible project, otherwise Art. 6 (1) (f) GDPR). The data is deleted once the request has been dealt with and no statutory retention obligations apply.
The WhatsApp link opens a chat on WhatsApp (Meta Platforms Ireland Ltd.), which is subject to WhatsApp’s privacy policy. A connection to WhatsApp is only established once the link is clicked.
Requesting further references
The form on the work page can be used to request further references. Name, company, email address, the selected interests and the optional message are sent by email to hello@42sounds.de. Nothing is stored in a database on the server.
To protect against mass requests, the IP address is stored on the server only as an irreversible check value (hash with a daily changing salt) for one hour and then discarded automatically (Art. 6 (1) (f) GDPR).
The details are only used to answer the request and to send a personal link to matching work. The legal basis is Art. 6 (1) (b) GDPR where the request concerns a possible project, otherwise Art. 6 (1) (f) GDPR based on the legitimate interest in handling business enquiries. The data is deleted once the request has been dealt with and no statutory retention obligations apply.
Protected client areas
For password-protected areas with references, date, time and IP address are logged for sign-in attempts, plus – depending on the area – the browser identifier or the outcome of the attempt (successful, failed, signed out, too many attempts). This protects the areas against misuse (Art. 6 (1) (f) GDPR). Log entries are deleted automatically after 90 days.
Links to other websites
Links to other services such as LinkedIn or the FMX programme open the respective provider’s website. Only then does their privacy policy apply.
Rights of data subjects
Every data subject has the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21). Where processing is based on consent, it can be withdrawn at any time with effect for the future. A short message to hello@42sounds.de is enough.
There is also the right to lodge a complaint with a data protection supervisory authority, for example the Hamburg Commissioner for Data Protection and Freedom of Information.
