PRIVACY POLICY.

1. Controller

2. Hosting and server log files

This website is hosted by checkdomain GmbH, Große Burgstraße 27/29, 23552 Lübeck, Germany. When you access the website, technically necessary information may be processed in server log files.

This may include, in particular:

• IP address,
• date and time of access,
• the page or file accessed,
• referrer URL,
• browser and operating system,
• transferred data volume as well as status or error messages.

The processing is carried out to provide the website securely and reliably, to analyse errors and to prevent misuse. The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in the secure and uninterrupted operation of this website.

According to checkdomain, log files are deleted after no more than 14 days; where technically possible and appropriate, IP addresses are anonymised after 24 hours.

Further information: checkdomain privacy information ↗

3. Contact and contact form

If you contact me by email or via the contact form, the information you provide is processed in order to respond to your enquiry. The contact form currently processes your name, email address, an optional project/song reference and your message.

If your enquiry relates to a potential or existing engagement, processing is based on Art. 6(1)(b) GDPR. For other enquiries, processing is based on Art. 6(1)(f) GDPR; the legitimate interest lies in processing and responding to enquiries.

The information is deleted once it is no longer required to process the enquiry, unless statutory retention obligations or legitimate interests require further storage.

4. Cloudflare Turnstile

Cloudflare Turnstile is used to protect the contact form against automated submissions and spam. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.

According to Cloudflare, Turnstile processes technical signals for bot detection, including the IP address, TLS fingerprint, user agent, sitekey and the associated referring page. The processing is used solely to protect against abusive or automated access.

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in protecting the contact form and the website against spam, misuse and automated attacks.

Cloudflare is a company based in the United States. Cloudflare states that it relies on its certification under the EU-U.S. Data Privacy Framework for transfers from the EEA to the United States and also uses Standard Contractual Clauses for other international transfers.

Further information: Turnstile Privacy Addendum ↗

5. BeatStars player

An external BeatStars player is embedded on the “Beats” page. The provider is BeatStars Inc.; for users in the EU, BeatStars additionally names BeatStars Europe B.V., Strawinskylaan 411, WTC Tower A, 4th Floor, 1077 XX Amsterdam, Netherlands, as its EU representative.

When the player is loaded, a connection to BeatStars is established. In particular, your IP address, browser and device information as well as information about your use of the player may be transmitted to BeatStars. BeatStars states that cookies, SDKs and other tracking technologies may be used as part of its services.

Insofar as BeatStars processes technically necessary data to provide the player, the integration is based on Art. 6(1)(f) GDPR. Where BeatStars stores information on the user's device or accesses information already stored there and such access is not strictly necessary, consent is generally required under Section 25 TDDDG in conjunction with Art. 6(1)(a) GDPR.

Further information: BeatStars GDPR Privacy Notice ↗ · BeatStars Cookie Policy ↗

6. Spotify content and cover artwork

This website uses links, cover artwork and, following user interaction, embedded Spotify players. The provider is Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden.

When Spotify content is retrieved, your browser may establish a direct connection to Spotify or to content servers used by Spotify. In particular, your IP address, browser and device information as well as the requested resource are transmitted. Additional usage data may be processed when a Spotify player is opened.

Insofar as the processing serves solely to display the requested content and no storage or access operations on the user's device requiring consent take place, it is based on Art. 6(1)(f) GDPR. Where cookies or comparable technologies are used that are not strictly necessary, their permissibility is additionally governed by Section 25 TDDDG and, where applicable, Art. 6(1)(a) GDPR.

Further information: Spotify Privacy Policy ↗

7. Apple / iTunes artwork

For individual release covers, the website uses publicly available Apple/iTunes interfaces. Your browser may establish a connection to Apple servers in order to retrieve artwork information or image files. Technically necessary connection data such as the IP address and browser information are transmitted to Apple in this process.

The processing is carried out to display published music credits on the basis of Art. 6(1)(f) GDPR. The legitimate interest lies in the visual presentation of the portfolio. Where Apple uses technologies on the user's device that require consent, the requirements of Section 25 TDDDG apply in addition.

Further information: Apple Privacy Policy ↗

8. Consent preferences and Google Analytics

This website stores your analytics preference locally in your browser so that your choice can be remembered and respected on subsequent page views. This preference storage is technically necessary for the consent function itself and is not used for advertising or profiling.

With your consent, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics is used to understand website visits and interactions and to improve the website and its content.

Depending on your interaction with the website, Analytics may process information such as page views, session information, approximate location, browser and device information, traffic source information and interaction events such as scrolling or clicks on outbound links. If analytics storage is allowed, Google Analytics uses, among other things, the _ga cookie and a client identifier to distinguish users and sessions.

Google Analytics is implemented here using the basic Google Consent Mode. The Google Analytics tag is not loaded and no Analytics data is transmitted to Google until you actively allow analytics. If you decline, Google Analytics remains blocked.

The legal basis for the use of Google Analytics and for analytics-related storage or access on your device is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You may withdraw or change your consent at any time with effect for the future by selecting “Cookie Settings” in the footer.

According to Google, individual IP addresses of users in the EU, Switzerland and the United Kingdom are not logged or stored in Google Analytics. IP address information is used for coarse geolocation and is discarded before measurement data is logged. The retention of user-level and event-level data is additionally governed by the settings configured for the Google Analytics property.

Further information: Google Analytics data and privacy ↗ · Google Analytics Terms ↗ · Google Privacy Policy ↗

9. Your rights

Subject to the applicable statutory requirements, you have in particular the right to access, rectification, erasure, restriction of processing, data portability and objection. Where processing is based on consent, you may withdraw that consent at any time with effect for the future.

To exercise your rights, simply contact studio@brayzbeats.com.

10. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. For Schleswig-Holstein, the competent authority is in particular:

11. Last updated

Last updated: August 19, 2026.