Privacy

German version: Datenschutzerklärung

1. Controller

Armin Stadler, Drosselweg 47, 51467 Bergisch Gladbach, Germany, email: bommel.productions@gmail.com

2. Hosting

This website is hosted by Netlify, Inc. (San Francisco, USA). When you visit the site, Netlify processes technically necessary data (e.g. IP address, date and time of access) in server logs to provide and secure the service (Art. 6(1)(f) GDPR). Netlify is certified under the EU-US Data Privacy Framework.

3. Booking form

If you use our contact form, we process the data you provide (name, email, venue/organisation, city, date, message) solely to handle and answer your request (Art. 6(1)(b) GDPR). No consent is required for this; the checkbox in the form is a voluntary pointer to this policy, not a condition for sending. Your request is received by a serverless function at our hosting provider Netlify and delivered to us via the email service Resend (provider: Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA); this involves a transfer to the USA (safeguarded by EU standard contractual clauses under Implementing Decision (EU) 2021/914, Art. 46 GDPR). The form data is deleted once it is no longer needed to handle your request.

To prevent automated abuse we keep a rate-limiting counter (Art. 6(1)(f) GDPR). It stores your IP address and email address not in clear text but only as an irreversible digest (HMAC-SHA-256 with a server-side secret). Each counter covers one hour; after that the entry is deleted — at the latest with the next form submission, which triggers the cleanup.

4. Embedded Bandcamp player

The Bandcamp audio player (Bandcamp, Inc., USA) only loads after you actively start it with a click. Only then is connection data (including your IP address) transmitted to Bandcamp, which may also set its own cookies. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) German TDDDG).

5. External links

Links to Bandcamp, YouTube and Instagram lead to external services; their own privacy policies apply there.

6. Cookies, tracking & local storage

We do not set any cookies and do not use tracking. We use your browser's local storage for a single purpose: if you dismiss the notice about upcoming shows, your browser remembers that exact list of dates so the notice is not shown to you again. Only a list of concert dates is stored — no personal data, no identifier, no analytics. It stays on your device, is never transmitted to us or to third parties, and is required for this function you asked for (§ 25(2)(2) German TDDDG); you can delete it at any time via your browser's site data. Only after you actively consent to loading the Bandcamp player may Bandcamp set its own cookies (see section 4).

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), and you may lodge a complaint with a supervisory authority.