Privacy policy

1. Controller

The controller responsible for processing personal data on this website is:

2. Website and hosting

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When you access the website, connection and access data required for its technical operation is processed. This includes, in particular, your IP address, the date and time of access, the requested page or file, the HTTP status, the amount of data transferred, and information sent by your browser about the browser, operating system and, where applicable, the previously visited page (referrer).

This data is used to provide the website, detect and resolve technical errors, and protect against misuse and attacks. The legal basis is Art. 6(1)(f) GDPR. My legitimate interest is the secure and reliable operation of this website. The recipient of this technical data is the hosting provider IONOS. This data is necessary to deliver the pages you request; without it, the website cannot be displayed.

Access logs are retained for the periods necessary for operation and security. Data is deleted or anonymised once it is no longer needed for these purposes. In the event of a specific security incident, relevant data may be needed for longer to investigate the incident or establish and defend legal claims.

Data is transmitted using HTTPS encryption. IONOS provides further information in its privacy policy.

Language choice and data settings in your browser

If you manually select German or English, your language preference is saved in your browser's local storage under the key “abbo-t-language” so that the website remembers your choice. Your choice about optional analytics is saved under “abbo-t-analytics-consent-v1” with a validity period of 180 days, where your browser permits storage. A valid saved acceptance or rejection prevents the privacy window from opening automatically when you return to the website. Once the 180-day period expires or the saved entry is removed, you will be asked again on your next visit. These browser entries are not sent to the web server. You can change your settings at any time or delete the saved entries using your browser settings.

This local storage applies the settings you expressly select and respects your analytics decision (section 25(2), point 2 TDDDG). Where personal data is processed in doing so, my legitimate interest is reliably implementing your settings (Art. 6(1)(f) GDPR). Optional analytics and its cookies are used only with your consent, as described in the following section. No automated decisions within the meaning of Art. 22 GDPR are made.

3. Optional analytics with Google Analytics 4

Google Analytics 4 is intended for statistical analysis of this website. The feature becomes active only when it has been configured and you expressly consent to the “Analytics” category. Without this consent, no Google Analytics script is loaded, no analytics data is sent to Google and no Analytics cookies are set. You can use the website without analytics.

The purpose is to understand website usage and improve its content. With your consent, page views and visited page paths, information about your device and browser, visits and sessions, and clicks on streaming and contact links are analysed. Streaming clicks record only the platform, not the music title or a release ID. Contact clicks are recorded without names, email addresses or message content. The page address sent to Google contains only the fixed website address and page path, without query parameters or URL fragments. For a previously visited website, only its origin is sent, without its page path or query parameters. I do not assign custom user IDs for analytics.

Google Analytics uses pseudonymous cookie identifiers to recognise browsers and sessions. The “_ga” and “_ga_…” cookies on this website are configured to expire after 365 days; this period may restart on a subsequent recorded visit. The lifetime of these browser cookies is separate from the retention of measurement data by Google. The Analytics account is configured to retain event data for 2 months and user data for 14 months. Renewed user activity resets the 14-month user-data retention period, which then starts again. Aggregated reports may remain for longer.

The legal basis for analytics processing is your consent under Art. 6(1)(a) GDPR; storing and reading Analytics cookies is based on your consent under section 25(1) TDDDG. Google signals and ad personalisation are disabled. No consent is granted for advertising storage, advertising user data or personalised advertising. Analytics is not used for personalised advertising.

Google as recipient and processing abroad

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. After your consent, your browser connects to Google, which also receives your IP address as part of the technical connection. Google states that IP addresses from EU Analytics traffic are not logged or stored and are deleted after deriving approximate location information. Processing may also involve Google affiliates and service providers and take place outside the EU, particularly in the United States.

Google describes the EU-US Data Privacy Framework and, depending on the transfer, Standard Contractual Clauses among its mechanisms for international transfers. Details are available in Google's information about international data transfers and data processing terms. Further information is provided in the Google privacy policy and its explanation of data use on websites using Google services.

Change or withdraw consent

You can change your decision at any time or withdraw consent by rejecting analytics through the “Privacy settings” button in the footer. The button remains available after your choice while the analytics feature is configured. On withdrawal, further analytics events are blocked immediately and this website's Analytics cookies are deleted. Your rejection is saved where your browser permits it. The page is reloaded to remove a previously loaded Google library only if the rejection was saved or the previous consent entry was safely removed from the browser.

If neither saving the rejection nor removing the previous consent is possible, analytics remains stopped on the current page. However, an old consent value that is still stored may be used again after a later manual reload. In that case, check your browser's storage settings and remove the analytics preference entry there. Withdrawal does not affect the lawfulness of processing before withdrawal and does not automatically delete data already sent to Google. The information in section 6 applies to your other rights.

Google also provides a browser add-on to disable Google Analytics. This does not replace the option to change your decision on this website at any time.

4. Music data and external links

The releases and cover images displayed on this website come from the public Apple music catalogue. They are retrieved and cached on the server. Your browser loads this data and these images from abbo-t.de; your IP address and other visitor data are not transmitted to Apple in the process.

Links to streaming services such as Spotify, Apple Music and SoundCloud, and to other external websites, open services provided by their respective operators. No players or social media plugins from these providers are embedded. Your browser connects to an external website only when you open such a link. That website may process your IP address and browser information, among other data, and set cookies. Its operator is responsible for processing data on the external website, where that operator's privacy information applies.

5. Contact by email

If you send me an email, I process your email address, your name if you provide it, the content of your message and the associated communication data in order to respond to your enquiry. Technical transmission and delivery take place through the email service providers involved.

If your enquiry concerns a contract or steps prior to entering into a contract, the legal basis is Art. 6(1)(b) GDPR. For other enquiries, processing is based on Art. 6(1)(f) GDPR; my legitimate interest is handling and responding to your enquiry.

Providing this information is voluntary. Without a working email address and the information necessary for your enquiry, I may be unable to respond. The data is deleted once the enquiry has been concluded and further retention is no longer necessary for handling it, statutory retention obligations or legal claims. Where statutory retention obligations apply, further storage is based on Art. 6(1)(c) GDPR.

6. Your rights

Subject to the statutory conditions, you have the following rights:

• Access to your personal data and a copy of that data (Art. 15 GDPR).
• Rectification of inaccurate data or completion of incomplete data (Art. 16 GDPR).
• Erasure of your data (Art. 17 GDPR).
• Restriction of processing (Art. 18 GDPR).
• Data portability, where processing is based on consent or a contract and carried out by automated means (Art. 20 GDPR).
• Withdrawal of consent with effect for the future; this does not affect the lawfulness of processing before withdrawal (Art. 7(3) GDPR).

To exercise your rights, you can contact contact@abbo-t.de or write to the postal address given above.

Complaint to a supervisory authority

If you believe that the processing of your personal data infringes the GDPR, you may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement.

The supervisory authority responsible for the website operator in North Rhine-Westphalia is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW). Information and the complaint form are available at ldi.nrw.de/beschwerde.