ACTIVATED NETWORK

LEGAL INFORMATION

BACK TO NETWORK
Current edition1 October 2026 · EN

PRIVACY POLICY

How ACTIVATED Network processes personal data in the services you use.

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:

ACTIVATED Network – Schrötter & Puschmann GbR

(formerly: Activated Records Kevin Schrötter & Nils Puschmann GbR)

Starenweg 1

89537 Giengen an der Brenz

Germany

Email: k.schroetter@activated-network.com

Phone: +49 (0) 7322 9113307

This Privacy Policy explains processing in the services operated by us on the following domains. Each section applies to the functions actually used; visiting an artist website is not a shop purchase. External services you choose to visit also have their own providers’ privacy information.

  • activated-network.com (Corporate Portal)
  • activated-records.com (Record Label)
  • activated-agency.com (Artist Management & Booking)
  • activated-store.com (Online Shop)
  • activated-academy.com
  • outdo-labs.com (OUTDO LABS – web app for AI artworks and Canvas videos)
  • activated-labs.com
  • ignited-records.com (Partner Label — IGNITED Records)
  • basswarandcaox.com (Artist Website — BassWar & CaoX)
  • basswarandcaox.de (Artist Website — BassWar & CaoX, DE)
  • whoisnone.com (Artist Website — WHOISNONE)
  • lawstylez.com (Artist Website — Lawstylez)
  • lawstylez.de (Artist Website — Lawstylez, DE)
  • bitshakerz.com (Artist Website — Bitshakerz)
  • djfluffy.de (Artist Website — FLUFFY)
  • kryptikmusic.com (Artist Website — KRYPTIK)
  • tobeynize.com (Artist Website — TOBEY NIZE)

3.1 Scope of Processing

We process personal data to provide and protect our websites, answer inquiries and fulfil contracts. The legal basis depends on the stated purpose. Consent is one possible basis and does not replace the separately identified contractual, statutory or legitimate-interest bases.

3.2 Legal Basis

  • Consent: Art. 6(1)(a) GDPR
  • Contract fulfillment / pre-contractual measures: Art. 6(1)(b) GDPR
  • Legal obligation: Art. 6(1)(c) GDPR
  • Legitimate interest: Art. 6(1)(f) GDPR

3.3 Data Deletion and Storage Duration

Personal data will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also take place if provided for by European or national legislators. Data will also be blocked or deleted when a legally prescribed storage period expires.

3.4 Provision of data and automated decisions

Providing personal data is generally voluntary. Required form fields are necessary to process the particular inquiry or order; without them, the requested service may not be possible. We do not make solely automated decisions with legal or similarly significant effects on our information websites. Selected payment providers explain any decisions they make for their own purposes in their privacy information.

When our self-hosted websites are accessed, the reverse proxy processes the requested address and method, status code, transferred data volume, IP address, time, referrer and browser/device information supplied in the user agent. Requested host and target address may also be recorded.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in trouble-free operation)

Retention: access logs rotate weekly with four completed weekly archives; error logs rotate weekly with ten archives. Including the current file, regular rotation retains approximately five and eleven weeks respectively. Incident-related security evidence is retained only as long as necessary to investigate and enforce legal rights.

Our self-hosted websites, form interfaces and newsletter applications run on a VPS supplied by Heimathosting, proprietor Michael Posch, Germany (https://heimathosting.de), behind a reverse proxy. The hosting provider may process connection and server data as part of providing the infrastructure.

Hostinger International Ltd., Cyprus, supplies domain services and certain email mailboxes, including the newsletter outgoing mail service. We also use Microsoft 365 from Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, for communication via activated-network.com. Messages reach the relevant personnel of the partnership. Privacy information: https://www.hostinger.com/legal/privacy-policy and https://privacy.microsoft.com/privacystatement

Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

The online shop (activated-store.com) is hosted on Shopify (see § 9).

Cookies and comparable browser storage depend on the function used. The actual entries and settings are described at https://activated-network.com/cookie-richtlinie.

  • Storage or access on your device without consent is permitted only within the exceptions in section 25(2) TDDDG, particularly where strictly necessary for a service you expressly request. Processing of personal data additionally requires its own basis, such as Article 6(1)(b) or (f) GDPR, depending on the purpose.
  • Analytics and marketing cookies: Art. 6(1)(a) GDPR (§ 25(1) TDDDG) — only with explicit consent.

Google Analytics 4 is integrated into the online shop. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Depending on enabled functions, processing covers device/browser data, page views, interactions and online identifiers; data may be processed outside the EEA. Consent-requiring analytics relies on prior consent under Article 6(1)(a) GDPR and section 25(1) TDDDG, revocable through the shop privacy settings. Information: https://policies.google.com/privacy

Contact forms are available on several of our websites (incl. activated-records.com, activated-agency.com, activated-store.com, basswarandcaox.com, whoisnone.com, lawstylez.com, bitshakerz.com). Data collected: name, email address, message content, time of inquiry, IP address (abuse protection).

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

Demo submissions additionally include artist/track names, genre, submitted music files and links for release assessment. Booking inquiries may include venue, date, event requirements and business contact details. An optional newsletter subscription is separate from processing the inquiry.

The Agency contact form currently forwards entered information through FormSubmit (https://formsubmit.co) to our mailbox. You may contact us directly by email instead. B&C forms and demo interfaces use our own server applications. Inquiry data is retained only while needed for its purpose, applicable statutory retention or legal claims.

Our shop is operated through Shopify International Limited, Ireland. Shopify processes customer data under its data processing agreement, with separate controller responsibilities for certain own purposes described there. Shopify Inc. is based in Canada. International transfers rely on the applicable adequacy decision or appropriate safeguards, including standard contractual clauses. Details and recipients: https://www.shopify.com/legal/dpa and https://www.shopify.com/legal/subprocessors.

Shopify privacy: https://www.shopify.com/legal/privacy

Order data processed: name, delivery/billing address, email address, phone (optional), payment information, order history.

Legal bases: Article 6(1)(b) GDPR for performance and Article 6(1)(c) GDPR for statutory retention. Order and contract data remain necessary for performance, remedies and evidence. Retention depends on document type, generally eight years for accounting vouchers, six years for business correspondence and ten years for books and annual accounts, subject to statutory extensions and necessary preservation of legal claims.

Legal basis: Art. 6(1)(b) GDPR (contract fulfillment).

We offer two separate newsletters, each with its own distribution list:

(a) ACTIVATED newsletter (label newsletter): central sign-up at https://activated-records.com/newsletter. Newsletter sign-up on all ACTIVATED websites (activated-network.com, activated-agency.com, activated-store.com, whoisnone.com, lawstylez.com, lawstylez.de, bitshakerz.com, djfluffy.de) is consolidated into this single label newsletter.

(b) BassWar & CaoX newsletter: sign-up on https://basswarandcaox.com and at https://basswarandcaox.de/newsletter. The artist newsletter remains separate from the label list; subscriptions are not automatically transferred between the two.

For both newsletters:

  • Double opt-in: after registration you receive an email with a confirmation link; only after clicking it are you added to the respective list.
  • Data processed: email address, optional name, selected list and the time and IP address of opt-in confirmation as subscription evidence.
  • Legal basis: Art. 6(1)(a) GDPR (consent).
  • Withdrawal: at any time via the unsubscribe link in each newsletter or by email to k.schroetter@activated-network.com.

Delivery technology: we operate separate Listmonk applications on our VPS; outgoing email is sent through Hostinger SMTP.

Since 1 October 2026, we do not record newsletter opens or link clicks. Subscription, delivery and unsubscription operate without this engagement measurement. Necessary subscription and delivery records are unaffected.

Unsubscribing stops future newsletters. A necessary suppression record prevents unwanted re-subscription; opt-in evidence is retained for the necessary evidence and legal-defence period. You can request erasure of other data through the available erasure function or privacy contact, subject to statutory retention and necessary legal defence.

  • Right to information (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7(3) GDPR)

Objection: where processing relies on Article 6(1)(f) GDPR, you may object for reasons arising from your particular situation. You may object to direct marketing and related profiling at any time. You may withdraw consent for the future at any time without affecting the lawfulness of prior processing.

You also have the right to lodge a complaint with the supervisory authority:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany — https://www.baden-wuerttemberg.datenschutz.de

Our websites use SSL/TLS encryption. You recognize an encrypted connection by "https://" in the address bar and the padlock icon.

13.1 External content and recipients

Following an external link takes you to the indicated provider. Embedded Spotify players may transmit connection data to Spotify AB, Sweden; see https://www.spotify.com/legal/privacy-policy/. Embedded Twitch players may transmit connection data to Twitch Interactive, Inc., USA; see https://legal.twitch.com/legal/privacy-notice/. Some websites load fonts or software libraries from Google or CDN servers, which technically receive IP addresses and request information. Fonts and scripts directly integrated into the Network homepage are served from our own server.

Besides the identified technical, payment and delivery services, data is accessible only to personnel handling the matter, necessary service providers and legally entitled recipients. Transfers outside the EEA are subject to Articles 44 et seq. GDPR, relying on applicable adequacy decisions or appropriate safeguards such as standard contractual clauses. Contact us for information about recipients and safeguards used in your specific matter.

Updated 1 October 2026. We adapt this Privacy Policy to changes in our actual processing and legal duties. The version published here is the applicable notice.

OUTDO LABS is the web app we operate at outdo-labs.com for AI-generated music artworks and Canvas videos. The service is for adults. The controller is ACTIVATED Network – Schrötter & Puschmann GbR as identified in section 1. Contact info@activated-network.com for questions or deletion requests.

Google sign-in provides your verified Google account identifier, name and email address to create your account, private library and prepaid balance. We receive no Google password and request no access to Google Drive, contacts or email. Google Identity Services loads when you open sign-in. Google Ireland Limited processes connection and sign-in data; see https://policies.google.com/privacy. The legal basis for the account and sign-in is Article 6(1)(b) GDPR.

For image generation and prompt refinement that you request, we send your description and optionally up to six reference images to the OpenAI API. For optional video generation, the paid Google Gemini API receives the prepared artwork and motion brief. Your Google account identifier and wallet balance are not sent to the AI providers for these tasks. Processing fulfils your request under Article 6(1)(b) GDPR. Upload only images you have the required rights to process and use, and avoid confidential or particularly sensitive personal information.

AI services may process data outside the EEA. Their data processing terms address international transfers and standard contractual clauses: https://openai.com/policies/data-processing-addendum/ and https://business.safety.google/processorterms/. Provider information: https://openai.com/policies/privacy-policy/ and https://ai.google.dev/gemini-api/terms. Under the published paid API terms, content is not used for provider model training by default; temporary security and abuse logs may still be retained. Immediate deletion at the provider is not promised.

Original uploads are prepared for the generation request on our server and removed after completion or failure. Generated source images, exported artwork, videos, prompts and job records are retained to provide your library while your account exists or the data is needed for the agreed service. On account deletion, creative content no longer needed is removed; legally required payment records remain for the applicable retention period. Send requests to info@activated-network.com.

PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg, processes wallet top-ups. We process the amount, currency, payment identifier and payment status for allocation, accounting and duplicate-payment prevention. Card or banking credentials are entered at PayPal. The legal bases are Article 6(1)(b) and (c) GDPR and, for abuse prevention, (f). There is no automatic top-up. https://www.paypal.com/de/legalhub/paypal/privacy-full

OUTDO LABS uses no advertising trackers or web analytics. The necessary session cookie is described in the Cookie Policy. The general hosting, security, data-subject rights and complaint information in this policy also applies.