Last Updated: November 2025

1. Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:

NoiseWorks UG (haftungsbeschränkt)
Hörder Straße 355
58454 Witten
Germany

Email: info@noiseworksaudio.com

2. Overview of Data Processing

This Privacy Policy informs you about the nature, scope, and purposes of the collection and use of personal data by NoiseWorks UG.

Types of Data Processed

• Inventory data (e.g., names, addresses)
• Contact data (e.g., email addresses)
• Content data (e.g., text entries)
• Usage data (e.g., visited websites, access times)
• Meta/communication data (e.g., device information, IP addresses)
• Contract data (e.g., subject matter of contract, duration)
• Payment data (e.g., payment method, billing address)

Categories of Data Subjects

• Customers and prospects
• Visitors and users of our website
• Communication partners

3. Legal Bases

We process personal data in accordance with the GDPR on the following legal bases:

• Consent (Art. 6(1)(a) GDPR): The data subject has given consent to the processing.
• Contract Performance (Art. 6(1)(b) GDPR): Processing is necessary for the performance of a contract or pre-contractual measures.
• Legal Obligation (Art. 6(1)(c) GDPR): Processing is necessary for compliance with a legal obligation.
• Legitimate Interests (Art. 6(1)(f) GDPR): Processing is necessary for the purposes of legitimate interests, unless overridden by the interests of the data subject.

4. Recipients and Third-Country Transfers

In the course of our business activities, we work with various service providers. Where data is transferred to countries outside the EU/EEA, we ensure an adequate level of data protection through appropriate safeguards (e.g., EU Standard Contractual Clauses, adequacy decisions).

5. Hosting

SiteGround

Our website is hosted by SiteGround. When you visit our website, information is automatically stored in server log files that your browser transmits. This includes browser type and version, operating system, referrer URL, hostname of the accessing device, time of the server request, and IP address.

Provider: SiteGround Spain S.L.
Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR)
More Information: SiteGround Privacy Policy

6. Cookies and Consent Management

Our website uses cookies and similar technologies. Cookies are small text files stored on your device.

Cookie Categories

We distinguish between:

• Essential Cookies: Technically necessary cookies required for the operation of the website.
• Statistics Cookies: Cookies for analyzing website usage (only with your consent).
• Marketing Cookies: Cookies for advertising purposes (only with your consent).

Consent Management (Real Cookie Banner)

We use Real Cookie Banner by devowl.io to manage cookie consent. On your first visit to our website, you will be asked for your consent for non-essential cookies. You can change or revoke your settings at any time via the cookie banner.

Provider: devowl.io GmbH, Tannet 12, 94539 Grafling, Germany
Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR) for operating the banner; consent (Art. 6(1)(a) GDPR) for non-essential cookies
More Information: devowl.io Privacy Policy

7. Web Analytics

Mixpanel

We use Mixpanel to analyze user behavior on our website. Processing is done server-side through our own infrastructure (AWS, region eu-central-1, Frankfurt). Pseudonymized usage data is collected to improve our website and products.

Data Processed: Pseudonymized user ID, page views, interactions, device information, IP address (anonymized)
Provider: Mixpanel, Inc., One Front Street, 28th Floor, San Francisco, CA 94111, USA
Legal Basis: Consent (Art. 6(1)(a) GDPR)
Third-Country Transfer: USA, based on EU Standard Contractual Clauses
More Information: Mixpanel Privacy Policy

AWS (Amazon Web Services)

For server-side processing of analytics data, we use AWS servers in the eu-central-1 region (Frankfurt, Germany).

Provider: Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg
Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR)
More Information: AWS Privacy Policy

8. User Accounts and Authentication

Firebase Authentication

We use Firebase Authentication by Google to manage user accounts and license access. An account is automatically created upon registration or purchase.

Data Processed: Email address, user ID
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Legal Basis: Contract performance (Art. 6(1)(b) GDPR)
More Information: Firebase Privacy Policy

9. Payment Processing

Paddle

Payment processing is handled by Paddle. When you make a purchase, your payment data is processed directly by Paddle. We only receive the information necessary for contract fulfillment.

Data Processed: Name, email address, billing address, payment information
Provider: Paddle.com Market Limited, Core B, Block 71, The Plaza, Park West, Dublin 12, Ireland
Legal Basis: Contract performance (Art. 6(1)(b) GDPR)
More Information: Paddle Privacy Policy

10. Customer Support

Freshdesk

We use Freshdesk for customer support. When you contact us through the ticket system, your inquiry and related data are stored to process your request.

Data Processed: Name, email address, content of the inquiry
Provider: Freshworks Inc., 2950 S. Delaware Street, Suite 201, San Mateo, CA 94403, USA
Legal Basis: Contract performance or pre-contractual measures (Art. 6(1)(b) GDPR), legitimate interest (Art. 6(1)(f) GDPR)
Third-Country Transfer: USA, based on EU Standard Contractual Clauses
More Information: Freshdesk Privacy Policy

11. Newsletter

Mailchimp

If you subscribe to our newsletter, your email address is stored with Mailchimp. Emails are only sent after your explicit consent.

Data Processed: Email address, subscription time, IP address
Provider: The Rocket Science Group LLC (Mailchimp), 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA
Legal Basis: Consent (Art. 6(1)(a) GDPR)
Third-Country Transfer: USA, based on EU Standard Contractual Clauses
Withdrawal: You can withdraw your consent at any time by using the unsubscribe link in any newsletter or by contacting us directly.
More Information: Mailchimp Privacy Policy

12. Embedded Content

YouTube

Our website embeds videos from YouTube. When you play a video, data is transmitted to YouTube.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Legal Basis: Consent (Art. 6(1)(a) GDPR)
More Information: Google Privacy Policy

SoundCloud

We embed audio content from SoundCloud. When you play content, data is transmitted to SoundCloud.

Provider: SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Germany
Legal Basis: Consent (Art. 6(1)(a) GDPR)
More Information: SoundCloud Privacy Policy

Social Media Buttons

Our website contains links to social networks. Data is only transmitted to the respective networks when you click on the buttons.

Legal Basis: Consent (Art. 6(1)(a) GDPR)

13. Data Security

We implement technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security measures are continuously improved in accordance with technological developments.

14. Data Retention

We store personal data only for as long as necessary for the respective purposes or as required by statutory retention periods. After the periods expire, the data is deleted.

15. Your Rights

You have the following rights regarding your personal data:

• Right of Access (Art. 15 GDPR): You can request information about your data stored with us.
• Right to Rectification (Art. 16 GDPR): You can request the correction of inaccurate data.
• Right to Erasure (Art. 17 GDPR): You can request the deletion of your data, provided no legal retention obligations exist.
• Right to Restriction (Art. 18 GDPR): You can request the restriction of processing of your data.
• Right to Data Portability (Art. 20 GDPR): You can receive your data in a commonly used format.
• Right to Object (Art. 21 GDPR): You can object to the processing of your data.
• Right to Withdraw Consent (Art. 7(3) GDPR): You can withdraw any consent given at any time.

To exercise your rights, contact us at: info@noiseworksaudio.com

Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestr. 2-4
40213 Düsseldorf
Germany
https://www.ldi.nrw.de

16. Minors

Our services are intended for persons aged 18 and above. We do not knowingly collect personal data from children under 16 years of age.

17. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy to adapt it to changed legal requirements or changes to our services. The current version is always available on our website.