Data Privacy

1. General Information

We take the protection of personal data seriously. Because B.S. SoundPeople UG (haftungsbeschränkt) i.L. is currently in liquidation, this website is maintained primarily for purposes connected with the winding-up of the company and for providing information about the company. We process personal data only where this is necessary for the operation and security of the website, for responding to inquiries, for fulfilling legal obligations, for handling the company's liquidation, or for other purposes permitted by applicable data protection law.

2. Name and Address of the Controller

The controller responsible for the processing of personal data in connection with this website within the meaning of the General Data Protection Regulation (GDPR) is:

B.S. SoundPeople UG (haftungsbeschränkt) i.L.

Represented by the Liquidator: Baris Senay
Im Mediapark 5
50670 Köln
Germany

Tel.: +49 157 74017775
E-mail: info@soundpeople.io
Website: www.soundpeople.io

3. Accessing the Website (Server Log Files)

When you visit our website, technical information may be processed automatically in order to deliver the website, maintain technical stability, and protect our online infrastructure.Our domain is registered through IONOS SE. The website is created and operated using services provided by GoDaddy Operating Company, LLC. Cloudflare, Inc. is used for CDN, DNS, security, and related network infrastructure services.When accessing our website, the following information may be processed automatically:

Browser type and version
Operating system used
Referrer URL
Requested pages or files
Date and time of access
IP address
Other technical information required to deliver and secure the website

This information is processed in particular to ensure the proper delivery of website content, maintain network stability, optimize website delivery, and detect, prevent, or mitigate malicious activity and attacks.The legal basis for this processing is generally Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable, and reliable operation of our online infrastructure.Technical log data are retained only for as long as necessary for these purposes or as required by applicable law and the relevant service providers' security and retention procedures.

4. Cookies and Similar Technologies

This website does not use Google Analytics, LinkedIn Insight Tag, or other marketing, behavioral tracking, advertising, or analytics technologies.Depending on the technical configuration of our website and security services, technically necessary cookies or similar technologies may be used to provide the website, maintain security, distinguish legitimate users from automated requests, or protect the website against abuse.Where the storage of information on or access to information already stored on a user's device requires consent under applicable law, the required consent will be obtained before the relevant technology is used.In Germany, these requirements are governed in particular by § 25 of the Telecommunications and Digital Services Data Protection Act (TDDDG). Under § 25 TDDDG, consent is generally required for storing information on, or accessing information already stored on, a user's device unless a statutory exception applies, including where the storage or access is technically necessary to provide a digital service expressly requested by the user.

5. Contact by E-mail or Telephone

If you contact us via e-mail or telephone, we process the personal data that you provide to us, such as your name, contact details, and the content of your inquiry.We use this information to process and respond to your request and, where applicable, to handle matters relating to the winding-up of the company.The legal basis for this processing is:

Art. 6(1)(b) GDPR, where the inquiry relates to the performance of a contract or to pre-contractual measures; or
Art. 6(1)(f) GDPR, where we have a legitimate interest in responding to general inquiries and managing communications relating to the company and its liquidation.

Personal data relating to inquiries are deleted when they are no longer required for the relevant purpose, unless statutory retention obligations or another legal basis requires continued storage.

6. Processing in Connection with the Liquidation

As the company is in liquidation, personal data may be processed where necessary to complete the company's outstanding business, fulfil existing obligations, collect receivables, manage company assets, communicate with creditors and contractual partners, and comply with legal and regulatory obligations.The liquidation of a German GmbH or UG includes, among other things, the completion of ongoing business, fulfilment of obligations, collection of receivables, and realization of company assets in accordance with applicable German company law, including § 70 GmbHG.Personal data processed for these purposes are processed only to the extent necessary for the respective purpose and on an applicable legal basis under the GDPR, including:

Art. 6(1)(c) GDPR, where processing is necessary to comply with a specific legal obligation;
Art. 6(1)(b) GDPR, where processing is necessary for contractual matters; or
Art. 6(1)(f) GDPR, where processing is necessary for our legitimate interests in properly completing the liquidation.

7. Legal Obligations and Retention

We process personal data where this is necessary to comply with legal obligations, including tax, accounting, commercial, and statutory retention requirements under German law.The legal basis for such processing is Art. 6(1)(c) GDPR.Where statutory retention periods apply, the relevant personal data will be retained for the period required by law and will subsequently be deleted, unless further storage is legally required or otherwise permitted.Depending on the type of record, German law provides for different retention periods. For example, § 147 of the German Fiscal Code (AO) provides for different retention periods for different categories of records.In addition, after completion of the liquidation, the company's books and documents must be kept in custody for ten years pursuant to § 74(2) GmbHG.

8. Recipients of Personal Data

Personal data may be disclosed to third parties where this is necessary to provide and secure the website, to fulfil contractual or legal obligations, to complete the liquidation, or where disclosure is otherwise permitted or required by law.Depending on the circumstances, recipients may include:

IONOS SE, as our domain registration provider
GoDaddy Operating Company, LLC, as our website platform provider
Cloudflare, Inc., where its CDN, DNS, security, or related services are used
E-mail and telecommunications service providers
Tax advisers and accountants
Lawyers and other professional advisers
Liquidators, where applicable
Banks and payment service providers, where applicable
Notaries, courts, and public authorities where necessary or legally required

Where service providers process personal data on our behalf, we enter into or rely upon appropriate data processing arrangements where required by Art. 28 GDPR.

9. Transfers to Third Countries

Some of our technical service providers are international companies, and processing or access to personal data may therefore involve transfers to countries outside the European Economic Area (EEA). Where personal data are transferred to the United States or another third country, such transfers are carried out in accordance with Chapter V GDPR.Depending on the specific processing activity and service, the applicable transfer mechanism may include:

an adequacy decision of the European Commission;
participation in the EU-U.S. Data Privacy Framework, where the relevant service provider is certified for the applicable data; or
Standard Contractual Clauses and, where required, appropriate supplementary safeguards.

10. Your Rights

Under the GDPR, you have the following rights, subject to the applicable legal requirements:

a) Right of access — Art. 15 GDPR: You have the right to request confirmation as to whether we process personal data concerning you and, where applicable, to receive a copy of that data and relevant information about its processing.
b) Right to rectification — Art. 16 GDPR: You have the right to request the correction of inaccurate personal data and the completion of incomplete personal data.
c) Right to erasure — Art. 17 GDPR: You may request the deletion of your personal data where the legal requirements for erasure are met.
d) Right to restriction of processing — Art. 18 GDPR: You may request restriction of the processing of your personal data where the legal requirements for restriction are met.
e) Right to data portability — Art. 20 GDPR: Where the legal requirements are met, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
f) Right to object — Art. 21 GDPR: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR.
g) Right to withdraw consent — Art. 7(3) GDPR: If data processing is based on your consent, you have the right to withdraw this consent at any time with future effect.
h) Right to lodge a complaint — Art. 77 GDPR: You have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of personal data relating to you infringes privacy regulations.

11. Competent Data Protection Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes applicable data protection law.

The competent supervisory authority for our registered office is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Germany

Website: www.ldi.nrw.de