Privacy Policy

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

This website sets no cookies and uses no analytics, tracking or audience-measurement services (e.g. no Google Analytics, no social-media pixels). No profiles about your behaviour are created and no data is passed on to third parties for advertising purposes. Consent to cookies is therefore not required; there is no cookie banner.

When you send us an enquiry via the contact form, we process the data you provide — your name, email address, optionally your phone number, subject and your message — solely to handle your enquiry and for any follow-up questions. You transmit this information via the form to our server.

Your enquiry is received on our server, checked there and forwarded by email (SMTP) to our mailbox so that we can reply to you. For sending email and for the mailbox we use PixelX AG, Kaiserslautern (Germany) as a processor pursuant to Art. 28 GDPR; processing takes place on servers in Germany and a corresponding data processing agreement is in place. Your contact enquiry is deleted from the mailbox once it has been conclusively dealt with and no follow-up questions are to be expected, and at the latest after six months, unless statutory retention obligations apply. If transmission fails, the form displays an error message; in that case your input is not stored. To ward off automated spam enquiries, the form contains a field that is invisible to you (honeypot); no additional personal data is collected in this process. When you submit the form we also briefly process your IP address in memory in order to limit the number of enquiries per sender (protection against bulk sending); this processing is based on our legitimate interest in abuse-free operation (Art. 6 (1) (f) GDPR), without permanent storage of the IP address.

The legal basis is Art. 6 (1) (b) GDPR insofar as your enquiry serves the initiation or performance of a contract, otherwise our legitimate interest in answering your enquiry pursuant to Art. 6 (1) (f) GDPR. The data remains with us until the purpose for storing it no longer applies — for example after your enquiry has been dealt with — or you ask us to delete it, unless statutory retention obligations apply.

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Vercel processes the data arising when the website is accessed as our processor pursuant to Art. 28 GDPR; a data processing addendum is in place. Processing may also take place on servers in the USA. Vercel is certified under the EU-US Data Privacy Framework, so that an adequacy decision of the EU Commission pursuant to Art. 45 GDPR exists for the transfer to the USA; in addition, Vercel has concluded standard contractual clauses pursuant to Art. 46 GDPR.

When this website is accessed, the server automatically collects information in so-called server log files, which your browser transmits. These are usually:

• IP address,
• date and time of the request,
• the page or file requested,
• browser type and version as well as the operating system used,
• referrer URL (the previously visited page).

This data is not merged with other data sources. It is processed on the basis of our legitimate interest in the technically error-free and secure operation of the website (Art. 6 (1) (f) GDPR). The log data is retained by Vercel only briefly for operational and security monitoring and is then automatically deleted.

You have the following rights regarding your personal data:

• right of access (Art. 15 GDPR),
• right to rectification (Art. 16 GDPR),
• right to erasure (Art. 17 GDPR),
• right to restriction of processing (Art. 18 GDPR),
• right to data portability (Art. 20 GDPR),
• right to object to processing based on a legitimate interest (Art. 21 GDPR).

To exercise these rights, an informal message to goldenera@hiphop90s.com is sufficient.

Irrespective of this, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR (Art. 77 GDPR). The authority responsible is in particular the supervisory authority of the federal state in which we are established.

This privacy policy will be updated as soon as changes to the website or to the underlying processing operations make this necessary.