Back to Bandscore AI

Privacy Policy

1. Controller

Thomas Emanuel Bechtold (Einzelunternehmer / Sole Proprietor)
Nikolaus-Fey-Straße 6
97241 Bergtheim
Germany

Contact
Email: info@bandscoreai.com
Phone: +49 (0) 1525 9870943

Supervisory Authority
Bavarian State Office for Data Protection Supervision
Promenade 18, 91522 Ansbach, Germany
https://www.lda.bayern.de

Under Art. 37 GDPR, we are currently not required to appoint a Data Protection Officer.

2. General Information & Legal Bases

We process personal data strictly in accordance with the General Data Protection Regulation (GDPR) and the German Telecommunications-Digital Services Data Protection Act (TTDSG).

Personal data is processed only where legally permitted, based on:

  • Consent (Art. 6(1)(a) GDPR)
  • Legitimate interest (Art. 6(1)(f) GDPR)
  • Legal obligation (Art. 6(1)(c) GDPR)

3. Hosting & Server Logs

Our website is hosted via Cloudflare. When you access our website, technical connection data such as IP address, date and time of access, requested resources, browser type, and operating system are processed automatically.

This processing is necessary to ensure website security, technical stability, and reliable operation.

Retention period
Server log data is stored for up to 7 days and then deleted or anonymized, unless longer retention is required for security-related investigations or statutory obligations.

Legal basis
Art. 6(1)(f) GDPR (legitimate interest).

4. Cookies, Analytics & Advertising

Consent Management

Within the EU/EEA, cookies and comparable technologies are used only after you have given explicit consent via our consent banner (Art. 6(1)(a) GDPR, §25(1) TTDSG). You may withdraw your consent at any time with future effect.

Google Ads

We use Google Ads conversion tracking to evaluate the effectiveness of our advertising campaigns.

Provider
Google Ireland Limited, Ireland (data transfers to Google LLC, USA, may occur)

Legal basis
Consent (Art. 6(1)(a) GDPR).

Cloudflare Web Analytics

We use Cloudflare Web Analytics, a privacy-focused analytics service that does not set tracking cookies or create user profiles. Within the EU/EEA, it is activated only after consent.

5. Waitlist Registration

Collected Data

When registering for the waitlist, we collect the following data:

  • Email address (mandatory)
  • Preferred plan (optional)
  • Additional feedback, ideas, or suggestions (optional)

Verification & Processing

Your email address is verified via a confirmation email (double opt-in). For this purpose, your email address is transmitted to Cloudflare and Amazon Web Services (AWS). The confirmation email is sent using Amazon Simple Email Service (SES). After successful verification, the data is stored in a Cloudflare-hosted database.

Purpose
Managing the waitlist, contacting you about the product launch, and granting the promised free trial once the app becomes available.

Legal basis
Art. 6(1)(a) GDPR (consent).

You may request deletion of your waitlist entry at any time by emailing info@bandscoreai.com. Your data will be deleted within one month of your request, unless statutory retention obligations apply.

6. Email Communication

Your email address is used exclusively for waitlist verification, product launch notifications, and communication related to the promised free trial. No newsletters or marketing emails are sent at this stage.

7. Service Providers

We use the following service providers as processors under Art. 28 GDPR:

  • Cloudflare, Inc., United States – hosting, CDN, security services, analytics
  • Amazon Web Services, Inc. (AWS), United States – email delivery via Amazon Simple Email Service (SES)

Data processing agreements (DPAs) are in place with all processors.

8. Data Transfers to Third Countries

Where personal data is transferred to the United States, such transfers are safeguarded by the EU–U.S. Data Privacy Framework and/or Standard Contractual Clauses pursuant to Art. 46 GDPR.

9. Retention Periods

Personal data is stored only as long as necessary for the respective processing purposes and in accordance with statutory retention obligations:

  • Server logs: up to 7 days
  • Waitlist data: until deletion is requested by the user or until the waitlist purpose has been fulfilled

10. Your Rights

You have the right to request access, rectification, erasure, restriction of processing, data portability, and to object to processing, as well as to withdraw consent at any time.

Requests can be submitted to info@bandscoreai.com. We respond within one month. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

11. Children’s Privacy

This website is intended for users aged 16 years and older. We do not knowingly collect personal data from children under 16.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect legal or technical changes. The current version is always available on this website.