Legal

Privacy

What happens to your data on this site and in the BPM Player app.

1. Controller

Kirill Lorenz, Frise – Abbildungszentrum, Hinterhof, Arnoldstr. 26–30, 22765 Hamburg, Germany · hi@bpmplayer.com. Full details in the imprint.

2. Visiting this site

This site loads no external resources: no fonts, scripts, images or trackers from third-party servers, and it sets no cookies. There is no analytics and no advertising.

Your browser does transmit the usual technical data to the server that delivers the page — IP address, time, requested file, referrer, browser and operating system. This is necessary to deliver the site at all and is processed on the basis of a legitimate interest in operating it securely (Art. 6 (1) (f) GDPR).

The site is hosted on Cloudflare Pages, operated by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare delivers the pages and writes the server log described above on our behalf, as a processor under Art. 28 GDPR, on the terms of its data processing addendum. Delivery runs over a global network, so the request may be handled by a server outside the EU; Cloudflare covers those transfers with the EU standard contractual clauses.

3. The download and the email list

To get BPM Player you leave an email address. It is used for two things: to send you the download link, and to tell you when a new version of the app is released. Nothing else. Your address is not sold, rented or passed to anyone for their own purposes.

Double opt-in. After you enter your address you receive one email with a confirmation link. Only when you click it is your address stored on the list and the download link sent. If you do not click, the entry is discarded. To prove that the confirmation was given, the time of registration, the time of confirmation and your IP address are stored alongside your address.

Legal basis. Your consent, Art. 6 (1) (a) GDPR, given by clicking the confirmation link. You can withdraw it at any time with effect for the future — every email carries an unsubscribe link, or write to the address above. Withdrawing does not affect the lawfulness of what happened before.

Storage. Your address stays on the list until you unsubscribe. After that it is deleted, except where a legal retention obligation applies.

Processor. The list is run with Brevo, operated by Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany. Brevo processes your address on our behalf and under our instructions. TO CONFIRM — conclude and record the data processing agreement under Art. 28 GDPR in the Brevo account.

4. The app itself

BPM Player runs entirely on your Mac. It reads the audio files you drop into it and plays them from where they are; nothing is uploaded, copied or sent anywhere. The app does not contain analytics and does not report usage.

The one connection it makes is the update check: on start it asks the release server whether a newer version exists. That request transmits the technical data any HTTP request transmits, including your IP address. Basis is our legitimate interest in shipping security and bug fixes (Art. 6 (1) (f) GDPR).

5. Your rights

• Access to the data stored about you (Art. 15 GDPR)
• Correction of inaccurate data (Art. 16)
• Erasure (Art. 17) and restriction of processing (Art. 18)
• Data portability (Art. 20)
• Objection to processing based on legitimate interest (Art. 21)
• Withdrawal of consent at any time (Art. 7 (3))

A message to hi@bpmplayer.com is enough.

6. Complaints

You may complain to a supervisory authority. The competent one here is Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Str. 22, 20459 Hamburg.