Privacy Policy

Controller

Ava's Frequency

Hans-Narchwitza-Straße 88, 14806 Bad Belzig, Germany

Email: sessions@avasfrequency.com

Hosting and delivery of this website

This website is delivered by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you visit a page, Cloudflare processes your IP address, the requested address, date and time, browser and device information and similar technical data in order to deliver the page, protect it against attacks and keep it running. Texts, blog entries and videos of this website are stored with Cloudflare in the European Union.

The processing is based on our legitimate interest in a secure and reliable website (Article 6(1)(f) GDPR). Cloudflare participates in the EU-U.S. Data Privacy Framework and offers the EU Standard Contractual Clauses for transfers to the USA. Further information: https://www.cloudflare.com/privacypolicy/

Fonts

The fonts of this website are delivered from our own server. Your browser does not connect to Google Fonts or other font providers.

Contact form

When you send us a message via the contact form, we process your name, email address, subject and message in order to answer your request. The message is delivered to our email inbox through the Cloudflare Email Service; our inbox is hosted by Google (Gmail).

The processing is necessary to answer your request and, where applicable, for pre-contractual steps (Article 6(1)(b) GDPR), and otherwise based on our legitimate interest in answering enquiries (Article 6(1)(f) GDPR). We delete your message when it is no longer needed, unless statutory retention obligations apply.

Shop

The store on this website uses the shop system of Ava's Frequency, which is also used on avasfrequency.com. To show the products, your browser loads the product information directly from Google Firebase (Cloud Firestore), a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, USA. Google receives your IP address and technical request data in the process.

When you place an order, we process your name, email address, shipping address (for physical products), the ordered items, your consents for digital products and payment references in order to perform the purchase contract (Article 6(1)(b) GDPR) and to comply with legal obligations such as tax record-keeping (Article 6(1)(c) GDPR). Google provides the EU Standard Contractual Clauses and participates in the EU-U.S. Data Privacy Framework. Further information: https://policies.google.com/privacy

Stripe

We use Stripe Payments Europe, Limited and affiliated Stripe companies to process payments. Stripe may receive your name, email address, billing details, order amount, payment method information, transaction identifiers, IP address, device information and other data required for payment processing, authentication, fraud prevention, refunds and compliance.

The processing is necessary to perform the purchase contract and payment, to comply with legal obligations, and for our legitimate interest in secure fraud-resistant payment processing (Article 6(1)(b), (c) and (f) GDPR, as applicable). Card details are entered directly on Stripe’s hosted checkout and are not stored by us. Stripe may act as our processor and as an independent controller for its own regulatory and fraud-prevention purposes. Further information: https://stripe.com/privacy

Resend: order emails and download links

We use Resend, a service of Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA, to send transactional messages such as order confirmations and personal download links.

For this purpose we transmit the recipient email address, sender information, order and product details, the personal time-limited download link, and technical delivery metadata. Processing is necessary to perform the purchase contract and deliver the digital product (Article 6(1)(b) GDPR) and for our legitimate interest in reliable, traceable email delivery (Article 6(1)(f) GDPR).

Resend states that data is stored in the United States and provides a Data Processing Addendum including safeguards for international transfers, such as the EU Standard Contractual Clauses and participation in the EU-U.S. Data Privacy Framework. Further information: https://resend.com/legal/privacy-policy and https://resend.com/legal/dpa

YouTube videos

Some videos on this website are hosted on YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Before you start such a video, you only see a preview image that is delivered from our own server; no connection to YouTube is made.

Only when you click play does your browser load the YouTube player in privacy-enhanced mode (youtube-nocookie.com). From that moment YouTube receives your IP address and technical data and may store information on your device and evaluate your use of the video. The legal basis is your consent, given by clicking play (Article 6(1)(a) GDPR, Section 25(1) TDDDG). You can avoid this at any time by not starting the video. Further information: https://policies.google.com/privacy

Browser storage

We do not use advertising, marketing or analytics cookies.

We use your browser’s local storage only where necessary to provide functions you request: to keep your shopping cart and shop session, and, for the people who edit this website, to keep them signed in and to secure unsaved text. These entries do not serve advertising or cross-site tracking. Their use is necessary to provide the requested functions (Section 25(2) no. 2 TDDDG).

Retention

We store personal data only as long as necessary for the respective purpose. Order records are kept as long as required for tax, legal and business purposes, then deleted or anonymised where possible.

Your rights

You have the right to access, correction, deletion, restriction of processing, data portability and to object to processing based on legitimate interests, where the legal requirements are met. You may withdraw a consent at any time with effect for the future. Contact: sessions@avasfrequency.com

You also have the right to lodge a complaint with a data protection supervisory authority, for example the one responsible for our place of business in Brandenburg, Germany.