ENDE
Booking
Booking request
EnglishDeutsch

Privacy policy

This is a translation for your convenience – the German version is legally binding.

1. Controller

BARREL GbR, Bammentaler Str. 32, 69257 Wiesenbach, Germany
Email: info@barrel.band

2. The essentials

  • This website sets no cookies and uses no tracking or analytics tools.
  • Fonts and images are served from our own server.
  • Videos (YouTube) and the album player (Bandcamp) are only loaded after a click. Only then is data transferred to these providers.
  • If you contact us via the form or by email, we only use your details to answer your request.

3. Hosting and server log files

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany; the servers are located in Germany. When you visit the pages, the server processes technically necessary data (IP address, date and time, requested page, referrer, browser and operating system). This serves the secure and stable operation of the website (Art. 6 (1) (f) GDPR). The data is not combined with other data. STRATO stores the IP addresses for at most seven days to detect and fend off attacks. We have concluded a data processing agreement with STRATO in accordance with Art. 28 GDPR. The connection to the website is encrypted (TLS/HTTPS).

4. Contact form and email

If you contact us via the booking form or by email, we process the details you provide (name, email address, message and optional details such as venue and date) to answer your request. The legal basis is Art. 6 (1) (b) GDPR (steps prior to a contract, e.g. a concert) or your consent under Art. 6 (1) (a) GDPR. The form is processed on our STRATO webspace and sent as an email to our mailbox info@barrel.band; no external form service is used. We need your name, email address and message to be able to reply; all other details are optional. We delete the data once the request has been dealt with and no statutory retention obligations apply.

Spam protection: To keep automated spam out, your browser solves a small computing task while you fill in the form; our server sets it and checks it when the form is sent – without cookies and without any external service. To prevent mass use of the form, we keep a check value (hash) for each request for at most 24 hours, formed from your IP address and a secret key – not the IP address itself. The legal basis is our legitimate interest in a form protected against abuse (Art. 6 (1) (f) GDPR).

5. Embedded videos (YouTube)

We embed videos from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) in privacy-enhanced mode (youtube-nocookie.com). The preview images are stored on our own server. A connection to YouTube is only established when you click “Play”. Your IP address and information about the video played, among other things, are then transferred to Google, and YouTube may use cookies or similar technologies on your device. The legal basis is your consent given by the click (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). Data may also be transferred to Google LLC in the USA. Google is certified under the EU-U.S. Data Privacy Framework; this transfer is covered by the European Commission’s adequacy decision (Art. 45 GDPR). More information: Google privacy policy.

6. Album player (Bandcamp)

On every page (player at the bottom right) and on the music page you can load the album player of Bandcamp (Bandcamp Ventures LLC, USA). The connection to Bandcamp is only established when you click “Load player”; the notice about it is right next to the button. Your IP address and technical information, among other things, are then transferred to Bandcamp, and Bandcamp may use cookies or similar technologies on your device. The legal basis is your consent given by the click (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). Bandcamp is based in the USA and, to our knowledge, is not certified under the EU-U.S. Data Privacy Framework; the transfer to the USA is therefore based on your explicit consent (Art. 49 (1) (a) GDPR). There is a risk that US authorities access the data and that you can only enforce your rights there to a limited extent. More information: Bandcamp privacy policy.

Links to Spotify, Apple Music, Instagram, WhatsApp and other platforms are ordinary links. Data is only transferred to these providers when you click a link. The privacy policy of the respective provider then applies.

8. Storage in your browser

When you switch the language of the website, your browser remembers this choice (local storage, entry “barrel-lang”). This information stays on your device and is not transmitted to us. It is stored because you actively use this function (§ 25 (2) no. 2 TDDDG). You can delete it at any time in your browser settings.

9. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw any consent at any time with effect for the future. Just write to us at info@barrel.band.

Right to object (Art. 21 GDPR): Where we process data on the basis of our legitimate interest (Art. 6 (1) (f) GDPR, e.g. server log files and spam protection), you can object to this processing at any time on grounds relating to your particular situation.

You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

There is no automated decision-making, including profiling (Art. 22 GDPR).

Last updated: October 2026