Legal

Privacy Policy

As of: June 2026

1. Controller

The controller responsible for data processing on this website is:

Ivo Vossen · Resonance Space
Schanzenstrasse 83, 20357 Hamburg, Germany
Email: iv@resonancespace.com · Phone: +49 179 3906581

2. General

Protecting your personal data is important to us. We process your data exclusively on the basis of the statutory provisions (GDPR, German Federal Data Protection Act). This policy informs you about the nature, scope and purpose of the processing of personal data on this website.

3. Hosting & server log files

This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA (“Netlify”). When you access the site, Netlify automatically collects information transmitted by your browser (server log files): IP address, date and time of access, page accessed, volume of data transferred, referrer URL, browser type and operating system. This data serves the technical provision, security and stability of the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure and functional service). A data processing agreement (Art. 28 GDPR) is in place with Netlify.

As Netlify may process data in the USA, a transfer to a third country takes place. This is safeguarded on the basis of the EU Standard Contractual Clauses and/or — where certified — the EU-US Data Privacy Framework.

To confirm before publication with legal counsel: Netlify's current DPA/privacy status and the appropriate transfer instrument (SCC / DPF).

3a. SSL/TLS encryption

For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser's address bar.

3b. Storage period

We process personal data only for as long as necessary for the respective purposes or as required by statutory retention obligations. Server log files are deleted or anonymised automatically after a short period.

4. Cookies & consent

This website only uses technically necessary storage. A cookie notice informs you on your first visit; your choice is stored locally in your browser (localStorage) so the notice is not shown again. No tracking or marketing cookies and no analytics tools are used. Should non-essential services be used in future, this will only happen with your explicit consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

5. Fonts (Google Fonts)

This website uses fonts from Google Fonts, loaded on page access from servers of Google (Google Ireland Ltd.). Your IP address is transmitted to Google. The legal basis is Art. 6(1)(f) GDPR. More information: policies.google.com/privacy.

More privacy-friendly alternative: self-host the fonts, which removes the transfer to Google.

6. Audio previews

The website plays short audio previews. These are served from our own web space; no processing beyond section 3 takes place.

7. Sale of digital products (Payhip)

Purchases of digital downloads are handled by our partner Payhip (Payhip Ltd, United Kingdom). When you click “Buy”, you are redirected to Payhip for payment, or a Payhip window opens. The data you enter there (e.g. name, email, payment details) is processed by Payhip as an independent controller. Payhip's privacy policy applies: payhip.com/privacy.

8. External links to streaming services

We link to external profiles (Spotify, Apple Music, YouTube, Instagram). Only when you click are you redirected to the respective platform; their privacy terms then apply. No content from these services is embedded on our site without your action.

9. Contact

If you contact us by email, we process your details to handle the enquiry (Art. 6(1)(b) or (f) GDPR). The data is deleted once it is no longer required and no statutory retention obligations apply.

10. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You can withdraw any consent given at any time. You also have the right to lodge a complaint with a data protection supervisory authority — e.g. the Hamburg Commissioner for Data Protection and Freedom of Information.

11. Updates

This privacy policy will be updated as needed to reflect changes in the law or the functionality of the website.

This is a carefully prepared draft and does not constitute legal advice. We recommend a brief legal review before publication, in particular regarding the host and any services added later.