Privacy Policy

Last updated: 01 January 2026

Made of Hits GbR (“Made of Hits”, “we”, “us”) takes the protection of your personal data very seriously.
This Privacy Policy explains how we collect, process, store, share, and protect personal data when you visit our website https://madeofhits.com and its subpages (together the “Website”), create a user account, use our services, or otherwise interact with us.

By using our Website or services, you confirm that you have read, understood, and accepted this Privacy Policy. If you do not agree with the processing of your personal data, please do not use our Website or services.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Made of Hits GbR
Kardinal-Bea-Str. 2
78166 Donaueschingen
Germany
Email: support@madeofhits.com

Made of Hits is the controller for the processing of personal data insofar as we determine the purposes and means of the processing. In certain cases, we act as a data processor on behalf of our users or contractual partners.

2. Data We Collect

Personal data means any information relating to an identified or identifiable natural person.

Depending on how you use our services, we may process the following categories of data:

Data provided by you
This includes information you provide when registering, filling out contact forms, uploading content, or communicating with us (e.g. name, email address, contact details, account data).

Data from the use of our services
This includes metadata, artist names, label or rights-holder information, usage and billing data, and communication histories related to your user account.

Data based on your consent
With your explicit consent, we may process additional data, for example for marketing purposes, newsletters, or optional additional services.

Automatically collected data
When you visit the Website, technical data such as IP address, browser type, operating system, access times, and usage data may be collected via cookies or similar technologies.

Data from other sources
Where legally permitted, we may receive data from service providers, contractual partners, authorities, or publicly available sources.

3. Protection of Children

Our Website is intended for persons aged 16 and over.
We do not knowingly collect personal data from children under the age of 16 without the consent of their legal guardians. If we become aware that such data has been collected, we will delete it immediately.

4. Purposes and Legal Bases of Processing

We process personal data in particular for the following purposes:

Providing and operating our Website and platform
Managing user accounts
Delivering our services
Communication and support
Analysis and improvement of our services
Marketing activities (only with consent)
Compliance with legal obligations
Fraud prevention and enforcement of our terms and conditions

The legal bases include in particular Art. 6(1)(b) GDPR (performance of a contract), Art. 6(1)(c) GDPR (legal obligation), Art. 6(1)(f) GDPR (legitimate interests), and Art. 6(1)(a) GDPR (consent).

5. Disclosure of Data

We do not share personal data unless this is necessary or legally permitted, in particular:

with technical service providers (e.g. hosting, IT, payment processing)
with digital services (e.g. streaming platforms) insofar as this is required to provide our services
with authorities or courts where legally required
with marketing partners, only with your explicit consent

All service providers are contractually obligated to comply with the GDPR.

6. Cookies and Borlabs Cookie

Our Website uses cookies and similar technologies.
Cookies are small text files stored on your device that contain certain information.

We use the Borlabs Cookie Consent Tool to manage your cookie consents in compliance with the law.

In particular, we distinguish between:

Essential cookies
These are necessary for the operation and security of the Website and cannot be disabled.
Functional and analytics cookies
These help us analyze Website usage and improve our services.
Marketing and third-party cookies
These are used for marketing purposes or third-party services and are only set with your explicit consent.

You can change or withdraw your cookie preferences at any time via the Borlabs cookie banner or the relevant Website settings.
Please note that disabling certain cookies may limit the functionality of the Website.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against loss, misuse, unauthorized access, disclosure, or alteration.

8. Data Processing Outside the EU

As a rule, personal data is processed within the European Union.
If, in exceptional cases, data is processed in third countries, we ensure an adequate level of data protection through appropriate safeguards (e.g. EU Standard Contractual Clauses).

9. Your Rights

Under the GDPR, you have in particular the following rights:

Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to object
Right to data portability
Right to withdraw consent

To exercise your rights, you may contact us at any time at support@madeofhits.com.
You also have the right to lodge a complaint with a data protection supervisory authority.

10. External Links

Our Website may contain links to external websites.
We are not responsible for their content or data protection practices. The respective privacy policies of the third-party providers apply.

11. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy to reflect legal or technical changes.
The current version is always available on our Website.

12. Contact and Complaints

If you have any questions or complaints regarding data protection, you may contact us at any time.
You also have the right to contact the competent data protection supervisory authority.