Privacy policy

This is a translation for your convenience. In case of doubt, the German version of this privacy policy is authoritative.

We are very pleased about your interest in our website. Data protection is of particularly high importance to the board of Syndications4Radio, operated by Ätherklang e.V. - Für Audiovisuelle Vielfalt. Using the websites of Syndications4Radio is generally possible without providing any personal data. However, if a data subject wishes to use special services of our association via our website, processing of personal data may become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.

The processing of personal data, such as the name, address, email address or telephone number of a data subject, is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection regulations applicable to Syndications4Radio. By means of this privacy policy, our association wishes to inform the public about the nature, scope and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed of the rights to which they are entitled.

As the controller, Syndications4Radio has implemented numerous technical and organisational measures to ensure the most complete protection possible of the personal data processed through this website. Nevertheless, internet-based data transmissions can in principle have security gaps, so that absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone.

1. Definitions

The privacy policy of Syndications4Radio is based on the terms used by the European legislator when adopting the General Data Protection Regulation (GDPR). Our privacy policy should be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain the terms used in advance.

2. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Syndications4Radio
operated by Ätherklang e.V. - Für Audiovisuelle Vielfalt
www.syndications4radio.de
Email: [email protected]
Phone: +49 (0) 40 60863507

3. Collection of general data and information

Each time the website of Syndications4Radio is accessed by a data subject or an automated system, a series of general data and information is collected. This general data and information is stored in the server log files. The following may be collected: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrer), (4) the sub-pages that are accessed on our website via an accessing system, (5) the date and time of access to the website, (6) an internet protocol address (IP address), (7) the internet service provider of the accessing system and (8) other similar data and information that serves to avert danger in the event of attacks on our information technology systems.

When using this general data and information, Syndications4Radio does not draw any conclusions about the data subject. Rather, this information is needed in order to (1) deliver the content of our website correctly, (2) optimise the content of our website and the advertising for it, (3) ensure the long-term functionality of our information technology systems and the technology of our website, and (4) provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack. This anonymously collected data and information is therefore evaluated by Syndications4Radio both statistically and with the aim of increasing data protection and data security in our association, in order ultimately to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files is stored separately from all personal data provided by a data subject.

4. Registration on our website

The data subject has the option of registering on the website of the controller by providing personal data. Which personal data is transmitted to the controller in the process results from the respective input mask used for registration. The personal data entered by the data subject is collected and stored exclusively for internal use by the controller and for its own purposes. The controller may arrange for the data to be passed on to one or more processors, who likewise use the personal data exclusively for internal purposes attributable to the controller.

By registering on the controller's website, the IP address assigned by the internet service provider (ISP) of the data subject, as well as the date and time of registration, are also stored. This data is stored because it is the only way to prevent misuse of our services and, if necessary, to make it possible to investigate criminal offences that have been committed. To that extent, storing this data is necessary to protect the controller. This data is generally not passed on to third parties unless there is a legal obligation to do so or the disclosure serves criminal prosecution.

The registration of the data subject with voluntary provision of personal data serves the controller in offering the data subject content or services that, by their nature, can only be offered to registered users. Registered persons are free to change the personal data provided at registration at any time, or to have it completely deleted from the controller's data records.

On request, the controller provides every data subject at any time with information about which personal data is stored about them. Furthermore, the controller corrects or deletes personal data at the request or indication of the data subject, provided that no statutory retention obligations conflict with this. A data protection officer specifically named in this privacy policy and all employees of the controller are available to the data subject as contact persons in this regard.

5. Use of the Cloudflare CDN

Our website uses the content delivery network (CDN) of Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare offers a globally distributed content delivery network with DNS. Technically, the transfer of information between your browser and our website is routed through the Cloudflare network. In doing so, Cloudflare may process user data (for example the IP address). Cloudflare also checks websites for malicious activity and prevents it.

Cloudflare is used in the interest of greater security and faster loading times of our website. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR.

Cloudflare is certified under the EU-US data protection framework, which guarantees an adequate level of data protection.

You can find further information in the privacy policy of Cloudflare: https://www.cloudflare.com/security-policy

6. Use of Cloudflare Turnstile

Our website uses Cloudflare Turnstile to ensure that certain interactions on our website come from legitimate users and not from bots. In doing so, the IP address and, where applicable, further data required by Cloudflare to provide Turnstile is collected and processed.

Cloudflare Turnstile is used in the interest of security and to prevent misuse of our services. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR.

You can find further information in the privacy policy of Cloudflare: https://www.cloudflare.com/security-policy

7. Use of mailtrap.io

For sending emails we use the service mailtrap.io of Railsware Products, Inc., 651 N Broad St, Suite 206, Middletown, DE 19709, USA. Mailtrap.io allows us to send and test emails securely. In doing so, personal data such as email addresses is processed.

Mailtrap.io is used for the performance of a contract and for pre-contractual measures pursuant to Art. 6 (1) (b) GDPR.

You can find further information in the privacy policy of mailtrap.io: https://mailtrap.io/privacy-policy

8. Storage of laut.fm credentials

If you provide us with laut.fm credentials, we only store them if you explicitly ask us to do so in order to use streaming services via laut.fm. This data is used exclusively for that purpose and is not passed on to third parties.

This data is processed on the basis of your consent pursuant to Art. 6 (1) (a) GDPR.

9. Contact form and application form

If you send us enquiries via the contact form or the application form, your details from the form, including the contact data you provide there, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass this data on without your consent.

The data entered into the contact form is therefore processed exclusively on the basis of your consent (Art. 6 (1) (a) GDPR). You can withdraw this consent at any time. An informal message by email to us is sufficient. The lawfulness of the data processing operations carried out until the withdrawal remains unaffected by the withdrawal.

10. Use of Microsoft Azure

Parts of our servers and databases are hosted in Microsoft Azure, a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft Azure stores and processes data on our behalf. This processing takes place on the basis of a data processing agreement with Microsoft pursuant to Art. 28 GDPR.

Microsoft is certified under the EU-US data protection framework, which guarantees an adequate level of data protection.

You can find further information in the privacy policy of Microsoft Azure: https://privacy.microsoft.com

11. Rights of the data subject

You have the right:

• pursuant to Art. 15 GDPR to request information about the personal data we process about you. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, where applicable, meaningful information about its details;
• pursuant to Art. 16 GDPR to request without undue delay the rectification of inaccurate personal data or the completion of your personal data stored by us;
• pursuant to Art. 17 GDPR to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
• pursuant to Art. 18 GDPR to request the restriction of the processing of your personal data, insofar as you contest the accuracy of the data, the processing is unlawful but you object to its erasure and we no longer need the data while you require it for the establishment, exercise or defence of legal claims, or you have objected to the processing pursuant to Art. 21 GDPR;
• pursuant to Art. 20 GDPR to receive the personal data you provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another controller;
• pursuant to Art. 7 (3) GDPR to withdraw your consent once given at any time. As a result, we may no longer continue the data processing that was based on this consent in the future, and
• pursuant to Art. 77 GDPR to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace, or of our registered office.

12. Right to object

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are grounds arising from your particular situation or the objection is directed against direct marketing. In the latter case you have a general right to object, which we will implement without you having to state a particular situation.

If you wish to exercise your right of withdrawal or objection, an email to [email protected] is sufficient.

13. Data security

During your visit to the website we use the widely used SSL procedure (Secure Socket Layer) in combination with the highest level of encryption supported by your browser. As a rule this is 256-bit encryption. If your browser does not support 256-bit encryption, we fall back on 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the status bar of your browser.

We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

14. Validity and changes to this privacy policy

This privacy policy is currently valid and dated May 2024.

As our website and the offers on it are developed further, or due to changed legal or official requirements, it may become necessary to amend this privacy policy. The current privacy policy can be viewed and printed at any time on the website at www.syndications4radio.de/datenschutz.