1. General information

This Privacy Policy explains how personal data is processed when you visit this website, contact SHE SOUNDS, or use the functions provided on this website.

Personal data means any information relating to an identified or identifiable natural person.

The terms used in this Privacy Policy are based on the General Data Protection Regulation, GDPR.

2. Controller

The controller responsible for data processing on this website is:

Vivika Zuske
operating under the name SHE SOUNDS.

Stuttgarter Str. 4
5395 Ostelsheim
Germany

Email: hi@shesounds.studio

3. Hosting through Squarespace

This website is created and hosted using services provided by Squarespace.

When you visit the website, Squarespace may process technical data required to display, operate, protect, and maintain the website. This may include:

• IP address

• date and time of access

• browser type and browser version

• operating system

• device information

• referring website

• pages and files accessed

• technical error and security information

The processing is carried out for the purpose of securely and reliably providing the website.

The legal basis is Article 6(1)(f) GDPR. My legitimate interest lies in the secure, stable, and technically functional operation of this website.

Where data is transferred to countries outside the European Economic Area, the transfer is based on an applicable legal transfer mechanism, such as an adequacy decision or standard contractual clauses.

4. Server log files

The website provider may automatically collect and store information in server log files.

This may include:

• IP address

• browser type

• operating system

• requested page or file

• date and time of access

• referring URL

• access status and error information

The information is processed to ensure website security, detect misuse, resolve technical problems, and provide the website reliably.

The legal basis is Article 6(1)(f) GDPR.

The data is deleted when it is no longer required for these purposes, unless further storage is required by law or is necessary to investigate a security incident.

5. Contact by email

When you contact me by email, the information you provide is processed to handle and respond to your inquiry.

This normally includes:

• your name

• your email address

• the content of your message

• any documents or information you voluntarily provide

If your inquiry concerns the preparation or performance of a contract, the legal basis is Article 6(1)(b) GDPR.

For other inquiries, the legal basis is Article 6(1)(f) GDPR. My legitimate interest is the proper handling of communications and inquiries.

The data is deleted when your inquiry has been fully resolved and no statutory retention obligations apply.

6. Contact forms

If you submit a contact form through this website, the data entered into the form is processed in order to respond to your inquiry.

This may include:

• name

• email address

• company or organisation

• message

• any other information entered into the form

The legal basis is Article 6(1)(b) GDPR where the inquiry relates to a contract or possible future cooperation.

In other cases, the legal basis is Article 6(1)(f) GDPR.

The form may be technically processed and stored through Squarespace.

The data is deleted once the inquiry has been completed, unless statutory retention requirements or contractual obligations require longer storage.

7. Cookies and similar technologies

This website may use cookies and similar technologies.

Cookies are small files or information stored on or accessed from your device.

Technically necessary cookies

Technically necessary cookies may be used without prior consent where they are required to:

• display the website

• maintain security

• save cookie preferences

• provide a function explicitly requested by you

• protect forms against misuse

The use of technically necessary technologies is based on Section 25(2) TDDDG.

Where personal data is also processed, the legal basis is generally Article 6(1)(f) GDPR. My legitimate interest is the secure and functional provision of the website.

Optional cookies

Cookies or similar technologies used for analytics, marketing, personalisation, or non-essential embedded content are only activated after you have given your consent through the cookie banner.

The legal basis for storing or accessing information on your device is Section 25(1) TDDDG.

The legal basis for the subsequent processing of personal data is Article 6(1)(a) GDPR.

You may withdraw or change your consent at any time through the cookie settings available on the website.

The withdrawal does not affect processing carried out before the withdrawal.

Simply continuing to browse the website does not constitute consent.

German law generally requires consent for storing or accessing information on a user's device unless the technology is strictly necessary for the requested service.

8. Cookie banner

When you first visit the website, you may be asked to choose whether optional cookies and services may be used.

Depending on the available settings, you may:

• accept optional cookies

• reject optional cookies

• select individual categories

• change your choice later

Technically necessary cookies may remain active because they are required to provide the website.

You can also delete cookies through your browser settings. This may restrict certain website functions.

9. Squarespace Analytics

Diesen Abschnitt nur behalten, wenn Squarespace Analytics tatsächlich aktiviert ist.

This website may use Squarespace Analytics to obtain statistical information about website use.

Depending on the configuration, the following data may be processed:

• pages viewed

• approximate location

• device and browser information

• referral source

• date and duration of visits

• interaction with website content

Where Squarespace Analytics uses non-essential cookies or comparable technologies, processing only takes place after your consent.

The legal basis for accessing or storing information on your device is Section 25(1) TDDDG.

The legal basis for processing personal data is Article 6(1)(a) GDPR.

You may withdraw your consent at any time through the cookie settings.

10. Google Analytics

Diesen Abschnitt vollständig entfernen, wenn Google Analytics nicht aktiviert ist.

If Google Analytics is enabled on this website, it is used to analyse website traffic and user behaviour.

Google Analytics may process information such as:

• shortened or complete IP address, depending on the configuration

• device and browser information

• visited pages

• duration of visits

• referral source

• approximate location

• interactions with the website

Google Analytics is only activated after you have consented to analytics cookies.

The legal basis for storing or accessing information on your device is Section 25(1) TDDDG.

The legal basis for processing personal data is Article 6(1)(a) GDPR.

You may withdraw your consent at any time through the cookie settings.

Data may be transferred to the United States. Such transfers are based on an applicable transfer mechanism, including an adequacy decision where available or standard contractual clauses.

11. Embedded content

This website may include embedded content from external providers, such as:

• YouTube

• Instagram

• TikTok

• Vimeo

• Spotify

• SoundCloud

When embedded content is loaded, the provider may receive information such as your IP address, browser information, and the page you visited.

Where the embedded service is not technically necessary, it is only loaded after you have given consent.

The legal basis is Section 25(1) TDDDG and Article 6(1)(a) GDPR.

You may withdraw your consent through the cookie settings.

Remove all providers from this section that are not actually embedded on the website.

12. Newsletter

Diesen Abschnitt entfernen, wenn du keinen Newsletter anbietest.

If you subscribe to a newsletter, your email address and any other voluntarily provided data are processed to send the newsletter.

The legal basis is Article 6(1)(a) GDPR.

Where required, the subscription is confirmed using a double opt-in procedure. The confirmation is recorded in order to document consent.

You may unsubscribe at any time by using the unsubscribe link contained in each newsletter or by contacting:

hi@shesounds.studio

Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Newsletter data is deleted after withdrawal unless continued storage is required to document consent or comply with legal obligations.

If an external newsletter provider is used, name that provider here and describe any possible transfer to third countries.

13. Spam protection and reCAPTCHA

Diesen Abschnitt nur behalten, wenn Google reCAPTCHA oder ein vergleichbarer Dienst wirklich aktiviert ist.

This website may use a spam protection service to protect forms and website functions from automated misuse.

The service may process:

• IP address

• device and browser information

• mouse and keyboard interactions

• usage and security data

• cookies or comparable identifiers

Where the service is not strictly necessary, it is only activated after consent.

The legal basis is Section 25(1) TDDDG and Article 6(1)(a) GDPR.

Where the service is strictly necessary to protect a requested form function, processing may be based on Section 25(2) TDDDG and Article 6(1)(f) GDPR.

14. Contractual and business communication

When you contact me regarding a possible booking, music licence, artist collaboration, consulting service, or other business relationship, I process the information required to prepare, conclude, and perform the relevant agreement.

This may include:

• name and contact details

• company information

• project information

• repertoire and rights information

• contractual correspondence

• payment and invoice information

The legal basis is Article 6(1)(b) GDPR.

Where communication concerns a company rather than the individual personally, processing may also be based on Article 6(1)(f) GDPR. My legitimate interest lies in conducting and documenting business communications.

Relevant contractual and accounting data may be retained in accordance with statutory German retention obligations.

15. Recipients of personal data

Personal data may be shared with service providers where this is necessary for the operation of the website or the performance of a requested service.

Possible recipients include:

• website and hosting providers

• email providers

• IT service providers

• tax advisers

• payment service providers

• professional advisers

• licensing or cooperation partners, where required for a specific inquiry

Service providers process personal data only where a legal basis exists and, where required, on the basis of a data processing agreement.

Personal data is not sold.

16. International data transfers

Some service providers may process personal data outside Germany or outside the European Economic Area.

A transfer only takes place where the legal requirements of Chapter V GDPR are met.

This may include:

• an adequacy decision by the European Commission

• standard contractual clauses

• another legally recognised transfer mechanism

Further information can be obtained by contacting hi@shesounds.studio.

17. Storage periods

Personal data is stored only for as long as necessary for the respective purpose.

Data may be stored for longer where this is required by:

• statutory retention obligations

• contractual obligations

• the establishment, exercise, or defence of legal claims

Once the purpose and any applicable retention obligations no longer apply, the data is deleted or anonymised.

18. Your rights

Under the GDPR, you may have the following rights:

• right of access under Article 15 GDPR

• right to rectification under Article 16 GDPR

• right to erasure under Article 17 GDPR

• right to restriction of processing under Article 18 GDPR

• right to data portability under Article 20 GDPR

• right to object under Article 21 GDPR

• right to withdraw consent under Article 7(3) GDPR

• right to lodge a complaint with a supervisory authority under Article 77 GDPR

To exercise your rights, contact:

hi@shesounds.studio

19. Right to object

Where personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to the processing on grounds relating to your particular situation.

If your personal data is processed for direct marketing purposes, you may object to such processing at any time.

20. Withdrawal of consent

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal applies only to future processing and does not affect the lawfulness of processing carried out before withdrawal.

21. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority.

The authority responsible for a business established in Baden-Württemberg is generally:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg

You do not have to contact me before submitting a complaint.

22. Data security

Appropriate technical and organisational measures are used to protect personal data against loss, misuse, unauthorised access, alteration, and disclosure.

Please note that data transmission over the internet cannot be guaranteed to be completely secure.

23. Automated decision-making

No automated decision-making or profiling within the meaning of Article 22 GDPR takes place unless expressly stated otherwise.

24. Changes to this Privacy Policy

This Privacy Policy may be updated where legal requirements, website functions, or services change.

The current version is available on this website.

Last updated: 17 July 2026