Legal

Privacy Policy

Template note These pages are based on standard GDPR/TMG templates. Before going live, have them reviewed by a qualified lawyer.

1. Controller

The controller responsible for processing personal data on this website (Art. 4 No. 7 GDPR) is ACTIVATED Network — Schroetter & Puschmann GbR. Postal address, registry and full contact details are listed in the imprint.

Privacy contact: info@basswarandcaox.com

2. Scope

This notice covers the website basswarandcaox.com (incl. dev.basswarandcaox.com) and all related services (booking form, newsletter, free downloads). External services we link to (Spotify, Apple Music, YouTube, Bandsintown, social media) have their own privacy policies and are governed by their respective controllers.

3. Hosting & server logs

The site is hosted on a dedicated VPS at Hostinger International Ltd. located in the EU. The hosting provider is contractually bound by Art. 28 GDPR (data processing agreement).

For technical operation and security, the web server temporarily stores the following access data in log files: anonymized IP address (last octet truncated), date and time of request, requested URL, referrer URL, HTTP status code, transferred byte count, user agent. Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in stable and secure operation). Retention: 7 days, then automatic deletion.

4. Cookies and local storage

We only set cookies and local-storage entries that are strictly necessary for the website to work, plus optional analytics/marketing categories you explicitly consent to via the cookie banner. See the dedicated cookie policy for the full table.

Legal basis for non-essential storage: Art. 6 (1) lit. a GDPR / § 25 (1) TTDSG (your consent).

5. Booking form

The booking form on /booking processes the data you submit (name, email, event details, message) solely to evaluate and respond to your booking enquiry. Data is transmitted via TLS to info@basswarandcaox.com (Microsoft 365 inbox). Legal basis: Art. 6 (1) lit. b GDPR (steps prior to entering a contract). Retention: until the enquiry is closed and any contractual claims period has lapsed (max. 36 months), then deletion.

6. Newsletter

The newsletter is operated via a self-hosted Listmonk instance (EU server). We use the double-opt-in procedure: after subscribing, you receive a confirmation email with an opt-in link. Only after clicking the link is your address added to the active subscriber list.

  • Data processed: email address, signup timestamp, opt-in confirmation timestamp, IP address (anonymized) for proof of consent.
  • Legal basis: Art. 6 (1) lit. a GDPR (your consent).
  • Withdrawal: every newsletter contains an unsubscribe link. You can also write to info@basswarandcaox.com.
  • Retention: until unsubscribe.

7. Anti-spam (honeypot)

Our forms include hidden honeypot fields. Submissions that fill the honeypot (typically bots) are silently discarded. No personal data is processed by this mechanism. Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in spam protection).

8. Embedded media & outbound links

The site does not embed third-party media players (Spotify, Apple Music, YouTube). All streaming destinations are linked as outbound URLs that open in a new tab. No data is transferred to those providers until you actively click the link.

The world map on the homepage is rendered locally from open-source TopoJSON data (no third-party API call at runtime).

Tour data may be sourced from Bandsintown LLC via their public API on a scheduled server-side cron job. The browser does not contact Bandsintown directly. If you click a Bandsintown ticket link, their privacy policy applies.

9. Free downloads

The free downloads on /downloads are direct file downloads served from our own server. We do not require registration. Standard server log entries (see § 3) apply.

10. Your rights

You have the following rights under the GDPR with respect to your personal data:

  • Right of access (Art. 15 GDPR).
  • Right to rectification (Art. 16 GDPR).
  • Right to erasure (Art. 17 GDPR).
  • Right to restriction of processing (Art. 18 GDPR).
  • Right to data portability (Art. 20 GDPR).
  • Right to object (Art. 21 GDPR).
  • Right to withdraw consent at any time (Art. 7 (3) GDPR), without affecting the lawfulness of processing based on consent prior to withdrawal.

To exercise your rights, contact us at info@basswarandcaox.com.

11. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for ACTIVATED Network is the supervisory authority of the German federal state of our registered office (see imprint).

12. Changes

We may update this privacy notice if our processing activities change. The current version is always available at this URL.

Last updated 2026-04-17