Privacy Policy

2WEI Music GmbH – Privacy Policy

We take the issue of protecting your personal data very seriously. This Privacy Policy explains how personal data is processed when using our website and outlines the rights you hold in this regard.

1. Controller

The Controller pursuant to Art. 4 para. 7 EU General Data Protection Regulation (GDPR) is

2WEI Music GmbH
Christian Vorländer & Simon Heeger
Thedestraße 13-17
22767 Hamburg

You can contact us either via post or via email at:

2. Data processing – Information we store about users:

If you visit our site to read or download information on our pages, we collect and store only the following information about you:

2.1 Server log files

Every time you access our website or download a file, data is temporarily stored in a log file, containing:

  • the IP address used
  • the operating system and browser used
  • the time of access
  • the pages you visit on our site and data volume transmitted
  • the website you last visited (if transmitted)

2.2 E-Mail and Contact forms

If you send us an e-mail containing personal information, then the information collected will be solely used to respond to your message.

If you use the contact form on our website, you will be asked to enter your name and email address. In addition, our system collects the IP address of the computer you use to submit the form as well as the date and time the form is submitted. The information you provide is collected to the required extent and is used exclusively for the purpose of processing your inquiry.

‍2.3 Cookies

Our website uses cookies necessary for the technical performance of our services and to facilitate the use of our website You can configure your web browser software to reject or restrict cookies; however, some parts of the website may not have full functionality in that case. Cookies are small text files that are placed on your end device via your browser. We use cookies for creating a user-friendly website. Cookies remain on your end device until they expire or until you delete them. They enable us to recognize your browser on your next visit.

2.4 Links

Our website contains links to third-party websites pre-checked by us. We are not responsible for the content of the pages or for their data privacy practices or regulations.

2.5 Social Media

Our website contains icons and images that link to our various social media profiles. If you visit our social media profiles, channels of websites, your personal data may be processed.

When you log in to your social media account and visit us on social media platforms, the operator of the respective platform might have the ability to associate your visit with your user account, channel, or profile. A detection and association with your social media profile may even be possible if you are not logged in, e.g. via the use of cookies or your IP address. By collecting and matching your personal information, the social media platform operator may create user profiles to enable the display of personalized advertising within and outside of the respective social media presence.

Please note that we have no influence over the data processing or storage on our social media profiles or channels by the social media operator, although we are jointly responsible as controllers together with the respective operator of the social media platform for the data processing activities triggered by your visit. You may as a matter of principle assert your rights (to information, rectification, erasure, restricted processing, data portability and objection) both against us and against the operator of the social media portal.

If you send us an inquiry on the social media platform, we may refer you to other, secure communication channels that ensure confidentiality, depending on the required response. You can always submit confidential inquiries to us by sending them to the address stated in our imprint.

The data collected directly from us via the social media presence will be deleted from our systems as soon as the purpose for their storage lapses, you ask us to delete it, you revoke your consent to the storage or the purpose for the data storage lapses. Stored cookies remain on your device until you delete them. Mandatory statutory provisions – in particular, retention periods – remain unaffected. We have no control over the storage duration of your data that are stored by the social network operators for their own purposes. For details, please contact the social network operators directly (e.g. in their privacy policy, see below).

Please also note that we are unable to completely write down all data processing activities of social media portal operators. The respective processing activities/storage duration are listed in the respective terms of use and data privacy policies of the social media portals (see below).

2.5.1 Facebook

This is our Facebook profile:  The provider is Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. For further details please refer to the Facebook privacy policy: Set your advertising preferences in your account

2.5.2 Instagram

The provider of our Instagram profile is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. For details of how your personal data is processed, please refer to the Instagram privacy policy:

2.5.3 Twitter

Our Twitter profile is operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. Twitter privacy policy:

2.5.4 YouTube

We have a YouTube profile. Further details please find below (2.6.1.).

2.5.5 Vimeo

We have a Vimeo profile. Further details please find below (2.6.2.).

2.5.6 Spotify

We use Spotify The provider is Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm in Sweden. Please refer to the Spotify data privacy statement for more information:

2.6 Embedded Video Content

Our website uses several video content platforms such as or for the display of audio-visual references and sample videos.

If you click the “play” button, the video content platforms may store your personal information. If you have a profile at the respective video platform, further personal data may be processed. For detailed information, please see below:

2.6.1 YouTube (with expanded data protection integration)

Some of our embedded videos are stored on and are directly playable from our website. The video-platform is operated by YouTube, LLC, a company of Google Inc. By visiting our website with embedded YouTube-videos a connection between your browser and the Google DoubleClick network may be established. We have no influence on the data transferred to YouTube/Google. We make sure to embed our videos in Youtube’s advanced data protection mode. Based on the information given by YouTube, when using the advanced data protection mode no cookies are placed on your computer and no data about you as a user of our website are transmitted to YouTube if you do not “click” the “play” button of the embedded videos. If you “click” “play” data is transferred and YouTube places cookies on your computer and receives the information that you have visited our website. Furthermore, server data and logfiles may be transmitted, regardless of whether you are logged into your YouTube profile or not. If you are logged in all data is directly associated with your user account. YouTube might store the data (also for non logged-in users) as a user profile and use them for purposes of advertising, market research and need-based design of its website, to provide demand-orientated advertising and to inform other users of the platform about your activities on our website. You have a right of objection against the generation of such user profiles. To exercise this right to object you need to contact the Youtube. Their postal address is: YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, telephone: +1 / 650 253 0000, Fax: +1 / 650 253 0001, E-Mail support: Please find more information about their data privacy policy here: and here

2.6.2 Vimeo

Some of our videos are hosted on and are directly playable and embedded on our website. The video-platform is operated by Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA. By visiting our website, a direct connection between your browser and a server of Vimeo may be established. Vimeo may store personal data and information about your visit of our website including your IP-address. If you have a Vimeo profile and you do not wish any association of your visit to your profile, please log out of your Vimeo account. For more information on how Vimeo handles user data, please consult the Vimeo Data Privacy Policy under and here

3. GDPR – General Info

3.1 Legal basis for processing

Personal data will be processed according to the following GDPR regulations according to Art.6.

3.1.1 Consent

If you have given us your consent for the processing of your personal data, that is the legal basis for processing your data (Art. 6 para. 1 letter a GDPR).

3.1.2 Contract

If the processing of personal data is for the purposes of initiating or fulfilling a contract with you, Art. 6 para. 1 letter b GDPR is the legal basis.

3.1.3 Legal obligations

If the processing of personal data is necessary for the fulfilment of legal obligations, legal basis is Art. 6 para. 1 letter c GDPR.

3.1.4 Legitimate interests

If we process personal data for the purposes of our legitimate interests and the legitimate interests of third parties, the legal basis is Art. 6 para. 1 letter f GDPR. Maintaining the functionality of our website, presenting our online content in an appealing manner, ensuring comprehension and general business management and marketing, testing and optimizing our own services are such legitimate interests. As part of the consideration of interests required, we take into consideration various points, e.g. type, purpose, circumstance and interest of personal information and processing on a case-by-case basis.

3.2 Data transfer

We only transfer your data to states outside the European Economic Area to the extent necessary to carry out your orders, required by law, or you have consented to. Any transfer is done in accordance with the requirements of the GDPR, especially considering the principle of data minimisation.

3.3 Storage and deletion

Stored personal data will only be processed for the time period required to serve the purpose it was stored for or for the time period required by law. If the purpose ceases to exist or if the storage period expires, the personal data will be routinely blocked or deleted in accordance with legal requirements.

3.4 Rights of data subjects

If personal data concerning you is processed, you are the data subject as defined in the GDPR, and have the following rights against the data controller:

3.4.1 Right to be informed

Within the scope of Art. 15 of the GDPR, you are entitled to request information about your data that is being processed by us at any time.

3.4.2 Right to rectification

If your personal data is incorrect or incomplete, you are entitled, within the scope of Art. 16 of the GDPR, to have any incorrect personal data concerning you to be rectified and/or to have incomplete personal data completed.

3.4.3 Right to restrict processing

Within the scope of Art. 18 of the GDPR, you may, if the legal conditions are met, request that processing of your personal data be restricted.

3.4.4 Right to deletion

Within the scope of Art. 17 of the GDPR, you may at any time request that your personal data be deleted, provided we are not legally obliged or entitled to further process your data.

3.4.5 Right to data portability

Within the scope of Art. 20 of the GDPR, you have the right to receive the personal data concerning you with which you have provided us in a structured, commonly used and machine-readable format, and to transmit this date to another controller.

3.4.6 Right to object

Within the scope of Art. 21 of the GDPR, you have the right to object to the processing of your data for direct marketing or profiling purposes. You may object to processing on the basis of an assessment of interests, stating the reasons arising from your particular situation.

3.4.7 Right to withdraw declaration of consent

You have the right to withdraw your declaration of consent to the processing of personal data at any time. You can revoke your consent without completing a form, e.g. by emailing or by sending a message to the contact address listed above. Revoking your consent does not affect the legality of the processing performed on the basis of your previously issued consent.

3.4.8 Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to file a complaint with a supervisory authority, e.g. Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Str 22, 7. OG, 20459 Hamburg if you consider that the processing of personal data concerning you infringes the GDPR.

3.5 Amendments

It will be necessary to make periodic amendments to the data privacy statement. Reviewing the data privacy statement at regular intervals will give you the opportunity to stay up-to-date.

3.6 California privacy rights

In addition to the rights as explained in this Policy, California residents who provide personal information to obtain products or services for personal, family, or household use are entitled to request and obtain from us, once a calendar year, information about the personal data we shared, if any, with other businesses for marketing uses. If applicable, this information would include the categories of personal data the names and addresses.

4. Contact us:

For further information about our Privacy Policy or practices, or to access or correct your personal information, or to make a complaint, please contact us using the details set out below: