Privacy Policy MusicTech Germany

Bundesverband Musiktechnologie Deutschland e.V.

Last updated: March 2026

TLDR;

We only collect what we genuinely need, we keep it safe, we never sell it, and you are always in control.

We only collect personal data that is strictly necessary, such as your name and email address when you contact us, sign up for our newsletter, or apply for membership. Your data is never sold or shared with third parties, and we only work with trusted service providers who are contractually bound to keep it safe. We use only essential cookies to keep the website running, and any additional cookies require your explicit consent. You are always in control: you can request access to, correction of, or deletion of your data at any time by contacting us at info (ät) music-tech. de.

That is how we think data should be handled — with the same respect we bring to everything else we do.

Who We Are and How to Reach Us

The responsible party (controller) for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Bundesverband Musiktechnologie Deutschland e.V. (MusicTech Germany)

Location: Berlin, Germany

Website: www.music-tech.de

Contact: info -at- music-tech.de

If you have any questions about how we handle your personal data, please contact us at the address above.

What This Privacy Policy Covers

This Privacy Policy explains what personal data we collect when you visit our website at music-tech.de, how we use it, on what legal basis we process it, how long we retain it, and what rights you have as a data subject under the GDPR. It applies to all pages of this website, including the

member directory, news section, contact form, newsletter signup, and membership application form.

Data We Collect and Why

When you access our website, your browser automatically transmits certain technical data to our web server. This includes your IP address, the date and time of your visit, the pages you access, your browser type and version, your operating system, and the referring URL. This data is processed solely for the purpose of ensuring the technical delivery and security of the website and is not used to identify individual visitors. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in operating a secure and functional website). This data is automatically deleted after 7 days.

Hosting and Server Infrastructure

Our website is hosted on servers operated by a third-party hosting provider. In the course of providing hosting services, your IP address and other technical access data may be processed by that provider on our behalf under a data processing agreement (Art. 28 GDPR). The hosting provider processes this data exclusively on our instructions and does not use it for its own purposes.

Contact Form

If you contact us via our contact form, we collect your name, email address, and the content of your message. We use this data solely to respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR where your request relates to a contractual matter, or Art. 6(1)(f) GDPR (our legitimate interest in responding to enquiries) in all other cases. We retain contact form submissions for up to 2 years, after which they are permanently deleted unless

a longer retention period is required by law.

If you subscribe to our newsletter, we collect your email address and, if provided, your name. We use this data to send you news, updates, and information about MusicTech Germany's activities. The legal basis is your explicit consent under Art. 6(1)(a) GDPR, obtained via a double opt-in procedure. You may withdraw your consent and unsubscribe at any time by clicking the unsubscribe link in any newsletter email or by contacting us

directly. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal. We retain your email address for newsletter purposes until you unsubscribe.

We use a third-party email marketing service provider to manage and send our newsletter. That provider processes your email address on our behalf under a data processing agreement. We will name the specific provider and their registered address upon request.

Membership Application

If you apply for membership via our online membership application form, we collect the personal and organisational data you provide,which may include your name, email address, company or organisation name, professional role, website, and any other details you submit. We process this data for the purpose of assessing and processing your membership application and, if accepted, administering your membership. The legal basis is Art. 6(1)(b) GDPR (processing necessary for the performance of a contract or pre-contractual steps). Membership data is retained for the duration of your membership and for 10 years thereafter in accordance with our statutory record-keeping obligations under German law.

Cookies

Our website uses cookies. Those are small text files stored on your device by your browser.

We use the following categories of cookies:

Technically necessary cookies are essential for the website to function. They do not require your consent and are processed on the basis of Art. 6(1)(f) GDPR. These include session cookies used by our WordPress content management system.
Analytics or functional cookies are only set if you have given your explicit consent via our cookie consent banner. You may withdraw this consent at any time by adjusting your browser settings or using the cookie settings option on our website.

We do not currently use third-party advertising or tracking cookies.

WordPress and Content Management

Our website is built on WordPress. WordPress may set technically necessary cookies and process server-side log data as described in Section 3.1 above. No personal data from visitors is shared with WordPress.com or Automattic beyond standard server log data unless you actively use a

WordPress-powered form or feature.

Social Media Links

Our website contains links to our profiles on Instagram and LinkedIn. These are outbound links; only clicking them will take you to the respective third-party platforms. We have no influence over the data processing practices of Instagram (Meta Platforms Ireland Ltd.) or LinkedIn (LinkedIn Ireland Unlimited Company). When you visit those platforms, their own privacy policies apply. We do not embed social media tracking pixels or widgets that

load third-party scripts on our website.

Who We Share Your Data With

We do not sell, rent, or trade your personal data to any third party.

We may share your data with:

Service providers acting as data processors on our behalf (e.g. our hosting provider, email marketing provider), bound by data processing agreements under Art. 28 GDPR.
Public authorities if we are legally required to disclose data pursuant to applicable law.

We will not transfer your personal data to countries outside the European Economic Area (EEA) without ensuring an appropriate level of data protection through standard contractual clauses or other GDPR-compliant mechanisms.

Your Rights as a Data Subject

Under the GDPR, you have the following rights regarding your personal data:

Right of access (Art. 15 GDPR): You may request a copy of the personal data we hold about you.
Right to rectification (Art. 16 GDPR): You may request that we correct inaccurate or incomplete data.
Right to erasure (Art. 17 GDPR): You may request that we delete your data, subject to any legal retention obligations.
Right to restriction of processing (Art. 18 GDPR): You may request that we restrict how we process your data in certain circumstances.
Right to data portability (Art. 20 GDPR): Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format.
Right to object (Art. 21 GDPR): You may object to processing based on our legitimate interests at any time. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at the address in Section 1. We will respond within one month.

You also have the right to lodge a complaint with the competent supervisory authority. The supervisory authority responsible for MusicTech Germany is: Berliner Beauftragte für Datenschutz und Informationsfreiheit Friedrichstr. 219, 10969 Berlin, mailbox@datenschutz-berlin.de, www.datenschutz-berlin.de

Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including encrypted data transmission via HTTPS/TLS. However, no method of transmission over the internet is entirely secure.

Links to Third-Party Websites

Our website may contain links to external websites, including musictech.eu and our social media profiles. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies independently.

Children's Data

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The current version will always be available on this page with the date of last update indicated at the top. We encourage you to review this policy periodically.