Marvin Schumann
Zwerchklamm 27
66453 Gersheim, Germany
Email: hello@frequenz.live
When you enter your public SoundCloud profile URL on the homepage (e.g. https://soundcloud.com/yourname), our server reads the following data, which is publicly visible on your SoundCloud profile:
This data is processed only on our server to compute your "Taste DNA" profile and your matched event recommendations. We do NOT log into your SoundCloud account. We use no OAuth tokens, no password, no private data. We only access what any visitor could see in their browser when visiting your public SoundCloud profile.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing a working recommendation feature). Because you actively enter the URL yourself, there is also implied consent under Art. 6(1)(a) GDPR.
Retention: Your scan result is held in our server's memory for at most 1 hour (so we can show you the result page). There is no permanent storage unless you actively create an account.
If you subsequently choose to create an account in order to save events or receive the weekly Monday Drop newsletter, your "Taste DNA" profile will be permanently linked to your account (see "Authentication and Account").
From the analysed data, an algorithmic taste profile ("Taste DNA") is generated, which enables a character assignment and automated event recommendations. This constitutes profiling within the meaning of Art. 4(4) GDPR. No automated individual decision-making within the meaning of Art. 22 GDPR takes place.
You can prevent this processing entirely by simply not entering a SoundCloud URL.
When you sign up for our waitlist or create an account, we collect your email address. Optionally — if you complete the waitlist survey — we also collect your city, event frequency, discovery method, frustration points, and willingness to pay. This data is used solely to inform you about the launch of Frequenz, send you the weekly Monday Drop newsletter, and inform product development.
Recipient / processor: Sendinblue SAS (Brevo), France. See section 3.
Legal basis: Your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by emailing hello@frequenz.live or by using the unsubscribe link in any email we send.
Retention period: Until you withdraw your consent or delete your account, at most 24 months after your last interaction.
Each time you access our website, the hosting provider automatically collects information in server log files. This includes:
Purpose: Ensuring reliable operation, security, and error analysis.
Retention period: 7 days.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
Provider: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA.
Our landing page is hosted by Vercel. When you visit, technically required connection data (IP address, timestamp, user agent, requested URL) are processed by Vercel to deliver the page. Vercel operates edge servers worldwide; delivery for European visitors is primarily from Frankfurt (FRA1).
Vercel is a certified member of the EU-US Data Privacy Framework. Data transfer is based on the European Commission's adequacy decision (Art. 45 GDPR) and supplementary EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). A Data Processing Agreement (Art. 28 GDPR) is in place.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating a stable, performant website).
Vercel privacy policy: https://vercel.com/legal/privacy-policy
Provider: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.
The application (app.frequenz.live) runs on a Hetzner Cloud Server in Nuremberg (DE). When using the application, technically required connection data (IP address, timestamp, user agent, requested URL) are processed by Hetzner.
Hetzner is a German company and processes data exclusively in Germany. A Data Processing Agreement (Art. 28 GDPR) is in place.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating a stable, performant web application).
Provider: Sendinblue SAS (trading as "Brevo"), 106 Boulevard Haussmann, 75008 Paris, France.
The waitlist form is processed via Brevo. Brevo receives your email address, optional profile information (e.g. city), and signup metadata (timestamp, source, IP address for spam protection). Data is processed in Brevo's data centres within the European Union.
Sendinblue SAS is a French société anonyme directly subject to the GDPR. No data transfer to third countries outside the EEA takes place.
A Data Processing Agreement (Art. 28 GDPR) is in place. Brevo is ISO 27001 certified.
Brevo privacy policy: https://www.brevo.com/legal/privacypolicy/
Provider: Heinlein Support GmbH, Schwedter Straße 8/9 A, 10119 Berlin, Germany.
When you email hello@frequenz.live, your message is processed on servers operated by Heinlein Support GmbH (Mailbox.org) in Berlin, Germany. Heinlein Support is a German company with German server locations and is directly subject to the GDPR.
Retention: until your request is resolved or until you ask us to delete the correspondence. Maximum retention 24 months.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in correspondence).
Mailbox.org privacy policy: https://mailbox.org/en/data-protection-declaration
Provider: Supabase, Inc., 970 Toa Payoh North #07-04, Singapore 318992 (headquarters); data processing in the EU region (Frankfurt).
Note: Supabase is used exclusively in the separate application (app.frequenz.live) for database and authentication purposes. This landing page does not make any connection to Supabase.
Data transfer is based on EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). A Data Processing Agreement (Art. 28 GDPR) is in place.
This landing page (frequenz.live) sets no cookies of its own and uses neither localStorage nor sessionStorage. No tracking, marketing, or analytics cookies are used.
The separate app at app.frequenz.live sets strictly necessary cookies for the Supabase authentication session (see the app's privacy policy).
Legal basis for strictly necessary cookies in the app: Section 25(2)(2) TTDSG (strictly necessary).
We use Plausible Analytics (Plausible Insights OU, Estonia) for statistical analysis of website usage.
Plausible does not set cookies and does not collect personal data. There is no cross-site tracking. Only aggregated data is collected:
Data processing takes place within the EU.
Plausible privacy policy: https://plausible.io/privacy
All fonts (Bebas Neue, DM Sans, Space Mono) are served locally from our own server. No data is transferred to Google or other third-party providers.
Under the GDPR, you have the following rights regarding your personal data:
To exercise your rights, contact: hello@frequenz.live
Requests are generally processed within 30 days (Art. 12(3) GDPR). Exercising your rights is free of charge.
Identity verification, where necessary, is performed via the email address on record.
You have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for us is:
Unabhängiges Datenschutzzentrum Saarland
Die Landesbeauftragte für Datenschutz und Informationsfreiheit
Fritz-Dobisch-Straße 12
66111 Saarbrücken
This landing page does not carry out any automated decision-making within the meaning of Art. 22 GDPR.
We reserve the right to update this privacy policy to reflect changes in legislation or in our service. The current version is always available on this page.
Last updated: 16 April 2026 (Hetzner hosting / profiling disclosure)