Privacy Policy

1. Responsible party

The party responsible for processing data on this website, within the meaning of the EU General Data Protection Regulation (GDPR), is:

2. Hosting

This website is hosted by HEADFIRST MSP GmbH, Chorstraße 16a, 77815 Bühl, Germany.

When you visit this site, HEADFIRST MSP GmbH processes the following data in server log files:

• IP address
• Date and time of the request
• The requested URL
• Browser type and version
• Operating system
• Referrer URL

The legal basis is Article 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website). This data is not combined with any other data sources.

3. Embedded external services

This site embeds content from YouTube, Spotify and SoundCloud. None of these services are contacted when the page loads: every player is only loaded after you actively click on it. On the first open of each player, a consent notice is shown and the embed loads only after you explicitly confirm. This consent is remembered in your browser (see section 4), so the player loads directly on subsequent visits. You can revoke the consent at any time via the "Reset settings" option in the footer.

• YouTube – a single video from a fixed playlist is chosen at random on each open. No connection to YouTube is made until the player loads. Once the player loads, YouTube receives the video you started. See the YouTube privacy policy.
• Spotify – the artist player loads in a dialog only after you open it and confirm. See the Spotify privacy policy.
• SoundCloud – the profile player loads in a dialog only after you open it and confirm. See the SoundCloud privacy policy.

These embedded services may also set their own cookies while the player is active. You can manage this in your browser settings.

4. Local storage

This site stores a few small values locally in your browser using localStorage. No personal data is collected, and none of these values are ever sent to a server. They stay on your device and can be removed at any time via your browser settings or the "Reset settings" option in the footer.

• theme – set to light only when you explicitly choose the light theme. Dark mode is the default and is used when this key is absent.
• player-consent-spotify, player-consent-soundcloud, player-consent-youtube – set to true when you confirm the respective player consent (section 3). Removed when you reset the corresponding setting.

Legal basis: Article 6(1)(f) GDPR (legitimate interest in a user-friendly presentation and GDPR-compliant consent handling).

5. Cookies and tracking

This site sets no cookies of its own and uses no tracking. There are no analytics tools (such as Google Analytics) and no remarketing.

6. Your rights

Under the GDPR, you have the following rights against the responsible party:

• Access (Article 15 GDPR): you may request information about the personal data processed about you.
• Rectification (Article 16 GDPR): you may request the correction of inaccurate data.
• Erasure (Article 17 GDPR): under certain conditions, you may request the deletion of your data.
• Restriction of processing (Article 18 GDPR): you may request that processing of your data be restricted.
• Objection (Article 21 GDPR): you may object to processing of your data where it is based on a legitimate interest.
• Data portability (Article 20 GDPR): you may request your data in a structured, commonly used format.

To exercise these rights, please contact us by e-mail at legal@lunitrixx.com.

You also have the right to lodge a complaint with a data protection supervisory authority.