Privacy Policy

1. Data Controller

efp berlin GbR
Represented by: Ronny Wehnert
Stresemannstr. 23, 10963 Berlin, Germany
Email: sendmail@efp-berlin.com

2. Overview of Data Processing

We process personal data only to the extent necessary for the provision of our Platform and the services described herein.

3. Hosting and Server

This website is hosted on a server operated by Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany). All data is processed and stored exclusively in Germany. No transfer to third countries takes place.

Each time you access our website, server log files are automatically created containing the following data:

• IP address (deleted after 7 days)
• Date and time of access
• Requested resource (URL)
• HTTP status code
• Browser type and operating system

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in ensuring technical operation).

4. Audio Streaming

Music is streamed directly from our server in Germany. No external streaming services are integrated.

No tracking of listening behavior of anonymous visitors takes place. For logged-in users with a Pro subscription, we record which tracks are played (track ID, timestamp). This data is required for the calculation of Fan-Powered Royalties, where your subscription contributions are distributed proportionally to the artists you actually listened to. Legal basis: Art. 6(1)(b) GDPR (performance of contract).

5. Registration and User Account

During registration, we collect the following data:

• Email address (required)
• Name (required)
• Password (stored as a cryptographic hash; the plaintext password is not stored)
• City (optional)
• Intention statement (optional)

This data is required for the creation and management of your user account. Legal basis: Art. 6(1)(b) GDPR (performance of contract).

6. City Information and Event Fund

Your voluntary city information is used to assign you to the Event Fund of your region (Art. 6(1)(b) GDPR -- performance of contract). 15% of your subscription fee goes into the Event Fund of the specified city. This information is voluntary and can be changed at any time; without a city specified, your contribution is assigned to the general Event Fund.

7. Payment Processing (Stripe)

For payment processing, we use the service Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland).

For a paid subscription, the following data is transmitted to Stripe:

• Email address
• Selected subscription (plan, term)
• Payment data (collected and processed directly by Stripe)

Stripe processes this data as an independent controller for payment processing. Legal basis: Art. 6(1)(b) GDPR (performance of contract). Stripe privacy policy: stripe.com/privacy.

8. Cookies and Tracking

This website uses no tracking tools (no Google Analytics, no Facebook Pixel, no external scripts). No external resources are loaded.

After login, our authentication solution (Better Auth) sets a technically necessary session cookie that maintains your session. This cookie contains no tracking data and serves exclusively for authentication. Legal basis: Art. 6(1)(b) GDPR (performance of contract). A cookie banner is not required for this, as it is a technically necessary cookie.

9. External Links

Our site contains links to external websites (e.g., artist websites). The respective operators are responsible for data protection on those sites.

10. Your Rights

You have the following rights regarding your personal data:

• Access (Art. 15 GDPR) -- Which data we have stored about you
• Rectification (Art. 16 GDPR) -- Correction of inaccurate data
• Erasure (Art. 17 GDPR) -- Deletion of your data
• Restriction (Art. 18 GDPR) -- Restriction of processing
• Data Portability (Art. 20 GDPR) -- Export of your data
• Objection (Art. 21 GDPR) -- Objection to processing

To exercise your rights, send an email to: sendmail@efp-berlin.com

11. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). You may also file a complaint with the data protection supervisory authority of your country of residence.

The authority responsible for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61, 10555 Berlin
www.datenschutz-berlin.de

12. Changes

This Privacy Policy is currently valid (as of April 2026). If changes are made to our data processing, we will update this page.