Privacy Notice

Last updated: 24 October 2026

1. Controller

Justin Dorber

Aalesunder Str. 4

10439 Berlin

Germany

E-mail: hello@soundsol.co

2. Purposes and legal basis of processing

Server logs and security data

When you visit the site, technical data such as IP address, browser type, timestamp, requested page and security-related request metadata may be processed to operate, secure and optimise the website. The legal basis is our legitimate interest under Art. 6 (1)(f) GDPR.

Public API and AI connectors, including Muse

Muse and other third-party services can request published event and space information through our read-only public API. No SoundSol account or API key is required. Requests may include a city, date range, tags, categories or search text selected by you or the service. We receive those query parameters and technical request data such as the requesting IP address, user agent and timestamp; the IP address may belong to the service rather than to you. Request URLs, including query parameters, may appear in hosting or security logs. Please do not include personal or sensitive information in search queries.

We process this information to answer discovery requests, operate the API and prevent abuse, based on our legitimate interests under Art. 6 (1)(f) GDPR. The hosting, security, retention, international-transfer and rights provisions in this notice also apply to API requests. The connector returns only public listing fields, such as event details, public artist names, editorial summaries and source or ticket links; it does not expose private submissions, contact details supplied privately, admin records or internal review notes. Public listing information can be displayed by the requesting service.

The connector does not require or request your Muse account details, full conversation history or precise location. A third-party service may derive search parameters from your conversation or location context, and any personal information it includes in a request will reach SoundSol. Your use of Muse or another assistant is also subject to that provider’s own privacy notice and terms, including how it handles your account, conversations and activity. Contact that provider about information it holds, and contact hello@soundsol.co about SoundSol’s processing.

Messages you send us

If you contact us by e-mail, we process your e-mail address, message content and related metadata to respond to your inquiry. Depending on the context, the legal basis is Art. 6 (1)(b) GDPR for pre-contractual or contractual communications, or Art. 6 (1)(f) GDPR for general inquiries and feedback.

Event and source submissions

If you send a SoundSol event, venue, artist, festival, space or source suggestion, we may process the public source URL, title/name, city, venue/location, date/time, fit note, image or press-kit URL, your stated relationship to the suggestion and, if you provide it, your e-mail address. We use this to review possible SoundSol listings, verify factual details, prevent abuse and follow up about that specific suggestion. Suggestions are editorial signals only and are not automatically published. The legal basis is our legitimate interest under Art. 6 (1)(f) GDPR.

Admin authentication

The public website can be browsed without creating an account. Protected admin areas use Supabase authentication and technically necessary cookies or browser storage to keep authorised admin users signed in and to protect the service. The legal basis is Art. 6 (1)(f) GDPR.

Error monitoring and diagnostics

If enabled in production, Sentry may process technical error and performance data such as error messages, stack traces, device/browser information, URLs, timestamps and security-event metadata. We do not enable Sentry session replay. This is used to identify bugs, prevent abuse and keep the service reliable. The legal basis is Art. 6 (1)(f) GDPR.

Privacy friendly web analytics

We use Vercel Web Analytics to understand aggregate site usage such as page views, referrers, approximate region, device type and performance signals. Vercel Web Analytics is intended to run without advertising cookies and without building visitor profiles. We use these statistics to understand which pages, event listings and city pages are useful and to improve the service. We remove query strings and fragments from the page URLs and ticket/source destination URLs we send to this analytics service, and exclude admin, API and authentication routes. Hosting and security logs are separate and may still contain request URLs. The legal basis is our legitimate interest under Art. 6 (1)(f) GDPR.

Optional Google Analytics

With your consent, we use Google Analytics to measure page visits, ticket and official-source clicks, and sharing actions. Google processes cookie identifiers, visited page paths, referrers and device/browser information. We omit URL query strings and fragments from the page views and actions we send, and disable advertising features. Google Analytics loads only after you accept analytics cookies. You may reject analytics or withdraw consent at any time using the control below. Withdrawing consent stops future collection and removes this site's Google Analytics cookies. Google Analytics cookies have a one-year lifetime that may renew on subsequent consented visits. Your consent choice is stored in your browser until you change it or clear site storage.

Optional maps and media players

Google Maps and players from SoundCloud, Spotify, Bandcamp and YouTube are click-to-load. We do not connect to these embed providers just because you visit or scroll a page. Selecting a load button activates only that map or player on the current page; the choice is not saved for future visits and is separate from analytics consent. Once loaded, the provider receives your IP address, browser information and the requested venue or media, and may access cookies or browser storage under its own privacy notice. We suppress the page referrer on embedded frames. Reloading the page leaves embeds unloaded again. You can use the direct provider link instead; opening it takes you to that provider.

Microphone and local audio

Audio-reactive artwork requests microphone access only when you enable it and your browser grants permission. Microphone audio is analysed locally in your browser, not recorded or uploaded by SoundSol. You can switch the microphone off or revoke its permission in your browser. Audio files selected in the stem-separation research lab are also processed locally in your browser.

Newsletter

There is currently no public newsletter signup form or embedded newsletter service on this site. Sending an event suggestion or a contact message does not subscribe you to marketing e-mails.

We do not use advertising cookies. Optional Google Analytics cookies are used only with your consent. Technically necessary cookies or browser storage may be used for admin authentication, security and diagnostics as described above.

3. Recipients and processors

We use service providers to host, secure and operate the website. These providers may process personal data on our behalf under appropriate data-processing terms.

  • Vercel Inc. - hosting, deployment, content delivery, server logs and privacy friendly aggregate web analytics.
  • Google - optional website analytics, only after you accept analytics cookies. See how Google uses data from sites that use its services for information about its processing and international data transfers.
  • Optional embed providers - Google Maps, SoundCloud, Spotify, Bandcamp and YouTube receive connection data only when you load their embeds or open their links. See their privacy notices: Google / YouTube, SoundCloud, Spotify, and Bandcamp.
  • Supabase Inc. - database, storage, authentication and related backend services. The exact project region and transfer safeguards should be confirmed in the active Supabase project settings.
  • Sentry - error monitoring, diagnostics and performance monitoring, if enabled.
  • E-mail provider - processing of messages, event/source tips and replies sent to hello@soundsol.co.

4. Retention periods

  • Server and security logs - retained only as long as needed for operation, security, debugging and legal protection, unless a longer retention period is required by law.
  • Inquiry e-mails - normally erased 12 months after the last communication, unless longer retention is required for legal, accounting or dispute-resolution purposes.
  • Private event/source submissions - rejected, spam or unused submissions are normally deleted or anonymised within 3–6 months. If a suggestion becomes a public editorial listing, we retain only the factual public listing/source information while removing private submitter contact data when no longer needed.
  • Admin authentication records - retained as long as required to operate and secure admin access.

5. International data transfers

Some providers may process data outside the European Economic Area. Where this occurs, we rely on appropriate safeguards such as adequacy decisions, Standard Contractual Clauses, the EU-US Data Privacy Framework where applicable, and additional contractual or technical measures.

6. Your rights

You can request at any time:

  • access to your personal data;
  • rectification or erasure;
  • restriction of processing;
  • objection to processing based on legitimate interests;
  • withdrawal of consent for optional analytics or other consent-based processing;
  • data portability where Art. 20 GDPR applies.

To exercise these rights, e-mail hello@soundsol.co.

You also have the right to lodge a complaint with the competent data protection supervisory authority, including the Berlin Commissioner for Data Protection and Freedom of Information.

7. Security

Traffic between your browser and this site is encrypted via TLS/SSL. We also use technical and organisational measures intended to protect the website and admin systems against misuse.

8. External links

This website contains links to third-party sites, ticketing providers, organisers and venues. Their own privacy notices and terms apply once you leave soundsol.


Questions? Write to hello@soundsol.co.