Privacy policy

Controller and contact

The controller is Michael Akischin, Michael Nox Studio, c/o POSTFLEX PFX-274-666, Emsdettener Straße 10, 48268 Greven, Deutschland. For privacy requests, contact webmaster@michael-nox.com.

Website hosting and server logs

The website is hosted on a Hetzner server. When the site is accessed, technical connection data can be processed to deliver the pages, maintain security and investigate faults. This may include IP address, time, requested address, response status, referrer and browser information. The hosting and server configuration determine the exact log retention period.

Booking form and email communication

The service request form processes the name, email address and information entered about the requested service, project, delivery, notes, file link and any coupon code. The data is used to answer the request, prepare an offer and, if accepted, perform the agreed service. The legal basis is taking steps at the user's request before entering a contract and performing a contract; any additional purpose requires its own legal basis.

Form draft in this browser

While the service request form is being filled in, its current values are stored in this browser tab's sessionStorage so a reload does not immediately erase them. The stored fields are service type, stem count, analog processing, delivery time, name, notes, file link, email, email confirmation and coupon code. This browser storage is not sent to the server until the form is submitted and is normally cleared when the tab session ends or after a successful submission.

Cloudflare Turnstile

The service request page uses Cloudflare Turnstile to reduce automated abuse. The Turnstile script is loaded when that page is opened, and the resulting verification is sent to Cloudflare; the server validates the response with Cloudflare. Connection and device data needed for the check, including the IP address, may be processed. Cloudflare states that Turnstile does not access, store or transmit form entries or other page inputs. The legal basis is the legitimate interest in protecting the form and service against abuse.

Transactional email

When the email workflow is active, transactional messages are sent through the integrated Twilio SendGrid service. The recipient and sender addresses, message content and delivery information needed to send and troubleshoot the email are processed by that provider. SendGrid's data location and applicable transfer safeguards depend on the account configuration and must be checked by the operator before launch.

Payment processing

The website does not currently process online payments. Project scope, payment method, and timing are agreed individually by email. No card or bank payment details are collected by this website. If an online payment provider is introduced later, this notice will be updated before it is used.

Analytics and cookies

The site stores the consent choice in the AudioServicePlatform.Consent cookie for 180 days. Google Analytics and the site's own interaction analytics are activated only after analytics consent; Google Analytics is loaded only when a measurement ID is configured. Spotify reference players are loaded only after external-media consent. Consent can be changed at any time on the Cookie settings page.

Cookies and browser storage

AudioServicePlatform.Language stores the manually selected language for six months. AudioServicePlatform.Admin is used only for admin authentication. Short-lived technical cookies are used during Spotify authorization; a temporary site-access cookie is used only while that deployment gate is enabled. The booking form also uses tab-scoped sessionStorage as described above. These functions are separate from analytics and external-media consent.

Recipients and retention

Data is accessible to the website operator and, where technically necessary, the hosting provider, Cloudflare for the security check, Twilio SendGrid for transactional email, or the third-party service enabled by the visitor (Google Analytics or Spotify). No payment provider is integrated for the initial launch. Submitted request and project data is kept for as long as needed to handle the request and project and thereafter for applicable statutory retention periods. Exact operational deletion periods depend on the configured mail, database and backup retention policies.

Your rights

Subject to the applicable legal requirements, you may request access, rectification, erasure, restriction of processing, data portability or object to processing, and withdraw consent for the future. Contact the controller using the details above. You may also lodge a complaint with your competent data protection supervisory authority.