Privacy Policy

Introduction

We, Ampire GmbH, take the protection of your personal data very seriously. Below, we inform you pursuant to Art. 12 et seq. General Data Protection Regulation (GDPR) about which data we process when you visit the website katalyzer.music and use our Software-as-a-Service, for what purposes we do this, on what legal bases we rely, and what rights you have as a data subject.

1. Data Controller

The data controller within the meaning of the GDPR is Ampire GmbH, An der Grünwalder Brücke 1, 82049 Pullach i. Isartal, Germany.

If you have any questions about data protection, you can contact us at any time via email at info@katalyzer.music

2. Purposes and Legal Bases of Processing

We process your personal data only to the extent necessary to operate the online service provided at katalyzer.music in a functional, secure, and economical manner, to prepare or fulfill contracts with you, and to comply with legal obligations.

The legal basis is - depending on the individual case - Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. b GDPR (performance or initiation of a contract), Art. 6 para. 1 lit. c GDPR (legal obligation) or Art. 6 para. 1 lit. f GDPR (legitimate interest in the secure and efficient provision of our services).

3. Categories of Personal Data and Obligation to Provide

When using the website for purely informational purposes, we automatically collect technical access data, namely the IP address of the requesting device, date and time of access, requested resource, transferred data volume, message about the success of the request, and the user agent transmitted by the browser.

When you register, we also process your email address and a password you choose; further information - such as your name - is voluntary. However, providing a valid email address is contractually required because otherwise we cannot create a user account for you.

4. Cookies and Similar Technologies

Our website does not use tracking or marketing cookies. To maintain your login, only a technically necessary session cookie is stored, which expires when you close your browser. The storage is based on § 25 para. 2 no. 2 TTDSG in conjunction with Art. 6 para. 1 lit. f GDPR. A cookie banner provides information about the possible use of cookies as a precautionary measure.

5. Hosting, Transfer and Categories of Recipients

Our website is delivered via the content delivery network AWS CloudFront of Amazon Web Services Inc. (AWS). A data processing agreement in accordance with Art. 28 GDPR exists between us and AWS. To the extent that data is transferred to servers in the USA, this is done on the basis of EU Standard Contractual Clauses and the EU-US Data Privacy Framework.

In addition, personal data may be transferred to other recipients as necessary for the purposes mentioned, for example to IT service providers, payment service providers, or tax and legal advisors.

6. Retention Period

Personal data is stored only as long as necessary to fulfill the stated purposes or until statutory retention periods expire. Server log files are usually deleted after a maximum of seven days; account data is retained until your user account is deleted and for a period of three years thereafter to defend against any civil law claims; accounting documents are stored for up to ten years in accordance with commercial and tax law requirements; support communications are usually deleted two years after the completion of the request.

7. Data Security

We apply appropriate technical and organizational measures in accordance with Art. 32 GDPR to protect your data from loss, destruction, or unauthorized access. These include, among others, TLS encryption, strict access controls, two-factor authentication for administrators, regular backups, and a role-based authorization concept.

8. Rights of the Data Subject

You have the right to obtain information about the data stored about you at any time (Art. 15 GDPR). In addition, you have the right to rectification of incorrect data (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), and data portability (Art. 20 GDPR). If we base processing on your consent, you can withdraw this consent at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. You also have the right to object at any time, for reasons arising from your particular situation, to processing based on Art. 6 para. 1 lit. f GDPR (Art. 21 GDPR).

To exercise your rights, simply send an informal message to info@katalyzer.music

9. Right to Lodge a Complaint with the Supervisory Authority

If you believe that the processing of your personal data violates data protection law, you can contact the competent supervisory authority at any time. For us, this is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 27, 91522 Ansbach, Germany.

10. Automated Decision-Making

Automated decision-making including profiling within the meaning of Art. 22 GDPR does not take place.

11. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy to reflect changes in legal situations or new technical developments. The current version applies to your subsequent visit, which you can access at any time at katalyzer.music/privacy.

Contact

If you have questions about this privacy policy, you can reach us at:

info@katalyzer.music

Ampire GmbH
An der Grünwalder Brücke 1
82049 Pullach
Germany

Last updated: May 09, 2025