Privacy Policy.

Bam Bam Music GmbH
Alte Schönhauser Straße 44
10119 Berlin
Germany

Represented by Managing Director Pino Brönner.

Email: info@bambammusic.com

There is currently no obligation to appoint a data protection officer.

We process personal data only where this is necessary to operate the website, communicate with you, process enquiries, provide requested services, keep our systems secure or initiate and perform business relationships.

Personal data is not sold.

This website is built and hosted using services provided by Lovable Labs Incorporated. Content is delivered and protected through services provided by Cloudflare, Inc. These providers may process connection and usage data on our behalf in order to deliver the website, maintain availability and protect it against abuse.

The categories of data may include IP address, requested URL, date and time, referrer where transmitted, browser and device information, HTTP status and data volume. Processing is based on Art. 6 (1) (f) GDPR. Our legitimate interests are reliable, secure and efficient website delivery.

When the website is accessed, technically generated connection data may be recorded in server logs. This can include the IP address, requested URL, date and time, referrer, browser, operating system or device information, HTTP status and transferred data volume.

Logs are used for secure delivery, abuse prevention, troubleshooting and IT security on the basis of Art. 6 (1) (f) GDPR. They are retained in accordance with the operational settings of the infrastructure providers and deleted or anonymised when no longer required, subject to security and legal obligations.

The project enquiry form collects your name and email address as mandatory fields, and your company, selected category, project link and message where provided. Attachments are not accepted. A hidden field, form-completion timing and temporary request limits are used to reduce automated abuse. The form does not intentionally store your IP address in the enquiry database and does not use a CAPTCHA service.

Submissions are stored in the protected database managed through Lovable Cloud. They are also used to send an internal notification to info@bambammusic.com and an automatic confirmation to the address entered in the form through Lovable's managed email infrastructure. Delivery records include the recipient address, template, status, timestamps and error information where applicable.

We process this information to review and answer the enquiry and, where relevant, to initiate a business relationship. The legal basis is Art. 6 (1) (b) GDPR for pre-contractual or contractual communication and otherwise Art. 6 (1) (f) GDPR, based on our legitimate interest in responding to business enquiries.

Enquiries and related delivery records are retained for as long as needed to handle the request and any resulting business relationship. They may be retained longer where statutory commercial, tax, evidence or defence obligations apply. No fixed automatic deletion period is currently implemented.

If you contact us by email, we process the sender address, message content and any other information you provide in order to answer your request. The legal basis is Art. 6 (1) (b) GDPR for contractual or pre-contractual communication and otherwise Art. 6 (1) (f) GDPR.

Correspondence is retained as long as necessary for the communication and any resulting business relationship. Statutory retention obligations for business correspondence remain unaffected.

We do not currently operate a newsletter registration or send newsletters through this website. No newsletter provider, Double Opt-In process, newsletter tracking or newsletter subscriber database is active.

The private area currently uses a shared client-side password. The password check takes place in the browser and no user account, login identifier or authentication profile is created. After a successful entry, the value bambam_auth is stored in sessionStorage for the duration of the browser tab or session. Signing out removes it.

This is a simple access screen, not account-based authentication. No cookies, localStorage entries or optional analytics or marketing storage are created by the website itself. Infrastructure providers may use technically necessary security mechanisms in accordance with their service configuration.

At present, we do not use Google Analytics, Google Tag Manager, advertising pixels, behavioural advertising or other audience measurement tools on this website. We do not create advertising profiles from your use of the website.

The website does not automatically load YouTube, Vimeo, Spotify, SoundCloud or social-media embeds. Fonts and website images are delivered locally or through the website's own asset delivery infrastructure. A Google Maps reference on the Imprint is a normal external link and contacts Google only if you choose to open it.

Personal data is disclosed only where required for the purposes described above. Recipient categories include website hosting, content delivery, database and email infrastructure providers acting on our behalf, as well as professional advisers or authorities where legally required. Personal data is not provided to third parties for their independent advertising purposes.

Some infrastructure providers are based in, or may process data from, countries outside the European Economic Area, including the United States. Such transfers are based on an applicable adequacy decision, including the EU-US Data Privacy Framework where the recipient participates, or on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

Subject to the legal requirements, you have the right to access under Art. 15 GDPR, rectification under Art. 16, erasure under Art. 17, restriction under Art. 18, data portability under Art. 20 and objection under Art. 21. Where processing is based on consent, you may withdraw it at any time under Art. 7 (3), without affecting prior lawful processing.

To exercise your rights, email info@bambammusic.com. You also have the right to lodge a complaint with the Berlin Commissioner for Data Protection and Freedom of Information or another competent supervisory authority.

No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.