Privacy Policy
This is an English courtesy translation. The legally binding version is the German privacy policy.
This website is built for data minimisation: no tracking cookies are set and no analytics services are used. External content (Spotify, YouTube) is only loaded after your active consent. Fonts and icons are hosted on our own server – there is no connection to Google Fonts or similar services.
1. Controller
KEØN Band, c/o Dennis Vaas, Kiesbergstr. 37, 49809 Lingen (Ems), Germany
Email: booking@keon.band
2. Hosting & server log files
This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When you access the site, the provider automatically stores information transmitted by your browser in what are known as server log files: browser type and version, operating system, referrer URL, host name of the accessing computer, time of the server request and IP address. This data serves technical provision, security and stability. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest). A data processing agreement (Art. 28 GDPR) is in place with IONOS.
3. Contact & booking form
The booking form does not transmit your entries to our web server. It assembles a ready-made email draft from your details entirely inside your browser and hands it over to your own email program; you send the message yourself, from your own mailbox. No data reaches us before you do so. The details we then receive by email (name, email address, phone number where given, event details and your message) are processed solely in order to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR. The data is deleted as soon as it is no longer required and no statutory retention obligations apply.
4. Cookies & consent management
This website sets no cookies for marketing or analytics purposes of its own. For any access to your device that is not technically necessary, we obtain your consent in advance (§ 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR). We use a self-developed consent manager for this – no external consent service is embedded, so no data is transmitted to third parties even when the banner is displayed.
Without your consent, only technically necessary information is stored:
| Name | Type | Purpose | Storage period |
|---|---|---|---|
| keon_consent | First-party cookie | Stores your choice in the consent manager including timestamp and version – so you are not asked again on every visit and so we can demonstrate your decision | 182 days |
| keon_ann_closed | sessionStorage | Remembers that you dismissed a notice bar | Until the browser is closed |
The legal basis for these necessary items is § 25 (2) no. 2 TDDDG (strictly necessary for the service explicitly requested) or Art. 6 (1) (f) GDPR.
The “External media” category (YouTube, Spotify – see sections 5 and 6) is optional. It is disabled by default and only becomes active after your express consent.
Withdrawal: You can change or withdraw your consent at any time with effect for the future – via the link in the footer of every page. Withdrawal is just as easy as giving consent. Processing that has already taken place remains unaffected. If you delete the keon_consent cookie in your browser, you will be asked again on your next visit.
Rejecting is just as easy as accepting on the first layer of the banner. You suffer no disadvantage in using the site; embedded content can then be loaded individually by clicking.
5. Spotify (click to load)
You can optionally load a Spotify player on the site. It is only embedded after you have actively clicked (consent under Art. 6 (1) (a) GDPR). Only then is a connection established to Spotify's servers (Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden) and your IP address transmitted to Spotify. Spotify may set its own cookies. More information: spotify.com/legal/privacy-policy.
6. YouTube (click to load)
Videos are embedded using YouTube's extended privacy mode (youtube-nocookie.com) and are likewise loaded only after your active click (consent under Art. 6 (1) (a) GDPR). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. On playback, a connection to Google servers is established and your IP address is transmitted. More information: policies.google.com/privacy.
7. Links to social networks & streaming services
We do not embed any social media plugins. The icons on the site are plain links. Data is only transmitted to the respective providers (Instagram, Facebook, Apple Music, Amazon Music, Deezer, Tidal, YouTube) once you click the link and visit their site. Their privacy policies then apply.
8. Your rights
You have the right at any time to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21 GDPR). You may withdraw any consent given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.
Template status: please review before publication and adapt to the services actually used.
← Back to the homepage