Legal · Privacy

Privacy.

Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of Art. 4(7) GDPR (information pursuant to Art. 13(1)(a) GDPR) is:

Prompt Media Production – Philipp Marco Pohlig
c/o Online-Impressum #8625
Europaring 90
53757 St. Augustin
Germany
Email: mail@prompt-music.com

2. Data Protection at a Glance

The use of this website is generally possible without providing personal data. If personal data (such as name or email address) is collected — for example via a contact form, the newsletter sign-up or email — this is always done on a voluntary basis. This data will not be passed on to third parties without your explicit consent or another legal basis.

3. Hosting and Server Log Files

This website is hosted by 1blu AG, Berlin, Germany. 1blu processes personal data on our behalf as a processor; a data processing agreement pursuant to Art. 28 GDPR is in place.

When you access this website, the hosting provider automatically collects and stores information in so-called server log files, which your browser automatically transmits:

  • IP address of the requesting device
  • Date and time of the request
  • Requested URL
  • Browser type, browser version and operating system (user agent)
  • Referrer URL

IP addresses are personal data. The log files are processed solely to ensure the technical stability and security of the website (e.g. detection and defence against attacks and abuse). Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in the secure and reliable operation of the site. Log files are deleted or anonymised within the hosting provider's standard retention periods; they are not merged with other data sources and are not used to create user profiles.

4. Embedded Content and Third Parties

Loading this website does not trigger any third-party requests: fonts, JavaScript libraries, release covers and video thumbnails are all served from our own infrastructure. Data — including your IP address — is only transferred to an external provider once you actively start a playback or follow an external link:

  • SoundCloud (SoundCloud Global Limited & Co. KG, Berlin, Germany / SoundCloud Ltd) — SoundCloud players are only loaded after you actively click a play button. Before that click, no data whatsoever is transmitted to SoundCloud. Once you click, the player is embedded as an iframe and SoundCloud's privacy policy applies from that moment. Legal basis: Art. 6(1)(a) GDPR — your consent, expressed through the active click.
  • YouTube (Google Ireland Limited, Dublin, Ireland) — video thumbnails are fetched once at build time and served entirely from our own server; loading a page therefore sends no data to Google. The actual video player is only loaded after you actively click it, using the privacy-enhanced youtube-nocookie.com domain. When you play a video, data may also be transferred to Google LLC in the USA; Google is certified under the EU-U.S. Data Privacy Framework (adequacy decision, Art. 45 GDPR). External YouTube links open in a new tab only on click. Legal basis: Art. 6(1)(a) GDPR — your consent, expressed through the active click.
  • Instagram, TikTok, WhatsApp — outbound social links that only transfer data to the respective platform when you click them (opening in a new tab).

Self-hosted resources (no CDNs, no analytics):

  • Inter, JetBrains Mono and Space Grotesk fonts are bundled locally via the @fontsource packages — no Google Fonts CDN.
  • Three.js (3D library on the Galaxy page) is bundled via npm — no unpkg CDN.
  • Release covers and YouTube preview thumbnails are served fully from our server.

5. Cookies and Local Storage

This website does not set tracking cookies and does not use any analytics tools. We only use technically necessary browser storage:

Session storage (sessionStorage, cleared on tab close):

  • Acknowledgement of the EU AI Act Art. 50 transparency notice.
  • The mini-player's last playback state (current track and position), so playback survives in-site navigation.

Persistent storage (localStorage, only on the /studio/ page; remains until you clear it):

  • pmp:studio:playlists — playlists you create (title + track references).
  • pmp:studio:working — your current studio queue.
  • pmp:studio:desktop-mini, pmp:studio:queue-collapsed — UI preferences (player size, collapsed sections).

You can clear these at any time via your browser settings (DevTools → Application → Local Storage → URL → Clear). No data is ever transmitted to our server — everything stays in your browser. No consent is required, as this storage is strictly necessary to provide functions you explicitly request (§ 25(2) no. 2 of the German TDDDG).

6. Contact and Inquiry Forms

The forms on /contact/ use the mailto: mechanism of your email client. No server-side storage occurs. Once you submit a form, your email client sends the data directly to mail@prompt-music.com. We process your data solely to respond to your inquiry (GDPR Art. 6(1)(b)) and delete it after completion.

7. Newsletter

If you subscribe to our newsletter, the sign-up is handled entirely on our own infrastructure — no third-party email service provider is involved. Sign-up uses a strict double opt-in flow:

  • Data collected on sign-up: email address, language preference (DE/EN), IP address at sign-up and confirmation, user-agent string, and timestamps. IP, user agent and timestamps serve as proof of your consent (Art. 7(1) GDPR).
  • Storage: a MySQL database on the same server that hosts this site (1blu AG, Berlin, Germany — our processor under Art. 28 GDPR). No data leaves our infrastructure for the sign-up itself.
  • Confirmation: a confirmation mail is sent immediately. Your address is only added to the active list once you click the confirmation link. Unconfirmed sign-ups are automatically deleted after 30 days.
  • Delivery: newsletters are sent via SMTP from mail@prompt-music.com. Each mail contains a personalised one-click unsubscribe link.
  • Retention: we keep your address as long as you are subscribed. After you unsubscribe, the record is flagged unsubscribed and kept only as evidence that consent was given and then withdrawn (GDPR accountability principle, Art. 5(2)). You can request full deletion at any time by writing to the address above.
  • Legal basis: Art. 6(1)(a) GDPR — explicit consent, withdrawable at any time with effect for the future.
  • No tracking: mails contain no tracking pixels, no link-click tracking, no open tracking. We do not know whether you opened a mail.

8. Your Rights

With regard to your personal data, you have the following rights under the GDPR:

  • Right of access to your stored data (Art. 15 GDPR)
  • Right to rectification of inaccurate data (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
  • Right to withdraw any consent you have given, with effect for the future; the lawfulness of processing carried out before the withdrawal remains unaffected (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR) — in particular with the authority responsible for your place of residence or for our registered office. To exercise any of these rights, simply write to mail@prompt-music.com.