Last updated: 6 August 2026
This Privacy Policy explains how Buuwankler (“Buuwankler”, “we”, “us”, or “our”) collects, uses, shares, and protects personal data when you visit and use our website at buuwankler.com (the “Website”) and any related content, guides, and services we provide. We are based in Berlin, Germany, and we are committed to processing personal data in accordance with the EU General Data Protection Regulation (GDPR / Regulation (EU) 2016/679), the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG), and the German Telecommunications Digital Services Data Protection Act (TDDDG).
Please read this policy carefully. By using the Website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Website.
1. Who we are (Data Controller)
The data controller responsible for the processing of your personal data under the GDPR is:
Buuwankler Pasewalker Str. 15 13127 Berlin-Bezirk Pankow Germany Email: [email protected] Phone: +49 07222 50 87 33
If you have any questions about this Privacy Policy or about how we handle your personal data, or if you wish to exercise your rights, you can contact us at any time using the details above.
2. Scope of this policy
This Privacy Policy applies to personal data we collect through the Website, through your communications with us (for example, by email), and through the technologies described below. It does not apply to third-party websites, platforms, or services that may be linked from our content. We encourage you to review the privacy policies of any third-party services you visit.
3. What personal data we collect
We collect personal data in the following ways:
a) Information you provide to us directly. When you contact us by email, submit a form, subscribe to updates, or otherwise communicate with us, you may provide information such as your name, email address, and the content of your message. You decide what information you share with us in your communications.
b) Information collected automatically. When you access the Website, certain data is transmitted automatically by your browser or device for technical reasons and is stored in server log files. This may include your IP address (which is an item of personal data), the date and time of access, the pages or files requested, the referring website (referrer URL), your browser type and version, your operating system, your device type, and similar technical information.
c) Cookies and similar technologies. We and, where applicable, our service providers may use cookies, pixels, local storage, and similar technologies to operate the Website, remember your preferences, understand how the Website is used, and (where you consent) to measure and improve our content. See Section 6 (Cookies and tracking technologies) for details.
d) Usage and analytics data. Where you have given consent, we may collect information about how you interact with the Website, such as the pages you view, the links you click, the time spent on pages, and general, aggregated statistics about our audience.
We do not intentionally collect special categories of personal data (such as data revealing health, religion, political opinions, or sexual orientation), and we ask that you do not send us such data.
4. How and why we use your personal data, and our legal bases
Under the GDPR we may only process personal data where we have a valid legal basis. We use your personal data for the following purposes and on the following legal bases:
a) To provide and secure the Website. We process server log data and technical information to deliver the Website to you, ensure its stability and security, prevent misuse and fraud, and diagnose technical problems. Legal basis: our legitimate interests in operating a secure, functional website (Article 6(1)(f) GDPR).
b) To respond to your enquiries. When you contact us, we process the personal data in your message to respond to you and handle your request. Legal basis: our legitimate interests in communicating with users and, where your enquiry relates to a contract or pre-contractual steps, the performance of a contract (Article 6(1)(f) and, where applicable, Article 6(1)(b) GDPR).
c) To send updates or newsletters (if offered and requested). If you choose to subscribe to updates from us, we process your email address to send them. Legal basis: your consent (Article 6(1)(a) GDPR). You may withdraw your consent and unsubscribe at any time, with effect for the future.
d) To analyse and improve our content (with consent). Where you consent, we use analytics technologies to understand how our Website is used so that we can improve our guides and user experience. Legal basis: your consent (Article 6(1)(a) GDPR and Section 25(1) TDDDG for the storage of and access to information on your device).
e) To comply with legal obligations. We may process personal data where necessary to comply with applicable laws, respond to lawful requests from public authorities, or establish, exercise, or defend legal claims. Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR) and our legitimate interests (Article 6(1)(f) GDPR).
5. Advertising and affiliate links
Our Website may contain advertising and/or affiliate links to third-party platforms and services relevant to music producers (for example, beat marketplaces or software tools). If you click an affiliate link and make a purchase, we may earn a commission at no additional cost to you. Where advertising or affiliate partners set cookies or collect data through our Website, this is done in accordance with Section 6 below and, where required, only with your consent. The processing of your personal data by such third parties is governed by their own privacy policies, which we encourage you to review.
6. Cookies and tracking technologies
Cookies are small text files stored on your device when you visit a website. We distinguish between the following categories:
a) Strictly necessary cookies. These are required for the basic operation and security of the Website and to remember your privacy choices. They do not require consent. Legal basis: our legitimate interests and, for the technical storage that is strictly necessary, Section 25(2) TDDDG.
b) Analytics, functional, and marketing cookies. These are used only where you have given your consent, for example to measure Website usage, remember preferences, or support advertising and affiliate features. Legal basis: your consent (Article 6(1)(a) GDPR; Section 25(1) TDDDG).
Where consent is required, we request it through a cookie banner or consent tool when you first visit the Website. You can withdraw or change your consent at any time with effect for the future, for example through our cookie settings or by adjusting your browser settings. Most browsers allow you to block or delete cookies; however, disabling certain cookies may affect the functionality of the Website.
7. Third-party services and processors
To operate the Website we may use trusted third-party service providers who process personal data on our behalf as processors under Article 28 GDPR, or as independent controllers where applicable. These may include:
- Web hosting and infrastructure providers that store and serve the Website;
- Analytics providers that help us understand Website usage (used only with consent);
- Email and communication providers that help us receive and respond to messages;
- Content delivery networks and security providers that help deliver and protect the Website;
- Advertising and affiliate networks, where applicable (used in accordance with Section 5 and Section 6).
We enter into appropriate data processing agreements with our processors and only share the personal data necessary for them to perform their services. We do not sell your personal data.
Because our specific providers may change over time, we recommend contacting us at [email protected] if you would like current details about the particular service providers we use and the safeguards in place.
8. International data transfers
Some of our service providers may process personal data outside the European Economic Area (EEA). Where personal data is transferred to a country that has not been recognised by the European Commission as providing an adequate level of data protection, we ensure that appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses (SCCs) or another lawful transfer mechanism under Chapter V of the GDPR. You may request a copy of the relevant safeguards by contacting us using the details in Section 1.
9. How long we keep your personal data
We retain personal data only for as long as necessary for the purposes for which it was collected, or as required to comply with legal obligations, resolve disputes, and enforce our agreements.
- Server log data is generally stored for a limited period for security and technical purposes and then deleted or anonymised.
- Correspondence (such as emails) is retained for as long as needed to handle your request and, where relevant, to comply with statutory retention obligations.
- Newsletter subscriptions: if you subscribe to updates, we keep your email address until you unsubscribe or withdraw your consent.
When personal data is no longer required, we delete or anonymise it in accordance with applicable law.
10. How we protect your personal data
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration, including encryption in transit (for example, TLS/SSL) where appropriate, access controls, and regular review of our security practices. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.
11. Your rights under the GDPR
If you are located in the EEA, you have the following rights in relation to your personal data, subject to the conditions and exceptions set out in the GDPR:
- Right of access (Article 15): to obtain confirmation of whether we process your personal data and to receive a copy of that data.
- Right to rectification (Article 16): to have inaccurate personal data corrected and incomplete data completed.
- Right to erasure (Article 17): to have your personal data deleted in certain circumstances (“right to be forgotten”).
- Right to restriction of processing (Article 18): to have the processing of your personal data restricted in certain circumstances.
- Right to data portability (Article 20): to receive personal data you provided to us in a structured, commonly used, machine-readable format and to transmit it to another controller.
- Right to object (Article 21): to object, on grounds relating to your particular situation, to processing based on our legitimate interests; and to object at any time to processing for direct marketing purposes.
- Right to withdraw consent (Article 7(3)): where processing is based on your consent, to withdraw that consent at any time with effect for the future, without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, please contact us at [email protected] or by post at the address in Section 1. We may need to verify your identity before responding. We will respond to your request within the timeframes required by the GDPR (generally within one month).
12. Right to lodge a complaint
If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your residence, place of work, or the place of the alleged infringement.
The supervisory authority competent for us is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information) Alt-Moabit 59-61, 10555 Berlin, Germany
We would, however, appreciate the opportunity to address your concerns directly before you approach a supervisory authority, so please feel free to contact us first.
13. Children’s privacy
The Website is intended for a general and professional audience and is not directed at children. We do not knowingly collect personal data from children under the age of 16. If you believe that a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.
14. Links to other websites
Our Website and content contain links to third-party websites and platforms (such as beat marketplaces, social media, and software providers). We are not responsible for the privacy practices or content of those websites. This Privacy Policy applies only to the Buuwankler Website, and we encourage you to read the privacy policies of any third-party sites you visit.
15. Automated decision-making
We do not use your personal data for automated decision-making that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, provide additional notice. We encourage you to review this page periodically to stay informed about how we protect your personal data.
17. Contact us
If you have any questions, requests, or concerns about this Privacy Policy or our handling of your personal data, please contact us:
Buuwankler Pasewalker Str. 15, 13127 Berlin-Bezirk Pankow, Germany Email: [email protected] Phone: +49 07222 50 87 33