Privacy policy

Last updated 2026-10-09

1. Controller

prodbyfvbio®
Fabio Yannis Kluge
Mariendorfer Straße 10
34127 Kassel
Germany
E-mail: info@unitedsmusicgroup.com

2. What we process and why

Orders (name, artist name, e-mail, ordered items, payment status) to fulfil the contract, issue licences and invoices (Art. 6 (1) b GDPR) and to meet retention duties under tax and commercial law (Art. 6 (1) c GDPR, up to 10 years). We never receive your card or bank details; payments are processed by Stripe Payments Europe Ltd. (Ireland) and PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg) under their own privacy policies.

Custom requests (name, e-mail, brief, references, budget) to answer your request and prepare a quote (Art. 6 (1) b GDPR).

Newsletter, free beat and welcome code: only with your consent and after you confirmed your e-mail address (double opt-in, Art. 6 (1) a GDPR). You can withdraw consent at any time with the unsubscribe link in our e-mails or by writing to us.

Shop statistics: we count anonymous events (product views, plays, add to cart, checkout) per day. No cookies, no IP addresses and no profiles are stored (Art. 6 (1) f GDPR, legitimate interest in improving the shop).

Server logs and security: our host processes IP addresses briefly to deliver the site and protect it against abuse (rate limiting) (Art. 6 (1) f GDPR).

3. Local storage

Your cart, player volume and a few display preferences are kept in your browser's local storage so the shop works as expected. This is strictly necessary for the service you request (§ 25 (2) TDDDG). We do not use tracking or advertising cookies. The admin area uses one technically necessary session cookie.

4. Processors

Vercel Inc. (hosting), Cloudflare, Inc. (file storage, R2), Resend (transactional e-mail), Stripe and PayPal (payments). Where data is processed outside the EU, this is based on the EU-US Data Privacy Framework and/or standard contractual clauses.

5. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection, and to withdraw consent with effect for the future. You can lodge a complaint with a supervisory authority, e.g. the Hessian Commissioner for Data Protection and Freedom of Information (HBDI), Wiesbaden.

6. Retention

Order and invoice data: 10 years (§ 147 AO, § 257 HGB). Leads: until you unsubscribe; unconfirmed sign-ups are deleted after 30 days. Custom requests without an order: 12 months.