Legal · Privacy

Privacy.

Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of Art. 4(7) GDPR (information pursuant to Art. 13(1)(a) GDPR) is:

Prompt Media Production – Philipp Marco Pohlig
c/o Online-Impressum #8625
Europaring 90
53757 St. Augustin
Germany
Email: info@prompt-media.com

2. Data Protection at a Glance

The use of this website is generally possible without providing personal data. If personal data (such as your name or email address) is collected — for example because you write to us by email — this is always done on a voluntary basis. This data will not be passed on to third parties without your explicit consent or another legal basis. We do not carry out any automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

3. Hosting and Server Log Files

This website is hosted by 1blu AG, Berlin, Germany; its servers are located in Germany/the EU. 1blu processes personal data on our behalf as a processor; a data processing agreement pursuant to Art. 28 GDPR is in place.

When you access this website, the hosting provider automatically collects and stores information in so-called server log files, which your browser automatically transmits:

  • IP address of the requesting device
  • Date and time of the request
  • Requested URL
  • Browser type, browser version and operating system (user agent)
  • Referrer URL

IP addresses are personal data. The log files are processed solely to ensure the technical stability and security of the website (e.g. detection and defence against attacks and abuse). Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in the secure and reliable operation of the site. Log files are deleted or anonymised within the hosting provider's standard retention periods; they are not merged with other data sources and are not used to create user profiles.

4. Embedded Content and Third Parties

Loading this website does not trigger any third-party requests: fonts, JavaScript libraries, release covers and video thumbnails are all served from our own infrastructure. Data — including your IP address — is only transferred to an external provider once you actively start a playback or follow an external link:

  • SoundCloud (SoundCloud Global Limited & Co. KG, Berlin, Germany, and its group companies) — SoundCloud players are only loaded after you actively click a play button. Before that click, no data whatsoever is transmitted to SoundCloud. Once you click, the player is embedded as an iframe and SoundCloud's privacy policy applies from that moment; if this involves a transfer outside the EEA, it takes place on the basis of appropriate safeguards under Art. 46 GDPR (e.g. standard contractual clauses). If you keep browsing while a track is playing, playback continues automatically on the next page you open in the same browser tab — this is a continuation of the consent already given by your click, not a new, separate transmission. Legal basis: Art. 6(1)(a) GDPR — your consent, expressed through the active click.
  • YouTube (Google Ireland Limited, Dublin, Ireland) — video thumbnails are fetched once at build time and served entirely from our own server; loading a page therefore sends no data to Google. The actual video player is only loaded after you actively click it, using the privacy-enhanced youtube-nocookie.com domain. When you play a video, data may also be transferred to Google LLC in the USA; Google is certified under the EU-U.S. Data Privacy Framework (adequacy decision, Art. 45 GDPR). External YouTube links open in a new tab only on click. Legal basis: Art. 6(1)(a) GDPR — your consent, expressed through the active click.
  • Instagram, TikTok, WhatsApp — outbound social links that only transfer data to the respective platform when you click them (opening in a new tab).

Self-hosted resources (no CDNs, no analytics):

  • Inter, JetBrains Mono and Space Grotesk fonts are bundled locally via the @fontsource packages — no Google Fonts CDN.
  • Three.js (3D library on the Galaxy page) is bundled via npm — no unpkg CDN.
  • Release covers and YouTube preview thumbnails are served fully from our server.

5. Cookies and Local Storage

This website does not set tracking cookies and does not use any analytics tools. We only use technically necessary browser storage:

Session storage (sessionStorage, cleared on tab close):

  • Acknowledgement of the EU AI Act Art. 50 transparency notice.
  • The mini-player's last playback state (current track and position), so playback survives in-site navigation.
  • On /artists/: a one-time marker so the artist carousel doesn't re-center itself on every visit within the same tab session.

Persistent storage (localStorage, only on the /studio/ page; remains until you clear it):

  • pmp:studio:playlists — playlists you create (title + track references).
  • pmp:studio:working — your current studio queue.
  • pmp:studio:desktop-mini, pmp:studio:queue-collapsed — UI preferences (player size, collapsed sections).

You can clear these at any time via your browser settings (DevTools → Application → Local Storage → URL → Clear). No data is ever transmitted to our server — everything stays in your browser. No consent is required, as this storage is strictly necessary to provide functions you explicitly request (§ 25(2) no. 2 of the German TDDDG).

6. Contact

/contact/ contains plain mailto: links to info@prompt-media.com — there is no form element and no server-side storage. Clicking a link only opens your own email client with a pre-filled address; nothing is transmitted to us until you actually send an email yourself. Providing your data is voluntary; without it, we cannot respond to your inquiry. We process the data you send us solely to respond to your inquiry (GDPR Art. 6(1)(b)) and delete it after the inquiry has been resolved.

7. Your Rights

With regard to your personal data, you have the following rights under the GDPR:

  • Right of access to your stored data (Art. 15 GDPR)
  • Right to rectification of inaccurate data (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
  • Right to withdraw any consent you have given, with effect for the future; the lawfulness of processing carried out before the withdrawal remains unaffected (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR) — in particular with the authority responsible for your place of residence or for our registered office. To exercise any of these rights, simply write to info@prompt-media.com.