Privacy Policy.

When you call up our website, the browser on your device automatically sends information to our website's server. This information is stored temporarily in a so-called log file. The following information is recorded without any action on your part and stored until it is deleted automatically:

• Pages visited
• Date and time of access
• Volume of data sent, in bytes
• Source/referrer from which you reached the page
• Browser used
• Operating system used
• IP address used

This processing is technically necessary in order to deliver the website to you, to keep it running reliably and to fend off attacks. Your usage behaviour is not analysed, no visitor statistics are compiled and the data is not combined with other data.

The legal basis for the data processing is Art. 6(1)(f) GDPR. Our legitimate interest follows from the purposes named above — the secure and functioning operation of this website.

Hosting

This website is operated on Firebase Hosting, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). For users in the European Economic Area, Google Ireland Limited is our contracting party; Google acts as a processor for us pursuant to Art. 28 GDPR.

The log data named above is generated on Google’s servers. It serves technical operation only — delivering the pages, operational security and fending off attacks. It is not evaluated for analytics or advertising purposes, neither by us nor on our behalf.

In this context, personal data may also be transferred to Google LLC in the United States. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission established an adequate level of data protection on 10 July 2023. In addition, the European Commission’s standard contractual clauses apply; they form part of Google’s data processing terms.

You can find Google’s privacy policy at https://policies.google.com/privacy.

Information specific to Firebase can be found at https://firebase.google.com/support/privacy.

When you contact us by email, the data you provide (your email address, and where applicable your name and telephone number) is stored by us in order to handle your request or answer your questions.

Data processing for the purpose of contacting us takes place under Art. 6(1)(a) GDPR on the basis of consent given voluntarily.

We delete the data arising in this context once storage is no longer necessary — for example because your enquiry has been dealt with — or we restrict processing if statutory retention periods apply.

If you apply to us online, we process the personal data you submit (application data), in particular

• Surname, first name
• Address
• Telephone number
• Email address
• Application documents (cover letter, CV, references and similar)

exclusively for the purpose of filling positions within our company. Your application data is not used beyond that.

This personal data is generally deleted automatically three months after the application process has been completed, provided your application for the position was not successful. Deletion after those three months does not take place only if statutory provisions prevent deletion, if storing the data is necessary to assert, exercise or defend legal claims, or if you have expressly consented to longer storage.

The legal basis for the data processing is Art. 6(1)(a) and (f) GDPR.

On the pages “For labels”, “For artists” and “For creators” we provide forms through which you can send us an enquiry. Depending on the form, we collect your first and last name or your artist name or username, the name of the label, an email address at which we can reach you, and your message; further details such as song, release or release date are optional. Before sending, you expressly confirm that you agree to your details being processed in order to handle the enquiry.

Your data is processed for the purpose of establishing a business relationship and fulfilling the obligations arising from an existing business relationship, on the basis of Art. 6(1)(b) GDPR. Personal data that is not strictly necessary for that purpose but is nevertheless helpful because it makes business communication easier (for example a telephone number or email address) is processed on the basis of the consent you have given under Art. 6(1)(a) GDPR, which you may withdraw at any time with effect for the future.

Your data is deleted once it is established that no business relationship will be entered into with you, or after an existing business relationship with you has ended — unless we are obliged or entitled to store your data for longer under statutory provisions. Data is also deleted if we process it on the basis of your consent and you have effectively withdrawn that consent.

Form delivery via Web3Forms

The forms on this website are delivered through the service Web3Forms. It is operated by Web3Creative, Palakkad, Kerala, India (address: […]). Web3Creative acts as a processor on our behalf.

The sole purpose of the processing is to deliver your form message to us. What is transmitted are the form fields you filled in, your email address as sender and reply address, and the technical metadata that arises with every transmission on the internet (IP address, browser identification, date and time).

The legal basis is Art. 6(1)(a) GDPR — the consent you give explicitly before sending — and Art. 6(1)(b) GDPR where your enquiry is aimed at entering into or performing a contract.

According to the provider, it operates from India and uses infrastructure providers that may process data in several regions; it names Amazon Web Services, Cloudflare and Hetzner. For transfers out of the European Economic Area the provider relies on appropriate safeguards, in particular the Standard Contractual Clauses; they form part of its data processing agreement.

On retention, the provider states that form data is stored encrypted and deleted automatically no later than three years after submission; server logs are deleted on a regular basis.

To prevent spam and abuse, the provider states that it uses the services CleanTalk and Akismet; your IP address and email address may be transmitted to those services. Our forms additionally send a check field that is invisible to you; we do not use a captcha.

You can find the provider’s privacy policy at https://web3forms.com/privacy.

You can also send your enquiry to us directly by email to info@welike.com at any time. In that case no data is transmitted to Web3Forms.

You have the right:

• under Art. 15 GDPR to request access to your personal data processed by us. In particular, you may request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, where applicable, meaningful information about its details;
• under Art. 16 GDPR to request without undue delay the rectification of inaccurate personal data stored by us, or its completion;
• under Art. 17 GDPR to request the erasure of your personal data stored by us, unless processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
• under Art. 18 GDPR to request the restriction of processing of your personal data where you contest the accuracy of the data, where processing is unlawful but you oppose erasure, where we no longer need the data but you require it for the establishment, exercise or defence of legal claims, or where you have objected to processing under Art. 21 GDPR;
• under Art. 20 GDPR to receive the personal data you have provided in a structured, commonly used and machine-readable format, or to request its transmission to another controller;
• under Art. 7(3) GDPR to withdraw consent once given at any time. The consequence is that we may no longer continue the data processing based on that consent in the future; and
• under Art. 77 GDPR to lodge a complaint with a supervisory authority. As a rule you may contact the supervisory authority of your usual place of residence or work, or that of our registered office.

Where your personal data is processed on the basis of legitimate interests under Art. 6(1)(f) GDPR, you have the right under Art. 21 GDPR to object to the processing of your personal data, provided there are grounds arising from your particular situation or the objection is directed against direct marketing. In the latter case you have a general right to object, which we implement without you having to state a particular situation.

If you wish to exercise your right to object, an email to the following address is sufficient: info@welike.com.