Privacy policy
This translation is provided for information only. The German version is authoritative.
Controller
Martin Schumacher, Ziehopweg 26, 27383 Wittkopsbostel, Germany
Email: info (at) bandassist (dot) de
This website
The website does not embed any external fonts, maps, videos or tracking services; the only exception is the AI chat assistant (see below). If you choose a language at the top, your browser remembers this choice (in localStorage) so the site opens in your language on your next visit. This information stays on your device and is not transmitted; you can delete it at any time in your browser settings.
Hosting and server logs
The website and the installation files are hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you open a page or download a file, STRATO processes technically necessary data – such as IP address, date and time, requested file, amount of data transferred, browser and operating system – in order to deliver the content and keep the service secure. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in the secure and error-free operation of the website. A data processing agreement pursuant to Art. 28 GDPR is in place with STRATO.
If you send me an email, I process your details only to answer your request (Art. 6(1)(b) or (f) GDPR) and delete them once they are no longer needed for that purpose.
Contact form
If you use the contact form, your name, email address, topic and message are sent to me by email; the website itself does not store them. I only use the details to answer your request (Art. 6(1)(b) or (f) GDPR) and delete them once they are no longer needed for that. To protect against mass abuse, the server keeps a non-reversible hash of your IP address together with the time of the message for one hour (Art. 6(1)(f) GDPR). Before sending, your browser solves a small computing task (“I’m not a robot”, ALTCHA) that this server sets and checks – without cookies and without third-party services; for this, the server remembers for up to 20 minutes which solutions have already been used.
AI chat assistant
An AI chat assistant offered by STRATO as “AI Receptionist” is embedded on the pages; it is operated technically by Voiceable and uses Twilio services for voice conversations. For this, your browser loads a script from strato.ai-voicereceptionist.com when the page is opened; technically necessary data such as your IP address, browser and the page visited are transmitted. The widget may use cookies or your browser’s local storage. If you use the assistant, your input – and in a voice conversation also your voice, after you allow the microphone – is transmitted to the provider and processed there in order to answer you. This may involve a transfer to countries outside the EU, in particular the USA. The legal basis is Art. 6(1)(f) GDPR (answering questions about the app) or, when you use the assistant, Art. 6(1)(b) GDPR. Please do not enter sensitive data in the chat.
Purchase via Link (Stripe)
Licenses and passes are sold through Link, Stripe’s payment service (Stripe Technology Europe, Limited, 1 Grand Canal Street Lower, Dublin 2, Ireland). Link acts as the seller and processes the data for purchase and payment – such as name, email address, country and payment details – under its own responsibility; the privacy notices of Link and Stripe apply (link.com/privacy, stripe.com/privacy). This may involve a transfer to countries outside the EU, in particular the USA. For each purchase I receive your name, email address, the product purchased and identifiers of the purchase or subscription from Link, but no payment details.
Licenses and activation
So that I can send you the license key and activate your license, the activation service on this website (hosted by STRATO) stores the license key, name, email address, product, term and the identifiers of the purchase or subscription. When you enter the license in BandAssist and when BandAssist confirms it every few weeks, the app sends your license key, an identifier of your computer derived from the hardware (a hash that reveals nothing about you) and the computer’s name to this website; it is stored which computer was activated when and last confirmed. To protect against guessing keys, the server keeps an irreversible hash of your IP address for one hour. The email with the key is sent via STRATO. The legal basis is Art. 6(1)(b) GDPR (providing the purchased license). I delete the data once the license has expired and no claims can arise any more, at the latest three years after the license ends.
The app
BandAssist runs locally on your computer. The app only sends data to me when activating and confirming a license (see above). If you use features that need services on the internet, requests go directly from your computer to those providers, and their privacy policies apply: the AI features send measurements and channel info (no audio) to Anthropic using your own API key, the sample search sends your search terms to Freesound or Openverse, and the Apple Music search sends title and artist to Apple.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object (Art. 21). You can also lodge a complaint with a data protection supervisory authority, for example the Landesbeauftragte für den Datenschutz Niedersachsen (Data Protection Commissioner of Lower Saxony).