Privacy policy

The controller responsible for this website is Sebastian Graulich, Gärtnergasse 22, 55115 Mainz, Germany. You can reach us at hello@audiokissa.com.

This policy explains which personal data AudioKissa processes, why, and what rights you have. You can explore the directory, save spaces and read venue pages without an account.

AudioKissa is hosted by Vercel Inc. (USA). When you open a page, the hosting servers process the technical data your browser sends — IP address, date and time, the requested page, the referring page, browser and operating system — to deliver the site and to protect it against abuse. The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Vercel processes this data on our behalf.

AudioKissa's own fonts and icons are served from our servers. The Google map and venue cards described in section 4 load Google's fonts from Google as part of those services.

We use Vercel Web Analytics to count page views. It sets no cookies and stores nothing on your device for this purpose; visitors are distinguished by a hash of the request that changes daily, results are aggregated, and you are not tracked across sites. The legal basis is our legitimate interest in understanding how the site is used (Art. 6(1)(f) GDPR). You can object at any time under Cookie Settings in the navigation; your choice is stored in your browser.

The map, the venue cards and venue details are provided by Google Maps Platform (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, together with Google LLC, USA). When they load, your browser connects to Google's servers, including Google Fonts for the fonts these components use, and transmits your IP address and technical data such as the page you are on. Google may use cookies or similar technologies under its own responsibility. AudioKissa does not receive personal data about you from Google and does not store the place details Google shows.

The legal basis is our legitimate interest in showing where listening spaces are and presenting their current details (Art. 6(1)(f) GDPR). See Google's privacy policy and the Google Maps terms.

When you search for an address while registering a space, or for an alert location, your search text and IP address are sent to Photon, a geocoding service operated by komoot (Germany) that uses OpenStreetMap data. If you choose “Use my current location” for an alert, your browser asks for permission first; the position is only used to fill in the alert location.

Accounts are optional and intended for venue operators and editors. We store your email address, an optional display name, your password in hashed form, and sign-in session data. Your browser keeps a sign-in token so you stay signed in. We use this data to let you claim and manage venue listings (Art. 6(1)(b) GDPR). If you forget your password, we email you a one-time code that expires after 15 minutes. To delete your account, write to hello@audiokissa.com.

For an alert we store your email address, the location and radius you chose, and how often you want to hear from us. Alerts start only after you confirm the link we email you (double opt-in), and every alert email contains a link to stop it. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with that link or by writing to us.

Unconfirmed requests expire after 48 hours and are deleted after 7 days. Alerts you stop, or replace with a new one, are deleted after 30 days.

Information you enter in the registration form — venue name, location, description, sound system details, photos and the information source — is reviewed by an editor and published on AudioKissa only if we approve it. An operator name you enter is used for the review and is not published.

If you give us your email address with a submission, we use it only to tell you whether the space was published, then delete it; it is never shown on the site. The legal basis is your consent (Art. 6(1)(a) GDPR). Otherwise the legal bases are the service you request and our legitimate interest in accurate listings (Art. 6(1)(b) and (f) GDPR).

When you claim a space, we process your account email, an optional contact phone number and an optional proof document to review the claim (Art. 6(1)(b) GDPR). Proof documents are never published; only our admins can see them. We delete a proof document when a claim is rejected or replaced, and keep it for as long as an approved ownership lasts.

We send email through our mail provider IONOS SE (Germany). When you write to us, we use your message and address to reply. Our admin tools keep a record of emails exchanged with venue operators about their listings.

Accounts, listings, alerts and uploaded files are stored with Convex, Inc. (USA), which processes this data on our behalf. Where data is processed outside the EU, we rely on the safeguards our providers offer, such as the EU–US Data Privacy Framework or standard contractual clauses.

AudioKissa stores a few items in your browser's local storage:

• your sign-in session, if you sign in;
• your analytics opt-out, if you make one;
• that you have seen the welcome introduction;
• the spaces you saved to your collection.

None of these are used for tracking. They are needed for features you use (§ 25(2) TDDDG), and you can remove them at any time by clearing this site's data in your browser.

We keep personal data only as long as the purposes above require, or as long as the law obliges us to. The periods for alerts, submitter addresses and proof documents are described in their sections. Account data is kept until you ask us to delete your account.

You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16) or erased (Art. 17), to restrict its processing (Art. 18), to data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). To exercise these rights, write to hello@audiokissa.com. You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

You are not required to provide personal data to browse AudioKissa. An account needs an email address and a password, and an alert needs an email address; without them we cannot provide those features. We do not use automated decision-making or profiling.

We update this policy when AudioKissa's features or providers change. The date above shows the latest version.