DE Booking

Privacy Policy

1. Controller

Dennis Horstmann ("Special D.")
Am Schäferbach 13, 22946 Trittau, Germany
Phone: +49 4154 8015110
E-mail: booking@speciald.de

Dennis Horstmann operates speciald.de, the official website of DJ and producer Special D., as a sole proprietor and handles the booking of Special D. If you have any questions about data protection, you can reach us using the contact details above.

2. Summary

  • The website runs on our own server in Germany. Web analytics (Google Analytics) and advertising measurement and remarketing (Meta Pixel, Google Ads) only run if you consent in the consent banner.
  • We only process personal data when you contact us (booking form, e-mail) or when you expressly consent in the consent banner.
  • Spotify content and the Meta Pixel are only loaded after you click or consent.

3. Legal bases

We process personal data on the basis of the General Data Protection Regulation (GDPR):

  • Art. 6 (1) (a) GDPR – your consent (e.g. Meta Pixel, Spotify player on release pages); for access to your device additionally § 25 (1) TDDDG,
  • Art. 6 (1) (b) GDPR – pre-contractual measures or performance of a contract (e.g. handling a booking request),
  • Art. 6 (1) (c) GDPR – legal obligations (e.g. retention obligations under commercial and tax law),
  • Art. 6 (1) (f) GDPR – our legitimate interests (e.g. secure operation of the website, maintaining business contacts).

4. Hosting and server log files

The website is hosted on a server we operate ourselves in Germany; no external hosting provider is involved. When you access the pages, the web server automatically stores the following access data: IP address, date and time, requested page or file, amount of data transferred, HTTP status code, referrer URL, and browser and operating system.

We need this data to deliver the website, ensure its stability and security and fend off attacks. The legal basis is Art. 6 (1) (f) GDPR. We keep the log files for 365 days and then delete them automatically. The one-year period allows us to detect, attribute and document attacks, abuse (e.g. spam via the booking form) and malfunctions after the fact. Access to the log files is restricted to the technical administrators. If a specific security incident requires longer retention for evidence, we delete the affected entries as soon as the incident is closed. This data is not combined with other data sources.

The connection to the website is encrypted via TLS (HTTPS).

5. Fonts

The fonts used (Anton, Montserrat) are hosted on our own server. No connection to Google Fonts or other font providers is established when you visit the site.

6. Booking form

Which data: When you send a booking request via the form, we process the details you enter: name, e-mail address, optionally company and phone number, and details about the event (e.g. event name, date and alternative dates, venue, genre, capacity, set length, budget, billing, other acts, technical setup, how you heard about us). Name, e-mail address, event name and venue are required; without them we cannot process the request.

Purpose and legal basis: We use the details to review and answer your request and, where applicable, to arrange a performance (Art. 6 (1) (b) GDPR).

Contact database: We store your contact details and a short note about the request (date, event, show date, venue, capacity) in our contact database on our own server and mark the contact as a promoter/booker. This allows us to match later requests and maintain the business relationship, e.g. to contact you about future Special D. shows or tour dates. The legal basis is our legitimate interest in maintaining business contacts (Art. 6 (1) (f) GDPR). You can object to this at any time (see section 14); we will then delete the entry unless we are required to retain it. We only send promotional e-mails within the limits permitted by law (§ 7 UWG).

Recipients: The request is delivered as an e-mail to our booking inbox. For e-mail we use Google Workspace by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a processor (see section 12). Where necessary for handling, we forward requests to the booking agency we have engaged.

Spam protection: The form contains a field invisible to humans and checks the time taken to fill it in, in order to filter out automated spam. No additional personal data is collected for this and no third-party services (e.g. reCAPTCHA) are used.

Retention: Requests that do not result in a booking are deleted no later than three years after the last contact, unless you object earlier. If a booking is made, we keep business-relevant documents for the statutory periods (up to 6 or 10 years, § 257 HGB, § 147 AO; Art. 6 (1) (c) GDPR).

7. Contact by e-mail

If you write to us by e-mail (e.g. to booking@speciald.de), we process your e-mail address and the content of your message to handle your request (Art. 6 (1) (b) or (f) GDPR). For booking matters, section 6 on the contact database applies accordingly, as do its provisions on recipients and retention.

8. Downloads (press kit, riders, videos, photos)

You can download the press kit, riders, videos and photos without registering. Only the server log files described in section 4 are created; if you have consented to tracking, the download is also counted as an event (see section 10).

9. Spotify content

On release pages you can load Spotify players. The provider is Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden. The player is not loaded automatically, but only after you have consented via the consent banner. The covers on the playlists page are simple links to Spotify; no player is embedded there.

Only then does your browser connect to Spotify. Spotify receives in particular your IP address, browser and device information and the page visited; if you are logged in to Spotify, Spotify can associate the request with your account. Spotify may set cookies. The legal basis is your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG), given by clicking or consenting. More information: Spotify privacy policy.

10. Meta Pixel and Google Analytics/Google Ads (only with your consent)

On this website we use the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, to measure how the site is used and how our ads perform (e.g. how many booking requests come from an ad or which streaming service is clicked for which release). The pixel is only loaded after you have consented via the consent banner. Refusing is possible with equal prominence. Without consent, no connection to Meta is established.

When the pixel is active, data such as the page visited, your IP address, browser and device information, cookie identifiers and the following events are transmitted to Meta: page view (“PageView”), submitted booking request (“Lead” – without the form contents, i.e. without name, e-mail address or event details), click on an e-mail address or phone number (“Contact”), download of the press kit, riders, videos or photos (“Download” with file type) and click on a streaming service (“StreamClick” with release and service). We have switched off the pixel's automatic capture of form fields and clicks. If you are logged in to Facebook or Instagram, Meta can associate the data with your account. We are jointly responsible with Meta for the collection and transmission (Art. 26 GDPR); the agreement is available at facebook.com/legal/controller_addendum. Meta alone is responsible for further processing, in particular for creating usage profiles and for advertising. Data may also be transferred to Meta Platforms, Inc. in the USA (see section 12).

The legal basis is your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). More information: Meta privacy policy.

With the same consent we also use Google Analytics 4 and Google Ads conversion tracking of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google receives the page visited, your shortened IP address, browser and device information, cookie identifiers and the same events as above (page view, booking request without form contents, contact click, download, streaming click). Google Signals is disabled, analytics data is deleted after 2 months. gtag.js is not loaded before you consent (Google Consent Mode v2, default “denied”). The legal basis is your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). More information: Google privacy policy.

Remarketing: With the same consent we use this data to build audiences so that we can later show targeted ads on Facebook and Instagram and on Google (Search, YouTube, partner sites) to visitors of this site, e.g. everyone who visited the booking page, downloaded the press kit or clicked a streaming service. The audiences contain no names or e-mail addresses; Meta or Google matches them to your account via cookie identifiers. A person remains in an audience for no more than 180 days at Meta and 540 days at Google. If you withdraw your consent (“Cookie settings” link at the bottom of every page), no new data is collected. You can also switch off personalised ads in your account settings at Meta and Google.

11. Storing your consent

We store your choice in the consent banner locally in your browser (localStorage, key “sd-consent”: consent or refusal and timestamp). This entry is not transmitted to us and is not linked to other data. It is technically necessary so that we do not ask you again on every page view (§ 25 (2) no. 2 TDDDG). You can withdraw or change your consent at any time with future effect via the “Cookie settings” link at the bottom of every page; you can also delete the entry in your browser settings.

12. Transfers to third countries

Google, Meta and Spotify may also process data in the USA. The US companies involved are certified under the EU-U.S. Data Privacy Framework; to that extent an adequacy decision of the EU Commission applies (Art. 45 GDPR). In addition, the providers rely on EU Standard Contractual Clauses (Art. 46 (2) (c) GDPR). We have concluded a data processing agreement with Google (Art. 28 GDPR).

13. Links to social networks

Our website links to our profiles on Spotify, Instagram, Facebook and YouTube. These are simple links, not plugins: merely visiting our website does not transmit any data to these networks. Only when you follow a link do the privacy policies of the respective provider apply. This also applies to the music videos: their preview images are hosted on our own server and no YouTube player is embedded. Only clicking opens the video on YouTube (Google Ireland Limited).

14. Your rights

You have the following rights regarding your personal data:

  • access (Art. 15 GDPR),
  • rectification (Art. 16 GDPR),
  • erasure (Art. 17 GDPR),
  • restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • withdrawal of consent with future effect (Art. 7 (3) GDPR).

Right to object (Art. 21 GDPR): Where we process your data on the basis of legitimate interests (Art. 6 (1) (f) GDPR), you may object at any time on grounds relating to your particular situation. You may object to the use of your data for direct marketing at any time without giving reasons. An informal message to booking@speciald.de is sufficient.

15. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD)
Holstenstraße 98, 24103 Kiel, Germany
www.datenschutzzentrum.de

16. No automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR. Booking requests are decided by people.

17. Changes

We update this privacy policy when the website or the legal situation changes. The version published here applies. In case of doubt, the German version prevails.

Last updated: October 2026