Privacy

This site is deliberately lean. There are no advertising networks, no analytics services, no consent cookies and no external web fonts. The site serves everything it displays itself.

1. Controller

CHROM
Christian Marquis
Tuchmühle 21b
52355 Düren
Germany
Email: info@chrom-music.com

2. Access data and hosting

This site runs on Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When you open a page, your browser sends technically necessary data to Cloudflare: IP address, date and time of the request, the page requested, the amount of data transferred, browser type and operating system, and the referring page. Cloudflare may also process this data in the USA and relies on the EU-U.S. Data Privacy Framework and the EU Standard Contractual Clauses for the transfer.

The legal basis is Art. 6 (1) (f) GDPR; the legitimate interest is the secure and uninterrupted operation of the site. We do not store this data ourselves. Cloudflare's data processing terms under Art. 28 GDPR apply.

3. Cookies

This site sets no cookies, which is why there is no cookie banner. Should that change, we will say so here beforehand and obtain consent where required.

4. Fonts

This site serves its own fonts. No connection is made to Google Fonts or any other external provider.

5. Contact form and email

If you use the contact form or write to us, we process the details you provide (name, email address and message) solely to answer your enquiry. The email service Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA) delivers the message to our mailbox via Cloudflare and acts on our behalf under Art. 28 GDPR. Resend may also process data in the USA and relies on the EU Standard Contractual Clauses and the EU-U.S. Data Privacy Framework for the transfer. We pass the data on to no other third parties and keep no database of enquiries.

The legal basis is Art. 6 (1) (b) GDPR for contract-related enquiries and otherwise Art. 6 (1) (f) GDPR. We delete enquiries once they have been dealt with, unless statutory retention periods apply.

The form contains a hidden field to fend off automated submissions. It processes no personal data and replaces a third-party captcha. To stop mass submissions, the site limits the number of messages per minute and stores no personal data for this.

6. Linked services

We embed no third-party content directly in this site. Links to Spotify, YouTube, Instagram, TikTok, Facebook, the merch shop, ticket vendors and the website's creator lead away from this site. Only when you click such a link does the respective provider receive your data, in particular your IP address. We have no influence over that processing; the provider's own privacy notice applies.

7. Your rights

You have the right of access to the data stored about you (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Please write to the address above.

You may also lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority here is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

8. Changes

We update this notice when the technology of the site or the legal situation changes. The version published here applies.