Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Wystle
Philipp Kastl and Simon Weichert
Biegenstraße 6
35037 Marburg
Germany

Phone: +49 176 31332903
Email: hello@wystle.de

2. General information

We process personal data only where this is necessary to provide a functioning website along with our content and services, or where you have given your consent.

Personal data means any information that can be used to identify you personally. You can generally use this website without providing any personal data.

Please note that data transmission over the internet can be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

3. Hosting

This website is hosted by an external service provider. Personal data collected on this website is processed on that provider's servers. This may include IP addresses, contact requests, metadata and communication data, contact details, names, website access data and other data generated via a website.

The provider is Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, United States.

Vercel operates a global content delivery network. Requests to our website are generally served from a location geographically close to you; however, processing in the United States or other third countries cannot be ruled out.

We use this provider in the interest of a secure, fast and efficient presentation of our online offering by a professional provider (Art. 6(1)(f) GDPR).

We have entered into a data processing agreement with Vercel pursuant to Art. 28 GDPR. This contract, required under data protection law, ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Transfers to the United States are based on Vercel's certification under the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission pursuant to Art. 45 GDPR). In addition, Vercel has committed in the data processing agreement to comply with the European Commission's Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

Further information can be found in Vercel's privacy notice: vercel.com/legal/privacy-notice

Server log files

The provider of these pages automatically collects and stores information in so-called server log files, which your browser transmits automatically. These are:

• browser type and version
• operating system used
• referrer URL
• host name of the accessing device
• time of the server request
• IP address

This data is not merged with other data sources. It is collected on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the technically error-free presentation and the security of our website. Log data is automatically deleted after one hour.

4. Contacting us

If you contact us by email or telephone, the details you provide, including your contact data, will be stored by us in order to process your enquiry and in case of follow-up questions.

This data is processed on the basis of Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or to pre-contractual measures (for example booking enquiries). In all other cases, processing is based on our legitimate interest in effectively handling the enquiries addressed to us (Art. 6(1)(f) GDPR).

The data will remain with us until you ask us to delete it or the purpose for storing it no longer applies. Mandatory statutory provisions — in particular statutory retention periods — remain unaffected.

5. Newsletter

Sign-up and double opt-in

If you would like to subscribe to our newsletter, we require an email address from you, together with information allowing us to verify that you are the owner of the email address provided and that you consent to receiving the newsletter.

Sign-up uses what is known as the double opt-in procedure: after you submit the sign-up form, you will receive an email asking you to confirm your subscription by clicking a confirmation link. Only then will we add you to our mailing list. This ensures that nobody can sign up using someone else's email address.

To document your consent, we log both the sign-up and the confirmation, including the respective IP address and timestamp. We retain this log data for the duration of your subscription and beyond, for as long as necessary to defend against potential claims.

Legal basis

Data entered into the newsletter sign-up form is processed exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You may withdraw this consent at any time with effect for the future, for example via the unsubscribe link in every newsletter or by sending an informal message to hello@wystle.de. The lawfulness of processing already carried out remains unaffected by any withdrawal.

Our newsletter contains information about our music, our releases and upcoming concerts and performances.

Email service provider MailerLite

Our newsletter is distributed using the service provider MailerLite.

The provider is MailerLite Limited, 88 Harcourt Street, Dublin 2, D02 DK18, Ireland.

MailerLite is a service that allows newsletter distribution to be organised and analysed. The data you provide for the purpose of receiving the newsletter is stored on MailerLite's servers. According to the provider, its data centre is located within the European Union and is certified to ISO 27001.

We have entered into a data processing agreement with MailerLite pursuant to Art. 28 GDPR. This ensures that MailerLite processes our newsletter recipients' data exclusively in accordance with our instructions and in compliance with the GDPR.

Further information can be found in MailerLite's privacy policy: mailerlite.com/legal/privacy-policy

Statistical analysis

Our newsletters contain so-called web beacons (tracking pixels). This is a tiny image file that is retrieved from MailerLite's server when the email is opened. During this retrieval, technical information such as your IP address, the time of retrieval and details about your browser and system is collected.

We use this information to improve our newsletter technically. It allows us to analyse whether and when a message was opened and which links were clicked. This data is linked to your email address and assigned an individual ID.

This analysis is likewise carried out on the basis of the consent you give when signing up (Art. 6(1)(a) GDPR). It is unfortunately not technically possible to object to the analysis separately; in that case you would need to cancel the newsletter subscription altogether.

Retention period

The data you provide for the purpose of receiving the newsletter is stored by us until you unsubscribe, and is deleted from both our servers and MailerLite's servers after you unsubscribe. Data stored by us for other purposes remains unaffected.

6. Cookies

Cookies are small text files stored on your device that cause no damage. This website uses a single, technically necessary cookie (NEXT_LOCALE), which stores the language version you have selected or that has been detected for you (German or English), so that the site is displayed in the correct language on subsequent visits. It is stored for up to one year and contains nothing but a language code.

This cookie is technically necessary pursuant to Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG) and Art. 6(1)(f) GDPR, and therefore does not require your consent.

We do not currently use any other cookies — in particular no marketing or analytics cookies, no tracking pixels and no web analytics services. For this reason, this website does not use a cookie consent banner.

You can delete cookies at any time via your browser settings or prevent them from being stored at all. In that case, the website will determine the language from your browser settings each time you visit.

7. External links

Our website links to our profiles on third-party platforms and to support platforms. These are ordinary links — no content from these providers is embedded directly into our pages (no iframes, no players, no social media plug-ins).

This means that no connection to these providers' servers is established when you simply visit our website. A transfer of data only takes place once you actively click such a link and open the linked page. From that point on, the privacy policy of the respective provider applies, and we have no influence over the nature or extent of the processing carried out there. Please note that these providers may analyse your usage behaviour and link it to an existing user account, and that personal data may be processed in third countries outside the EU.

8. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the browser address bar changing from "http://" to "https://" and by the padlock symbol in your browser bar.

When SSL/TLS encryption is active, the data you transmit to us cannot be read by third parties.

9. Your rights

As a data subject, you have the following rights:

• Access (Art. 15 GDPR): you may request information about the personal data we process about you.
• Rectification (Art. 16 GDPR): you may request the correction of inaccurate data or the completion of incomplete data.
• Erasure (Art. 17 GDPR): you may request the deletion of your data, provided no statutory retention obligations prevent this.
• Restriction of processing (Art. 18 GDPR).
• Data portability (Art. 20 GDPR): you may request that we provide your data to you or to a third party in a commonly used, machine-readable format.
• Withdrawal of consent (Art. 7(3) GDPR): you may withdraw consent you have given at any time with effect for the future.
• Objection (Art. 21 GDPR): where processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time on grounds relating to your particular situation.

An informal message to hello@wystle.de is sufficient to exercise these rights.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other legal remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement.

The supervisory authority responsible for us is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
(Hessian Commissioner for Data Protection and Freedom of Information)
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Germany
datenschutz.hessen.de

11. Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements, or in order to reflect changes to our services, for example when introducing new features.

Last updated: 22 August 2026

This English version is provided for convenience only. In the event of any discrepancy, the German version shall prevail.