PRIVACY POLICY
Last updated: September 2026
1. General information
The protection of your personal data is important to us.
This Privacy Policy explains which personal data may be processed when you visit
www.xpq-21.com, for what purposes such data is processed, the legal basis
for the processing and the rights you have under applicable data protection law.
Personal data means any information relating to an identified or identifiable natural person.
2. Controller
The controller responsible for data processing on this website is:
XPQ-21
Stefano Giachetta
c/o EMS – Electronic Music School
Invalidenstr. 104
10115 Berlin
Germany
E-mail:
info@xpq-21.com
3. Hosting and server log files
When you access this website, technical information is automatically transmitted by your browser
to the server on which the website is hosted.
This information may include, in particular:
- IP address
- Date and time of access
- Requested page or file
- Referrer URL
- Browser type and browser version
- Operating system
- Host name of the accessing device
The processing of this information is necessary to provide the website securely and reliably,
to detect technical problems and to protect the website against misuse and attacks.
The legal basis for this processing is Article 6(1)(f) GDPR.
Our legitimate interest is the secure, stable and technically error-free operation of this website.
Server log data is deleted when it is no longer required for these purposes unless longer storage
is necessary for security reasons or due to statutory obligations.
The hosting provider may process this information on our behalf as a data processor.
4. SSL/TLS encryption
This website uses SSL or TLS encryption for security reasons and to protect confidential
information transmitted through the website.
An encrypted connection can usually be recognised by “https://”
in the address bar of your browser.
5. Technically necessary cookies and similar technologies
This website may use technically necessary cookies or similar technologies where these are
required for the secure and proper operation of the website.
Cookies are small data files stored on or accessed from your device.
Where storage of or access to information on your device is strictly necessary to provide
a service expressly requested by you, this may take place in accordance with
Section 25(2) TDDDG.
Where personal data is processed in connection with technically necessary website functions,
the processing may be based on Article 6(1)(f) GDPR, insofar as our legitimate
interest lies in the secure and technically reliable operation of the website.
6. YouTube
Our website contains links to YouTube and may include YouTube content on individual pages.
YouTube is provided in the European Economic Area by:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
If YouTube is provided only through an external link, no personal data is transmitted to
YouTube merely because the link is displayed on our website.
When you click such a link, you leave our website and YouTube or Google may process information
such as your IP address, browser and device information and information about your interaction
with their services.
If YouTube content is embedded directly on a page, information may be transmitted to Google or
YouTube when that content is loaded.
If you are logged into your Google or YouTube account, Google may associate information about
your visit or interaction with your account.
Further information can be found in Google’s Privacy Policy.
7. Links to social media, music and other external platforms
Our website contains links to third-party platforms, including services such as
Bandcamp, Instagram, Facebook, Apple Music, Spotify, SoundCloud, YouTube and Wikipedia.
These are external links.
Simply displaying an external link on our website does not normally cause personal data
to be transmitted to the linked provider.
When you click an external link, you leave our website. The provider of the external website
may then process personal data such as your IP address, device information, account information
or information about your interaction with its service.
The respective provider is responsible for this processing.
Please refer to the privacy information provided by the respective platform.
8. Contact by e-mail
If you contact us by e-mail, we process the information you provide, such as your e-mail address,
name and the content of your message, in order to respond to your enquiry.
Where your enquiry relates to a contract or steps prior to entering into a contract,
the legal basis is Article 6(1)(b) GDPR.
For other enquiries, processing is based on Article 6(1)(f) GDPR.
Our legitimate interest is to respond to messages and communicate with visitors, fans,
media representatives, promoters and business partners.
The information will be deleted when it is no longer required for the purpose of the communication,
unless statutory retention obligations apply.
9. Recipients of personal data
Personal data may be processed by service providers that assist us with the operation of the website,
hosting, technical maintenance or other technical services.
Where legally required, these service providers process personal data on our behalf on the basis
of appropriate data processing agreements.
Personal data is otherwise disclosed to third parties only where this is necessary for the operation
of the website, where we are legally required to do so, where this is necessary to protect legitimate
interests or where you have given your consent.
10. International data transfers
Some external service providers may process personal data outside the European Union or the
European Economic Area.
Where personal data is transferred to a country outside the European Economic Area,
an appropriate legal basis for the transfer must exist.
This may include an adequacy decision of the European Commission, the EU-U.S. Data Privacy Framework,
Standard Contractual Clauses approved by the European Commission or another mechanism permitted under
Articles 44 et seq. GDPR.
11. Storage period
We store personal data only for as long as necessary for the respective processing purpose.
If a specific storage period cannot be stated, the duration of storage is determined according
to the purpose of the processing, applicable statutory retention periods and whether the data
is still required for the establishment, exercise or defence of legal claims.
Once the purpose no longer applies and no statutory requirement requires further storage,
the data will be deleted or anonymised.
12. Your rights
Under the GDPR, you may have the right to request information about the personal data
we process about you.
You may also have the right to request correction of inaccurate data, deletion of your data,
restriction of processing and, where applicable, data portability.
Where processing is based on Article 6(1)(e) or Article 6(1)(f) GDPR,
you have the right to object to processing on grounds relating to your particular situation.
Where processing is based on your consent, you may withdraw that consent at any time
with effect for the future.
To exercise your rights, please contact:
info@xpq-21.com
13. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority if you
believe that the processing of your personal data infringes applicable data protection law.
The supervisory authority responsible for Berlin is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin
Germany
E-mail:
mailbox@datenschutz-berlin.de
14. Automated decision-making
We do not use personal data collected through this website for automated decision-making
within the meaning of Article 22 GDPR.
15. Changes to this Privacy Policy
We may update this Privacy Policy if the website, the services used on it or applicable
legal requirements change.
The version published on this website is the current version.
Last updated: September 2026