Privacy policy

1. Controller

The controller responsible for data processing on this website is [Vor- und Nachname / legal name], Lipaka Studio, [Straße und Hausnummer], [PLZ Ort], Germany. Email: hello [at] lipakastudio [dot] com.

2. Hosting and server log files

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When pages are requested, Vercel processes technically necessary data such as IP address, date and time, requested address, referrer and browser identifier in order to deliver the website and keep it secure.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in providing the website securely and reliably. Vercel is certified under the EU-US Data Privacy Framework, and a data processing agreement is in place.

3. Contact form and email

When you write to us through the contact form, we process your name, email address, optionally your artist or project name, the service you chose and your message in order to answer your enquiry. The details are not stored on the website; they are sent to us as an email. We use the email service Resend (resend.com, USA) as a processor to send it.

The legal basis is Art. 6(1)(b) GDPR where your enquiry aims at a contract, and Art. 6(1)(f) GDPR otherwise. We delete the enquiry once it has been dealt with, unless statutory retention obligations apply. The same applies when you email us directly.

4. Cookies

We set only one technically necessary cookie (NEXT_LOCALE), which stores your language choice. It contains no personal data and is not used for analytics or advertising. The legal basis is § 25(2) no. 2 TDDDG. We do not use tracking, analytics tools or advertising cookies.

5. Fonts, videos and images

Fonts, videos and cover images are loaded directly from our own server. Visiting the website makes no connection to Google Fonts, YouTube, Spotify or any other third party.

6. Spotify player

In the “Top Releases” section you can listen to songs through the embedded player of Spotify (Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden). The player loads only when you press play on a song. Only then does your browser connect to Spotify, which receives your IP address among other data and may set cookies; if you are logged in to Spotify, it can link the playback to your account.

The legal basis is the consent you give by pressing play (Art. 6(1)(a) GDPR, § 25(1) TDDDG). More information is in Spotify’s privacy policy: https://www.spotify.com/legal/privacy-policy/.

7. Links to social networks

Our Instagram, Facebook and LinkedIn profiles are included as plain links. Only when you click one do you reach the respective provider, which is itself responsible for its data processing.

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). Contact us at the email address above to exercise them.

You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (https://www.ldi.nrw.de).