// Legal

Privacy Policy

What data we process, why, for how long, and what rights you have.

This is a convenience translation. Only the German version is legally binding.

Preamble

With this privacy policy we want to inform you about the types of your personal data (hereinafter also referred to simply as “data”) that we process, and about the purposes and extent of that processing. This privacy policy applies to all processing of personal data carried out by us, both in the course of providing our services and, in particular, on our websites and within external online presences, such as our social media profiles (hereinafter collectively referred to as the “online offering”).

The terms used are not gender-specific.

Last updated: 9 November 2026

Contents

Data controller

Rafael Biermann
Electronic Anarchy
An der Rennbahn 21
49492 Westerkappeln
Germany
Email address: info@electronicanarchy.de

Legal notice: www.electronicanarchy.de/impressum.php. The same data controller also operates the website timtechlor.de; a separate privacy policy applies there.

Overview of processing operations

The following overview summarises the types of data processed and the purposes for which they are processed, and identifies the data subjects.

Types of data processed

  • Basic data (e.g. names, place of residence, date of birth, DJ name).
  • Contact details (e.g. email address, telephone number).
  • Content data (e.g. free text, biographies, links, messages, uploaded photos, logos and documents).
  • Contract details (e.g. fee, tax status, VAT number, subject matter of the contract, licence ID).
  • Payment details (Paddle only; see below).
  • Usage data (e.g. websites visited, times of access).
  • Meta data, communication data and procedural data (e.g. IP addresses, timestamps, consent status).

Categories of data subjects

  • Applicants and artists (DJs).
  • Event organisers, clubs and business partners.
  • Customers (plug-in licences).
  • Prospective customers and communication partners.
  • Users (website visitors).

Purposes of processing

  • Reviewing DJ applications and managing the DJ area.
  • Processing booking enquiries, brokering and handling bookings, and forwarding press kits.
  • Provision of contractual services and fulfilment of contractual obligations.
  • Enquiries and communication; managing and responding to enquiries.
  • Evidence of consent given.
  • Direct marketing by email (only with consent).
  • Security measures and fraud prevention.
  • Provision of our online services and user-friendliness; IT infrastructure.

Relevant legal bases

Relevant legal bases under the GDPR: Below is an overview of the legal bases under the GDPR on which we process personal data. Please note that, in addition to the provisions of the GDPR, national data protection regulations may apply in your country or ours, depending on where you or we are resident or have our registered office. Should more specific legal bases apply in individual cases, we will inform you of these in the privacy policy.

  • Consent (Article 6(1), first sentence, point (a) of the GDPR) – The data subject has given their consent to the processing of their personal data for a specific purpose or for several specific purposes.
  • Performance of a contract and pre-contractual enquiries (Article 6(1), first sentence, point (b) of the GDPR) – Processing is necessary for the performance of a contract to which the data subject is a party, or for the implementation of pre-contractual measures taken at the data subject’s request.
  • Legal obligation (Article 6(1), first sentence, point (c) of the GDPR) – Processing is necessary for compliance with a legal obligation to which the controller is subject.
  • Legitimate interests (Article 6(1), first sentence, point (f) of the GDPR) – Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data.

National data protection regulations in Germany: In addition to the data protection provisions of the GDPR, national data protection regulations apply in Germany. These include, in particular, the Act on the Protection against the Misuse of Personal Data in Data Processing (Federal Data Protection Act – BDSG). The BDSG contains, in particular, specific provisions on the right of access, the right to erasure, the right to object, the processing of special categories of personal data, processing for other purposes, and the transfer of data, as well as automated decision-making in individual cases, including profiling. Furthermore, state data protection laws of the individual federal states may also apply.

Note on the applicability of the GDPR and the Swiss Data Protection Act (DSG): This privacy notice serves to provide information both under the Swiss Federal Act on Data Protection (Swiss DSG) and under the General Data Protection Regulation (GDPR). For this reason, please note that, owing to their broader geographical scope and for ease of understanding, GDPR terminology is used. In particular, instead of the terms used in the Swiss DSG – “processing” of “personal data”, “overriding interest” and “personal data requiring special protection” – the GDPR terms “processing” of “personal data”, “legitimate interest” and “special categories of data” are used. The legal meaning of these terms, however, continues to be determined under the Swiss DSG where that Act applies.

Security measures

In accordance with the statutory requirements, and taking into account the state of the art, the costs of implementation and the nature, scope, circumstances and purposes of the processing, as well as the varying likelihood and severity of the risks to the rights and freedoms of natural persons, we implement appropriate technical and organisational measures to ensure a level of protection appropriate to the risk.

These measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical and electronic access to the data, as well as access to, input, disclosure and availability of the data, and ensuring its separation. We have also established procedures to ensure that data subjects’ rights can be exercised, that data is deleted and that we respond appropriately to threats to the data. We also take the protection of personal data into account when developing or selecting hardware, software and procedures, in line with the principles of data protection by design and by default.

TLS/SSL encryption (https): To protect users’ data transmitted via our online services, we use TLS/SSL encryption. Secure Sockets Layer (SSL) is the standard technology for securing internet connections by encrypting the data transmitted between a website or app and a browser (or between two servers). Transport Layer Security (TLS) is an updated and more secure version of SSL. Hypertext Transfer Protocol Secure (HTTPS) appears in the URL when a website is secured by an SSL/TLS certificate.

Transfer of personal data

In the course of our processing of personal data, it may happen that the data is transferred to or disclosed to other bodies, companies, legally independent organisational units or individuals. Recipients of this data may include, for example, service providers commissioned to carry out IT tasks or providers of services and content that are integrated into a website. In such cases, we comply with the statutory requirements and, in particular, enter into appropriate contracts or agreements with the recipients of your data to ensure the protection of your data.

International data transfers

Data processing in third countries: Where we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA)), or where processing takes place in connection with the use of third-party services or the disclosure or transfer of data to other individuals, bodies or organisations, this is done solely in accordance with the relevant legal requirements. Where the level of data protection in the third country has been recognised by means of an adequacy decision (Article 45 of the GDPR), this serves as the basis for the data transfer. Otherwise, data transfers shall only take place if the level of data protection is otherwise ensured, in particular through standard contractual clauses (Article 46(2)(c) of the GDPR), explicit consent or in the case of transfers required by contract or by law (Article 49(1) of the GDPR). Furthermore, we will inform you of the legal basis for transfers to third countries in relation to the individual providers based in those countries, whereby adequacy decisions take precedence as the legal basis. Information on transfers to third countries and existing adequacy decisions can be found on the European Commission’s website: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de.

EU-US Transatlantic Data Privacy Framework: Under the so-called ‘Data Privacy Framework’ (DPF), the European Commission has also recognised the level of data protection provided by certain US companies as adequate under the adequacy decision of 10 July 2023. You can find the list of certified organisations, as well as further information on the DPF, on the US Department of Commerce’s website at https://www.dataprivacyframework.gov/ (in English). We will inform you in our privacy policy which of the service providers we use are certified under the Data Privacy Framework.

Rights of data subjects

Rights of data subjects under the GDPR: As a data subject, you are entitled to various rights under the GDPR, which arise in particular from Articles 15 to 21 of the GDPR:

  • Right to object: You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data carried out on the basis of Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions. Where personal data relating to you is processed for the purposes of direct marketing, you have the right to object at any time to the processing of your personal data for the purposes of such marketing; this also applies to profiling insofar as it is related to such direct marketing.
  • Right to withdraw consent: You have the right to withdraw any consent you have given at any time.
  • Right of access: You have the right to request confirmation as to whether the data in question is being processed, and to access this data, as well as to receive further information and a copy of the data in accordance with the statutory requirements.
  • Right to rectification: In accordance with the statutory provisions, you have the right to request that data relating to you be completed or that any inaccurate data relating to you be rectified.
  • Right to erasure and restriction of processing: In accordance with the statutory provisions, you have the right to request that data relating to you be erased without delay or, alternatively, in accordance with the statutory provisions, to request a restriction on the processing of such data.
  • Right to data portability: You have the right to receive the data concerning you that you have provided to us in a structured, commonly used and machine-readable format, in accordance with the statutory requirements, or to request that it be transferred to another data controller.
  • Complaint to a supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place where the alleged infringement occurred, if you consider that the processing of your personal data infringes the provisions of the GDPR.

Competent supervisory authority: State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), Kavalleriestraße 2–4, 40213 Düsseldorf, www.ldi.nrw.de. The lawfulness of any processing carried out prior to withdrawal remains unaffected by the withdrawal.

Cookies and local storage in the browser

Our website does not use any tracking or marketing cookies, nor does it use a consent management tool (cookie banner). The homepage and the legal pages (Impressum, privacy policy, terms and conditions) do not set any cookies at all. We also do not use your browser’s local storage (‘localStorage’).

We only set technically necessary session cookies where a function requires them. They contain a random identifier, are deleted when the browser is closed, and are not used to recognise users across multiple visits:

  • ea_pub: when you open the application form, the booking enquiry form and the press kit pages. The cookie stores the selected language, protection against cross-site request forgery (CSRF) and a unique form identifier that prevents duplicate submissions.
  • ea_dj: after logging in to the DJ area (login, language, form protection).
  • ea_admin: in the internal backend, for the team only.

Legal basis: technically necessary storage to provide the function you have expressly requested (Section 25(2)(2) of the TDDDG) and a legitimate interest in the security of our forms (Article 6(1), first sentence, point (f) of the GDPR).

Exceptions involving third parties: Embedded players on the press kit pages, in the DJ section and in the backend (only after you have clicked on ‘Load player’, see the section ‘Embedded media content’) and on the archive page (see the section ‘Archive page’), providers may set cookies or access information on your device. This does not happen on the home page, the forms or the legal pages.

Provision of the online service and web hosting

We process users’ data in order to provide them with our online services. To this end, we process the user’s IP address, which is necessary to transmit the content and functions of our online services to the user’s browser or device.

Types of data processed: usage data (e.g. web pages visited, times of access); meta, communication and procedural data (e.g. IP addresses, time stamps). Data subjects: Users (e.g. website visitors). Purposes: Provision of the online service, IT infrastructure, security measures. Legal basis: Legitimate interests (Article 6(1), first sentence, point (f) of the GDPR).

Further information on processing procedures, methods and services

  • Provision of our online services on rented server space: To provide our online services, we use server space, computing capacity and software that we rent from a server provider; service provider: Contabo GmbH, Lauterbourg data centre (France, European Union). This is also where the database containing applications, profiles, booking enquiries and messages, as well as the uploaded files, is stored. Legal basis: Legitimate interests (Article 6(1), first sentence, point (f) of the GDPR).
  • Collection of access data and log files: Access to our online service is logged in the form of so-called ‘server log files’. Server log files include the address and name of the web pages and files accessed, the date and time of access, the volume of data transferred, confirmation of successful access, browser type and version, the user’s operating system, the referrer URL (the page visited previously), the IP address and the requesting internet service provider. The server log files may be used, on the one hand, for security purposes, e.g. to prevent server overload (particularly in the event of malicious attacks, known as DDoS attacks), and, on the other hand, to ensure server capacity and stability; Legal basis: Legitimate interests (Article 6(1), first sentence, point (f) of the GDPR). Data erasure: The log data from the upstream web server is rotated daily and retained for up to approximately 52 days; the log data from the actual web server is rotated weekly and retained for up to approximately 12 months; it is then overwritten or deleted. Data that needs to be retained for evidential purposes is exempt from deletion until the respective incident has been fully resolved.
  • Email hosting and email delivery: The email accounts for our domain electronicanarchy.de (e.g. info@electronicanarchy.de) are hosted by webhoster.de AG (data centre in Frankfurt am Main, Germany). We send automated messages from this website (confirmations of receipt, invitations, notifications, replies in message threads) via the address no-reply@electronicanarchy.de and thus also via the mail servers of webhoster.de AG; Legal basis: Legitimate interests (Article 6(1), first sentence, point (f) of the GDPR) as well as the performance of a contract and pre-contractual enquiries (Article 6(1), first sentence, point (b) of the GDPR).
  • Local fonts and scripts: The fonts and scripts used on our website are hosted on our own server. When you visit our pages, no connection is established with third-party font or script servers. We do not use a content delivery network (CDN). Exceptions to this are the embedded content mentioned in this statement (press kit pages) and the archive page (see below).

Contact and enquiry management

When you contact us by email (e.g. info@electronicanarchy.de), by post, by telephone or in the context of existing user and business relationships, the details provided by the enquirers are processed to the extent necessary to respond to the enquiries and any requested actions. We delete the enquiries and the data submitted with them once they are no longer required for processing and provided there are no statutory retention obligations to the contrary. We do not provide a general contact form on this website; there are separate forms for booking enquiries and DJ applications (see the following sections). The archived old website has its own contact form (see the ‘Archive page’ section).

Types of data processed: Contact details (e.g. email address, telephone number); content data (e.g. message content); metadata, communication and procedural data (e.g. timestamps). Data subjects: Communication partners. Purposes: Contact enquiries and communication; managing and responding to enquiries. Legal bases: Legitimate interests (Article 6(1), first sentence, point (f) of the GDPR); performance of a contract and pre-contractual enquiries (Article 6(1), first sentence, point (b) of the GDPR).

Booking enquiries and press kits (event organisers)

If you make an enquiry about an artist using the form at /anfrage.php, we will process the details provided in the form: club, organiser or collective; your name; your email address; your telephone number (if provided); city; venue; date; approximate time; capacity; any budget you specify; the artist you wish to book; and your message. We also store the time of your consent and, to protect against misuse, a hash value of your IP address generated using a secret key (salt) (a pseudonym instead of the plaintext IP address). You will receive a confirmation of receipt by email, and our team will be notified. The details marked as mandatory fields and your consent are required; without them, we cannot process your enquiry.

We use the information to review and respond to your enquiry, to draw up a quote, and to arrange and process a booking. We only pass on to the artist the information required for a specific quote (name of the event, date, venue), not our internal notes.

Press kits: For artists we represent, organisers receive a link to a press kit page. It only shows what the artist has authorised for organisers to view: bio, mixes, social media links, authorised photos, logos and the tech rider. Fees, tax details and the artist’s real name remain with us. The link contains a random identifier; anyone who knows it can access the page.

Further emails (optional): We may only email you about similar booking enquiries later if you tick the second box on the form. You may withdraw this consent at any time by emailing info@electronicanarchy.de. The reply to your enquiry is not a marketing email.

Retention period: We store enquiries and, should a booking be made, the associated contractual and billing data for as long as is necessary for processing and fulfilment, and thereafter to the extent that statutory retention obligations apply (in particular under commercial and tax law). We will delete enquiries that do not result in a booking at any time upon your request.

Types of data processed: Master data (name, organiser), contact details, content data, contract data, metadata, communication data and procedural data. Data subjects: Organisers, clubs and business partners. Purposes: Contract initiation and fulfilment, communication, prevention of misuse, proof of consent, optional direct marketing. Legal bases: Consent (Article 6(1), first sentence, point (a) of the GDPR); performance of a contract and pre-contractual measures (Article 6(1), first sentence, point (b) of the GDPR); legal obligation (Article 6(1), first sentence, point (c) of the GDPR); legitimate interests (Article 6(1), first sentence, point (f) of the GDPR).

DJ applications and DJ Area

Application. If you apply to become a DJ using the form at /apply.php, we will store your details: DJ name, your name, email address, place of residence, date of birth, genres, links to mixes and profiles, your expected fee and any additional comments. We also store your consent, including the date and time it was given, the language selected and, to protect against misuse, a hash value of your IP address generated using a secret key (salt) (a pseudonym instead of the plaintext IP address). We will confirm receipt by email. The details marked as mandatory fields are required; without them, we cannot review your application. We use your date of birth to verify that you are at least 18 years old. Applications are assessed internally by us and annotated; assessments and notes are visible only to the Electronic Anarchy team.

Deletion. We delete rejected applications, including assessments, notes and any files, no later than six months after rejection. We will delete your data earlier upon request.

DJ Area. If you accept our offer, we will set up access to the DJ Area for you. There, you can manage your details yourself: profile (bio, social media links, mixes), key details for bookings (e.g. fee, travel radius, exclusivity, travel expenses, tax status, VAT number, no-gos, tech rider), photos, logos, rider files and your availability. In addition, we maintain a message history with you in the DJ Area, the contents of which you will also receive by email. We use a technically necessary session cookie for the login (see above). Every file requires your approval before it is sent to organisers. We re-encode uploaded photos and logos; we do not accept PDFs containing active content. Your data is stored on our server.

Sharing. We only pass on the press kit to organisers (see previous section): biography, mixes, social media links and the files you have authorised us to share. Your real name, email address, fee and tax details remain with us, unless they are required for a specific booking or contract.

Data retention period during our working relationship. We will retain your data for as long as you are an artist with us; thereafter, we will only retain it to the extent required by statutory retention obligations (e.g. for contracts and invoicing). We will delete your profile and access details upon request.

Types of data processed: Personal details, contact details, content data, contractual data, metadata, communication data and procedural data. Data subjects: Applicants, artists. Purposes: Assessment of applications, operation of the DJ Area, arranging bookings, communication, prevention of misuse. Legal bases: Consent (Article 6(1), first sentence, point (a) of the GDPR); performance of a contract and pre-contractual measures (Article 6(1), first sentence, point (b) of the GDPR); legal obligation (Article 6(1), first sentence, point (c) of the GDPR); legitimate interests (Article 6(1), first sentence, point (f) of the GDPR).

Embedded media content (two-click solution)

We display mix links from SoundCloud, YouTube, Mixcloud and Spotify as embedded players on the press kit pages, in the DJ Area and in the internal backend. A two-click solution applies here: simply visiting such a page does not establish a connection to the provider. Instead, you will see a notice and the ‘Load player’ button. Only when you click on it will your browser load the player directly from the provider’s server; in doing so, your IP address and technical data will be transmitted to the provider, and the provider may set its own cookies or access information on your device. The link to the mix remains visible regardless. We do not load any players on the home page, the application page, the enquiry page or the legal notices.

The providers process the IP address because, without it, they would be unable to send the content to your browser, and may process usage data for their own purposes; we have no control over this. The legal basis is your consent, given by clicking on ‘Load player’ (Article 6(1), first sentence, point (a) of the GDPR; Section 25(1) of the TDDDG). We do not store this decision; it applies only to this particular player and only until the page is reloaded. You can withdraw your consent at any time by leaving the page or reloading it.

  • YouTube videos (enhanced privacy mode): These are embedded via the domain youtube-nocookie.com. According to the provider, no cookies are set to personalise playback. Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; website: https://www.youtube.com; privacy policy: https://policies.google.com/privacy; basis for data transfers to third countries: EU-US Data Privacy Framework (DPF).
  • SoundCloud: music hosting and embedded player; service provider: SoundCloud Global Limited & Co. KG, Rheinsberger Str. 76/77, 10115 Berlin, Germany; privacy policy: https://soundcloud.com/pages/privacy.
  • Spotify: music streaming and embedded player; service provider: Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden; privacy policy: https://www.spotify.com/de/legal/privacy-policy/.
  • Mixcloud: music hosting and embedded player; service provider: Mixcloud Ltd., United Kingdom; website: https://www.mixcloud.com; privacy policy: https://www.mixcloud.com/privacy/; Basis for data transfer to the United Kingdom: Adequacy decision by the European Commission (Article 45 of the GDPR).

Use of an AI-powered voice assistant to answer incoming calls

We use the IONOS AI telephone assistant to process telephone enquiries automatically (service provider: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany). This system processes the content of calls on our behalf in order to record, forward or respond to your enquiry. It utilises automatic speech recognition (speech-to-text), semantic analysis (natural language processing) and, where applicable, text generation (text-to-speech).

The content of conversations may be recorded, transcribed or documented. This will only take place if you have been informed accordingly at the start of the conversation and choose to continue the conversation. You may end the call at any time to prevent your data from being processed.

In particular, we process what you say during the conversation, technical connection data (date, time, duration) and, where applicable, personal details provided voluntarily, such as your name or telephone number. We also process interaction data, for example relating to the conduct of the conversation or in the event of call disconnections. The legal bases are Article 6(1)(b) of the GDPR (for the initiation or performance of a contract) and Article 6(1)(f) of the GDPR (legitimate interest in efficient and scalable communication).

We use subcontractors for the technical implementation, in particular for hosting, speech recognition and semantic analysis. In this context, personal data may also be transferred to the USA by the subcontractor. In principle, this takes place on the basis of an adequacy decision pursuant to Article 45 of the GDPR, as the service providers are certified under the EU-US Data Privacy Framework. In the absence of such a decision, the transfer takes place on the basis of standard contractual clauses in accordance with Article 46(2)(c) of the GDPR and supplementary safeguards. The requirements of Article 44 of the GDPR are complied with.

Pseudonymised data may be used for training purposes to improve speech processing. This makes it impossible, or significantly more difficult, to trace the data back to individual persons. No automated decision-making within the meaning of Article 22 of the GDPR takes place. The data is stored only for as long as is necessary for the purposes stated. The data is then automatically deleted or anonymised.

External shop (tickets and merchandise)

On our website, we provide a link to an external online shop at shop.electronicanarchy.de. We do not operate this shop; it is provided by the service provider SumUp (Shops service at shops.sumupstore.com). No data is transferred to SumUp unless you click on the link. As soon as you visit the shop, the provider’s privacy policy applies; the processing of your data within the shop (e.g. order, contact and payment details) is solely the provider’s responsibility.

Service provider: SumUp (shop service at shops.sumupstore.com); website: https://www.sumup.com. The provider’s privacy policy displayed in the shop shall apply.

TimTechlor plug-ins: Purchasing via Paddle and licence management

On electronicanarchy.de, we provide links to Tim Techlor’s plug-ins (website: timtechlor.de; the same data controller). These are simple links; we do not embed any content, scripts or buttons from timtechlor.de or Paddle on this site. No data is transferred unless you click on a link. Clicking on a link will take you to timtechlor.de, where its privacy policy applies.

We sell the paid TimTechlor plug-ins (VST3/CLAP) via Paddle. Purchases of the VST3/CLAP versions are not yet available on timtechlor.de (scheduled for release in the first quarter of 2027); the following information applies from the start of sales and to purchases made on timtechlor.de. Paddle acts as the reseller and contractual partner for the purchase (Merchant of Record) and processes the data you enter at checkout (in particular your email address, country, postcode, payment details and, where applicable, VAT number) under its own responsibility in order to process the payment, handle invoices and taxes, prevent fraud and issue refunds. We do not receive payment details such as card numbers.

Checkout on timtechlor.de: The checkout is displayed as a Paddle window on timtechlor.de. We only load the necessary Paddle script (cdn.paddle.com) once you click the ‘Buy’ button; no data is transferred to Paddle before this. Once you have clicked the button, Paddle processes technical data such as your IP address and browser details, and may set cookies or local storage required for the checkout process. No Paddle script is loaded on electronicanarchy.de.

What we receive from Paddle and why: Following your purchase, Paddle sends us the transaction ID, the price tier purchased, your email address and, if provided, your name. We use this information to issue your licence key, send it to you by email and display it on the page immediately after purchase. Your email address forms part of the licence key and is displayed in the plug-in as ‘Licensed to …’. We store the licence data (licence ID, email address, name, price tier, transaction ID, date of issue) are stored on our server (Contabo GmbH, data centre in the EU) so that we can resend keys if they are lost, process transfers and refunds, and inform you about the release of new plug-ins that are included in your licence.

Retention period: For as long as your licence remains valid. Following a refund or at your request, we will delete the licence data, unless we are required to retain it for longer due to statutory retention obligations or to prevent misuse. The data stored by Paddle is governed by its privacy policy.

Licence verification within the plug-in: The plug-ins verify the licence key exclusively on your computer. No data is transferred to us or to third parties during this process.

Types of data processed: Basic data (e.g. name, email address); contractual data (e.g. licence ID, price tier, transaction ID); payment data (Paddle only); Metadata, communication and procedural data (e.g. IP address at checkout, only via Paddle). Data subjects: Customers; prospective customers. Purposes: Provision of contractual services (licence granting and administration); payment processing (Paddle); customer service. Legal bases: performance of a contract and pre-contractual enquiries (Article 6(1), first sentence, point (b) of the GDPR); legal obligation (Article 6(1), first sentence, point (c) of the GDPR); legitimate interests in preventing misuse (Article 6(1), first sentence, point (f) of the GDPR).

Service provider: Paddle.com Market Limited, 30 Old Bailey, London EC4M 7AU, United Kingdom (for buyers in the USA and Canada, the relevant Paddle company); website: https://www.paddle.com; privacy policy: https://www.paddle.com/legal/privacy. Legal basis for data transfers to the United Kingdom: adequacy decision by the European Commission (Article 45 of the GDPR); for any onward transfers, Paddle’s own information applies.

The terms and conditions of purchase and the licence are set out in our Terms and Conditions and Licence Terms.

Archive page (old website)

The links ‘Archive / Old Page’ and ‘Archive / Old Website’ will take you to an archived version of the former Electronic Anarchy website (/old.php). This page is from an earlier version of our site and operates differently from the rest of this website: it has its own contact form, which is protected against misuse by Google reCAPTCHA, and it loads fonts and icon sets from third-party servers (Google Fonts, Font Awesome). When you visit this page, your IP address and technical data are therefore transmitted to these providers; reCAPTCHA may also access information from your device. Service providers: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (reCAPTCHA, Google Fonts), Privacy Policy: https://policies.google.com/privacy, basis for third-country data transfers: EU-US Data Privacy Framework (DPF); Fonticons, Inc., USA (Font Awesome), privacy policy: https://fontawesome.com/privacy. In addition, the information provided on the archive page itself applies. You can only open the archive page by actively clicking on the link; if you do not wish this processing to take place, do not access it. This does not apply to any other pages on this website.

Created with the free Datenschutz-Generator.de by Dr Thomas Schwenke; content revised on 9 November 2026.