Privacy Policy

01 · Controller

The controller responsible for processing personal data on this website and when you contact us is:

Personal data is information that relates to you or can be assigned to you, for example your name, e-mail address or IP address.

02 · Website & server log files

When you visit our website, your browser sends technical connection data to the web server. This may include your IP address, the date and time of access, the requested page, the page visited previously, browser and operating-system details, the response status and the amount of data transferred.

We process this data to deliver the website to you, ensure its secure operation, identify technical faults and prevent misuse. The legal basis is our legitimate interest in a reliable and secure web offering under Art. 6(1)(f) GDPR. Without the necessary connection data, the page cannot be delivered.

The website is operated by an external hosting provider. This provider processes the data required for delivery and protection as a processor on the basis of an agreement under Art. 28 GDPR. To the best of our current knowledge, the website is operated on servers in Germany.

03 · Contacting us

You can contact Tonstation by e-mail, telephone or via the contact form about rehearsal rooms, the recording studio, music lessons and partnerships. We process your contact details and the information you provide about your request. E-mails may also contain transmission data and attachments.

The contact form specifically includes the fields name, e-mail address, telephone number (optional), subject and message. The website does not store the information you enter. When you submit the form, your e-mail program opens. The information is sent to info@tonstation.com only if you actually send the message.

We use your information to answer your request, clarify follow-up questions and, at your request, prepare an offer or contract. If your request concerns a contract or pre-contractual measures, the legal basis is Art. 6(1)(b) GDPR. We handle other requests on the basis of our legitimate interest in appropriate communication under Art. 6(1)(f) GDPR.

Providing the information is voluntary. Without suitable contact details or sufficient information, we may not be able to process your request. Ordinary e-mails are not automatically end-to-end encrypted. Please do not send sensitive documents that are not needed for your request.

04 · Cookies & fonts

This website does not use analytics, advertising or marketing trackers, embedded social-media feeds, advertising pixels or external video players.

The page functions we have built do not set cookies and do not use local browser storage for usage profiles or advertising. The fonts used are delivered locally by this website; no connection to Google Fonts or a comparable external font service is established.

If non-essential cookies, comparable storage technologies or additional services are used in the future, we will update this privacy policy and obtain consent beforehand where legally required.

05 · External links

For directions, we link to Google Maps. The map is not embedded in our website. No Google map is therefore loaded when you visit our pages. Your browser accesses the external service only when you open the map link.

Our Facebook presence is also only linked. The icon is delivered with the website itself; it is not a Facebook plugin and no Facebook feed is loaded.

The privacy information of the respective provider applies to linked services. Those providers may process, for example, your IP address, device and usage data and link it to an account you have there.

06 · Recipients & third-country transfers

The recipient of technical connection data is the hosting provider used to operate this website. E-mails and their transmission data may be processed by the technical provider of the e-mail mailbox. Within Tonstation, access is limited to people who need the information to process your request or provide technical support.

To the best of our current knowledge, operating this website does not involve transferring your data to countries outside the European Union or the European Economic Area. If you follow an external link, the privacy information of the respective provider applies; that provider may process data in third countries.

07 · Data retention

We store information from an enquiry only for as long as it is needed to process the enquiry and communicate with you afterwards. Once the matter is complete, we delete the data unless statutory retention obligations apply or further storage is necessary to assert, exercise or defend legal claims.

Statutory retention periods apply to business records. Depending on the type of document, these may include six years for business correspondence, eight years for accounting records and ten years for books or annual financial statements. The specific period depends on the document and generally begins at the end of the relevant calendar year.

Server log files are deleted or anonymised as soon as they are no longer required for secure technical operation, fault analysis and preventing misuse. The specific retention period depends on the hosting provider's server configuration and security requirements.

08 · Your rights

Subject to the statutory requirements, you may:

• Request access to the processing of your personal data.
• Request rectification if information is inaccurate or incomplete.
• Request erasure or restriction where the applicable requirements are met.
• Request data portability: receive data you have provided in a structured, commonly used and machine-readable format where the statutory requirements are met.

These rights arise in particular from Arts. 15 to 20 GDPR. You can exercise them using the contact details above. Additional information for identity verification is required only if there are justified doubts about your identity.

09 · Objection & withdrawal

10 · Right to lodge a complaint

If you believe that the processing of your personal data violates data-protection law, you may lodge a complaint with a data-protection supervisory authority. You do not have to contact Tonstation first.

For private companies in North Rhine-Westphalia, the following authority is generally responsible:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
Postfach 20 04 44
40102 Düsseldorf, Germany

Telephone: +49 211 38424-0
Contact & complaints at the LDI NRW ↗

11 · Updates

This privacy policy applies to the Tonstation website and the contact options described there. The website does not use automated decision-making or profiling that produces legal or similarly significant effects concerning you.

Additional privacy information may be required for further processing, for example in connection with a rental, lesson or recording contract.

We update this policy if functions, service providers or processing procedures change.