[Note: The German Version of our Data Protection Notice is the legally binding one, this translation is for information purposes only]
1. General Information and Mandatory Disclosures
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations as well as this privacy policy.
When you use this website, various personal data may be collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.
We would like to point out that data transmission over the Internet (e.g., when communicating via email) can have security vulnerabilities. Complete protection of data against access by third parties is not possible.
Note on the responsible party
The responsible party for data processing on this website is:
Sibylle Machat
Email: datenschutz @ filksongbook.com
The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).
Your rights as a data subject
You have the right at any time to receive free information about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction, blocking, or deletion of this data.
If our data processing is based on a legitimate interest on our part within the meaning of Art. 6 para. 1 lit. f GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or our data processing serves to assert, exercise, or defend legal claims.
Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. An informal notification by email to us is sufficient for this purpose. The legality of data processing carried out until the revocation remains unaffected by the revocation.
For this and for further questions on the subject of data protection, you can contact us at any time at the address given in the legal notice. Furthermore, you have the right to lodge a complaint with a supervisory authority.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as requests that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
2. Data Collection on Our Website
Server Log Files
The provider of the pages (Domainfactory GmbH, Munich) automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
Browser type and browser version
Operating system used
Referrer URL
Hostname of the accessing computer
Time of server request
IP address
The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be recorded.
Cookies
Cookies are small text information that is stored as a file on your end device via your web browser. Our website only uses strictly necessary cookies that are required for the proper operation of the site. Currently, we only use the cookie pll_language, which only serves to control the language setting selected by the website visitor. This will be deleted at the latest 1 year after visiting the website. The legal basis for use is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in the proper provision of our website with a functioning language selection for our website visitors.
Hosting of Our Website and Our Email Mailbox
This website and the associated email mailbox are hosted externally. The personal data collected on this website is stored on the servers of the host(s). This may primarily include IP addresses, contact requests, meta and communication data, contact details, names, website accesses, and other data generated via a website.
External hosting is carried out for the purpose and in the interest of a secure, fast, and efficient provision of our online offering by a professional provider (Art. 6 para. 1 lit. f GDPR).
Our host(s) will only process your data to the extent necessary to fulfill their service obligations and follow our instructions regarding this data.
We use the following host(s):
Domainfactory GmbH
c/o WeWork
Neuturmstrasse 5
80331 München
The files are hosted on a server in Germany.
For more information, please refer to Domainfactory’s privacy policy: http://www.df.eu/de/datenschutz/.
3. Data Processing When Using Our Songbook Platform
3.1 Download of Songs
When you use the option to download songs from our freely accessible song collection, we do not process any personal data from you.
3.2 Submission of Songs
When you use the option to submit your own songs for the platform, the following personal data from you is processed:
- First name, last name
- Filk name (if different)
- Date of birth
- Place of birth
- Information on whether you are a member of a collecting society, e.g., GEMA, and if so, which one
- Information on whether you have objected to GEMA regarding the exploitation of your rights
- Email address used
- Submitted song lyrics and sheet music
The data you send to us remains with us until you request deletion or revoke your consent to storage. Mandatory legal provisions – in particular retention periods – remain unaffected.
The registrations including the personal data contained therein as well as all email correspondence are stored in our email account hosted at DomainFactory, to which only members of the Open Filk Songbook team have access. This data is used exclusively to prove to collecting societies and possibly other third parties that no rights are being violated, and to be able to contact submitters if there are any queries.
Additionally, we use the software Nextcloud so that our curators can move the files they have reviewed to the download area and edit already submitted files if necessary. The Nextcloud instance is also hosted by DomainFactory on a server in Germany, but is operated by us ourselves. No access by external service providers takes place.
Purpose and Legal Basis of Data Processing
The purpose of use is the secure storage, organization, and provision of files uploaded by users. The legal basis for processing is your consent through registration pursuant to Art. 6 para. 1 lit. a GDPR. You can revoke this consent at any time with effect for the future. We will then immediately delete your submissions as well as your registration.
Obligation to Provide Personal Data
There is no obligation on your part to provide us with your personal data. However, the data named above is absolutely necessary for us to be able to legally host the submitted song lyrics and to be able to prove your corresponding consent to any collecting societies and others who could assert copyright and exploitation rights. Without your information about your person, we unfortunately cannot publish any of your submitted song lyrics on our platform.
Storage Duration and Deletion
Songs and registrations submitted by users are stored until the submitting person requests deletion or modification. Changes are implemented by submitting an updated version, deletions are carried out completely upon express request. This does not affect email communication, in order to remain able to provide information to third parties retrospectively regarding possible copyright infringements. Beyond this, data is only retained as long as necessary to fulfill the purposes stated in this privacy policy or as required by legal retention obligations.
3.3 Recipients / Disclosure of Data
We generally do not pass on personal data to third parties. In particular, data is not passed on to third parties for advertising purposes.
The personal data processed in the context of using the songbook platform, in particular that during song submission, may be passed on to institutions or organizations with legitimate interest (e.g., collecting societies) to prove that you have given your consent to the publication and use of your lyrics or sheet music and in particular that no violation of rights exists.
No further publication or disclosure of your personal data takes place without your express consent, unless a legal obligation makes this necessary.
4. Data Processing for Other Contact Inquiries to Us
If you send us inquiries by email, your information including the contact data you provided there will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.
The data you send to us remains with us until you request deletion or revoke your consent to storage. Mandatory legal provisions – in particular retention periods – remain unaffected.
The processing of this data is therefore based exclusively on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. An informal notification by email to us is sufficient for this purpose. The legality of data processing operations carried out until the revocation remains unaffected by the revocation.
5. Third Country Transfer
No data transfer to a third country outside the European Union or the European Economic Area takes place.
6. Automated Decision-Making in Individual Cases Including Profiling
Automated decision-making and profiling within the meaning of Art. 22 GDPR does not take place.