Privacy Policy

We are very pleased that you are interested in our companies. Data protection is a top priority for the management of UCM.ONE GmbH and UCM.ONE AT GmbH. In general, it is possible to use the websites of UCM.ONE GmbH and UCM.ONE AT GmbH without providing any personal data. However, if a data subject wishes to use specific services offered by our company via our website, the processing of personal data may be necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.

The processing of personal data – such as a data subject’s name, address, email address, or phone number – is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection regulations applicable to UCM.ONE GmbH and UCM.ONE AT GmbH (in particular the German Federal Data Protection Act (BDSG), the German Telecommunications and Digital Services Data Protection Act (TDDDG), the Austrian Data Protection Act (DSG), and the Austrian Telecommunications Act (TKG 2021)). Through this Privacy Policy, our companies aim to inform the public about the nature, scope, and purpose of the personal data we collect, use, and process. Furthermore, this Privacy Policy informs data subjects of their rights.

UCM.ONE GmbH and UCM.ONE AT GmbH, as data controllers, have implemented numerous technical and organizational measures to ensure the most comprehensive protection possible of the personal data processed via this website. Nevertheless, internet-based data transmissions may inherently contain security vulnerabilities, meaning that absolute protection cannot be guaranteed. For this reason, any data subject is free to provide personal data to us through alternative means, such as by telephone.

Definitions

The privacy policy of UCM.ONE GmbH and UCM.ONE AT GmbH is based on the terminology used by the European legislators and regulators when enacting the General Data Protection Regulation (GDPR). Our Privacy Policy is intended to be easy to read and understand for the general public as well as for our customers and business partners. To ensure this, we would like to explain the terms used in advance.

In this Privacy Policy, we use the following terms, among others:

a) Personal data

Personal data refers to any information relating to an identified or identifiable natural person (hereinafter “data subject”). A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier, or one or more specific characteristics that reflect the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

b) Data Subject

A data subject is any identified or identifiable natural person whose personal data is processed by the controller.

c) Processing

Processing means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, retrieval, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.

d) Restriction of processing

Restriction of processing means the marking of stored personal data with the aim of limiting its future processing.

e) Profiling

Profiling is any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.

f) Pseudonymization

Pseudonymization is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures that ensure the personal data is not attributed to an identified or identifiable natural person.

g) Controller

A controller is the natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data. If the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for its designation may be provided for under Union law or the law of the Member States.

h) Processor

A processor is a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller.

i) Recipient

A recipient is a natural or legal person, public authority, agency, or other body to whom personal data is disclosed, regardless of whether or not that body is a third party. However, public authorities that may receive personal data in the course of a specific investigative mandate under Union law or the law of the Member States are not considered recipients.

j) Third Party

A third party is a natural or legal person, public authority, agency, or other body other than the data subject, the controller, the processor, and the persons who, under the direct responsibility of the controller or the processor, are authorized to process the personal data.

k) Consent

Consent means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes, expressed by a statement or by a clear affirmative action, by which the data subject indicates that they consent to the processing of their personal data.

l) Supervisory Authority

An independent body established by a Member State in accordance with Article 51 of the GDPR.

Name and Address of the Data Controller

The data controllers within the meaning of the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union, and other provisions relating to data protection are the following two legally independent companies:

1. UCM.ONE GmbH

Wrangelstraße 79

10997 Berlin

Germany

Phone: +49 30 286 506 00

Fax: +49 30 286 506 01

Email: berlin@ucm.one

Website: https://ucm.one

Scope of Responsibility: Technical operator of the website and sole operator of the online store. Responsible for global rights trading, for B2B licensing to movie platforms as well as supporting international corporate clients and licensors acting as legal entities (with the exception of corporate clients based in Austria). Furthermore, the CiNENET channels and the FAST channel Metal.Rocks are part of its portfolio.

2. UCM.ONE AT GmbH

Schönbrunner Straße 38/4

1050 Vienna

Austria

Phone: +43 1 20 800 59

Fax: +43 1 20 800 59 15

Email: vienna@ucm.one

Website: https://ucm.one

Scope of Responsibility: A legally independent company that operates on this website exclusively for its own business division. Responsible for B2B licensing to music platforms, for supporting and processing contracts with licensors acting as natural persons (including sole proprietors and freelancers), as well as for supporting corporate clients and legal entities based in Austria.

Since UCM.ONE GmbH and UCM.ONE AT GmbH operate as legally independent companies under a common brand and share this website, we have entered into an agreement regarding joint responsibility. Regardless of this internal division, you may exercise your data subject rights (e.g., the right to access or erasure) with either company at any time.

Cookies

The websites of UCM.ONE GmbH and UCM.ONE AT GmbH use cookies. Cookies are text files that are placed and stored on a computer system via a web browser.

Numerous websites and servers use cookies. Many cookies contain what is known as a cookie ID. A cookie ID is a unique identifier for the cookie. It consists of a string of characters that allows websites and servers to associate the cookie with the specific web browser in which it was stored. This enables the visited websites and servers to distinguish the data subject’s individual browser from other web browsers that contain different cookies. A specific web browser can be recognized and identified via the unique cookie ID.

By using cookies, UCM.ONE GmbH and UCM.ONE AT GmbH can provide users of this website with more user-friendly services that would not be possible without setting cookies.

Cookies allow us to optimize the information and offerings on our website to better serve the user’s needs. As mentioned earlier, cookies enable us to recognize users of our website. The purpose of this recognition is to make it easier for users to navigate our website. For example, a user of a website that uses cookies does not, for example, have to re-enter their login credentials every time they visit the website, because this information is handled by the website and the cookie stored on the user’s computer system. Another example is the shopping cart cookie in an online store. The online store remembers the items a customer has placed in the virtual shopping cart via a cookie.

The processing of technically necessary cookies is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR. The use of cookies that are not technically necessary (e.g., for analytics or marketing purposes) is based exclusively on explicit consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG (Germany) and § 165(3) TKG 2021 (Austria).

The data subject may prevent our website from setting cookies at any time by adjusting the settings of the web browser being used, thereby permanently objecting to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via a web browser or other software programs. This is possible in all common web browsers. If the data subject disables the setting of cookies in the web browser they are using, not all functions of our website may be fully usable under certain circumstances.

Collection of General Data and Information

The websites of UCM.ONE GmbH and UCM. ONE AT GmbH collect a range of general data and information each time a data subject or an automated system accesses the website. This general data and information is stored in the server’s log files. The following may be collected:

(1) the browser types and versions used,

(2) the operating system used by the accessing system,

(3) the website from which an accessing system reaches our website (so-called referrer),

(4) the subpages on our website accessed via an accessing system,

(5) the date and time of access to the website,

(6) an Internet Protocol address (IP address),

(7) the Internet service provider of the accessing system, and

(8) other similar data and information used for security purposes in the event of attacks on our information technology systems.

When using this general data and information, neither UCM.ONE GmbH nor UCM.ONE AT GmbH draws any conclusions about the data subject. Rather, this information is required to

(1) deliver the content of our website correctly,

(2) optimize the content of our website as well as the advertising on it,

(3) ensure the ongoing functionality of our information technology systems and the technology of our website, and

(4) provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyberattack.

This anonymously collected data and information is therefore evaluated by UCM.ONE GmbH and UCM. ONE AT GmbH for statistical purposes and, furthermore, with the aim of enhancing data protection and data security within our company, ultimately to ensure an optimal level of protection for the personal data we process. The anonymous data from the server log files is stored separately from any personal data provided by a data subject.

Additional personal information is collected only if you voluntarily provide it, such as in connection with an inquiry or registration. Depending on the relevant area, UCM.ONE uses the personal data you provide to respond to your inquiries, process your order, and for the technical administration of the websites. Specifically, the use of data in the respective areas is as follows:

Opening a Customer Account / Contract Processing

(Data Controller: UCM.ONE GmbH, Germany)

The online store on this website is operated exclusively by UCM.ONE GmbH (Germany). When placing an order through the online store, required fields are used to collect all data necessary for order fulfillment and processing. The specific data collected is indicated in the respective input forms. Your data will be used solely for the purpose of processing your order.

You also have the option to register for your purchase at UCM.ONE. To do so, you can choose a password along with your email address; both will allow you to log in more easily for future purchases without having to re-enter your information. We store the data you enter to set up a customer account through which your orders are recorded, fulfilled, and processed. UCM.ONE retains your data for future orders as long as you maintain your registration. You have the right to access, correct, and delete your registration data at any time.

You may delete your customer account at any time by sending a message to the above-mentioned address of the data controller (UCM.ONE GmbH).

After the contract has been fully fulfilled or your customer account has been deleted, your data will be blocked in accordance with tax and commercial law retention periods and deleted once these periods have expired.

Data Processing for Order Fulfilment

(Data Controller: UCM.ONE GmbH, Germany)

The personal data we collect is shared with the shipping company responsible for delivery as part of contract fulfillment, to the extent necessary for the delivery of the goods. We share your payment data with the designated financial institution as part of the payment processing, to the extent necessary for payment processing. If payment service providers and technical interfaces are used, we explicitly provide information about this below. The legal basis for the transfer of data is Article 6(1)(b) of the GDPR. UCM.ONE AT GmbH is not involved in the processing of online store orders.

Use of the WooCommerce Shop System and Payment Interfaces

Our online store is based on the WooCommerce store system, software provided by Automattic Inc. (60 29th Street #343, San Francisco, CA 94110, USA). For the purposes of technical order processing, storing shopping cart data, and providing interfaces to the individual payment service providers, the order data you enter is processed via the WooCommerce system.

If data is transferred to the United States as part of the payment processing, Automattic relies on the EU-U.S. Data Privacy Framework as well as the European Commission’s Standard Contractual Clauses. Processing is carried out for the purpose of fulfilling the contract in accordance with Art. 6(1)( b) of the GDPR, as well as on the basis of our legitimate interest in providing a technically flawless and efficient online store in accordance with Article 6(1)(f) of the GDPR. For more information, please see Automattic’s Privacy Policy: https://automattic.com/privacy/.

PayPal

When paying via PayPal, credit card via PayPal, direct debit via PayPal, or—if offered—“purchase on account” or “installment payment” via PayPal, we will disclose your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). This transfer is made in accordance with Article 6(1)(b) of the GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to conduct a credit check for the payment methods “Credit Card via PayPal,” “Direct Debit via PayPal,” or—if offered—“Purchase on Account” or “Installment Payment via PayPal.” PayPal uses the result of the credit check, which reflects the statistical probability of payment default, to determine whether to make the respective payment method available. The credit check may include probability values (so-called “score” values). For further information regarding data protection, including details on the credit bureaus used, please refer to PayPal’s Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Stripe

When payments are processed via the service provider Stripe (e.g., credit card, Apple Pay, Google Pay, Sofort/Klarna, Giropay via Stripe), payment processing is handled by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (hereinafter “Stripe”).

For the purpose of payment processing, your data (name, address, account number, bank routing number, credit card number if applicable, invoice amount, currency, and transaction number) is transferred to Stripe in accordance with Article 6(1)(b) of the GDPR. Stripe also uses this information for fraud prevention and to optimize the payment process (legitimate interest pursuant to Article 6(1)(f) of the GDPR).

To the extent that data is transferred to the U.S. parent company, Stripe, Inc., this is done on the basis of the EU-U.S. Data Privacy Framework and the EU Standard Contractual Clauses. Detailed information on data protection at Stripe can be found at: https://stripe.com/de/privacy.

Contact Options via the Website

In accordance with legal requirements, the UCM.ONE GmbH website contains information that enables quick electronic contact with our company and direct communication with us, including a general electronic mail (email) address. If a data subject contacts the data controller via email or a contact form, the personal data transmitted by the data subject is automatically stored.

Such personal data, voluntarily provided by a data subject to the data controller, is stored for the purpose of processing the request or contacting the data subject:

Inquiries from commercial licensors or licensees (business customers) and online store customers are processed by UCM.ONE GmbH.
Inquiries from private licensors or licensees including sole proprietors and self-employed professionals (private customers) regarding contract processing are processed by UCM.ONE AT GmbH.

If you address your email specifically to our branch in Austria (e.g., to wien@ucm.one), the personal data you provide will be processed directly by UCM.ONE AT GmbH, as this company is responsible for supporting private licensors. Internal data transfers between UCM.ONE GmbH in Berlin and UCM.ONE AT GmbH in Vienna take place only to the extent strictly necessary for the proper handling of your request (e.g., if a B2B inquiry was mistakenly sent to the Vienna office and must be forwarded to the responsible Berlin office).

This personal data is not disclosed to third parties. If electronic mail is sent for advertising purposes, we comply with national regulations, in particular § 174 TKG 2021 (Austria) regarding prior consent (double opt-in).

Comment Function on the Website’s Blog

UCM.ONE GmbH offers users the opportunity to leave individual comments on specific blog posts on a blog located on the data controller’s website. A blog is a portal maintained on a website—typically accessible to the public—where one or more individuals, known as bloggers or web bloggers, can post articles or share their thoughts in so-called blog posts. Third parties can generally comment on these blog posts.

If a data subject leaves a comment on the blog published on this website, in addition to the comments left by the data subject, information regarding the time the comment was submitted and the username (pseudonym) chosen by the data subject is also stored and published. Furthermore, the IP address assigned by the data subject’s Internet service provider (ISP) is also logged. This IP address is stored for security reasons and in the event that the data subject infringes the rights of third parties through a comment or posts unlawful content. The storage of this personal data is therefore in the data controller’s own interest, so that the data controller may, if necessary, exonerate itself in the event of a legal violation. This collected personal data is not disclosed to third parties unless such disclosure is required by law or serves to defend the controller’s legal rights.

Subscribing to Comments on the Website’s Blog

Comments posted on the UCM.ONE GmbH blog may generally be subscribed to by third parties. In particular, a commenter may subscribe to comments posted in response to their own comment on a specific blog post.

If a data subject chooses to subscribe to comments, the data controller sends an automatic confirmation email to verify, via a double-opt-in procedure, that the owner of the provided email address has indeed opted for this feature. The comment subscription option can be canceled at any time.

Routine Deletion and Blocking of Personal Data

The data controller processes and stores the data subject’s personal data only for the period necessary to achieve the purpose of storage or to the extent provided for by the European legislative and regulatory authorities or another legislator in laws or regulations to which the data controller is subject. .

If the purpose of storage no longer applies or if a retention period prescribed by the European legislative and regulatory authorities or another competent legislator expires, the personal data will be routinely blocked or deleted in accordance with legal requirements.

Rights of the data subject

a) Right to confirmation, Art. 15 GDPR

Every data subject has the right, granted by the European legislator, to request confirmation from the controller as to whether personal data concerning them is being processed. If a data subject wishes to exercise this right to confirmation, they may contact a representative of the controller at any time.

b) Right of access, Art. 15 GDPR

Every data subject affected by the processing of personal data has the right, granted by the European legislative and regulatory authorities, to obtain from the controller, free of charge, information about the personal data stored regarding them and a copy of such information at any time. Furthermore, the European legislative and regulatory authorities have granted the data subject the right to receive the following information:

the purposes of the processing
the categories of personal data being processed
the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations
if possible, the planned duration for which the personal data will be stored, or, if this is not possible, the criteria for determining this duration
the existence of a right to rectification or erasure of the personal data concerning them, or to restriction of processing by the controller, or a right to object to such processing
the existence of a right to lodge a complaint with a supervisory authority
if the personal data are not collected from the data subject: all available information regarding the origin of the data
the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR, and—at least in such cases—meaningful information regarding the logic involved, as well as the scope and intended effects of such processing on the data subject

Furthermore, the data subject has the right to be informed whether personal data has been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to receive information about the appropriate safeguards in connection with the transfer.

If a data subject wishes to exercise this right of access, they may contact a representative of the controller at any time.

c) Right to Rectification, Art. 16 GDPR

Every data subject affected by the processing of personal data has the right, granted by the European legislator, to request the immediate rectification of inaccurate personal data concerning them. Furthermore, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data—including by means of a supplementary statement.

If a data subject wishes to exercise this right to rectification, they may contact a representative of the data controller at any time.

d) Right to erasure (“right to be forgotten”), Art. 17 GDPR

Every data subject affected by the processing of personal data has the right, granted by the European legislative and regulatory authorities, to request that the controller erase personal data concerning them without undue delay, provided that one of the following grounds applies and insofar as the processing is not necessary:

The personal data was collected or otherwise processed for purposes for which it is no longer necessary.
The data subject withdraws their consent on which the processing was based pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, and there is no other legal basis for the processing.
The data subject objects to the processing pursuant to Article 21(1) of the GDPR, and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the GDPR.
The personal data has been processed unlawfully.
The erasure of the personal data is necessary to comply with a legal obligation under Union law or the law of the Member States to which the controller is subject.
The personal data was collected in connection with information society services offered pursuant to Article 8(1) of the GDPR.

If any of the above reasons apply and a data subject wishes to request the erasure of personal data stored by UCM.ONE GmbH or UCM.ONE AT GmbH, they may contact an employee of the data controller at any time. The employee will ensure that the request for erasure is complied with without delay.

If the personal data has been made public by UCM.ONE GmbH or UCM.ONE AT GmbH and our company, as the controller, is obligated to erase the personal data pursuant to Article 17(1) of the GDPR, then UCM.ONE GmbH or UCM. ONE AT GmbH shall take appropriate measures, including technical measures, taking into account available technology and implementation costs, to notify other data controllers processing the published personal data that the data subject has requested that these other data controllers delete all links to such personal data or copies or replicas of such personal data, provided that the processing is not necessary. Employees of UCM.ONE GmbH and UCM.ONE AT GmbH will take the necessary steps on a case-by-case basis.

e) Right to Restriction of Processing, Art. 18 GDPR

Every data subject affected by the processing of personal data has the right, granted by European legislation, to request that the controller restrict processing if one of the following conditions is met:

The data subject disputes the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data.
The processing is unlawful, the data subject objects to the erasure of the personal data, and instead requests the restriction of the use of the personal data.
The controller no longer needs the personal data for the purposes of the processing, but the data subject needs it to assert, exercise, or defend legal claims.
The data subject has lodged an objection to the processing pursuant to Art. 21(1) of the GDPR, and it has not yet been determined whether the controller’s legitimate grounds override those of the data subject.

If any of the above conditions are met and a data subject wishes to request the restriction of personal data stored by UCM.ONE GmbH or UCM.ONE AT GmbH, , they may contact an employee of the data controller at any time. The employee will arrange for the restriction of processing.

f) Right to Data Portability, Art. 20 GDPR

Every data subject affected by the processing of personal data has the right, granted by the European legislative and regulatory authorities, to receive the personal data concerning them—which the data subject has provided to a controller—in a structured, commonly used, and machine-readable format. The data subject also has the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, or on a contract pursuant to Article 6( 1(b) of the GDPR, and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, when exercising their right to data portability pursuant to Art. 20(1) of the GDPR, the data subject has the right to have the personal data transmitted directly from one controller to another controller, provided this is technically feasible and does not infringe upon the rights and freedoms of others.

To exercise the right to data portability, the data subject may contact an employee of UCM.ONE GmbH or UCM. ONE AT GmbH.

g) Right to Object, Art. 21 GDPR

Any data subject affected by the processing of personal data has the right, granted by the European legislative and regulatory authorities, to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them that is carried out pursuant to Article 6(1)(e) or (f) of the GDPR. This also applies to profiling based on these provisions.

U CM.ONE GmbH and UCM.ONE AT GmbH will no longer process the personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims.

If UCM.ONE GmbH or UCM.ONE AT GmbH processes personal data for the purpose of direct marketing, the data subject has the right to object at any time to the processing of personal data for the purpose of such marketing. This also applies to profiling to the extent that it is related to such direct marketing. If the data subject objects to UCM.ONE GmbH or UCM.ONE AT GmbH regarding processing for direct marketing purposes, UCM.ONE GmbH or UCM.ONE AT GmbH will no longer process the personal data for these purposes.

In addition, the data subject has the right to object, on grounds relating to their particular situation, to the processing of personal data concerning them by UCM. ONE GmbH or UCM.ONE AT GmbH for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) of the GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

To exercise the right to object, the data subject may contact any employee of UCM.ONE GmbH or UCM.ONE AT GmbH directly. The data subject is also free, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise their right to object by means of automated procedures that use technical specifications.

h) Automated individual decision-making, including profiling, Art. 22 GDPR

Every data subject affected by the processing of personal data has the right, granted by the European legislator, not to be subject to a decision based solely on automated processing—including profiling—that produces legal effects concerning the data subject or similarly significantly affects the data subject, provided that the decision (1) is not necessary for the conclusion or performance of a contract between the data subject and the controller, or (2) is permitted by Union or Member State law to which the controller is subject, and such law provides for appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject, or (3) is based on the data subject’s explicit consent.

If the decision (1) is necessary for the conclusion or performance of a contract between the data subject and the controller, or (2) is made with the data subject’s explicit consent, UCM.ONE GmbH or UCM. ONE AT GmbH shall take appropriate measures to safeguard the rights, freedoms, and legitimate interests of the data subject, including at a minimum the right to obtain human intervention on the part of the controller, to present their own point of view, and to contest the decision.

If the data subject wishes to exercise rights relating to automated decisions, they may contact an employee of the data controller at any time.

i) Right to Withdraw Consent under Data Protection Law, Art. 7(3) GDPR

Every data subject affected by the processing of personal data has the right, granted by European legislation, to withdraw consent to the processing of personal data at any time.

If the data subject wishes to exercise their right to withdraw consent, they may contact a representative of the data controller at any time.

j) Right to lodge a complaint, Art. 77 GDPR

In addition, if you believe that data protection regulations are not being observed in the processing of your data, – file a complaint with the competent supervisory authority. Data subjects may submit their complaint to the authority in their place of residence, but in principle may also submit it to any other data protection supervisory authority.

The competent data protection supervisory authority for UCM.ONE GmbH (Germany) is:

Berlin Commissioner for Data Protection and Freedom of Information

Friedrichstr. 219,

10969 Berlin,

Phone: +49 30 13889-0

Email: mailbox@datenschutz-berlin.de

The competent data protection supervisory authority for UCM.ONE AT GmbH (Austria) is:

Austrian Data Protection Authority

Barichgasse 40-42

1030 Vienna

Phone: +43 1 52 152-0

Email: dsb@dsb.gv.at

Privacy Policy regarding the use and application of AddThis

The controller has integrated components of the enterprise AddThis on this website. AddThis is a so-called bookmarking provider. The service allows simplified bookmarking of website pages via buttons. By hovering over or clicking the AddThis component, a list of bookmarking and sharing services is displayed.

The operating company of AddThis was Oracle Corporation / AddThis, Inc., 1595 Spring Hill Road, Suite 300, Vienna, VA 22182, USA (Note: The AddThis service was officially discontinued by its parent company Oracle as of May 31, 2023; the following information describes the general functionality of the component).

With each call-up to one of the individual pages of this website operated by the controller on which an AddThis component has been integrated, the Internet browser on the data subject’s information technology system is automatically prompted by the respective AddThis component to download data from the website www.addthis.com. Within the framework of this technical procedure, AddThis learns about the visit and which specific subpage of this website is used by the information technology system used by the data subject. Furthermore, AddThis receives knowledge of the IP address assigned by the Internet Service Provider (ISP) to the computer system used by the data subject, the browser type, browser language, the website accessed before our website, as well as the date and time of the visit. AddThis uses this data to create anonymized user profiles. The data and information transferred to AddThis in this manner enable AddThis itself, as well as companies affiliated with AddThis or its partner enterprises, to target visitors to the controller’s website with personalized and interest-based advertising.

AddThis displays personalized and interest-based advertising based on a cookie set by the company. This cookie analyzes the individual surfing behavior of the computer system used by the data subject. The cookie stores the visits to websites originating from the computer system.

The data subject can prevent the setting of cookies through our website at any time, as described above, by means of a corresponding setting of the Internet browser used, and thus permanently deny the setting of cookies. Such a setting of the Internet browser used would also prevent AddThis from setting a cookie on the data subject’s information technology system. In addition, cookies already set by AddThis can be deleted at any time via an Internet browser or other software programs.

The data subject also has the option of permanently objecting to the processing of personal data by AddThis. For this purpose, the data subject must press the opt-out button under the link http://www.addthis.com/privacy/opt-out, which sets an opt-out cookie. The opt-out cookie set with the objection is placed on the information technology system used by the data subject. If the cookies are deleted on the data subject’s system after an objection, the data subject must call up the link again and set a new opt-out cookie.

By setting the opt-out cookie, however, there is the possibility that the websites of the controller may no longer be fully usable for the data subject.

The applicable privacy policy of AddThis can be accessed at http://www.addthis.com/privacy/privacy-policy.

Privacy Policy regarding the use and application of Amazon (incl. Amazon Music & Prime Video)

The controller has integrated components of the enterprise Amazon (e.g., Amazon Music widgets, Prime Video embeds, embedded players, or affiliate links) on this website. Amazon is an online commerce network and media streaming service enabling, among other things, digital music and video content, streaming services, and the purchase of sound carriers, films, and merchandise.

The operating company of Amazon’s services in the European Union is Amazon Europe Core S.à r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg (jointly with Amazon EU S.à r.l. and Amazon Digital Germany GmbH).

With each call-up to one of the individual pages of this website on which an Amazon component has been integrated, the Internet browser on the data subject’s information technology system is automatically prompted to download a display of the corresponding Amazon component. Within the framework of this technical procedure, Amazon gains knowledge of which specific subpage of our website is visited, as well as the IP address, technical browser data, and time of access of the data subject.

If the data subject is logged in to Amazon at the same time, Amazon recognizes with every call-up to our website which specific subpage is visited and assigns this information to the personal Amazon account of the data subject. If such a transmission of information to Amazon is not desired by the data subject, this can be prevented by logging out of their Amazon account before calling up our website.

Amazon uses cookies and similar tracking technologies in the context of providing its services to analyze user behavior and, where applicable, process interest-based advertising or advertising reimbursement. The data subject can prevent the setting of cookies by our website at any time by means of a corresponding setting of the Internet browser used, and thus permanently object to the setting of cookies. Cookies already set can be deleted at any time via the browser.

Further information and the applicable privacy policy of Amazon can be accessed at https://www.amazon.com/privacy.

Privacy Policy regarding the use and application of Apple Music

The controller has integrated components of the Apple Music service on this website. Apple Music is a music streaming service and online music portal enabling features such as embedding music players, widgets, and links to music tracks, playlists, and albums.

The operating company of Apple Music for users in the European Union is Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland.

With each call-up to one of the individual pages of this website on which an Apple Music component (e.g., an embedded player or a music widget) has been integrated, the Internet browser on the data subject’s information technology system is automatically prompted to download a display of the corresponding Apple Music component from Apple’s servers. Within the framework of this technical procedure, Apple gains knowledge of which specific subpage of our website is visited, as well as the IP address and technical browser data of the data subject.

If the data subject is logged in to Apple Music or with their Apple ID / Apple Account at the same time, Apple recognizes with every call-up to our website which specific subpage is visited and assigns this information to the personal account of the data subject. If such a transmission of information to Apple is not desired by the data subject, this can be prevented by logging out of their Apple account before calling up our website.

Apple may use cookies and similar tracking technologies on the data subject’s system in the context of providing its services. The data subject can prevent the setting of cookies through our website at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. In addition, cookies already set by Apple can be deleted at any time via the Internet browser.

Further information and the applicable privacy policy of Apple Music can be accessed at https://www.apple.com/legal/privacy/data/en/apple-music/ and Apple’s general privacy policy at https://www.apple.com/legal/privacy/.

Privacy Policy regarding the use and application of Beatport

The controller has integrated components of the Beatport service on this website. Beatport is an online music portal and download store specializing in electronic music, providing features such as embedded music players, widgets, and links to music releases.

The operating company of Beatport is Beatport, LLC, 3858 Walnut Street, Suite 261, Denver, CO 80205, USA.

With each call-up to one of the individual pages of this website on which a Beatport component (e.g., an embedded Beatport player or a widget) has been integrated, the Internet browser on the data subject’s information technology system is automatically prompted to download a display of the corresponding Beatport component from Beatport. Within the framework of this technical procedure, Beatport gains knowledge of which specific subpage of our website is visited, as well as the IP address and technical browser data of the data subject.

If the data subject is logged in to Beatport at the same time, Beatport detects with every call-up to our website which specific subpage is visited and assigns this information to the personal Beatport account of the data subject. If such a transmission of information to Beatport is not desired by the data subject, this can be prevented by logging out of their Beatport account before calling up our website.

Beatport may use cookies or similar tracking technologies in the context of providing its services. The data subject can prevent the setting of cookies through our website at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. In addition, cookies already set by Beatport can be deleted at any time via the Internet browser.

Further information and the applicable privacy policy of Beatport can be accessed at https://www.beatport.com/privacy-policy.

Privacy Policy regarding the use and application of Borlabs Cookie

The controller uses the consent management tool Borlabs Cookie on this website. Borlabs Cookie is a cookie consent management solution used to obtain, manage, and verifiably document the legally required consents for the use of cookies, scripts, tracking technologies, and external media.

The provider of the software is Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany.

When accessing our website, a technically necessary cookie (borlabs-cookie) is stored in the browser of the data subject for technical reasons. This cookie serves exclusively to store the consent or revocation granted by the data subject. The following data is processed in the cookie and stored locally on your end device:

Your selected cookie preferences (consent status of cookie groups and individual services)
An anonymized or pseudonymous user ID (UID)
Creation and update date of the consent status
The cookie lifespan and the version of the consent tool

No personal data is transferred to the provider Borlabs GmbH or to any other third parties in connection with the use of Borlabs Cookie. Processing takes place locally on our server or in the user’s browser. The purpose of data processing is to fulfill the legal obligation to obtain and document user consents in a legally compliant manner.

The data subject can adjust or revoke their consent at any time via the cookie settings on our website with effect for the future. In addition, the cookie set can be deleted at any time via the Internet browser.

Further information and the provider’s privacy policy can be found at https://de.borlabs.io/datenschutz/.

Privacy Policy regarding the use and application of Facebook

The controller has integrated components of the enterprise Facebook on this website. Facebook is a social network.

A social network is an online social meeting place, an online community that generally allows users to communicate with each other and interact in a virtual space. A social network can serve as a platform for exchanging opinions and experiences, or enable the Internet community to provide personal or business-related information. Facebook allows users of the social network, among other things, to create private profiles, upload photos, and network via friend requests.

The operating company of Facebook is Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, the controller responsible for the processing of personal data is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

With each call-up to one of the individual pages of this website operated by the controller on which a Facebook component (Facebook plug-in) has been integrated, the Internet browser on the data subject’s information technology system is automatically prompted by the respective Facebook component to download a display of the corresponding Facebook component from Facebook. An overall overview of all Facebook plug-ins can be accessed at https://developers.facebook.com/docs/plugins/. Within the framework of this technical procedure, Facebook gains knowledge of which specific subpage of our website is visited by the data subject.

If the data subject is logged in to Facebook at the same time, Facebook detects with every call-up to our website by the data subject—and for the entire duration of their stay on our website—which specific subpage of our website the data subject visits. This information is collected through the Facebook component and assigned by Facebook to the respective Facebook account of the data subject. If the data subject clicks on one of the Facebook buttons integrated on our website, such as the “Like” button, or submits a comment, Facebook assigns this information to the personal Facebook user account of the data subject and stores this personal data.

Facebook always receives information via the Facebook component that the data subject has visited our website if the data subject is logged in to Facebook at the same time as calling up our website; this occurs regardless of whether the data subject clicks on the Facebook component or not. If such a transmission of information to Facebook is not desired by the data subject, this can be prevented by logging out of their Facebook account before calling up our website.

The privacy policy published by Facebook, which is available at https://www.facebook.com/privacy/policy, provides information on the collection, processing, and use of personal data by Facebook. Furthermore, the setting options offered by Facebook to protect the privacy of the data subject are explained there. In addition, different applications are available that make it possible to suppress data transmission to Facebook.

Privacy Policy regarding the use and application of Google Ads (formerly Google AdWords)

The controller has integrated Google Ads (formerly Google AdWords) on this website. Google Ads is an Internet advertising service that allows advertisers to place ads both in Google’s search engine results and in the Google advertising network. Google Ads allows an advertiser to predefine specific keywords by means of which an ad in Google’s search engine results is displayed only when the user retrieves a keyword-relevant search result with the search engine. In the Google advertising network, the ads are distributed to topic-relevant websites using an automatic algorithm and taking into account the previously defined keywords.

The operating company of the Google Ads services is Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. For the European region, Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland is responsible.

The purpose of Google Ads is the promotion of our website by displaying interest-relevant advertising on the websites of third parties and in the search engine results of the Google search engine, as well as the display of third-party advertising on our website.

If a data subject reaches our website via a Google ad, a so-called conversion cookie is stored on the information technology system of the data subject by Google. What cookies are has already been explained above. A conversion cookie loses its validity after thirty days and is not used to identify the data subject. The conversion cookie is used, provided that the cookie has not yet expired, to track whether certain subpages, such as the shopping cart of an online shop system, were called up on our website. Through the conversion cookie, both we and Google can track whether a data subject who reached our website via an Ads ad generated sales—that is, completed or canceled a purchase of goods.

The data and information collected through the use of the conversion cookie are used by Google to create visit statistics for our website. These visit statistics are used by us to determine the total number of users who were referred to us via Ads ads, i.e. to determine the success or failure of the respective Ads ad and to optimize our Ads ads for the future. Neither our company nor other Google Ads advertisers receive information from Google that could identify the data subject.

By means of the conversion cookie, personal information, such as the websites visited by the data subject, is stored. Each time you visit our website, personal data, including the IP address of the Internet connection used by the data subject, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass this personal data collected through the technical procedure on to third parties.

The data subject can prevent the setting of cookies by our website at any time, as described above, by means of a corresponding setting of the Internet browser used, and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on the data subject’s information technology system. In addition, a cookie already set by Google Ads can be deleted at any time via the Internet browser or other software programs.

Furthermore, the data subject has the option of objecting to interest-based advertising by Google. For this purpose, the data subject must call up the link https://adssettings.google.com from each of the Internet browsers they use and make the desired settings there.

Further information and the applicable privacy policy of Google can be accessed under https://policies.google.com/privacy.

Privacy Policy regarding the use and application of Google Analytics (with anonymization function)

The controller has integrated the component Google Analytics (with anonymization function) on this website. Google Analytics is a web analytics service. Web analytics is the collection, gathering, and evaluation of data about the behavior of visitors to websites. A web analytics service collects, among other things, data about the website from which a data subject came to a website (so-called referrer), which subpages of the website were accessed, or how often and for what duration a subpage was viewed. Web analytics is mainly used to optimize a website and for a cost-benefit analysis of Internet advertising.

The operating company of the Google Analytics component is Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. For persons outside the USA, Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland is responsible.

The controller uses the addition “_gat._anonymizeIp” for web analytics via Google Analytics. By means of this addition, the IP address of the Internet connection of the data subject is shortened and anonymized by Google if access to our websites is from a member state of the European Union or from another state party to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyze visitor flows on our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile online reports for us showing activities on our websites, and to provide other services related to the use of our website.

Google Analytics sets a cookie on the data subject’s information technology system. What cookies are has already been explained above. By setting the cookie, Google is enabled to analyze the use of our website. With each call-up to one of the individual pages of this website operated by the controller on which a Google Analytics component has been integrated, the Internet browser on the data subject’s information technology system is automatically prompted by the respective Google Analytics component to transmit data for the purpose of online analysis to Google. Within the framework of this technical procedure, Google obtains knowledge of personal data, such as the IP address of the data subject, which serves Google, among other things, to understand the origin of visitors and clicks and subsequently enable commission settlements.

By means of the cookie, personal information, such as the access time, the location from which access originated, and the frequency of visits to our website by the data subject, is stored. Each time you visit our website, this personal data, including the IP address of the Internet connection used by the data subject, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass this personal data collected through the technical procedure on to third parties.

The data subject can prevent the setting of cookies by our website at any time, as described above, by means of a corresponding setting of the Internet browser used, and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the data subject’s information technology system. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.

Furthermore, the data subject has the option of objecting to and preventing the collection of data generated by Google Analytics relating to the use of this website as well as the processing of this data by Google. For this purpose, the data subject must download and install a browser add-on under the link https://tools.google.com/dlpage/gaoptout. This browser add-on tells Google Analytics via JavaScript that no data and information about website visits may be transmitted to Google Analytics. The installation of the browser add-on is considered an objection by Google. If the data subject’s information technology system is deleted, formatted, or reinstalled at a later point in time, the data subject must reinstall the browser add-on to disable Google Analytics. If the browser add-on is uninstalled or deactivated by the data subject or another person attributable to their sphere of control, the option of reinstalling or reactivating the browser add-on remains available.

Further information and the applicable privacy policy of Google can be accessed at https://policies.google.com/privacyand at https://marketingplatform.google.com/about/analytics/terms/us/. Google Analytics is explained in more detail under this link https://marketingplatform.google.com/about/analytics/.

Privacy Policy regarding the use and application of Instagram

The controller has integrated components of the Instagram service on this website. Instagram is a service that qualifies as an audiovisual platform and allows users to share photos and videos, and further disseminate such data in other social networks.

The operating company of the Instagram services is Meta Platforms, Inc., 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA. The controller responsible for the processing of personal data outside the USA/Canada is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

With each call-up to one of the individual pages of this website operated by the controller on which an Instagram component (Insta button) has been integrated, the Internet browser on the data subject’s information technology system is automatically prompted by the respective Instagram component to download a display of the corresponding component from Instagram. Within the framework of this technical procedure, Instagram gains knowledge of which specific subpage of our website is visited by the data subject.

If the data subject is logged in to Instagram at the same time, Instagram detects with every call-up to our website by the data subject—and for the entire duration of their stay on our website—which specific subpage the data subject visits. This information is collected through the Instagram component and assigned by Instagram to the respective Instagram account of the data subject. If the data subject clicks on one of the Instagram buttons integrated on our website, the data and information transmitted are assigned to the personal Instagram user account of the data subject and stored and processed by Instagram.

Instagram always receives information via the Instagram component that the data subject has visited our website if the data subject is logged in to Instagram at the same time as calling up our website; this occurs regardless of whether the data subject clicks on the Instagram component or not. If such a transmission of information to Instagram is not desired by the data subject, this can be prevented by logging out of their Instagram account before calling up our website.

Further information and the applicable privacy policy of Instagram can be accessed under https://privacycenter.instagram.com/policy and https://help.instagram.com/155833707900388.

Privacy Policy regarding the use and application of LinkedIn

The controller has integrated components of the LinkedIn Corporation on this website. LinkedIn is an Internet-based social network that enables users to connect with existing business contacts and establish new business connections. Over 400 million registered individuals use LinkedIn in more than 200 countries. This makes LinkedIn currently the largest platform for business contacts and one of the most visited websites in the world.

The operating company of LinkedIn is LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA 94085, USA. For privacy matters outside the USA, LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible.

With each individual call-up to our website equipped with a LinkedIn component (LinkedIn plug-in), this component prompts the browser used by the data subject to download a corresponding representation of the component from LinkedIn. Further information on the LinkedIn plug-ins can be accessed at https://developer.linkedin.com/. Within the framework of this technical procedure, LinkedIn gains knowledge of which specific subpage of our website is visited by the data subject.

If the data subject is logged in to LinkedIn at the same time, LinkedIn detects with every call-up to our website by the data subject—and for the entire duration of their stay on our website—which specific subpage of our website the data subject visits. This information is collected through the LinkedIn component and assigned by LinkedIn to the respective LinkedIn account of the data subject. If the data subject clicks a LinkedIn button integrated on our website, LinkedIn assigns this information to the personal LinkedIn user account of the data subject and stores this personal data.

LinkedIn receives information via the LinkedIn component that the data subject has visited our website whenever the data subject is logged in to LinkedIn at the time of calling up our website; this occurs regardless of whether the data subject clicks on the LinkedIn component or not. If such a transmission of information to LinkedIn is not desired by the data subject, this can be prevented by logging out of their LinkedIn account before calling up our website.

LinkedIn offers the possibility under https://www.linkedin.com/psettings/guest-controls to unsubscribe from email messages, SMS messages, and targeted ads, as well as to manage ad settings. LinkedIn also uses partners who may set cookies. Such cookies can be declined under https://www.linkedin.com/legal/cookie-policy. The applicable privacy policy of LinkedIn is available at https://www.linkedin.com/legal/privacy-policy. The cookie policy of LinkedIn is available under https://www.linkedin.com/legal/cookie-policy.

Privacy Policy regarding the use and application of Linktree (linktr.ee)

The controller uses services of Linktree on this website or in its online profiles. Linktree is a platform for bundling and linking various digital contents and social media channels via a central landing page.

The operating company of Linktree is Social Online Media Pty Ltd (Trading as Linktree), 136 Exhibition Street, Melbourne, VIC 3000, Australia.

When accessing an integrated Linktree component or when being redirected via a Linktree profile page, technical data (such as IP address, access time, browser and operating system details) as well as information about the clicked links are collected and processed by Linktree. The storage and processing serve the purpose of technical provision, optimization, and reach analysis of the provided links.

Further information on data processing and the privacy policy of Linktree can be accessed at https://linktr.ee/s/privacy/.

Privacy Policy regarding the use and application of Meta Pixel (formerly Facebook Pixel)

The controller has integrated the Meta Pixel (formerly Facebook Pixel) on this website. The Meta Pixel is a service used for the analysis, optimization, and economic operation of our online presence, as well as for targeted placement of advertisements in the social networks Facebook and Instagram.

The operating company of the Meta Pixel for users in the European Union is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The parent company is Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA.

With the help of the Meta Pixel, Meta is able to determine the visitors to our online presence as a target group for the display of advertisements (so-called “Meta Ads”). Accordingly, we use the Meta Pixel to display the Meta Ads placed by us only to users who have shown an interest in our online presence or who exhibit certain characteristics (e.g., interest in specific topics or products) that we transmit to Meta (so-called “Custom Audiences”). Furthermore, we use the Meta Pixel to track the effectiveness of Meta Ads for statistical and market research purposes (so-called “Conversion Tracking”).

When visiting our website, the Meta Pixel is directly integrated by Meta and can store a cookie or similar tracking technologies on your device. If you subsequently log in to Facebook or Instagram or visit our website while logged in, the visit to our online presence is noted in your profile. The data collected about you is anonymous to us and provides us with no conclusions about the identity of the user. However, the data is stored and processed by Meta so that a connection to the respective user profile is possible and can be used by Meta for its own market research and advertising purposes.

The data subject can object to the collection by the Meta Pixel and the use of their data to display Meta Ads or adjust their settings. An adjustment of ad settings within Facebook is possible at https://www.facebook.com/settings?tab=ads. In addition, you can object to the setting of cookies via our cookie consent management system or via your browser settings at any time.

Further information and the applicable privacy policy of Meta can be accessed at https://www.facebook.com/privacy/policy.

Privacy Policy regarding the use and application of Mixcloud

The controller has integrated components of the Mixcloud service on this website. Mixcloud is an online audio platform and streaming service that enables the provision, embedding, and listening of DJ mixes, radio shows, podcasts, and audio tracks via widgets and players.

The operating company of Mixcloud is Mixcloud Limited, Unit #2255, 275 New North Road, London, N1 7AA, United Kingdom (email: privacy@mixcloud.com).

With each call-up to one of the individual pages of this website on which a Mixcloud component (e.g., an embedded audio player or widget) has been integrated, the Internet browser on the data subject’s information technology system is automatically prompted to download a display of the corresponding Mixcloud component from Mixcloud’s servers. Within the framework of this technical procedure, Mixcloud gains knowledge of which specific subpage of our website is visited, as well as the IP address, technical browser data, and time of access of the data subject.

If the data subject is logged in to Mixcloud at the same time, Mixcloud recognizes with every call-up to our website which specific subpage is visited and assigns this information to the personal Mixcloud account of the data subject. If such a transmission of information to Mixcloud is not desired by the data subject, this can be prevented by logging out of their Mixcloud account before calling up our website.

Mixcloud uses cookies and similar tracking technologies in the context of providing its services to analyze platform usage, provide personalized content, and technically optimize the service. The data subject can prevent the setting of cookies through our website at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Cookies already set can be deleted at any time via the browser.

Further information and the applicable privacy policy of Mixcloud can be accessed at https://www.mixcloud.com/privacy/.

Privacy Policy regarding the use and application of Pinterest

The controller has integrated components of Pinterest Inc. on this website. Pinterest is a so-called social network. A social network is an online social meeting place, an online community that generally allows users to communicate with each other and interact in a virtual space. A social network can serve as a platform for exchanging opinions and experiences or enable the Internet community to provide personal or business-related information. Pinterest allows users of the social network, among other things, to publish image collections and individual images as well as descriptions on virtual pinboards (so-called pinning), which can then in turn be shared (so-called repinning) or commented on by other users.

The operating company of Pinterest is Pinterest Inc., 505 Brannan Street, San Francisco, CA 94107, USA. For European data subjects, Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland is responsible.

With each call-up to one of the individual pages of this website operated by the controller on which a Pinterest component (Pinterest plug-in) has been integrated, the Internet browser on the data subject’s information technology system is automatically prompted by the respective Pinterest component to download a display of the corresponding Pinterest component from Pinterest. More information on Pinterest is available at https://pinterest.com/. Within the framework of this technical procedure, Pinterest gains knowledge of which specific subpage of our website is visited by the data subject.

If the data subject is logged in to Pinterest at the same time, Pinterest detects with every call-up to our website by the data subject—and for the entire duration of their stay on our website—which specific subpage of our website the data subject visits. This information is collected through the Pinterest component and assigned by Pinterest to the respective Pinterest account of the data subject. If the data subject clicks a Pinterest button integrated on our website, Pinterest assigns this information to the personal Pinterest user account of the data subject and stores this personal data.

Pinterest receives information via the Pinterest component that the data subject has visited our website whenever the data subject is logged in to Pinterest at the time of calling up our website; this occurs regardless of whether the data subject clicks on the Pinterest component or not. If such a transmission of information to Pinterest is not desired by the data subject, this can be prevented by logging out of their Pinterest account before calling up our website.

The privacy policy published by Pinterest, which is available at https://policy.pinterest.com/en/privacy-policy, provides information on the collection, processing, and use of personal data by Pinterest.

Privacy Policy regarding the use and application of Soundplate

The controller has integrated components of Soundplate on this website. Soundplate is an online portal and service provider for music and publishing marketing as well as music promotion (e.g., for providing smart links, music players, playlist widgets, and marketing buttons).

The operating company of Soundplate is Soundplate LTD, email: info@soundplate.com.

With each call-up to one of the individual pages of this website operated by the controller on which a Soundplate component has been integrated, the Internet browser on the data subject’s information technology system is automatically prompted by the respective Soundplate component to download data from the servers of Soundplate. Within the framework of this technical procedure, Soundplate gains knowledge of which specific subpage of our website is visited by the data subject. Furthermore, Soundplate receives knowledge of the IP address assigned by the Internet Service Provider (ISP) to the computer system used by the data subject, browser type, browser language, the referring website (referrer), as well as the date and time of access.

The purpose of the integration is the appealing presentation, linking, and marketing of music content and releases, as well as the statistical analysis of interactions and visitor traffic.

Soundplate may use cookies or similar tracking technologies on the data subject’s system in the context of providing its services. The data subject can prevent the setting of cookies through our website at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. In addition, cookies already set by Soundplate can be deleted at any time via an Internet browser or other software programs.

The privacy policy of Soundplate applies. This can be viewed at the following link on the Soundplate website: https://www.iubenda.com/privacy-policy/79861623.

Privacy Policy regarding the use and application of Spotify

The controller has integrated components of the Spotify service on this website. Spotify is a digital music, podcast, and video service that gives access to millions of songs and other content from creators all over the world.

The operating company of Spotify for users from the European Economic Area is Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden.

With each call-up to one of the individual pages of this website on which a Spotify component (e.g., an embedded Spotify player or widget) has been integrated, the Internet browser on the data subject’s information technology system is automatically prompted to download a display of the corresponding Spotify component. Within the framework of this technical procedure, Spotify gains knowledge of which specific subpage of our website is visited, as well as the IP address and technical browser data of the data subject.

If the data subject is logged in to Spotify at the same time, Spotify detects with every call-up to our website which specific subpage is visited and assigns this information to the personal Spotify account of the data subject. If such a transmission of information to Spotify is not desired by the data subject, this can be prevented by logging out of their Spotify account before calling up our website.

Further information and the applicable privacy policy of Spotify can be accessed under https://www.spotify.com/us/legal/privacy-policy/.

Privacy Policy regarding the use and application of TikTok

The controller has integrated components of the TikTok service on this website. TikTok is a video platform and social network that allows users to create, view, and share short videos.

The operating company of TikTok for users in the European Economic Area, the United Kingdom, and Switzerland is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.

With each call-up to one of the individual pages of this website on which a TikTok component (e.g., TikTok Pixel, embedded videos, or share buttons) has been integrated, the Internet browser on the data subject’s information technology system is automatically prompted to transmit data to TikTok. Within the framework of this technical procedure, TikTok receives knowledge of personal and technical data such as IP address, device information, system activity, and visited pages.

If the data subject is logged in to TikTok at the time of calling up our website, TikTok recognizes this visit and assigns the collected data to the personal user account of the data subject. To prevent this automatic assignment, the data subject must log out of their TikTok account before calling up our website.

The applicable privacy policy of TikTok can be accessed at https://www.tiktok.com/legal/page/eea/privacy-policy/en.

Privacy Policy regarding the use and application of Vimeo

We use the provider Vimeo for the integration of videos. Vimeo is operated by Vimeo, Inc. (formerly Vimeo, LLC) with headquarters at 555 West 18th Street, New York, New York 10011, USA.

On some of our web pages, we use plug-ins from the provider Vimeo. When you call up web pages of our Internet presence provided with such a plug-in, a connection to the Vimeo servers is established and the plug-in is displayed. This transmits to the Vimeo server which of our web pages you have visited. If you are logged in as a member of Vimeo, Vimeo assigns this information to your personal user account. When using the plug-in, e.g., clicking the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your Vimeo user account and deleting the corresponding cookies from Vimeo before using our website.

Further information on data processing and notes on data protection by Vimeo can be found at https://vimeo.com/privacy.

Privacy Policy regarding the use and application of X (formerly Twitter)

The controller has integrated components of X (formerly Twitter) on this website. X is a multilingual, publicly accessible microblogging service on which users can publish and distribute so-called posts (formerly tweets). These short messages are accessible to anyone, including persons not registered on X. The posts are also displayed to the so-called followers of the respective user. Furthermore, X allows the targeting of a broad audience via hashtags, links, or reposts.

The operating company of X is X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. Responsible for the data processing of individuals living outside the United States is X Internet Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland.

With each call-up to one of the individual pages of this website operated by the controller on which an X component (X button) has been integrated, the Internet browser on the data subject’s information technology system is automatically prompted by the respective X component to download a representation of the corresponding X component. Further information on X buttons is available at https://about.x.com/. Within the framework of this technical procedure, X gains knowledge of which specific subpage of our website is visited by the data subject. The purpose of the integration is to enable our users to redistribute the content of this website, to make this website known in the digital world, and to increase our visitor numbers.

If the data subject is logged in to X at the same time, X detects with every call-up to our website by the data subject—and for the entire duration of their stay on our website—which specific subpage of our website the data subject visits. This information is collected through the X component and assigned by X to the respective X account of the data subject. If the data subject clicks on one of the X buttons integrated on our website, the data and information transmitted are assigned to the personal X user account of the data subject and stored and processed by X.

X receives information via the X component that the data subject has visited our website whenever the data subject is logged in to X at the time of calling up our website; this occurs regardless of whether the data subject clicks on the X component or not. If such a transmission of information to X is not desired by the data subject, this can be prevented by logging out of their X account before calling up our website.

The applicable privacy policy of X can be accessed under https://x.com/privacy. You can adjust your privacy settings at X under https://x.com/settings/account.

Privacy Policy regarding the use and application of Xing

The controller has integrated components of Xing on this website. Xing is an Internet-based social network that enables users to connect with existing business contacts and establish new business connections. Individual users can create a personal profile on Xing. Companies can, for example, create company profiles or publish job offers on Xing.

The operating company of Xing is New Work SE, Am Strandkai 1, 20457 Hamburg, Germany.

With each call-up to one of the individual pages of this website operated by the controller on which a Xing component (Xing plug-in) has been integrated, the Internet browser on the data subject’s information technology system is automatically prompted by the respective Xing component to download a representation of the corresponding Xing component from Xing. Further information on the Xing plug-ins can be accessed under https://dev.xing.com/plugins. Within the framework of this technical procedure, Xing gains knowledge of which specific subpage of our website is visited by the data subject.

If the data subject is logged in to Xing at the same time, Xing detects with every call-up to our website by the data subject—and for the entire duration of their stay on our website—which specific subpage of our website the data subject visits. This information is collected through the Xing component and assigned by Xing to the respective Xing account of the data subject. If the data subject clicks on one of the Xing buttons integrated on our website, such as the “Share” button, Xing assigns this information to the personal Xing user account of the data subject and stores this personal data.

Xing receives information via the Xing component that the data subject has visited our website whenever the data subject is logged in to Xing at the time of calling up our website; this occurs regardless of whether the data subject clicks on the Xing component or not. If such a transmission of information to Xing is not desired by the data subject, this can be prevented by logging out of their Xing account before calling up our website.

The privacy policy published by Xing, which is available at https://privacy.xing.com/en/privacy-policy, provides information on the collection, processing, and use of personal data by Xing.

Privacy Policy regarding the use and application of YouTube

The controller has integrated components of YouTube on this website. YouTube is an Internet video portal that allows video publishers to set up video clips free of charge and other users to view, rate, and comment on them, also free of charge. YouTube allows the publication of all types of videos, which is why complete feature films, television shows, music videos, trailers, or user-created videos can be accessed via the Internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. Responsible for the data processing of individuals living outside the United States is Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland.

With each call-up to one of the individual pages of this website operated by the controller on which a YouTube component (YouTube video) has been integrated, the Internet browser on the data subject’s information technology system is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information about YouTube can be accessed at https://www.youtube.com/yt/about/. Within the framework of this technical procedure, YouTube and Google gain knowledge of which specific subpage of our website is visited by the data subject.

If the data subject is logged in to YouTube at the same time, YouTube recognizes with the call-up to a subpage containing a YouTube video which specific subpage of our website the data subject visits. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.

YouTube and Google receive information via the YouTube component that the data subject has visited our website whenever the data subject is logged in to YouTube at the time of calling up our website; this occurs regardless of whether the data subject clicks on a YouTube video or not. If such a transmission of information to YouTube and Google is not desired by the data subject, this can be prevented by logging out of their YouTube account before calling up our website.

The privacy policy published by YouTube, which is available at https://policies.google.com/privacy, provides information on the collection, processing, and use of personal data by YouTube and Google.

Privacy Policy Regarding the Use of Soundplate

The data controller has integrated Soundplate components into this website. Soundplate is an online portal for publishing marketing.

Soundplate is operated by Soundplate LTD, info@soundplate.com.

Soundplate’s privacy policy applies. It can be viewed on the Soundplate website: https://www.iubenda.com/privacy-policy/79861623.

Legal Basis for Processing

Article 6(1)(a) of the GDPR serves as the legal basis for our company’s processing operations in which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, with processing operations necessary for the delivery of goods or the provision of other services or consideration, the processing is based on Article 6(1)(b) of the GDPR. The same applies to processing operations necessary for the implementation of pre-contractual measures, such as in cases of inquiries regarding our products or services. If our company is subject to a legal obligation that requires the processing of personal data—such as to fulfill tax obligations—the processing is based on Article 6(1)(c) of the GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured on our premises and, as a result, their name, age, health insurance information, or other vital information had to be disclosed to a doctor, a hospital, or other third parties. In that case, the processing would be based on Article 6(1)(d) of the GDPR.

Finally, processing operations may be based on Article 6(1)(f) of the GDPR. This legal basis applies to processing operations not covered by any of the aforementioned legal bases, provided that the processing is necessary to safeguard a legitimate interest of our company or a third party, unless the interests, fundamental rights, and fundamental freedoms of the data subject take precedence. We are permitted to carry out such processing operations in particular because they were specifically mentioned by the European legislator. In this regard, the legislator took the view that a legitimate interest could be assumed if the data subject is a customer of the controller (Recital 47, Sentence 2 of the GDPR GDPR).

Legitimate Interests in Processing Pursued by the Data Controller or a Third Party

If the processing of personal data is based on Article 6(1)(f) of the GDPR, our legitimate interest is the conduct of our business operations for the benefit of the well-being of all our employees and our shareholders.

Duration, for which the personal data is stored

The criterion for the duration of storage of personal data is the applicable statutory retention period. Upon expiration of this period, the relevant data is routinely deleted, provided it is no longer required for the performance of a contract or for entering into a contract.

Legal or contractual requirements regarding the provision of personal data; necessity for the conclusion of a contract; the data subject’s obligation to provide personal data; possible consequences of failure to provide such data

We hereby inform you that the provision of personal data is in some cases required by law (e.g., tax regulations) or may also result from contractual provisions (e.g., information about the contracting party).

In some cases, the conclusion of a contract may require that a data subject provide us with personal data, which we must subsequently process. For example, the data subject is obligated to provide us with personal data when our company enters into a contract with them. Failure to provide the personal data would result in the contract with the data subject not being able to be concluded.

Before providing personal data, the data subject must contact one of our employees. Our employee will explain to the data subject, on a case-by-case basis, whether the provision of personal data is required by law or contract, or is necessary for the conclusion of the contract; whether there is an obligation to provide the personal data; and what the consequences of failing to provide the personal data would be.

Existence of Automated Decision-Making

As a responsible company, we do not engage in automated decision-making or profiling.

This Privacy Policy was created using the Privacy Policy Generator of DGD Deutsche Gesellschaft für Datenschutz GmbH, which acts as the external data protection officer for Landshut, in cooperation with Christian Solmecke, an attorney specializing in IT and data protection law, and has been individually adapted by the data controllers to the corporate structures (UCM.ONE GmbH & UCM.ONE AT GmbH) as well as to current group structures and country-specific legal frameworks.

(As of August 2026)