Privacy Policy

Who we are

Benjamin Wrensch, trading as Polytonic Music Studio, Vilbeler Str. 18, 61194 Niddatal, Germany, is the data controller for the processing described below. This policy covers our website, software downloads, sales, enquiries and newsletter.

Contact: info@polytonicmusicstudio.com.

What we process

• Website hosting: We use Framer B.V. (Netherlands) to host our website. Technical data, including IP addresses, browser information and request details, is processed to deliver the website and maintain security. Our legal basis is our legitimate interest in reliable, secure operation (Article 6(1)(f) GDPR). See Framer’s Privacy Statement.

• Website analytics: We use Framer’s built-in analytics to understand website use, including page views, visitor counts and referral sources. According to Framer, this uses no analytics cookies or persistent identifiers; IP addresses and browser user-agent information are hashed with a secret that changes and is deleted daily to count daily unique visitors. Where personal data is processed, our legal basis is our legitimate interest in understanding and improving our website (Article 6(1)(f) GDPR). We do not use Google Analytics or advertising conversion tags on our website. See Framer’s analytics explanation.

• Downloads: We use DigitalOcean, LLC (USA), including DigitalOcean Spaces, to host and deliver software downloads. IP addresses and technical request data are processed for delivery and security. Our legal basis is contract preparation or performance where applicable (Article 6(1)(b) GDPR), otherwise our legitimate interest in providing secure downloads (Article 6(1)(f) GDPR). See DigitalOcean’s Privacy Policy.

• Enquiries: We process your name, email address and message to respond to enquiries and provide support. Our legal basis is contract preparation or performance (Article 6(1)(b) GDPR), or our legitimate interest in answering other enquiries (Article 6(1)(f) GDPR).

• Newsletter: With your consent, we process your email address and subscription records to send product news (Article 6(1)(a) GDPR). Resend (Plus Five Five, Inc., USA) processes recipient details, email content and delivery data on our behalf. You can unsubscribe or contact us to withdraw consent at any time. See Resend’s Privacy Policy.

• Purchases: Stripe Managed Payments / Link processes contact, billing, payment and order data for checkout, taxes, fraud prevention and transaction support. We receive customer and order details for licence delivery, support and recordkeeping. Our legal bases are contract performance, legal obligations and our legitimate interest in preventing misuse and handling claims (Article 6(1)(b), (c) and (f) GDPR). Stripe/Link also processes data under its own responsibilities; see the Stripe and Link privacy policies.

Providing enquiry and newsletter information is voluntary. Required purchase information is necessary to fulfil your order. Our providers may use subprocessors to deliver their services.

Retention and international transfers

We retain personal data only as long as needed for the purposes above: technical logs for delivery, troubleshooting and security; correspondence for resolving enquiries and related claims; and customer and order records for licence administration, statutory retention periods and claims. Newsletter data is retained until you unsubscribe, with limited records kept where needed to document consent or prevent further emails.

Our providers may process data outside the European Economic Area, including in the United States. Framer’s Data Processing Addendum provides for adequacy decisions or EU Standard Contractual Clauses. DigitalOcean’s Data Processing Agreement provides for the EU–US Data Privacy Framework and Standard Contractual Clauses as a fallback. Resend’s Data Processing Addendum incorporates Standard Contractual Clauses for transfers requiring these safeguards. Stripe and Link describe their transfer safeguards in their privacy policies linked above. You can consult these safeguards through the links or contact us for a copy.

Your rights

Where applicable, you may request access, correction, deletion, restriction or portability of your personal data. You may object to processing based on legitimate interests for reasons relating to your situation, and to direct marketing at any time. Withdrawing consent does not affect the lawfulness of earlier processing.

Contact us to exercise your rights. You may also complain to a supervisory authority, including the Hessian Commissioner for Data Protection and Freedom of Information.