Privacy Policy
Effective as of July 2025
1. Controller
The data controller responsible for this website is:
M6 Band
Christian Valentin
Moosacher Straße 88, 2nd Floor
80809 Munich, Germany
Email: privacy@m6.band
2. Collection and Storage of Personal Data
a) When Visiting the Website
When you access our website, your browser automatically sends the following data to our hosting provider:
- IP address of your device
- Date and time of the request
- Browser type and version
- Operating system used
- Referrer URL (if applicable)
This data is processed by Cloudflare, Inc. , our hosting provider, to ensure secure and stable operation of the site.
For more information on Cloudflare’s data protection policies, see: https://www.cloudflare.com/privacypolicy/
We do not merge this data with other sources or analyze it for tracking.
Sanity CDN Usage
In addition, our website loads media content (such as images or videos) from a content delivery network (CDN) operated by Sanity.io (Sanity AS, Norway). When such content is requested, your IP address and browser data may be transmitted to Sanity or its infrastructure providers.
Sanity may process this data in accordance with their Privacy Policy .
We use Sanity to ensure fast and reliable delivery of content, based on our legitimate interest in providing a functional and appealing online presence (Art. 6(1)(f) GDPR).
Use of Privacy-Friendly Analytics (Umami)
We use Umami Cloud, a privacy-focused web analytics service, to understand how our website is used and improve its content.
Umami does not use cookies and does not collect personal data such as full IP addresses. All usage data is anonymized and aggregated. This means we can measure general website traffic (e.g. number of visits, popular pages) without identifying individual users.
Our analytics data is processed and stored on servers located in the European Union, operated by Umami Software, Inc., and is not transferred outside the EU.
The legal basis for this processing is our legitimate interest in analyzing and optimizing our website (Art. 6(1)(f) GDPR).
More information: https://umami.is/privacy
b) Contact Form
When you contact us using our contact form, we collect and process the following personal data:
- Your name
- Your email address
- Your phone number
- Your message
This data is used exclusively to respond to your inquiry and is sent to us via email. It is not stored permanently and is not shared with third parties for marketing purposes.
To send a confirmation email, we use Mailjet , a GDPR-compliant email service provider based in the European Union. Mailjet acts as a data processor on our behalf and processes your email address solely for the purpose of sending a transactional confirmation message.
For more information on Mailjet’s privacy practices, see:
🔗 https://www.mailjet.com/legal/privacy-policy/
The legal basis for this data processing is:
- Art. 6(1)(b) GDPR – processing necessary to take steps at your request prior to entering into a contract
- Art. 6(1)(f) GDPR – our legitimate interest in confirming successful message delivery
3. Use of Embedded Spotify Player
Our website may contain embedded content from Spotify , which is only loaded after your explicit consent (e.g. via click). When the Spotify player is activated, data such as your IP address may be transmitted to Spotify, and cookies may be set by Spotify.
When you consent to load Spotify content, a cookie is stored to remember your choice for future visits. This cookie does not track or profile you and expires after 1 year.
Provider: Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden
Spotify privacy policy: https://www.spotify.com/de/legal/privacy-policy/
Legal basis: Art. 6(1)(a) GDPR (consent).
You may revoke your consent at any time with future effect.
4. Your Rights
Under the GDPR, you have the following rights:
- Right to access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
To exercise any of these rights, please contact: privacy@m6.band
5. Changes to this Privacy Policy
We reserve the right to update this privacy policy to remain compliant with legal requirements or to reflect changes in our data processing practices.