Legal Documents

1. Data Controller

2. Information We Collect

Account Information: Name, email address, display name, subscription status

Payment Information: Processed by Stripe (we store only subscription status, not card details)

Usage Data: Download history, streaming activity, subscription management

Project Submissions: Name, email, project details, and uploaded images (moderated before display)

Technical Data: IP address, browser type, device information for service provision

3. Legal Basis for Processing

Contract Performance: Account management, download delivery, subscription processing

Legitimate Interest: Platform security, fraud prevention, service improvement

Consent: Newsletter subscriptions, project showcasing, marketing communications

Legal Obligation: Tax records, payment processing compliance

4. How We Use Your Information

• Provide music streaming and download services
• Process subscriptions and payments
• Send transactional emails (download confirmations, subscription updates)
• Moderate and display project submissions
• Maintain platform security and prevent fraud
• Comply with German tax and business obligations

5. Data Sharing and Third Parties

Stripe: Payment processing (EU-based operations, GDPR compliant)

Vercel: Website hosting (EU data centers available)

Railway: Database hosting (EU region)

Resend: Email delivery service (GDPR compliant)

We do not sell your data to third parties. Data is shared only as necessary for service provision.

6. International Data Transfers

Your data is primarily processed within the EU. When data is transferred outside the EU (e.g., for payment processing), we ensure adequate protection through Standard Contractual Clauses or adequacy decisions.

7. Data Retention

Account Data: Until account deletion or 3 years after last activity

Payment Records: 10 years (German tax law requirement)

Download History: Duration of account plus 1 year for support

Project Submissions: Until removal request or account deletion

8. Your GDPR Rights

Access: Request a copy of your personal data

Rectification: Correct inaccurate personal data

Erasure: Delete your personal data (subject to legal obligations)

Restriction: Limit processing of your personal data

Portability: Receive your data in a structured format

Objection: Object to processing based on legitimate interests

Withdraw Consent: For newsletter and marketing communications

To exercise these rights, contact us at support@traaacks.com

9. Data Security

We implement appropriate technical and organizational measures including encryption in transit and at rest, access controls, regular backups, and security monitoring. However, no internet transmission is 100% secure.

10. Cookies and Tracking

We use essential cookies for platform functionality and optional cookies for analytics (when consented). See our Cookie Policy for detailed information. We do not use third-party tracking or advertising cookies.

11. Children's Privacy

Our service is not directed to children under 16. We do not knowingly collect personal information from children under 16. If we become aware of such collection, we will delete the information immediately.

12. Supervisory Authority

You have the right to lodge a complaint with the German data protection authority:
Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI)
Website: www.bfdi.bund.de

13. Changes to This Policy

We will notify you of material changes via email or platform notification at least 30 days before they take effect. Continued use constitutes acceptance of changes.

14. Contact Us

For privacy-related questions or to exercise your rights, contact us at:support@traaacks.com