Privacy
Privacy Policy
Last updated: 29 August 2026 · Rev. 3187
Protecting your personal data is important to us. This Privacy Policy explains which personal data is processed when you use Feelplex, for what purposes it is processed, which services are used, and which rights you have.
Select a chapter:-
01 Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
BYTSCH Technology UG (haftungsbeschränkt)
Feelplex
Geestbogen 16
24941 Flensburg
Germany
Phone: +49 461 50 56 58 1
Email: contact@feelplex.de
Represented by Managing Director Alexander Rommel. -
02 General information on the processing of personal data
We process personal data only insofar as this is necessary to operate Feelplex, provide our functions and content, perform contracts, communicate with you, protect our systems, or comply with legal obligations.
Depending on the processing activity, the following legal bases in particular may apply:
- Article 6(1)(a) GDPR where you have given consent,
- Article 6(1)(b) GDPR for the performance of a contract or pre-contractual measures,
- Article 6(1)(c) GDPR for compliance with legal obligations,
- Article 6(1)(f) GDPR for the purposes of legitimate interests.
Where information is stored on your terminal equipment or information already stored there is accessed, the requirements of Section 25 of the German Telecommunications-Digital Services Data Protection Act (TDDDG) also apply.
-
03 Hosting and server log files
When you access our website, our web server or hosting service provider processes technical information required to provide the service.
This may include in particular:
- IP address
- date and time of access
- page or file requested
- amount of data transferred
- HTTP status code
- referrer URL
- browser type and version
- operating system
- other technical connection information
The processing is used to provide the website technically, maintain its stability and security, and detect and investigate technical errors, misuse, and attacks.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of Feelplex.
Where our hosting provider processes personal data on our behalf, this takes place on the basis of a data processing agreement pursuant to Article 28 GDPR.
Server and security data is stored only for as long as necessary for the relevant purpose. Longer storage may be necessary in particular in the event of specific security incidents, suspected misuse, or legal obligations.
-
04 Cookies and similar technologies
Feelplex uses cookies and comparable storage technologies.
Technically necessary technologies
Certain storage operations and access to terminal equipment are necessary to provide functions that you request. This applies in particular to session management, the shopping cart, customer accounts and login, language settings, form and system security, and technically necessary settings.
Where access to information on your terminal equipment is strictly necessary to provide a digital service expressly requested by you, such access is based on Section 25(2) TDDDG. The associated processing of personal data is based, depending on the function, in particular on Article 6(1)(b) or (f) GDPR.
Non-essential technologies
Where storage or access to information on your terminal equipment is not technically necessary, it will take place only on the basis of consent pursuant to Section 25(1) TDDDG in conjunction with Article 6(1)(a) GDPR. You may withdraw consent at any time with effect for the future.
-
05 Customer account and registration
You can create a customer account on Feelplex. In doing so, we may process in particular:
- first name
- last name
- email address
- password or a technically generated password hash
- time and technical information relating to registration
- other account information voluntarily provided by you, where applicable
Passwords are not stored in plain text.
The processing is used to create and manage your customer account, enable login, manage your orders, and provide purchased content. The legal basis is Article 6(1)(b) GDPR.
Security-related processing, for example to protect against unauthorised login attempts or automated misuse, is additionally based on Article 6(1)(f) GDPR.
Any newsletter subscription offered is voluntary and independent of the creation of a customer account.
-
06 Orders and contract performance
When you place an order, we process the personal data required to initiate, perform, and complete the relevant contract.
- first and last name
- billing address
- delivery address
- email address
- telephone number where applicable
- products ordered
- order number
- prices
- selected payment method
- payment status
- invoice data
- shipping information
- order processing status
The legal basis is Article 6(1)(b) GDPR.
Where we are required to retain invoices, payment information, or other business records under commercial, tax, or other legal provisions, processing is additionally based on Article 6(1)(c) GDPR.
We do not request separate data protection consent for processing that is necessary to perform an order.
-
07 Digital content, downloads and access permissions
Feelplex offers digital content, in particular sounds, photos, and Sound Journeys, for download or digital provision.
For contract performance and technical provision, we may process in particular:
- customer and order number
- product and product ID
- authorisation status
- time of activation
- time of provision
- creation or dispatch of download access
- technical access information
- download status
- number of permitted downloads where applicable
The processing is used to provide purchased content, manage access permissions, troubleshoot issues, and document proper provision. The legal basis is Article 6(1)(b) GDPR.
Where information must be documented or retained for legal reasons, processing is additionally based on Article 6(1)(c) GDPR.
-
08 Audio previews and samples
Feelplex provides audio previews or samples for certain products.
To prevent automated or abusive access, a sample request may be protected by Google reCAPTCHA.
For this function, reCAPTCHA is not loaded merely when the product page is opened or when the pointer moves over the sample element. The security check starts only in connection with the user deliberately requesting the sample.
Further information is provided in the chapter “Google reCAPTCHA”.
-
09 Digital additional functions for physical products
Certain physical products may include an additional digital function, for example a QR code for accessing a sound.
Where such access is provided individually or linked to an order, we may process in particular the order and product assignment, access code or comparable technical identifier, authorisation status, time of provision, and technical access information.
The processing is used to provide and manage the relevant digital additional function and is based on Article 6(1)(b) GDPR.
-
10 Payment processing
For paid orders, the information required for payment processing is processed according to the payment method selected by you. Where external payment service providers are used, they receive the information required to perform the payment. Processing is based on Article 6(1)(b) GDPR.
PayPal
If you select PayPal, payment may in particular be processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Customer, order, payment, and transaction data may be transferred to PayPal. Further processing by PayPal is governed by PayPal’s applicable privacy information.
Bank transfer
If you pay by bank transfer, we process the account and booking information arising from the payment transaction to the extent necessary for payment allocation, accounting, and contract performance.
-
11 Shipping of physical products
When you order physical goods, we transfer the data required for delivery to the postal or shipping provider commissioned for the relevant shipment. This includes in particular the recipient’s name, delivery address, and any additional information required for the specific delivery.
The legal basis is Article 6(1)(b) GDPR.
-
12 Contacting us
You can contact Feelplex in particular by email, telephone, or via the contact form.
We may process in particular your name, email address, the content of your message, order or product information where applicable, and technical connection and security information.
Processing is carried out to handle your enquiry. If your enquiry relates to an existing or potential contract, the legal basis is Article 6(1)(b) GDPR. Other enquiries are processed on the basis of Article 6(1)(f) GDPR. Our legitimate interest is to handle and respond to communications addressed to Feelplex.
The data will be deleted once it is no longer required to handle the enquiry and there are no statutory retention obligations or other legitimate grounds for continued storage.
The contact form may be protected by Google reCAPTCHA. reCAPTCHA is loaded only after actual interaction with the form.
-
13 Product reviews
Users can submit product reviews on Feelplex. We may process in particular the nickname provided, star rating, summary, review text, and technical information for security and misuse prevention.
Review content intended by the user for publication may be displayed publicly on the relevant product page. Please do not include personal information in a review that should not be publicly accessible.
The processing is used to provide the review function and inform other users. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the transparent presentation of user experiences with our products.
The review form may be protected by Google reCAPTCHA against automated submissions. reCAPTCHA is not loaded merely by moving the pointer over the submit button, but only in connection with actual interaction with the review form or the submission process.
-
14 Newsletter and email information
You can voluntarily subscribe to email information from Feelplex. We process in particular your email address, your name where applicable, and information about subscription, confirmation, and unsubscription where required for documentation.
The legal basis for sending the newsletter is your consent pursuant to Article 6(1)(a) GDPR.
You can withdraw your consent at any time with effect for the future, in particular via an unsubscribe link provided in the relevant message or by contacting us.
After you unsubscribe, we will no longer use your data to send newsletters. Information about the unsubscribe request may remain stored where necessary to ensure that your withdrawal is respected or to demonstrate lawful processing.
-
15 No proprietary analytics or advertising tracking services
Feelplex currently does not use separate web analytics or advertising tracking services such as Google Analytics to create user profiles.
Internal technical and business evaluations may be carried out on the basis of orders, customer accounts, enquiries, or other business transactions where this is necessary for operating and improving our services and is legally permitted.
-
16 Google Maps
For certain products, you can display the recording or creation location on an interactive Google map.
No connection when the page is opened
Google Maps is not loaded automatically when the relevant product page is opened on Feelplex. We initially display a local map placeholder provided by Feelplex. It contains the recording location, a locally generated schematic map illustration, a privacy notice, and the “Show map” button. No Google Maps content is loaded and no connection to Google Maps is established for this placeholder. This applies to the relevant maps on Sound, Photo, and Sound Journey product pages.
Activating Google Maps
Google Maps is loaded for the relevant page view only after you press the “Show map” button. A connection to Google is then established. Google may receive in particular your IP address, browser and device information, technical connection data, the time of access, and information about the map function requested. Further technically required Google resources may be loaded as part of displaying the map.
Map activation applies only to the current page view. Feelplex does not permanently store your decision to display the map in its own consent cookie.
By pressing “Show map” after the notice displayed immediately beforehand, you expressly choose to load the external map function. Where information is stored on or accessed from your terminal equipment, this is based on your consent pursuant to Section 25(1) TDDDG; the associated processing of personal data is based on Article 6(1)(a) GDPR.
No automatic determination of your device location
Coordinates and location information displayed by Feelplex relate to the recording or creation location of the relevant product. Feelplex does not automatically use the location of your device for this map function.
Provider and further information
For Google Maps Platform, Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland, is generally the Google contracting entity for Google Maps Core Services for customers with a billing address in the EEA. During the normal operation of Google Maps services, end users provide certain personal data directly to Google. Google processes this data in accordance with the applicable Google Privacy Policy and Google Maps terms.
- Google Privacy Policy
- Google Maps Additional Terms of Service
- Google Maps Platform EEA Terms of Service
Processing outside the European Economic Area cannot be completely excluded as part of the technical provision of the service.
-
17 Google reCAPTCHA
We use Google reCAPTCHA to protect certain website functions against spam, automated submissions, abusive access, fraud, and attacks.
On Feelplex, reCAPTCHA may in particular be used for contact forms, newsletter forms, product reviews, customer login, login pop-ups, registration, password reset functions, the electronic withdrawal function, and protected audio preview or sample requests.
Delayed loading
reCAPTCHA is not loaded generally when every Feelplex page is opened. For protected forms, it is loaded only in connection with actual interaction with the relevant form or, at the latest, when the security check is required for submission. For protected audio samples, it is loaded only after the user deliberately clicks the relevant sample function. Merely moving the pointer over a sample or submit button does not trigger the reCAPTCHA security check.
Data processed and purpose
As part of the security check, processing may include in particular the IP address, browser and device information, connection data, time and type of interaction, and other technical information required for security and risk analysis. reCAPTCHA may in particular use the “_grecaptcha” cookie or technical identifier.
The purpose of processing is the security of Feelplex and protection against spam, automated attacks, fraudulent or abusive submissions, and automated downloads. Personal data is processed on the basis of Article 6(1)(f) GDPR. Our legitimate interest is the secure operation of our platform and the protection of our systems and digital content against misuse.
Where information is stored on your terminal equipment or information stored there is accessed as part of the security check, and such access is strictly necessary to securely provide the protected function expressly used by you, access to the terminal equipment is based on Section 25(2)(2) TDDDG. Where these conditions are not met in an individual case, consent under Section 25(1) TDDDG is required.
Google’s role for reCAPTCHA
Since 2 April 2026, Google generally processes reCAPTCHA Customer Data as a processor. Feelplex remains the controller for the use of reCAPTCHA. Google describes the purposes of reCAPTCHA processing as security, fraud prevention, and abuse prevention. According to Google, the “_grecaptcha” cookie remains in use.
For Feelplex, the relevant Google Cloud contracting entity in the EEA is generally Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland.
-
18 Links to social networks
Feelplex links to its profiles on social networks, for example Facebook or Instagram. These links are not automatically social media plug-ins.
A connection to the relevant social network is generally established only when you open the corresponding link. The relevant provider is responsible for any further processing of personal data there.
-
19 Recipients of personal data
Where necessary for the relevant purpose, personal data may be transferred in particular to the following categories of recipients:
- hosting and IT service providers
- payment service providers and banks
- postal and shipping providers
- email and communications service providers
- security and anti-spam service providers
- tax advisers and other professional advisers subject to confidentiality obligations
- authorities and public bodies where required by law
Where service providers process personal data on our behalf, they are engaged in accordance with the applicable legal requirements, in particular Article 28 GDPR.
-
20 International data transfers
We prefer personal data to be processed within the European Union or European Economic Area. For certain technical services, processing in countries outside the European Economic Area cannot be completely excluded.
Such transfers take place only in accordance with Articles 44 et seq. GDPR. Possible safeguards include an adequacy decision by the European Commission, the EU-U.S. Data Privacy Framework for appropriately certified organisations, the European Commission’s Standard Contractual Clauses, or other safeguards permitted by law.
-
21 Retention periods
As a general rule, we retain personal data only for as long as necessary for the relevant processing purpose.
Once the purpose no longer applies, data is deleted unless statutory retention obligations, legal claims, security interests, or other legally permissible grounds require continued storage.
In particular, contract, invoice, accounting, and bookkeeping records relevant under tax and commercial law may be subject to statutory retention periods.
Where data is processed on the basis of consent, processing generally continues until consent is withdrawn unless another legal basis permits or requires continued storage.
-
22 Data security
We take appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access, and other unlawful processing.
Data transmitted between your browser and Feelplex is encrypted using HTTPS/TLS.
Access to personal data is limited to persons and service providers who require such access to perform their respective tasks.
-
23 Your rights
Subject to the statutory requirements, you have in particular the following rights:
- right of access under Article 15 GDPR
- right to rectification under Article 16 GDPR
- right to erasure under Article 17 GDPR
- right to restriction of processing under Article 18 GDPR
- right to data portability under Article 20 GDPR
- right to object under Article 21 GDPR
- right to withdraw consent under Article 7(3) GDPR
Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
Objection to processing based on legitimate interests
Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right to object to the processing pursuant to Article 21 GDPR on grounds relating to your particular situation.
-
24 Right to lodge a complaint
Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes data protection law.
For non-public bodies whose main establishment is in Schleswig-Holstein, the competent authority is in particular:
State Commissioner for Data Protection Schleswig-Holstein
Independent State Centre for Data Protection Schleswig-Holstein (ULD)
Holstenstraße 98
24103 Kiel
Germany
Phone: +49 (0)431 988-1200
Email: mail@datenschutzzentrum.de -
25 Changes to this Privacy Policy
We update this Privacy Policy where changes to our services, technical procedures, or legal requirements make this necessary. The current version published on Feelplex applies.