Privacy Policy
How XHL Audio processes personal data on this website and during a purchase
Controller
CHRIS XHALE Musikproduktion Hafenstraße 49 68159 Mannheim Germany Email: business@chrisxhl.de
Hosting and server logs
This website is hosted on Vercel. When the website is accessed, technically necessary data such as IP address, date and time, requested URL, referrer, browser, operating system, and response status may be processed in server and security logs. Processing is necessary to deliver the website securely and reliably and is based on Article 6(1)(f) GDPR. Logs are retained only for as long as required for operation, troubleshooting, abuse prevention, and legal obligations. Vercel privacy information: https://vercel.com/legal/privacy-notice
Orders, downloads, and licenses
For an order we process the selected product, Stripe checkout session ID, payment status, customer name and email address, billing information made available by Stripe, and the generated license information. This is required to perform the contract, authorize the download, provide the license, handle support, and document the transaction. The legal bases are Article 6(1)(b), Article 6(1)(c), and, where applicable, Article 6(1)(f) GDPR. Transaction and invoice data is retained for the applicable statutory commercial and tax retention periods; license and contract records may be kept for the lifetime of the license and the applicable limitation periods.
Payment processing with Stripe
Payments are processed through Stripe. Stripe receives the information entered during checkout, including contact and billing details, payment method information, transaction amount, product, device and fraud-prevention data. Depending on the processing activity, Stripe acts as our processor and/or as an independent controller, particularly for regulatory, security, and fraud-prevention purposes. The legal bases for our processing are Article 6(1)(b), Article 6(1)(c), and Article 6(1)(f) GDPR. Stripe privacy information: https://stripe.com/privacy
Email contact and support
When you contact us at business@chrisxhl.de, we process your email address, message, and any information you voluntarily provide to answer your request. The legal basis is Article 6(1)(b) GDPR for contract-related communication and Article 6(1)(f) GDPR for other business communication. Messages are deleted when the request has been resolved unless contractual or statutory retention duties require longer storage.
Cookies and analytics
The website itself uses only technically necessary browser and checkout functionality. Google Analytics, Microsoft Clarity, Plausible, and social-media embeds are currently not enabled. If optional analytics or marketing services are activated later, this policy and the consent mechanism will be updated before those services are used.
Recipients and international transfers
Data is disclosed only where necessary to hosting and infrastructure providers, Stripe and the payment method selected by the customer, banks, professional advisers, and public authorities where legally required. Vercel and Stripe may process data outside the European Economic Area. Where required, transfers are protected through an adequacy decision, Standard Contractual Clauses, and supplementary safeguards.
Security
Connections to this website are encrypted using TLS. Access to operational systems and payment configuration is restricted to authorized persons. No internet transmission can nevertheless be guaranteed to be completely secure.
Your rights
Subject to the statutory requirements, you have rights to access, rectification, erasure, restriction of processing, data portability, and objection. Where processing is based on consent, consent may be withdrawn at any time for the future. You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority for our registered office is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg: https://www.baden-wuerttemberg.datenschutz.de/
Updates to this policy
We update this Privacy Policy when the website, service providers, or legal requirements change. The version published on this page is the current version.
Last updated: 14 July 2026