Privacy policy
Last updated: September 2026
This policy explains which personal data is processed when you visit this website or send us a booking request. The website uses no tracking, analytics or advertising cookies and loads no third-party content such as external fonts, videos or players without your consent.
Controller
Mika Hertler Am Schwarzen Steg 5a 95448 Bayreuth Deutschland Email: booking@typhoon.band · Phone: +49 176 64472296
Hosting and server logs
The website is hosted by Vercel Inc. (USA). When you open a page, technically necessary data is processed: IP address, date and time, requested page, referrer and browser information. This serves the secure and stable operation of the site (Art. 6(1)(f) GDPR). Vercel acts as our processor under Art. 28 GDPR.
Booking requests
If you use the booking form, we process the data you enter (name, email, phone, event date, location, type of event, message), the language of the page and your browser's user-agent string, in order to answer your request and prepare a possible booking (Art. 6(1)(b) GDPR).
- Supabase Inc. stores the request in our database (processor).
- Resend Inc. (USA) delivers the notification email to our booking address (processor).
We delete requests once they are no longer needed to handle them, unless statutory retention obligations apply (for example after a booking contract).
Music and images
Demo recordings and photos are delivered by our hosting provider or from the Supabase storage. Your IP address is processed for technical reasons when these files are loaded (Art. 6(1)(f) GDPR). Recordings are streamed only; no download is offered.
Transfers to third countries
Where processors are based in or access data from the USA, transfers rely on appropriate safeguards (EU–US Data Privacy Framework and/or EU Standard Contractual Clauses).
Local storage instead of cookies
The public website sets no cookies. Your privacy choice is stored only in your browser (localStorage, key “typhoon.consent.v1”) and can be changed at any time via “Privacy settings” in the footer. The band's login area uses technically necessary cookies for band members only.
External platforms
Links to Spotify, YouTube, Instagram and similar services are plain links. Data is only transmitted to these providers when you follow a link. Embedded players or videos, if offered, load only after you allow “External media”.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), and you can withdraw any consent with effect for the future. Contact: booking@typhoon.band.
You also have the right to lodge a complaint with a data protection supervisory authority, for example the Bavarian Data Protection Authority (BayLDA) in Ansbach.
