The controller responsible for data processing on this website and in the demotape.app (App) is:
Benjamin Friedrich
...
E-Mail: info@demotape.app
We process personal data exclusively within the scope of the legal provisions of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). This privacy policy applies to the use of our website as well as our mobile application (App).
When using the platform (website and app), the following data can be processed:
When you register an account, we process your name, email address, and password. This processing is based on Art. 6 Para. 1 lit. b GDPR (performance of contract).
When you visit our website or use our app, the web server automatically collects and stores technical information in server log files. This includes:
The legal basis for this processing is Art. 6 Para. 1 lit. f GDPR (legitimate interest). Our legitimate interest lies in ensuring the security, error-free operation, and stability of our systems. This data is deleted or anonymized automatically after 14 days.
Our platform uses cookies and the local storage of your device (Local Storage) to provide essential features. This includes session cookies to identify your login status, CSRF tokens to prevent security attacks, and local storage values to save your volume preference and audio playback state.
These technologies are strictly necessary for the operation of our service according to Section 25 Para. 2 No. 2 TDDG. The subsequent data processing is based on Art. 6 Para. 1 lit. b GDPR (performance of contract) or Art. 6 Para. 1 lit. f GDPR (legitimate interest). You can disable cookies in your browser settings, which may however restrict the functionality of the platform.
We process and store the audio files, cover art, track information, and metadata uploaded by you. The processing is carried out to provide our core services based on Art. 6 Para. 1 lit. b GDPR (performance of contract).
The processing is carried out for:
To fully use all functions of our app, the app may request access to certain system functions of your end device (e.g., local storage for offline downloads and audio playback, background audio for continuous playback). You will usually be asked for permission by the operating system when you first access them. You can revoke these permissions at any time in the device settings, although this may restrict the functionality of the app.
The app communicates with our servers via encrypted connections (HTTPS) to retrieve and synchronize your audio data.
Payment processing for paid services is carried out via Paddle.com Market Limited, 15 Briery Close, Great Oakley, NN18 8JU, United Kingdom. Paddle acts as the Merchant of Record and processes payment data independently. Further information can be found in Paddle's privacy policy.
We offer you the possibility to log in to our service via your existing Google or Apple account. By using this function ("Single Sign-On"), you do not have to create a separate password for our platform.
If you choose this option, you will be redirected to the pages of the respective provider (Google Ireland Limited or Apple Inc.). There you can log in with your access data. By logging in, we link your profile at the respective provider with our service.
From the respective provider, we receive the following information:
These data are processed by us to create and manage your user account. The legal basis is Art. 6 Para. 1 lit. b GDPR (performance of contract).
Further information on data processing by the providers can be found in their privacy policies:
The platform, the backend infrastructure, and the object storage for the uploaded files are hosted by Contabo GmbH, Aschauer Straße 32a, 81549 Munich, Germany. The server location is Germany.
We have concluded a contract for contract data processing (AVV) with Contabo according to Art. 28 GDPR, which ensures that your data is stored securely and in compliance with GDPR.
We use the application performance monitoring service Inspector APM, operated by Inspector APM s.r.l., Via Piane 52, 61043 Cagli (PU), Italy, to monitor the stability and performance of our application. Inspector analyzes server response times, database queries, and crash reports. No personal content or passwords are sent. The processing of technical metadata is based on Art. 6 Para. 1 lit. f GDPR (legitimate interest). We have concluded a data processing agreement with Inspector APM.
For sending transactional and system emails (such as account confirmation, password reset links, and two-factor authentication codes), we use an external email delivery provider. The email address and account metadata are processed solely for the delivery of these notifications based on Art. 6 Para. 1 lit. b GDPR (performance of contract) and Art. 6 Para. 1 lit. f GDPR.
If you contact us via email (info@demotape.app) or via the contact form on our website, the details you provide (such as your name, email address, and the content of your message) will be stored and processed by us to handle your inquiry. The legal basis for this processing is Art. 6 Para. 1 lit. b GDPR (for pre-contractual or contractual requests) or Art. 6 Para. 1 lit. f GDPR (legitimate interest). Your inquiry will be deleted once it has been processed and there are no legal obligations to retain it.
Personal data is only stored as long as this is necessary to fulfill the contract or legal obligations.
If you request the deletion of your account, your account data and the audio content uploaded by you will be completely removed from our systems within 30 days at the latest, unless legal retention obligations stand in the way.
As a data subject, you have the right at any time to:
To do this, please send an email to info@demotape.app.
Objection based on a particular situation:
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 Para. 1 lit. f GDPR (data processing in the public interest or on the basis of a balancing of interests). If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
Objection against direct marketing:
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing. If you object, your personal data will no longer be processed for these purposes.
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.
We use technical and organizational security measures to protect your data against manipulation, loss or unauthorized access. All communication channels (between app, website and servers) are encrypted by default.
We reserve the right to adapt this privacy policy occasionally so that it always complies with the current legal requirements or to implement changes to our services (e.g., new app features) in the privacy policy.