Legal
Privacy Policy
1. Privacy at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to the privacy policy set out below this text.
Data collection on this website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the section "Information about the controller" in this privacy policy.
How do we collect your data?
Some of your data is collected when you provide it to us. This may, for example, be data you enter into a form. Other data is collected automatically or with your consent by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of the page request).
What do we use your data for?
Part of the data is collected to ensure that the website functions correctly. The reach of the website is measured exclusively server-side and in anonymised form (without cookies, without storing IP addresses).
What rights do you have regarding your data?
You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can withdraw this consent at any time for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Where we process data on the basis of legitimate interests, you may object to that processing under the conditions of Art. 21 GDPR. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
2. Hosting
We host the content of our website with an external service provider (host). The personal data collected on this website is stored on the host's servers. This may include IP addresses, contact requests, meta and communication data, names, website access data and other data generated via a website.
Our host is:
Hostinger International Ltd.
61 Lordou Vironos Street
6023 Larnaca, Cyprus
External hosting is carried out for the purpose of providing our online offering securely, quickly and efficiently through a professional provider (Art. 6 (1) (f) GDPR). We have concluded a data processing agreement (DPA) with our host in accordance with Art. 28 GDPR, which ensures that the host processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
3. General information and mandatory information
Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
Please note that data transmission over the internet (e.g. communication by email) may have security gaps. Complete protection of data against access by third parties is not possible.
Information about the controller
The controller responsible for data processing on this website is:
Akovic, Zöllner, Vonnemann u. Holthaus GbR ("Feed Them Hope")
Grünstr. 25
45525 Hattingen
Germany
Represented by: Arandel Akovic
Email: info@feedthemhope.com
Phone: +49 1575 4371481
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).
Storage period
Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a justified request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible grounds for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, deletion will take place after these grounds cease to apply.
Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. The legality of the data processing carried out until the withdrawal remains unaffected.
Right to object to data processing
Where we process personal data on the basis of legitimate interests (Art. 6 (1) (f) GDPR) – for example in the server log files, the server-side reach measurement or the handling of your enquiries – you have the right to object to that processing at any time on grounds relating to your particular situation (Art. 21 (1) GDPR). If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves to establish, exercise or defend legal claims.
Where your personal data is processed for the purpose of direct marketing, you may object to that processing at any time and without giving reasons (Art. 21 (2) GDPR); your data will then no longer be used for that purpose. An informal message to info@feedthemhope.com is sufficient to lodge an objection.
Right to lodge a complaint with the competent supervisory authority
In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work or place of the alleged breach. The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format.
Information, deletion and correction
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of data processing and, if applicable, a right to correction or deletion of this data.
SSL / TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
4. Data collection on this website
Cookies and storage in your browser
This website uses a small number of cookies as well as your browser's local storage (localStorage). Neither the cookies nor the storage entries serve advertising, tracking or analytics purposes; your behaviour is not tracked across websites. In detail, these are:
- sitelang (cookie, lifetime 12 months): stores the language you have selected so that the site appears in the same language on your next visit. This cookie is only set once you actively switch the language – not merely by opening the page.
- Session and login cookies (cookies, lifetime until you close your browser or sign out): set exclusively in the password-protected internal areas – the band area and the editorial access – where they keep you signed in. They are not set when you visit the public pages or the shop.
- fth-consent (localStorage, stored until you delete it): remembers whether you have consented to loading the embedded content from YouTube or Spotify, so that you do not have to make that decision again for every video. As long as this entry is missing, no connection to YouTube or Spotify is established.
- fthCart (localStorage, stored until you delete it): stores the contents of your shopping cart (item, variant, quantity) in your browser so that it is preserved when you move between pages and on a later visit. The entry is only created once you add an item to the cart; the cart is not stored on our server.
All of the storage described above is strictly necessary in order to provide you with the service you have expressly requested. It is therefore exempt from consent pursuant to Sec. 25 (2) No. 2 TDDDG; no consent banner is required for it. The legal basis for the subsequent processing of the data stored in this way is our legitimate interest in a functioning and user-friendly website (Art. 6 (1) (f) GDPR); for storing your decision regarding embedded content, it is your consent (Art. 6 (1) (a) GDPR).
You can delete cookies and the data stored in your browser at any time via your browser settings, or restrict their storage. Please note that your language selection, any consent given for embedded content and the contents of your shopping cart will be lost as a result.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- browser type and browser version
- operating system used
- referrer URL
- host name of the accessing computer
- time of the server request
- IP address
This data is not merged with other data sources. This data is collected on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website – for this purpose, the server log files must be recorded.
Server-side reach measurement
This website counts page views server-side and in anonymised form. No cookies are set, no IP addresses are stored and no user profiles are created. The legal basis is our legitimate interest in analysing the reach of our offering (Art. 6 (1) (f) GDPR).
Enquiry by email or telephone
If you contact us by email or telephone, your enquiry including all resulting personal data (name, enquiry) will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent. This data is processed on the basis of our legitimate interest in the effective handling of enquiries addressed to us (Art. 6 (1) (f) GDPR) or on the basis of your consent (Art. 6 (1) (a) GDPR) and – where applicable – on Art. 6 (1) (b) GDPR if your enquiry relates to the initiation of a contract.
Applications via the form at /bewerbung
At feedthemhope.de/bewerbung you can apply to join us as a musician. We process only the information you provide there yourself: name, email address, telephone number (optional), place of residence or postcode, age, a social media profile (optional), your answers regarding availability and participation in the band, your details on experience, equipment and musical taste, your application text, any YouTube addresses you supply and any image and audio files you upload.
The legal basis is the performance of pre-contractual measures taken at your request (Art. 6 (1) (b) GDPR) together with the consent you give in the form (Art. 6 (1) (a) GDPR). You may withdraw that consent at any time with effect for the future; the lawfulness of the processing carried out until withdrawal remains unaffected.
Your application is sent to an email address of the band and is additionally stored on our server in a password-protected internal area to which only members of the band have access. It is not passed on to any other third parties. We do not store your IP address in plain text, but only as a shortened check value generated with a secret server key. This serves solely to protect the form against automated misuse.
We delete your application documents including all uploaded files no later than six months after the selection process has been completed. If you would like your data deleted sooner, an informal message to info@feedthemhope.com is sufficient.
Please note that the application page itself is available in German only.
Orders via the shop at /shop
When you place an order through our shop at feedthemhope.com/shop, we process the data you provide (name, email address, shipping address and the items ordered) to perform the purchase contract. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract or pre-contractual measures).
For payment processing we use the payment provider PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal processes the data required for payment processing (including name and payment data) under its own data protection responsibility; we have no influence over this processing. This may involve a transfer of your data to companies affiliated with PayPal outside the EU/EEA (in particular the USA). Further information, including on the safeguards used, is available in PayPal's privacy policy: https://www.paypal.com/en/webapps/mpp/ua/privacy-full
To produce and ship individually printed print-on-demand items, we work with the production and fulfilment provider Brand Canyon (brandcanyon.de). Your shipping address is transmitted to them as early as during the ordering process, namely as soon as we determine the shipping costs for your cart – that is, before the purchase contract is concluded. Without this transmission, the shipping costs, which depend on your delivery address, cannot be calculated; the legal basis for this is Art. 6 (1) (b) GDPR (pre-contractual measures taken at your request). Once you have placed your order, your name and shipping address are processed further there to fulfil the order, that is, for production and shipping. Only the details required for production and shipping are transmitted, namely your first and last name and your delivery address. Your email address and your payment details are not transmitted to Brand Canyon.
We store your order-related data for the duration of the statutory retention periods. For accounting vouchers – which include in particular invoices and proof of payment – this period has been eight years since 1 January 2025 (Sec. 147 (1) No. 4 in conjunction with (3) of the German Fiscal Code, AO). For the remaining records subject to retention, such as commercial books, inventories and annual financial statements, a period of up to ten years continues to apply. Your data is not passed on beyond the purposes named here (contract performance, payment processing, shipping).
When you submit an order at checkout, we likewise do not store your IP address in plain text, but – as with the application page – only as a shortened check value generated with a secret server key. This serves solely to protect the ordering process against automated misuse.
5. Plugins and embedded content
On this website we embed content from YouTube and Spotify. This content is not loaded automatically. Instead, you initially only see a preview field. Only when you actively click on it and thereby give your express consent is a connection established to the respective provider and the content loaded (so-called two-click solution). No data is transmitted to YouTube or Spotify before your click.
YouTube
The provider of the YouTube videos is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
As soon as you click on the preview field, the video is loaded in extended data protection mode (via youtube-nocookie.com). This establishes a connection to YouTube's servers and transmits your IP address to Google. If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour to your personal profile.
The legal basis is your consent (Art. 6 (1) (a) GDPR and § 25 (1) TDDDG). Your consent is stored in your browser; you can withdraw it at any time with effect for the future by deleting the website data stored in your browser. As Google may also process data in the USA, by loading the content you also consent to a possible transfer of your data to the USA (Art. 49 (1) (a) GDPR). Further information on data protection at YouTube can be found at: https://policies.google.com/privacy?hl=en
Spotify
The provider of the Spotify player is Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden.
As soon as you click on the preview field, a connection is established to Spotify's servers and your IP address is transmitted to Spotify. If you are logged into your Spotify account, Spotify can assign the visit to this website to your user account.
The legal basis is your consent (Art. 6 (1) (a) GDPR and § 25 (1) TDDDG), which you can withdraw at any time with effect for the future. Further information can be found in Spotify's privacy policy: https://www.spotify.com/us/legal/privacy-policy/
Fonts (locally hosted)
This website uses so-called web fonts for the uniform display of typefaces. The fonts used are stored locally on our server and are loaded exclusively from there. No connection to third-party servers (such as Google Fonts) is established; no data is transmitted to third parties for this purpose.
6. Language of this privacy policy
This privacy policy is a translation of our German privacy policy, provided for the convenience of our international visitors. The German original is available at feedthemhope.de/datenschutz. In the event of any discrepancy, the German version is authoritative.
