Privacy Policy

Controller

Nicolas Huber
Höhenstraße 21
8301 Kainbach bei Graz, Austria
Email: info@thewavesmusic.com

Principle

This website itself sets no cookies, uses no analytics or tracking tools and embeds no third-party content. Fonts, scripts, images and videos are all delivered by our hosting provider (see below); nothing is loaded from third parties.

Hosting and server log files

This website is hosted on Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, United States. When you visit the website, Cloudflare processes technically necessary data (e.g. IP address, date and time, page requested, browser type) to deliver the website through its network and to protect it against attacks. The legal basis is our legitimate interest in the secure and reliable operation of the website (Art. 6(1)(f) GDPR). Cloudflare processes this data on our behalf under its data processing addendum, which is part of Cloudflare's terms of service (Art. 28 GDPR), and deletes it as soon as it is no longer needed for these purposes.

If Cloudflare's security features have to check a visit (for example with a challenge page against bots), Cloudflare may set a strictly necessary security cookie such as cf_clearance on your device.

As Cloudflare is based in the United States, data may be processed there. Cloudflare is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR); in addition, Cloudflare uses the EU standard contractual clauses (Art. 46(2)(c) GDPR). More information: Cloudflare privacy policy.

Contact and booking requests

If you contact us by email or through the booking form, we process the details you provide (name, email address, event details, message) solely to handle your request (Art. 6(1)(b) GDPR) and keep them only as long as this and statutory retention periods require.

The booking form sends your details through a function on our hosting provider Cloudflare (see above) to the email service Resend, which delivers them to our inbox. Resend is operated by Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, United States, and processes the data on our behalf under a data processing agreement (Art. 28 GDPR). Resend is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR) and also uses the EU standard contractual clauses (Art. 46(2)(c) GDPR); it keeps sent emails and their logs for up to 30 days. If the form cannot be sent this way, it opens your email app instead, and nothing is sent until you send the message yourself. More information: Resend privacy policy.

External links

Links to Spotify, Apple Music, Amazon Music, Deezer, TIDAL, YouTube Music, Instagram, YouTube, SoundCloud, TikTok and Facebook are plain links. Data is only transferred when you click a link and visit the platform, whose own privacy policy then applies.

Local storage

Whether the intro has already been shown and whether a page transition is in progress is stored only in your browser (session storage) and is never sent to us.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Please contact us at the address above. You can lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at).