1. Controller

The controller responsible for data processing on this website is:

The controller is the natural or legal person who determines, alone or jointly with others, the purposes and means of processing personal data.

2. General Information on Data Processing

We take the protection of your personal data seriously. This Privacy Policy explains what personal data is collected when you visit the Nova Ashes website, how this data is processed and what rights you have under the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Personal data may include, for example:

• IP address
• Date and time of access
• Browser and operating system information
• Pages and files accessed
• Referrer information
• Email address
• Information submitted through forms

We process personal data only where necessary to provide a functional website, communicate with visitors, promote our music and related activities or provide services requested by users.

3. Website Hosting and Server Log Files

When you access this website, the hosting provider may automatically collect and store information in server log files.

This information may include:

• IP address
• Browser type and version
• Operating system
• Requested page or file
• Referrer URL
• Date and time of access
• Amount of data transferred
• HTTP status code

This information is required for the secure, stable and technically reliable operation of the website.

The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and technically correct operation of this website.

Hosting provider:
[Name of hosting provider]
[Address]
[Website]

Where required, a data processing agreement pursuant to Art. 28 GDPR has been concluded with the hosting provider.

4. Cookies and Local Storage

This website may use cookies, local storage, session storage or similar technologies where technically necessary.

Cookies are small files stored on your device by your browser. Technically necessary technologies may be used to ensure the proper operation and usability of the website.

Technologies that are not technically necessary are only activated where legally required after you have provided your consent. The legal basis for such processing is generally Art. 6(1)(a) GDPR.

Intro Video

The Nova Ashes website may use local browser storage or session storage to remember whether the introductory video has already been displayed during the current browsing session.

This information is used solely to improve usability and prevent the introduction from being played unnecessarily on every page visit.

The information stored for this purpose is not used for advertising purposes and is not intended to personally identify visitors.

5. Contact

If you contact us by email or through a contact form, the information you provide will be processed for the purpose of handling your request.

Depending on the nature of your enquiry, processing is based on Art. 6(1)(b) GDPR where the communication relates to a contract or pre-contractual measures, or Art. 6(1)(f) GDPR for other general enquiries.

Correspondence is retained only for as long as necessary for the relevant purpose or as required by statutory retention obligations.

6. Newsletter

If you subscribe to the Nova Ashes newsletter, we process your email address for the purpose of sending information about Nova Ashes, including new music, releases, concerts, videos and project news.

The legal basis for the processing is your consent pursuant to Art. 6(1)(a) GDPR.

Where required, newsletter subscriptions are confirmed using a double opt-in procedure. After registration, you receive an email asking you to confirm your subscription.

The date and time of registration and confirmation as well as technical information such as the IP address may be recorded for verification purposes.

You may withdraw your consent and unsubscribe from the newsletter at any time, for example by using the unsubscribe link contained in each newsletter.

Newsletter provider:
[Provider name]
[Address]
[Privacy policy information]

7. Spotify

Our website may contain external links to or embedded content from Spotify.

Spotify is operated by:

If Spotify content is directly embedded into this website, technical information may be transmitted to Spotify when the content is loaded. Where consent is legally required, embedded Spotify content will only be activated after you have provided your consent.

If the website contains only external Spotify links, no connection to Spotify is generally established until you click the relevant link.

8. YouTube

This website may contain external links to or embedded videos from YouTube, a service provided by Google.

If YouTube videos are directly embedded, information about your visit may be transmitted to Google when the player is loaded.

Depending on your settings and whether you are signed in to a Google account, this information may also be associated with your Google account.

Where legally required, YouTube content will only be loaded after you have provided your consent.

The legal basis in such cases is Art. 6(1)(a) GDPR.

If this website merely contains external links to YouTube, no connection to YouTube is generally established until you follow the relevant link.

9. Music Streaming Platforms

This website may contain external links to music streaming services such as Spotify, Apple Music, Amazon Music and other platforms on which Nova Ashes music is available.

If these services are only linked, personal data is generally not transferred to the respective provider by this website until you click the corresponding link.

After leaving this website, the privacy policies and terms of the respective service provider apply.

10. Social Media

Nova Ashes may maintain profiles on social networks and other online platforms.

This website may provide links to profiles on services such as:

• Instagram
• Facebook
• YouTube
• Spotify

If these platforms are linked only through ordinary hyperlinks or icons, a connection to the respective provider is generally established only when you click the link.

Once you visit an external platform, the respective provider is responsible for the processing of personal data within its service.

11. Embedded Third-Party Content

This website may include content from third-party services, such as videos, music players, social media content or other external media.

Where loading such content results in personal data being transmitted to a third party and consent is required, the content will only be loaded after you have provided your consent.

The legal basis is Art. 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future.

12. External Links

This website contains links to third-party websites.

We have no control over the processing of personal data carried out by third-party websites after you leave the Nova Ashes website. Please consult the privacy policies of the respective providers for information about their data processing practices.

13. SSL/TLS Encryption

This website uses SSL/TLS encryption to protect data transmitted between your browser and the web server.

An encrypted connection can normally be identified by the use of https in the browser address bar and the corresponding security indicator displayed by your browser.

14. Data Retention

Personal data is stored only for as long as necessary for the purposes for which it was collected.

Data may be retained for a longer period where statutory retention requirements apply or where retention is necessary for the establishment, exercise or defence of legal claims.

Once the relevant purpose no longer applies and no statutory retention obligation exists, the data will be deleted.

15. Recipients of Personal Data

Personal data may be disclosed to service providers where this is necessary for the operation of the website or provision of our services.

Possible recipients include:

• Hosting providers
• Email and newsletter providers
• Technical service providers
• Website administration providers

Where these providers process personal data on our behalf, appropriate data processing agreements are concluded where required by law.

16. International Data Transfers

Some third-party services may process personal data outside the European Union or European Economic Area.

Where personal data is transferred to a third country, we ensure that the requirements of Chapter V GDPR are met where we are responsible for the transfer.

Depending on the provider and destination country, this may be based on an adequacy decision by the European Commission, appropriate safeguards such as Standard Contractual Clauses or another legally recognised transfer mechanism.

17. Your Rights

Under the GDPR, you may have the following rights regarding your personal data:

• Right of access – Art. 15 GDPR
• Right to rectification – Art. 16 GDPR
• Right to erasure – Art. 17 GDPR
• Right to restriction of processing – Art. 18 GDPR
• Right to data portability – Art. 20 GDPR
• Right to object – Art. 21 GDPR
• Right to withdraw consent – Art. 7(3) GDPR

Where processing is based on consent, withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, please contact us using the contact details provided above.

18. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data violates the GDPR.

The competent authority generally depends on the place where the controller is established.

19. Automated Decision-Making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR unless explicitly stated otherwise.

20. Changes to This Privacy Policy

We may update this Privacy Policy if the website, the services used on it or applicable legal requirements change.

The current version published on this website applies.

Last updated: September 2026