Privacy Policy

01. Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

ArtEffect Devices is a business division of ArtEffect Audioproduktion GmbH.

02. General Information

We process personal data only where this is necessary to operate this website securely, respond to enquiries, provide downloads, operate the ORBITAL 1 configurator, manage the product waitlist or send newsletters.

Depending on the individual processing activity, processing is based on:

• your consent pursuant to Article 6(1)(a) GDPR;
• the performance of a contract or steps taken prior to entering into a contract pursuant to Article 6(1)(b) GDPR;
• compliance with a legal obligation pursuant to Article 6(1)(c) GDPR; or
• our legitimate interests pursuant to Article 6(1)(f) GDPR.

03. Hosting

This website is hosted by:

When you visit this website, personal data may be processed on STRATO’s systems. This particularly includes technical connection and access data required to provide the website securely and reliably.

We use STRATO on the basis of Article 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and efficient operation of this website. Where the processing is necessary for the performance of a contract or for steps taken prior to entering into a contract, the additional legal basis is Article 6(1)(b) GDPR.

STRATO processes personal data on our behalf. We have concluded a data processing agreement with STRATO pursuant to Article 28 GDPR.

04. Server Log Files

When you access this website, the hosting provider automatically records technical information in server log files. This information may include:

• the IP address or an anonymised version of the IP address;
• the date and time of access;
• the requested page or file;
• the amount of data transferred;
• the referring website;
• the browser type and browser version;
• the operating system used; and
• information about whether the request was successful.

The data is processed to deliver the website, detect technical problems, maintain system security and prevent misuse or attacks. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website.

STRATO retains technical and security log data for the periods required for operation and security. The hosting log files made available to us are generally anonymised and available for a limited period. Log data is not combined with other data for advertising, profiling or user tracking.

05. Encrypted Transmission

This website uses TLS encryption to protect data transmitted between your browser and our server. You can usually recognise an encrypted connection by the lock symbol in your browser and the use of “https” in the address bar.

06. Contact by Email, Telephone or Contact Form

You may contact us by email, telephone or through a contact form provided on the website. When you contact us, we may process the following information: your name; your email address; your telephone number, where provided; your company, where provided; the content of your message; and any other information you voluntarily provide.

We process this information to answer your enquiry and handle any subsequent communication. Where your enquiry relates to a possible purchase, order, support request or other contractual relationship, processing is based on Article 6(1)(b) GDPR. For other enquiries, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is the efficient processing of enquiries addressed to us.

Mandatory fields in the contact form are limited to information required to process your enquiry. Providing any additional information is voluntary. Your data will be deleted when your enquiry has been conclusively resolved, unless statutory retention obligations, contractual requirements or legitimate interests require longer storage.

07. Email Processing through Google Workspace

We use Google Workspace to receive, store and process business email communication. If you contact us by email, through the waitlist form, or through a contact form that forwards your message to us by email, the content of your message and the associated communication data may be processed through Google Workspace.

This may include: your email address; sender and recipient information; the date and time of communication; email headers and technical metadata; the subject and content of the message; and attachments sent with the message.

Google processes this information on our behalf to provide the email service. We have concluded a data processing agreement with Google pursuant to Article 28 GDPR. The legal basis corresponds to the purpose of the communication and is generally Article 6(1)(b) GDPR or Article 6(1)(f) GDPR. Google may use affiliated companies and subprocessors in countries outside the European Union or the European Economic Area. Where no adequacy decision by the European Commission exists, transfers are protected in particular by the European Commission’s Standard Contractual Clauses and additional contractual and technical safeguards.

09. Downloads

We provide manuals, software, scripts and other files for download. Ordinary downloads do not require registration unless expressly stated otherwise. When you download a file, the technical access information described in the section “Server Log Files” is processed to deliver the file securely and detect technical problems or misuse. The legal basis is Article 6(1)(f) GDPR. We do not use download information to create individual user profiles.

10. ORBITAL 1 Web Configurator

The website provides a browser-based configurator that can communicate with a compatible ORBITAL 1 device connected to your computer. Communication with the device only begins after you actively grant your browser permission to access the connected device. You can withdraw this permission through your browser settings or by disconnecting the device. Device settings, MIDI assignments and configuration information are processed locally between your browser and the connected ORBITAL 1 device. They are not intentionally transmitted to us or stored on our server. The browser may process technical device information required to establish the connection. We do not use this information for advertising, tracking or profiling.

11. Cookies and Similar Technologies

This website currently does not use analytics services, advertising tracking or other non-essential cookies that require consent. Technically necessary cookies or browser storage may be used where this is essential to: provide a function expressly requested by you; protect forms against misuse (such as hidden form security tokens); maintain security settings; remember technical configuration settings; or operate the website correctly.

Access to information stored on your device that is strictly necessary to provide a function requested by you is based on Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Any associated processing of personal data is based on Article 6(1)(f) GDPR or, where applicable, Article 6(1)(b) GDPR. If we introduce analytics, embedded media, advertising services or other non-essential technologies in the future, these services will only be activated after any legally required consent has been obtained. This Privacy Policy will be updated before such services are activated.

12. Social Media Links

This website contains ordinary links to profiles on platforms such as Instagram and Facebook. These links are not embedded social media plugins. Merely visiting our website does not intentionally cause personal data to be transmitted by us to these platforms. Data may be transmitted to the respective provider only after you actively click the link and leave our website. From that point onwards, the privacy policy and data processing practices of the respective platform apply. We have no control over the processing carried out by the platform provider. The respective provider may process personal data outside the European Union or the European Economic Area.

13. External Links

This website may contain links to websites operated by third parties. We have no control over the processing of personal data on external websites. When you follow an external link, the privacy policy of the respective website operator applies.

14. Recipients of Personal Data

Personal data may be disclosed to service providers where this is necessary for the operation of the website or the processing of your enquiry. Possible recipients include: our website hosting provider; our email service provider; technical and IT service providers; legal, tax or accounting advisers; and public authorities where disclosure is required by law.

Service providers acting on our behalf are contractually bound in accordance with Article 28 GDPR where required. We do not sell personal data.

15. International Data Transfers

The website itself is hosted by STRATO in Germany. International data transfers may nevertheless occur when: email communication is processed through Google Workspace; a service provider uses subprocessors outside the European Economic Area; or you actively follow a link to an external platform. Where personal data is transferred to a country outside the European Union or the European Economic Area, the transfer is based on an adequacy decision, the European Commission’s Standard Contractual Clauses or another legally recognised transfer mechanism.

16. Storage Periods

Unless a specific storage period is stated in this Privacy Policy, personal data is stored only for as long as it is required for the purpose for which it was collected. Data may be retained for a longer period where: statutory retention obligations apply; the data is required for the performance of a contract; consent must be documented; security incidents must be investigated; or the data is required for the establishment, exercise or defence of legal claims. After the relevant purpose and any mandatory retention periods have expired, the data will be deleted or anonymised.

17. Your Rights

Subject to the applicable legal requirements, you have the following rights: the right of access pursuant to Article 15 GDPR; the right to rectification pursuant to Article 16 GDPR; the right to erasure pursuant to Article 17 GDPR; the right to restriction of processing pursuant to Article 18 GDPR; the right to data portability pursuant to Article 20 GDPR; the right to object pursuant to Article 21 GDPR; and the right to withdraw consent pursuant to Article 7(3) GDPR.

Where processing is based on Article 6(1)(f) GDPR, you have the right to object to the processing on grounds relating to your particular situation. Where personal data is processed for direct marketing purposes, you may object to the processing at any time. Following such an objection, your personal data will no longer be processed for direct marketing purposes.

To exercise your rights, contact: devices@arteffect.de

You also have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for our registered office is: State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Germany.

18. Automated Decision-Making

We do not use automated decision-making or profiling within the meaning of Article 22 GDPR.

19. Changes to this Privacy Policy

We may update this Privacy Policy if the website, its functions, service providers or legal requirements change. The current version published on this website applies.