Privacy Policy

Last updated: September 2026

1. Controller

Kai Hartwig
Twielfeld 15
78247 Hilzingen
Email: support@sidtunez.com

2. Overview of Processing Operations

The following overview summarizes the types of data processed and the purposes of their processing and refers to the data subjects concerned.

Types of Data Processed

Master data (e.g., names, addresses)
Contact data (e.g., email, telephone numbers)
Content data (e.g., entries in forms)
Contract data (e.g., subject matter of the contract, term)
Payment data (e.g., transaction details)
Usage data (e.g., pages visited, access times)
Meta and communication data (e.g., IP addresses, device information)

Categories of Data Subjects

Users (e.g., website visitors, registered users)
Customers and business partners

3. Relevant Legal Bases

Below you will find an overview of the legal bases under the GDPR on the basis of which we process personal data:

Consent (Art. 6(1) sentence 1(a) GDPR) – The data subject has given consent to the processing for one or more specific purposes.
Performance of a contract (Art. 6(1) sentence 1(b) GDPR) – The processing is necessary for the performance of a contract or of pre-contractual measures.
Legal obligation (Art. 6(1) sentence 1(c) GDPR) – The processing is necessary for compliance with a legal obligation.
Legitimate interests (Art. 6(1) sentence 1(f) GDPR) – The processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.

4. Security Measures

In accordance with the statutory requirements and taking into account the state of the art, we implement appropriate technical and organizational measures to ensure a level of protection appropriate to the risk.

These measures include, in particular, safeguarding the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data. In addition, passwords are stored in encrypted form (bcrypt), and data is transmitted using SSL/TLS encryption.

5. Registration and User Account

Users can create a user account. During registration, users are informed of the required mandatory information, which is processed on the basis of the performance of a contract (Art. 6(1)(b) GDPR).

The data entered during registration is used for the purposes of using the user account and for the account's purpose.

Data Processed During Registration

First name, last name
Email address
Password (stored in encrypted form)
Company (optional)
Telephone number (optional)
Country

Users may be informed by email about events relevant to their user account, such as email verification or purchase confirmations.

If users wish to delete their user account, they can contact us at the email address stated above. The data stored in connection with the user account will be deleted unless a statutory retention obligation applies.

6. Orders and Contracts

We process the data of our customers in order to enable them to select, acquire, and use music licenses.

The information required for this purpose is marked as such during the ordering or purchasing process and comprises the information required for invoicing and for delivery of the licensed content.

Data Processed for Orders

Billing address (name, street, postal code, city, country)
Email address
Order details (tracks, license types, amounts)
Payment information (processed via PayPal)

Legal bases: Performance of a contract (Art. 6(1)(b) GDPR), legal obligation (Art. 6(1)(c) GDPR), legitimate interests (Art. 6(1)(f) GDPR).

7. Payment Service Provider (PayPal)

For orders, we use the payment service provider PayPal. The provider is PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

When you pay via PayPal, the payment data you enter is transmitted to PayPal. Your data is transmitted to PayPal on the basis of Art. 6(1)(b) GDPR (performance of a contract).

For details, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

8. Sending of Emails

We send emails exclusively in connection with the use of our service:

Confirmation of the email address during registration (verification)
Purchase confirmations and invoice information

We do not send newsletters or advertising by email. The legal basis is Art. 6(1)(b) GDPR (performance of a contract).

9. Streaming Radio

If you use our streaming radio, we additionally process the following data:

Free trial period: In order to limit the free listening time, we store, for each user account, the minutes used and the current calendar week.
Your setup: the zones, weekly schedules, and custom playlists you have created.
Music logs (cue sheets): records of the tracks played, which you can retrieve in your customer account and submit to a collecting society as proof.

Legal basis: Performance of a contract (Art. 6(1)(b) GDPR). This data forms part of your customer account and will be removed when the account is deleted, unless a statutory retention obligation applies.

9. Clearance on YouTube (Content ID)

Our music catalog is registered in YouTube's Content ID system. To ensure that a video you have licensed is not flagged there, you can provide the URL of your video or your channel during the ordering process or later in your customer account. We store this information with your order and transmit it to our service provider AdRev (Source Audio LLC, USA), which arranges the clearance with YouTube.

Data processed: the video or channel URL you have provided, linked to your order number.

Legal basis: Performance of a contract (Art. 6(1)(b) GDPR) — the clearance is part of the service you have commissioned. Providing this information is voluntary; without it, we cannot arrange the clearance.

Transfer to a third country: The data is transferred to the USA.

Kennung in Gratis-Downloads. In jede kostenlos heruntergeladene MP3 fügen wir eine nicht hörbare Kennung ein. Die Datei selbst enthält keine personenbezogene Angaben, nur die Kennnummer. Welche Lizenz und welches Konto dazu gehören, steht ausschließlich in unserer Datenbank. Finden wir die Musik in einer Veröffentlichung, können wir sie so einer Gratis-Lizenz zuordnen und prüfen, ob die Bedingungen eingehalten wurden (insbesondere Namensnennung und nicht kommerzielle Nutzung). Rechtsgrundlage ist Art. 6 Abs. 1 lit. b DSGVO (Durchführung der Gratis-Lizenz) sowie Art. 6 Abs. 1 lit. f DSGVO (unser berechtigtes Interesse, unsere Nutzungsrechte durchzusetzen). Die Zuordnung speichern wir, solange die Lizenz besteht, und danach bis zum Ablauf der gesetzlichen Verjährungsfristen.

10. Contact and Feedback Form

Using the form in your customer account, you can send us feedback and error reports. The type of report, the subject, and your message are transmitted, along with your name and email address from your account so that we can reply. This information is not stored in our database but is sent exclusively as an email to our support address.

Legal basis: Performance of a contract (Art. 6(1)(b) GDPR) insofar as the inquiry relates to the performance of the contract; otherwise, legitimate interests (Art. 6(1)(f) GDPR) in handling inquiries.

Storage period: We retain the correspondence for as long as necessary to handle it and delete it thereafter, unless a statutory retention obligation applies.

11. Cookies and Local Storage

Our website uses technically necessary session cookies for login and session management. In addition, we store technical information in your browser's storage (local storage or session storage), such as the calculated waveforms of the tracks, the state of the player when changing pages, or view settings in the mixer, as well as your control settings for the radio player (crossfade, volume normalization, shuffle, and the most recently selected zone). This information serves solely to make the site function and does not contain any tracking data.

No tracking cookies, analytics tools, or advertising networks are used.

Legal basis: Legitimate interests (Art. 6(1)(f) GDPR) or consent (Art. 6(1)(a) GDPR), where consent has been requested.

12. Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This information is:

Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address

This data is not merged with other data sources. This data is collected on the basis of Art. 6(1)(f) GDPR (legitimate interest in the secure provision of the website).

Separately, we count how often a track is accessed in order to be able to display popular tracks. Only the track and the time are stored — with no reference to you personally, your account, or your IP address.

13. Hosting and Storage of Audio Files

We host our website with All-Inkl.com (Neue Medien Muennich, Hauptstrasse 68, 02742 Friedersdorf). For details, please refer to All-Inkl's privacy policy: https://all-inkl.com/datenschutzinformationen/

The use is based on Art. 6(1)(f) GDPR (legitimate interest in a reliable presentation of our offering).

We do not store large audio files (studio-quality music files, stems, and the mixes generated from them) on the web server but in the object storage of Hetzner Online GmbH, Industriestrasse 25, 91710 Gunzenhausen. The storage location is in Germany (Falkenstein data center). Files are retrieved via time-limited links, each generated solely for the authorized download. Hetzner acts for us as a processor pursuant to Art. 28 GDPR.

Legal basis: Performance of a contract (Art. 6(1)(b) GDPR) and legitimate interests (Art. 6(1)(f) GDPR) in reliable provision.

14. Rights of Data Subjects

As a data subject, you have various rights under the GDPR:

Right of access (Art. 15 GDPR): You have the right to obtain confirmation as to whether personal data is being processed and to obtain access to this data.
Right to rectification (Art. 16 GDPR): You have the right to request the rectification of inaccurate personal data concerning you or the completion of such data.
Right to erasure (Art. 17 GDPR): You have the right to request the erasure of your personal data, provided that no statutory retention obligations prevent this.
Right to restriction (Art. 18 GDPR): You have the right to request the restriction of the processing of your personal data.
Right to data portability (Art. 20 GDPR): You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format.
Right to object (Art. 21 GDPR): You have the right to object to the processing at any time on grounds relating to your particular situation.
Right to withdraw consent (Art. 7(3) GDPR): You have the right to withdraw consent you have given at any time.
Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority.

15. Retention Periods

Personal data is stored only for as long as necessary to fulfill the respective purpose or as long as statutory retention obligations apply. For documents relevant under tax law (invoices, orders), a retention period of 10 years applies pursuant to Section 147 of the German Fiscal Code (AO). For documents relevant under commercial law, a retention period of 6 years applies pursuant to Section 257 of the German Commercial Code (HGB).

16. Changes to This Privacy Policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or in order to implement changes to our services. The new privacy policy will then apply to your next visit.

17. Contact

If you have any questions about data protection or about exercising your rights, please contact us at: