Privacy Policy

PRIVACY POLICY – CONDO MUSIC

Last updated: October 2026

This Privacy Policy informs you about the processing of personal data when you visit and use condo-music.com, when you contact us, and — where offered — when using our newsletter and contact form.

1. CONTROLLER

The controller within the meaning of the GDPR is:

Kerem Gülcubuk
Condo Music
Friedrich-Engels-Bogen 7
81735 München
Germany
Email: inside@condo-music.com

EUIPO trademark Condo Music: Registration No. 018434707
VAT ID: DE354090803 (small-business scheme under Section 19 German VAT Act – UStG)

2. HOSTING & DOMAIN

**Web hosting (WordPress):** This website is hosted by all-inkl.com – Neue Medien Münnich (Dresden / Friedersdorf area, Germany) under the PrivatPlus plan. all-inkl provides the webspace / WordPress environment.

Condo Music and all-inkl have concluded a data processing agreement under Article 28 GDPR (DPA dated 26 April 2025, contract version 19 September 2022). Server locations are in Germany; personal data from hosting operations is processed in the European Union.

**Domain / DNS:** The domain condo-music.com and its DNS management are with **STRATO AG** (Berlin, Germany). As domain registrar / DNS provider, STRATO processes data required for domain registration and resolution (including registrant data and DNS records). Legal basis: Article 6(1)(b) GDPR (performance of our online offering) and/or Article 6(1)(f) GDPR (legitimate interest in domain availability and stability). Where STRATO acts as a processor, STRATO’s contractual terms and/or an Article 28 GDPR DPA apply.

3. SERVER LOG FILES

When you access the website, the hosting provider / web server automatically collects information in server log files. This may include in particular:
• IP address
• date and time of the request
• requested URL / file
• referrer URL
• browser and operating system information
• status code / amount of data transferred

Legal basis: Article 6(1)(f) GDPR (legitimate interest in providing, securing and stabilizing the website).

Retention: Server log files are typically stored for a short period (commonly about 7–14 days), unless longer retention is required to investigate security incidents. Exact retention may depend on hosting configuration; we will confirm the current setting on request.

4. COOKIES & CONSENT MANAGEMENT (REAL COOKIE BANNER)

We use cookies and similar technologies. Unless strictly necessary for technical reasons, we set cookies only with your consent.

Legal bases:
• Storing or accessing information on your terminal equipment: Section 25(1) TDDDG (consent); exception only where Section 25(2) TDDDG applies (strictly necessary for a service you expressly requested).
• Subsequent processing of personal data: Article 6(1)(a) GDPR (consent) or — narrowly and only where applicable — Article 6(1)(f) GDPR.

We use the consent tool **Real Cookie Banner** to obtain, refuse and later withdraw or change consents. Refusing is as easy as accepting (equivalent option on the first layer).

A current overview of services/cookies is provided by Real Cookie Banner; this Privacy Policy applies in addition.

5. GOOGLE TAG MANAGER (ONLY AFTER CONSENT)

Where enabled, we use Google Tag Manager (Google Ireland Limited / possibly Google LLC, USA) to manage tags centrally.

Tag Manager itself is loaded only after your consent (not used before consent in a “Functional” category). Statistics or marketing tags fired via Tag Manager also run only after the relevant consent.

Legal basis: Section 25(1) TDDDG and Article 6(1)(a) GDPR.
Where data is transferred to the USA, this is based — where Google is certified under the EU-US Data Privacy Framework (DPF) — on the European Commission’s adequacy decision; Standard Contractual Clauses may apply in addition.

6. GOOGLE WORKSPACE (EMAIL / OFFICE COMMUNICATION)

For business email and office communication we use Google Workspace (Google Ireland Limited / possibly Google LLC).

Primary business address: **ceo@condo-music.com**. Additional addresses (aliases in the same Workspace environment): **inside@condo-music.com**, **beats@condo-music.com**, **booking@condo-music.com**, **support@condo-music.com**. For privacy inquiries please contact: inside@condo-music.com (or support@condo-music.com).

Purposes: handling inquiries, contract and studio communication, organization.
Legal bases depending on context:
• Article 6(1)(b) GDPR (pre-contractual steps / performance of a contract),
• Article 6(1)(f) GDPR (legitimate interest in efficient, secure business communication),
• Article 6(1)(a) GDPR where consent is required.

Third country: Where data is transferred to the USA, the adequacy decision applies if Google is DPF-certified; otherwise appropriate safeguards (e.g. Standard Contractual Clauses) under Article 46 GDPR.

7. NEWSLETTER (BREVO) – WHERE USED

Where we offer a newsletter, we send it via Brevo (Sendinblue GmbH, Germany / EU; Brevo Free plan).

• Subscription uses double opt-in (DOI).
• A data processing agreement (Article 28 GDPR) is in place where Brevo acts as processor.
• Tracking (e.g. open and click rates) is used only with separate consent (Section 25 TDDDG / Article 6(1)(a) GDPR), where deployed.
• Legal basis for sending: Article 6(1)(a) GDPR; you may withdraw consent at any time with effect for the future (e.g. unsubscribe link in each email).

This section applies only where the newsletter is actually offered / used.

8. YOUTUBE EMBEDS, BEATSTARS EMBEDS & POLYLANG

YouTube embeds:
Embedded YouTube videos (Google Ireland Limited / Google LLC) are loaded only after consent (click-to-load / consent-gated). Without consent, no YouTube content is loaded that would transmit personal data to YouTube.
Legal basis: Section 25(1) TDDDG and Article 6(1)(a) GDPR. Third-country / DPF notes as in section 5.

BeatStars embeds:
Where BeatStars content is embedded, loading occurs only after consent (marketing / consent category).
Legal basis: Section 25(1) TDDDG and Article 6(1)(a) GDPR.

Polylang:
For language selection (German/English), Polylang may set a cookie. Where this is strictly necessary for the language version you requested, Section 25(2) no. 2 TDDDG may apply; subsequent processing is based on Article 6(1)(f) GDPR (legitimate interest in multilingual provision) or consent where required.

9. CONTACT FORM – WHERE OFFERED

Where we offer a contact form (e.g. Fluent Forms), we process the data you submit (e.g. name, email, message) to handle your request.

Legal bases: Article 6(1)(b) GDPR (pre-contractual steps / contract) or Article 6(1)(f) GDPR (legitimate interest in responding to inquiries); Article 6(1)(a) GDPR where separate consent is obtained.
Storage only as long as needed for handling and any proof purposes.

10. SERVICES NOT USED

Hotjar (heatmaps/session recording) and Facebook Connect are currently not used. Corresponding sections are omitted.

11. DATA SUBJECT RIGHTS

Where the legal requirements are met, you have in particular the following rights:
• Access (Article 15 GDPR)
• Rectification (Article 16 GDPR)
• Erasure (Article 17 GDPR)
• Restriction of processing (Article 18 GDPR)
• Data portability (Article 20 GDPR)
• Objection to processing based on Article 6(1)(e) or (f) GDPR (Article 21 GDPR)
• Withdrawal of consents at any time with effect for the future (Article 7(3) GDPR)

To exercise your rights, a simple message to inside@condo-music.com is sufficient.

Right to lodge a complaint: You may lodge a complaint with a supervisory authority, in particular the Bavarian Data Protection Authority (BayLDA / LfDI Bayern) as our competent authority, or with the authority at your habitual residence.

12. RETENTION – PRINCIPLES

We store personal data only as long as necessary for the respective purposes or as required by statutory retention periods (e.g. commercial and tax law). Thereafter we delete or anonymize the data unless legal retention duties prevent this.

13. STATUS & CHANGES

Status of this Privacy Policy: October 2026.
We may update this Policy when the law, technology or our offerings change. The current version is available at /privacy/.

Sources (for orientation):
• Articles 6, 7, 12–13, 15–21, 28 GDPR – https://www.gesetze-im-internet.de/dsgvo_2018/ / https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679
• Section 25 TDDDG – https://www.gesetze-im-internet.de/ttdsg/__25.html
• BfDI on cookie banners – https://www.bfdi.bund.de/DE/Buerger/Inhalte/Telemedien/Cookie-Banner.html

Privacy settings: Change privacy settings | Consent history | Revoke consent

With this cookie policy, we would like to explain what cookies and cookie-like technologies are, how we and other service provider use them on this website, what information they collect, for how long and for what purposes we use them.

Table of contents

Controller of the website

Addition to the privacy policy

This cookie policy is a supplement to this website's privacy policy. The cookie policy specifies how a website uses cookies and what data it collects through them, while the privacy policy is a more comprehensive overview of all data processing activities on the website and beyond.

Cookies are small pieces of information similar to text files that can be stored and read on the end device. They serve various purposes, including maintaining basic functionalities of the website, security and privacy, providing optional functions of the website, collecting statistic data on visitor flows and providing marketing systems. Practical examples of what can be stored in cookies are the storage of login status in user accounts, the content of shopping baskets in e-commerce platforms, or a user ID for tracking behavior on the website.

The information can technically be stored in various ways. The best-known examples of this are HTTP cookies and cookie-like technologies like local storage, session storage or IndexedDB. Each type of storage has different properties, which determine the technical handling, accessibility and controllers authorized to access the information. All these types of storage are usually summarized under the term "cookies" and are therefore called as such in this cookie policy.

The setting and reading of cookies in the European Union (EU) and the European Economic Area (EEA) is in accordance with Art. 5 (3) ePrivacy Directive and Recital 66 ePrivacy Directive only permitted if a user has given his consent on the basis of comprehensive information about the purposes of the processing. The website operator may also set cookies if they are strictly necessary to provide you as a user with the expressly requested service, e.g. the basic content of this website or other strictly necessary cookies for basic functionality of the website to be displayed to you without your consent.

What rights does the website visitor have?

Services and their cookies can be set and read on the legal basis of your consent or a legitimate interest. When you first visited this website, you were asked for your consent and you had the opportunity to object to the use of certain services. We explained which legal basis is used for which service in our consent dialog.

You have the right to view the history of your decisions, change your privacy settings, object to the use of services and revoke your consent at any time. Below you find possibilities to exercise your rights:

How to manage cookies in a browser?

  • How to remove cookies in a browser: To remove cookies from your device, you can clear the browsing data in the settings of your browser. This action will remove all cookies from all websites you've visited, potentially including saved login details and site preferences. In some browsers, you can just delete the cookies and similar data without deleting the whole browsing history.
  • How to control cookies in a browser: For more granular control over cookies specific to certain websites, navigate to the privacy and cookie settings within your used browser. Here, you can adjust preferences related to individual sites' cookie usage.
  • How to block cookies in a browser: It's possible to configure most modern browsers in their settings to block all cookies from being placed on your device. But blocking cookies could lead to certain services and functionalities not functioning correctly, e.g. logins as a user. You can also use extensions for many browsers which can block the setting of cookies on websites.
  • How to manage cookies on this website: To tailor your preferences regarding cookies on this website, you can change your preferences at any time by clicking on the link in the section "Rights of the website visitor".

You can find more information on the handling of cookies devowl.io/rcb/cookie-handling/.

What types of cookies exist?

  • Essential cookies are indispensable for the basic functionality of a website and enable functions such as saving login information or access to secure areas of the site. These include, for example, security cookies, which can identify a bot that is not wanted on the website by storing an authentication key in a cookie.
  • Functional cookies improve the user experience by storing information and preferences such as language settings or appearance settings of the website to provide personalized. This includes, for example, preference cookies that store the user's preferred video quality on a website.
  • Statistics cookies collect data about the use of a website to gain insights into user behavior and optimize the performance of the site. This includes, for example, a randomly assigned user ID that makes it possible to attribute whether you have visited a subpage of the website.
  • Marketing cookies are used to track user behavior across different websites and to display personalized advertising based on the interests and surfing behavior of users. This includes, for example, advertising cookies that store an interaction with an advertisement on the website and pass it on to advertisers or a chat system for pre-sale questions and customer support.

Who can set cookies on this website?

On this website, both the operator of the website and third-party services which are used on this website may set cookies and access its content. Who can access which cookies and their content differs between first-party and third-party cookies. First-party cookies are created by the visited website and can only be read by the website operator and integrated third-party services on this website. Third-party cookies are set by usually third-party services on other domains, can be read on all websites on which the service that controls the domain is embedded and, for example, used by advertising networks to track user behavior across different websites and offer personalized advertising.

Which cookies are used on this website?

The cookie policy was last updated on 2025-06-23.

Scroll to Top