Privacy Policy

Last updated: 10 October 2026

1. Data Controller

The controller responsible for processing personal data on this website is:

FERNDAL
Kappenberger Damm 101
48151 Münster
Germany
Email: mail [at] ferndal.de

Further contact information is available in our Imprint.

2. General Information

We take the protection of your personal data seriously. This Privacy Policy explains how personal data may be processed when you visit our website.

Personal data includes information that can identify you directly or indirectly, such as your IP address.

We process personal data only where permitted by applicable law, including the General Data Protection Regulation (GDPR).

3. Website Hosting and Server Logs

3. Website Hosting and Server Logs

This website is hosted by:

STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin
Germany

When you visit our website, technical access data may be processed, including your IP address, the date and time of access, requested pages, browser information and other technical connection data.

This processing is necessary to provide the website, maintain its stability and protect it against attacks. The legal basis is Article 6(1)(f) GDPR (legitimate interests).

According to STRATO, visitors’ IP addresses are retained for security purposes for a maximum of seven days. Anonymised web access logs may be available in the hosting account for up to six weeks.

Further information is available at https://www.strato.de/datenschutz/.].

4. Spotify Embedded Players

Our website includes embedded Spotify players that allow visitors to listen to FERNDAL’s music.

Spotify is provided by Spotify AB, Sweden.

When a Spotify player is loaded, your browser may connect to Spotify’s servers. Spotify may receive technical information, including your IP address and browser information, and may use cookies or similar technologies.

Where consent is required, Spotify content will be loaded only after you have given your consent.

The legal basis for consent-based processing is Article 6(1)(a) GDPR and, where applicable, Section 25 TDDDG.

Further information: https://www.spotify.com/legal/privacy-policy/

5. Songkick Concert Widget

We use Songkick to display upcoming concert dates.

The Songkick widget is provided by the operator of the Songkick service, Suno Inc.

When the widget is loaded, your browser may establish a connection to Songkick’s servers. Technical information such as your IP address and browser details may be transmitted. Cookies or similar technologies may also be used.

Where consent is required, the widget will be loaded only after you have given your consent.

The legal basis for consent-based processing is Article 6(1)(a) GDPR and, where applicable, Section 25 TDDDG.

Further information: https://www.songkick.com/info/privacy

6. External Links and Social Media

Our website contains links to external platforms, including Instagram, Facebook, YouTube, Spotify, Apple Music and Bandcamp.

These are ordinary external links. We do not embed social media feeds from these platforms.

When you follow an external link, you leave our website. The respective provider is responsible for processing personal data on its platform.

Please refer to the privacy policies of the respective providers.

7. Cookies and Similar Technologies

Our website may use technically necessary cookies or comparable technologies where required for its operation.

Embedded third-party services, particularly Spotify and Songkick, may use additional cookies or similar technologies.

Where legally required, we will obtain your consent before activating these services. You will be able to withdraw consent with effect for the future.

[Insert a description of the consent-management mechanism once implemented.]

8. Your Rights

Under the GDPR, you may have the following rights, subject to applicable legal conditions:

• Access to your personal data (Article 15 GDPR)
• Rectification of inaccurate data (Article 16 GDPR)
• Erasure of personal data (Article 17 GDPR)
• Restriction of processing (Article 18 GDPR)
• Data portability (Article 20 GDPR)
• Objection to certain processing (Article 21 GDPR)
• Withdrawal of consent at any time (Article 7(3) GDPR)

You also have the right to lodge a complaint with a competent data protection supervisory authority.

To exercise your rights, please contact us using the details provided above.

9. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss and misuse.

When the website is publicly available, data transmission should be protected using HTTPS encryption.

10. Changes to This Privacy Policy

We may update this Privacy Policy if our website, the services we use or applicable legal requirements change.

The current version will always be available on this page.