Privacy policy

Last updated: September 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:


Ingo Schmidt-Lucas
Cybele Records · Cybele Studios · hd-klassik
Am Mühlenberg 24
D-40549 Düsseldorf
Germany

Phone: +49 211 30329-600
Email:

2. General information on data processing

As a rule we process our users’ personal data only insofar as this is necessary to provide a functioning website together with our content and services. Processing regularly takes place only with consent or on the basis of a statutory permission. Personal data means any information relating to an identified or identifiable natural person.

3. Your rights

You have the following rights with regard to the personal data concerning you:

  • right of access (Art. 15 GDPR)
  • right to rectification (Art. 16 GDPR)
  • right to erasure (Art. 17 GDPR)
  • right to restriction of processing (Art. 18 GDPR)
  • right to data portability (Art. 20 GDPR)
  • right to object to processing (Art. 21 GDPR)
  • right to withdraw consent given (Art. 7 (3) GDPR)
  • right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, an informal message to the contact details given above is sufficient.

4. Access data and server log files

Each time our website is accessed, our hosting provider automatically records information transmitted by your browser (server log files). These are in particular:

  • the page visited or the name of the file retrieved
  • the date and time of access
  • the volume of data transferred and notification of successful retrieval
  • browser type and version
  • the operating system used
  • the referrer URL (the page visited previously)
  • a shortened IP address

The processing serves to ensure a smooth connection, convenient use of the site and the evaluation of system security and stability. The legal basis is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. This data is not merged with other data sources.

The IP address is shortened as the log entry is written: 11.22.33.44 becomes 11.22.0.0. The full address is not logged. The log files are deleted automatically after 30 days.

From the log files the hosting provider also compiles an aggregated access statistic – page views, browsers used, referring pages. It is based on the same, already shortened data and does not allow any conclusions to be drawn about individual persons. Only we have access to it.

5. Cookies

Our website uses only technically necessary cookies that are required to operate the site. No marketing, tracking or analytics cookies are used, and no audience measurement services are employed. No user profiles are created and no data is passed on to third parties for advertising purposes. The legal basis for technically necessary cookies is § 25 (2) TDDDG in conjunction with Art. 6 (1) (f) GDPR. You can set your browser to inform you about the setting of cookies and to allow cookies only in individual cases or to exclude them generally.

6. Contacting us

If you contact us by email, by telephone or through a contact form, we store your details in order to process the enquiry and in case of follow-up questions. For enquiries relating to a contract the legal basis is Art. 6 (1) (b) GDPR; otherwise it is our legitimate interest in answering your request (Art. 6 (1) (f) GDPR) or your consent (Art. 6 (1) (a) GDPR). We do not pass this data on without your consent. It is deleted as soon as it is no longer required for the purpose and no statutory retention obligations stand in the way.

7. Newsletter

If you subscribe to our newsletter, we use the email address you provide solely to send the newsletter. Subscription uses the double opt-in procedure: after signing up you receive an email in which you must confirm your subscription. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future, for instance via the unsubscribe link at the end of every newsletter. The lawfulness of the processing already carried out remains unaffected by the withdrawal.

We use the service rapidmail for the dispatch. The data entered in the subscription form — first name, last name and email address — is transmitted to rapidmail and stored there. rapidmail processes it exclusively on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. You can find details in the rapidmail privacy policy.

The subscription form is protected by a captcha from the provider CaptchaFox (Fokkerstr. 2, 85399 Hallbergmoos), which rapidmail embeds in the form. It checks whether a subscription comes from a human being. Without this check, automated programs could fill in the form en masse with other people’s email addresses: those affected would receive confirmation emails they never requested, and our newsletter could be misused to send unwanted messages. The protection therefore serves the recipients as much as it serves us.

When the captcha is loaded, technical details about your device and browser as well as your IP address are transmitted to CaptchaFox and evaluated there in order to detect automated access. The captcha is loaded only once you use the subscription form — as long as you do not click into it or move focus to it, no data is transmitted to CaptchaFox. The legal basis is our legitimate interest in preventing misuse and in the security of our systems pursuant to Art. 6 (1) (f) GDPR. You can find details in the CaptchaFox privacy policy.

8. Fonts (hosted locally)

For a consistent presentation of typefaces, this website uses only fonts stored locally on our server. No connection to third-party servers (such as Google Fonts) is made; no personal data is transmitted to third parties for this purpose.

9. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the string “https://” in your browser’s address bar and by the padlock symbol. When encryption is active, the data you transmit to us cannot be read by third parties.

10. Hosting

Our website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner: René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The personal data collected on this website is stored on the provider’s servers in a data centre in Germany. This is done in the interest of a secure, fast and efficient provision of our online offering (Art. 6 (1) (f) GDPR). A data processing agreement pursuant to Art. 28 GDPR is in place with the host. The provider’s privacy information is available at all-inkl.com/datenschutzinformationen.

11. Storage period

Unless a more specific storage period is stated in this privacy policy, your personal data remains with us until the purpose of the processing ceases to apply. If you assert a justified request for erasure or withdraw your consent, your data will be deleted, provided that no statutory retention periods (for example under commercial or tax law) apply.

12. Right to lodge a complaint with a supervisory authority

In the event of breaches of data protection law you have the right to lodge a complaint with a supervisory authority. The competent authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Postfach 20 04 44, 40102 Düsseldorf. Irrespective of this, you may contact the supervisory authority of your habitual residence or place of work.

13. Currency and amendment of this privacy policy

This privacy policy is dated September 2026. As our website develops further, or because of changed statutory or official requirements, it may become necessary to amend this privacy policy. The current version can be retrieved on this page at any time.