Privacy Policy
Last updated: July 4, 2026
This privacy policy explains the nature, scope, and purpose of the processing of personal data on this website. It applies to all visitors worldwide. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable German law.
1. Controller
Supreme Music GmbH
Max-Brauer-Allee 81
22765 Hamburg, Germany
Represented by: Maximilian Olowinsky, Florian Lakenmacher
Phone: +49 40 54806779-0
Email: post@suprememusic.de
2. Overview of Processing
When you visit this website, we process only the data that is technically required to deliver the site to your device, plus any data you actively send us (e.g. by email). We do not use cookie-based analytics, advertising trackers, or marketing pixels. We do not sell personal data.
Categories of data processed:
- Usage and connection data (IP address, date and time of access, pages visited, browser type and version, operating system, referrer URL)
- Contact data you provide voluntarily (e.g. name and email address when you contact us)
3. Hosting (Vercel)
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA (“Vercel”). When you access the site, Vercel processes connection data (including your IP address) in server log files to deliver the website, ensure its stability and security, and detect abuse.
Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in the secure and efficient provision of this website. Server logs are retained only as long as required for these purposes.
We have concluded a data processing agreement with Vercel pursuant to Art. 28 GDPR. Data may be processed on servers in the United States. Vercel is certified under the EU-U.S. Data Privacy Framework (DPF); in addition, transfers are safeguarded by the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
The videos in the carousel on our homepage are hosted by us on Vercel’s storage and content delivery network (Vercel Blob). Playing them transmits your connection data only to Vercel as described above — no third-party video platform is contacted and no additional cookies are set.
4. Embedded Videos (Vimeo) — Two-Click Consent
Our work showcase uses the video player of Vimeo Inc., 330 West 34th Street, New York, NY 10001, USA (“Vimeo”). This does not apply to the homepage carousel, whose videos we host ourselves (see Section 3).
To protect your data, Vimeo content is not loaded automatically. You will first see a preview image generated by us. Only when you actively click to play a video is a connection to Vimeo’s servers established. From that point, Vimeo processes your IP address and may set cookies or similar technologies; if you have a Vimeo account and are logged in, Vimeo may associate your viewing with your account. Vimeo may also use analytics services.
Legal basis: your consent, Art. 6(1)(a) GDPR and § 25(1) TDDDG, given by clicking the play button. Your consent covers all Vimeo videos on this website and is stored locally in your browser (localStorage, not a cookie) so you are not asked again for every video. You can withdraw it at any time with effect for the future using the consent control at the end of this page.
Data may be transferred to the United States. Vimeo relies on EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) for such transfers. Vimeo’s privacy policy: https://vimeo.com/privacy
5. Contact by Email
If you contact us by email, we process the data you provide (email address, name, content of your message) to handle your inquiry.
Legal basis: Art. 6(1)(b) GDPR where your inquiry relates to a contract or pre-contractual measures; otherwise Art. 6(1)(f) GDPR — our legitimate interest in responding to inquiries. We delete inquiry data once the matter is resolved, unless statutory retention obligations apply (German commercial and tax law: 6 or 10 years, §§ 257 HGB, 147 AO).
6. Cookies
This website does not use cookies for analytics, advertising, or tracking. Technically necessary storage (if any) is used solely to deliver the site and is based on § 25(2) TDDDG. Cookies set by Vimeo after you activate a video are covered by Section 4 above.
7. Social Media Profiles
We maintain profiles on Instagram, LinkedIn, and Vimeo. Our website only contains links to these profiles — no social plugins are embedded, and no data is transmitted to these platforms by merely visiting our site. When you visit our profiles on these platforms, the privacy policies of the respective operators apply.
8. Transfers to Third Countries
Where data is transferred outside the EU/EEA (see Sections 3 and 4), this occurs only on the basis of an adequacy decision (including the EU-U.S. Data Privacy Framework), EU Standard Contractual Clauses pursuant to Art. 46 GDPR, or your consent.
9. Your Rights
Under the GDPR you have the right to:
- Access your personal data (Art. 15)
- Rectification of inaccurate data (Art. 16)
- Erasure (Art. 17) and restriction of processing (Art. 18)
- Data portability (Art. 20)
- Object to processing based on legitimate interests (Art. 21)
- Withdraw consent at any time with effect for the future (Art. 7(3))
- Lodge a complaint with a supervisory authority (Art. 77). The authority responsible for us is: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany.
To exercise your rights, contact us at post@suprememusic.de.
10. Data Retention
We store personal data only as long as necessary for the purposes described above or as required by statutory retention obligations under German commercial and tax law. Afterwards, the data is deleted.
11. Information for Users in the United States
This website is operated from Germany and processes data of all visitors under the GDPR standard described above, which generally meets or exceeds US state privacy requirements. We do not sell or share personal information for cross-context behavioral advertising, and we do not use your personal information for targeted advertising. If you have questions about your data, contact us at post@suprememusic.de.
12. Changes to This Policy
We may update this privacy policy to reflect changes to the website or legal requirements. The current version is always available on this page.