Privacy Policy

1. Data Controller

The responsible entity (Data Controller) within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:

MandalazMusic
Wladimir Sergienko
Bohnbergstr. 1
72336 Balingen
Germany
Email: info@mandalazmusic.com

2. Scope of Processing of Personal Data

We collect and use personal data of our users only to the extent necessary to provide a functional website as well as our contents and services (such as processing beat license purchases and delivering audio files).

Data you provide to us directly:

• Account & Purchase Information: When you purchase a beat license, sign up for our portal, or contact us, we collect your name, email address, billing address, and country. (Legal basis: Art. 6 (1) lit. b GDPR - Contract fulfillment).
• Communication Data: If you contact us via email, live chat, or contact form, we store your inquiry to process your request. (Legal basis: Art. 6 (1) lit. f GDPR - Legitimate interest).

Information we collect automatically:

• Log Data: When visiting our website, we collect server log files (e.g., IP address, browser type, date/time) to ensure the stability and security of our systems. (Legal basis: Art. 6 (1) lit. f GDPR).

Note: We never collect sensitive personal information such as "Social Security Numbers" or comparable government identification numbers.

3. Use of Service Providers (Third Parties)

To process payments, deliver files, and secure our website, we use carefully selected third-party service providers. We only transmit the data strictly necessary for their respective services.

• Payment Gateways (Stripe & PayPal): We do not store any credit card or bank details on our servers. All payments are processed securely by Stripe or PayPal.
  Privacy Policies: Stripe | PayPal
• File Delivery (Cloudflare R2): High-resolution audio files (WAV, Stems) and generated PDF contracts are securely delivered via Cloudflare R2 object storage.
  Privacy Policy: Cloudflare
• Communication (Sender / Resend): We use email delivery services to send transactional emails (purchase confirmations, downloads) and newsletters (if opted-in).
  Privacy Policies: Sender | Resend

4. Cookies and Tracking

Our website uses "Cookies" — small text files that are stored on your device. You can choose to accept or decline non-essential cookies via our Cookie Banner.

• Essential Cookies: Required to operate the storefront, maintain your shopping cart, and manage your portal login session. These cannot be disabled as the site would stop functioning.
• Analytics Cookies: Help us understand how visitors interact with our website.

You can manage your browser settings to block all cookies, but please note that the shopping cart and checkout process rely on essential cookies.

5. Data Retention

Your personal data will be deleted or blocked as soon as the purpose of storage ceases to apply. In the case of a purchase, we are legally required by German commercial and tax law to retain billing and contract data for 10 years.

6. Your Rights under GDPR

If you are a resident of the European Economic Area (EEA), you have the following data protection rights:

• Right of Access (Art. 15 GDPR): You have the right to request a copy of the personal data we hold about you.
• Right to Rectification (Art. 16 GDPR): You have the right to request that we correct any inaccurate or incomplete personal data.
• Right to Erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data, provided there are no legal retention obligations (e.g., tax laws for invoices).
• Right to Restriction of Processing (Art. 18 GDPR): You have the right to request restriction of processing your personal data.
• Right to Data Portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used and machine-readable format.

To exercise any of these rights, simply contact us at info@mandalazmusic.com.

7. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy so that it always complies with the current legal requirements. Your continued use of the site following the posting of changes constitutes your acceptance of such changes.