CRIMSON SUNDAY

Privacy Policy

1. Overview

This Privacy Policy provides a simple overview of what happens to your personal data when you visit this website. Personal data means any information that can identify you personally. Detailed information can be found in the full Privacy Policy below.

Data collection on this website

Who is responsible for data collection?
Data processing on this website is carried out by the website operator. Contact details can be found in the section “Controller Information” below.

How do we collect your data?
Some data is collected when you provide it to us, for example by entering information into a contact form.
Other data is collected automatically or after your consent when you visit the website. This includes technical data such as your browser, operating system, or the time of access.

What do we use your data for?
Part of the data is used to ensure the website functions properly. Other data may be used to analyze user behavior. If the website allows contract-related communication (e.g., booking inquiries), submitted data may be used for that purpose.

Your rights
You have the right to request information about the origin, recipients, and purpose of your stored personal data at any time. You may also request correction or deletion of your data, withdraw consent, or request restriction of processing. You also have the right to lodge a complaint with the relevant supervisory authority.

For any questions regarding data protection, you can contact us at any time.

2. Hosting

We host our website externally.

External Hosting
This website is hosted by an external provider. Personal data collected on this website is stored on the servers of the hosting provider. This may include IP addresses, contact requests, metadata, communication data, contract data, contact details, names, website access data, and other data generated through website usage.

External hosting is carried out for the purpose of fulfilling contracts with potential or existing customers (Art. 6(1)(b) GDPR) and in the interest of secure, fast, and efficient website delivery (Art. 6(1)(f) GDPR). If consent is required (e.g., for cookies or device information), processing is based on Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be withdrawn at any time.

Hosting provider:
Automattic Inc.
60 29th Street #343
San Francisco, CA 94110
USA

We have concluded a Data Processing Agreement (DPA) with the provider in accordance with GDPR requirements.

3. General Information

Data protection
We take the protection of your personal data very seriously. We treat your data confidentially and in accordance with legal data protection regulations and this Privacy Policy.

Please note that data transmission over the internet (e.g., email communication) may have security gaps. Complete protection against third‑party access is not possible.

Controller Information

Crimson Sunday
Leon Tschernawin
Zur Nachtheide 87
12557 Berlin
Germany
E-mail: crimsonsunday.band@gmx.de

The controller is the natural or legal person who determines the purposes and means of processing personal data.

Storage Period

Unless a more specific storage period is stated, personal data will be stored until the purpose of processing no longer applies. If you request deletion or withdraw consent, your data will be deleted unless legal obligations require otherwise.

Legal Basis for Processing

We process personal data based on:

Consent (Art. 6(1)(a) GDPR)
Contract performance or pre-contractual measures (Art. 6(1)(b) GDPR)
Legal obligations (Art. 6(1)(c) GDPR)
Legitimate interests (Art. 6(1)(f) GDPR)

Recipients of Personal Data

We may share data with external service providers when necessary for contract fulfillment, legal obligations, or legitimate interests. Data is only shared with processors under a valid Data Processing Agreement.

Withdrawal of Consent

You may withdraw your consent at any time. The legality of processing prior to withdrawal remains unaffected.

Right to Object (Art. 21 GDPR)

You may object to processing based on legitimate interests at any time.
You may also object to processing for direct marketing purposes.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority in the EU.

Right to Data Portability

You may request data processed based on consent or contract in a machine‑readable format.

Access, Correction, Deletion

You may request access to, correction of, or deletion of your stored personal data at any time.

Restriction of Processing

You may request restriction of processing under certain conditions (e.g., if accuracy is disputed).

SSL/TLS Encryption

This website uses SSL/TLS encryption for security. You can recognize encrypted connections by “https://” and the lock symbol in your browser.

Objection to Unsolicited Emails

We object to the use of published contact details for unsolicited advertising.

4. Data Collection on This Website

Cookies

This website uses cookies. Cookies may be temporary (session cookies) or permanent. Some cookies are technically necessary; others may be used for analytics or marketing.

You can configure your browser to block or delete cookies. Disabling cookies may limit website functionality.

Server Log Files

The hosting provider automatically collects:

Browser type and version
Operating system
Referrer URL
Hostname of accessing device
Time of server request
IP address

This data is not combined with other data sources and is processed for technical functionality (Art. 6(1)(f) GDPR).

Contact by Email or Phone

If you contact us, your data (name, message, email) will be processed to handle your request. Data is not shared without consent.

5. Plugins and Embedded Services

YouTube (Enhanced Privacy Mode)

This website embeds YouTube videos provided by Google Ireland Limited.
When you visit a page with an embedded video, a connection to YouTube servers is established.

We use YouTube’s enhanced privacy mode, which avoids personalized advertising and does not set cookies. Local storage elements may still be used.

YouTube Privacy Policy:
https://policies.google.com/privacy

Spotify

This website embeds Spotify features provided by Spotify AB, Stockholm, Sweden.

When you visit a page with a Spotify plugin, a connection to Spotify servers is established. If you are logged in to Spotify, your visit may be linked to your account.

Spotify may use Google Analytics; we have no control over this.

Spotify Privacy Policy:
https://www.spotify.com/legal/privacy-policy/ (spotify.com in Bing)

Additional Information

What data we collect

Technical data (IP address, browser, log files)
Contact form data (name, email)
Newsletter sign-ups
Data from embedded services (YouTube, Spotify)

Why we collect data
To operate the website, communicate with fans and promoters, and improve our content.

Data sharing
Only when external services are embedded.

Storage duration
Only as long as necessary for the purpose.

User rights
Access, correction, deletion, restriction.

Cookies
You may disable cookies in your browser.

Contact
For any privacy-related questions:
crimsonsunday.band@gmx.de

Last updated: 3 January 2026