Privacy Policy

Drumstick Entertainment GmbH i.G.
Alte Schönhauser Straße 44
10119 Berlin
Germany
hello@drmstck.com

Represented by the managing directors Pino Brönner and Matthias Steur. There is currently no obligation to appoint a data protection officer.

We process personal data only where this is necessary to operate the website, to communicate with you, to keep our systems secure, or to initiate and perform business relationships. There is no advertising, audience measurement or behavioural analysis.

The website runs on infrastructure provided by Lovable (Lovable Labs Incorporated, San Francisco, USA) and is delivered through the edge network of Cloudflare (Cloudflare, Inc., San Francisco, USA, with Cloudflare Germany GmbH). Both providers act as processors on our behalf.

Purpose: technical provision, delivery and protection of the website. Categories of data: connection and log data as described under server log files. Legal basis: Art. 6 (1) (f) GDPR, our legitimate interest in secure, stable and abuse-resistant operation of the website.

Both providers are based in the USA, so access to data from third countries cannot be ruled out. We conclude the data processing agreements and transfer safeguards offered by them. On request to hello@drmstck.com we will tell you the current status of those agreements and safeguards.

When you access the website, technically necessary log data is processed: IP address, requested URL, date and time of the request, referrer where transmitted, browser type and version, operating system and device information, as well as HTTP status and transferred data volume.

Purposes: secure and reliable delivery of the website, prevention and detection of misuse, technical troubleshooting and IT security. Legal basis: Art. 6 (1) (f) GDPR. Legitimate interest: secure, stable and abuse-resistant operation of the website.

Log data arises at the infrastructure providers named above and is deleted there in line with their technical settings as soon as it is no longer needed for delivery, stability and security. We do not analyse it, do not merge it with other data and do not use it for marketing. Exception: data required to investigate a specific security incident is kept until that investigation is closed.

If you write to hello@drmstck.com, we process your sender address, the information in your message and the associated metadata in order to handle the enquiry. This website does not operate a contact form.

Legal basis: Art. 6 (1) (b) GDPR where the communication relates to the initiation or performance of a contract; otherwise Art. 6 (1) (f) GDPR, our legitimate interest in responding to business enquiries.

General enquiries with no follow-up are deleted no later than six months after the last contact. Business correspondence with relevance under commercial or tax law is retained for six or ten years pursuant to Sec. 257 HGB and Sec. 147 AO; during that time it is restricted from further use.

The website contains a sign-in form for a closed client area. At present no authentication backend is connected to this form: any user name or password entered is not transmitted, not stored and not evaluated. No cookies are set for this purpose. Only the server log files described above are created when the page is requested.

As soon as the area goes into production we will update this notice and describe the credentials, logging, provider used, retention and legal basis in concrete terms.

This website sets no cookies and uses no analytics or marketing technologies, no advertising pixels and no embedded third-party content. Fonts and graphics are loaded from our own server, not from external providers.

Only two technically necessary entries are stored on your device: your language choice in local storage (drumstick.lang) and the scroll position of the page navigation in session storage (tsr-scroll-restoration). Neither contains personal content. The session entry ends when you close the tab, the language choice stays until you clear your browser storage. As both are strictly necessary for the function you requested (Sec. 25 (2) no. 2 TDDDG), no consent banner is required.

Recipients are the infrastructure providers Lovable and Cloudflare named above acting as processors, our email provider for communication and, within the limits provided by law, tax advisors, legal advisors and public authorities. Data is never shared for advertising purposes or sold.

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21). Any consent given can be withdrawn at any time with effect for the future (Art. 7 (3) GDPR). A message to hello@drmstck.com is sufficient.

You may also lodge a complaint with a supervisory authority; for us this is the Berlin Commissioner for Data Protection and Freedom of Information.

No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.