Privacy policy

Controller

Adrian Sangeorgean, 429 11th Avenue, New York, NY 10001, USA. Email: djdeepunit@gmail.com

What we collect

Through the form, required: name, email address, mobile number, event venue, preferred date, event type, what you need (DJ/sound/lights) and budget. Optional: number of guests, set length, one alternative date and your message.

The required fields are needed to answer your inquiry; without them the form cannot be sent. There is no legal obligation to provide them, and no automated decision-making takes place.

Technically and automatically: the form used and the time of sending, both included in the inquiry email, and your IP address, which is used only to protect the form and is not included in that email. Nothing is stored in your browser.

To protect the form, the server keeps a short-lived counter per IP address (rate limiting: a shortened hash of the IP address, for IPv6 of its /64 network, with the times of the requests in the last hour). Requests from names or email addresses on a spam block list are normally not delivered; name, email address and IP address are then recorded in a protected log so that repeated spam can be recognized. If this log cannot be written, the request is delivered after all, marked as suspected spam in the subject line. If sending the email fails, the key details of the request (name, email address, phone, date, event type and venue) are kept in a protected log so that the request is not lost.

Server log files

When you open this website, the hosting provider automatically records access data in log files: IP address, date and time, the requested page, the referring page, the browser identifier and the amount of data transferred. This is needed to deliver the site and keep it secure (Art. 6(1)(f) GDPR). The log files are deleted after 30 days at the latest.

Audience measurement without cookies

To know how many people visit this site, each page view sends an anonymous notice to the site's own server: the page viewed, its language, the device type (mobile, tablet or desktop), the referring site if there is one (for example google.com) and any campaign parameter. No cookie is set and nothing is stored in your browser; your IP address and browser identifier are not kept. This data is used only for visitor statistics, is not passed on to anyone and is deleted after 13 months (Art. 6(1)(f) GDPR).

Purposes

We process your data for two purposes:

• to answer your inquiry and, where applicable, to prepare the booking (form details, email address), including a protected copy of the request if sending the email fails;
• to protect the form against misuse (IP address, rate limiting, spam block list).

Your data is not used to advertise to you and is not passed on for advertising purposes.

Legal basis

Answering the inquiry: Art. 6(1)(b) GDPR (pre-contractual steps at your request). Protection against misuse: Art. 6(1)(f) GDPR (legitimate interest in a form that works without abuse). The controller is established in Germany, so the GDPR applies.

Recipients

The hosting provider of this website (Hetzner Online GmbH, Germany) and the provider of the mailbox that receives inquiries (Google, Gmail), each only to the extent technically necessary. Google LLC may process data in the USA. The European Commission has adopted an adequacy decision for US organizations certified under the EU-U.S. Data Privacy Framework; Google LLC states that it is certified under that framework. To make sure no enquiry gets lost, for example in the spam folder, a monitoring program run by the controller on a server rented from Hetzner Online GmbH (Germany) reads the enquiries in this mailbox, checks the sent messages for a reply, keeps the sender's email address and the subject line (which contains the name) for no more than 30 days, and sends reminders to another mailbox of the controller, also hosted by Hetzner. After each submission, the form also sends this server a reference number that contains no personal data. No further disclosure.

Retention

Inquiries are kept for the duration of the correspondence and afterwards in line with statutory retention periods. Rate-limiting entries older than one hour are no longer used; a counter file that has not been written to for an hour is deleted with the next inquiry sent through the form. Entries in the spam block log and in the log of failed sending that are older than 30 days are deleted with the next inquiry sent through the form; in addition, a log that reaches 256 KB replaces its previous copy. In addition, a daily server job deletes counter files older than two hours and logs that have not been written to for 30 days. You may request deletion at any time.

Cookies and browser storage

This site sets no cookies and stores nothing in your browser.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. A message to djdeepunit@gmail.com is enough.

You may also lodge a complaint with a supervisory authority. For this controller that is Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (datenschutz.hessen.de); you may also contact the authority where you live.

Right to object

You may object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR. A message to djdeepunit@gmail.com is enough.

Security

Transmission is TLS-encrypted. Access to inquiries and logs is restricted.

Changes

This policy may be updated if the service or the applicable rules change.