Privacy policy
This English text is for convenience. The German version is legally authoritative. Datenschutzerklärung
Summary
- We keep only information you provide for quotes, bookings and studio sessions.
- No remarketing pixels or data brokers; audio stays within your production.
- Project media is cleared after 24 months unless we agree a longer period in writing.
- Reach us at [email protected] or +43 1 996 42 18 — typical reply within 2 business days.
1. Controller details
Mugwetkyro GmbH (limited liability company (GmbH)) at Siebensterngasse 19, 1070 Wien, Austria decides why and how personal data is processed on mugwetkyro.digital and in studio operations. Director: Lukas Hörmann. UID: ATU71228744. Register: FN 552244 z, Handelsgericht Wien.
Write [email protected], phone +43 1 996 42 18, or use Contact. Hours: Monday to Friday 10:00–20:00, Saturday 10:00–16:00, closed on Sunday..
No external data protection officer is mandated for our size of business; privacy correspondence is handled in-house by the studio management.
2. Who this notice covers
Website visitors, people requesting rates, and artists using our Neubau rooms for Vocals & Voice, Band Recording, Mixing, Mastering or Podcast & Post-production are in scope.
If a label, agency or podcast network sends us guest lists or talent details, that organisation remains the controller; Mugwetkyro follows documented instructions and the processing agreement for business clients.
Commercial rules on deposits, cancellation and delivery appear in the terms and conditions.
3. Categories of information
Enquiries via FormSubmit: identity and reachability (name, email, optional phone), chosen service, optional date wish and free-text project notes. Mandatory fields exist because we cannot price or schedule blind.
Production workflow: billing contacts, stage names, calendars, message threads, transfer references. In-person card payments run on the acquirer terminal — card PANs never enter our systems.
Creative files: performances may identify individuals; we touch them solely to fulfil the booked scope. Self-made video on set stays under your governance.
Infrastructure logs: World4You Internet Services GmbH records technical metadata (IP, timestamp, URL, user agent) to keep hosting stable. The consent record in your browser holds preference flags, not your identity.
We do not solicit health or biometric categories. Rescheduling for illness needs no medical paperwork — a plain note suffices.
4. Why we use data, legal grounds, how long we keep it
| Activity | Typical content | GDPR basis | Storage horizon |
|---|---|---|---|
| Handling messages and quotes | Form payloads, email threads | Art. 6(1)(b) — steps before contract | 36 months from last exchange |
| Running booked studio days | Contacts, riders, timelines | Art. 6(1)(b) — performance | 84 months after the relationship ends (Austrian record-keeping) |
| Holding multitrack assets | Raw takes, mixes, masters | Art. 6(1)(b) — performance | 24 months after the final session day unless a written extension applies |
| Tax and invoicing | Names, amounts, bank refs | Art. 6(1)(c) — legal duty | 84 months under UGB/BAO practice |
| Protecting legal positions | Case files, correspondence | Art. 6(1)(f) — legitimate interest | Until applicable limitation windows close |
| Operating mugwetkyro.digital safely | Host diagnostics | Art. 6(1)(f) — security | Roughly 30 days rolling, unless the host extends for incident review |
| Remembering cookie preferences | Token mgwt_consent_v1 | TKG 2021 §165(3) or consent for optional buckets | 182 calendar days (~half a year) |
We neither monetise lists nor run bulk mail campaigns. A future processing purpose would require transparency and, where needed, a fresh legal ground.
5. Audio likeness, generative tools and age limits
We treat timbre and portrait rights seriously: no demos, behind-the-scenes stills or name drops on mugwetkyro.digital or social feeds without signed approval.
Material recorded here is not fed into machine-learning pipelines, benchmark models or synthetic voice products, and we will not clone a voice without explicit written authorisation from the performer.
Web forms target adults (minimum age 16). Under-age musicians arrive through guardians who supply lawful contact paths. The site is not an online service directed at children.
Session prep articles live in the guide hub, including vocal warm-up tips and budgeting a band day.
6. Disclosures to partners
Access inside Mugwetkyro is role-based and supervised by Lukas Hörmann — scheduling, engineering and finance staff only when their task requires it.
External parties may see limited data when essential:
- World4You Internet Services GmbH, Hafenstraße 35, 4020 Linz, Österreich — Austrian hosting stack;
- FormSubmit (United States) — relays HTML form posts to [email protected];
- chartered accountant and house bank — invoice settlement;
- competent regulators — upon binding request.
Vendors acting on our instructions sign Article 28 GDPR terms. Cross-border aspects are detailed in the next section.
7. International flows
Primary systems sit with World4You Internet Services GmbH in Austria/EWR territory.
Choosing the FormSubmit route means payload bytes may traverse US networks. That path supports the enquiry you initiate; we cite Article 49(1)(b) GDPR. We do not currently rely on an EU–US adequacy framework or published SCC pack for that single hop.
Prefer domestic routing? Message [email protected] or dial +43 1 996 42 18 — response quality is identical.
8. Integrity and incident handling
Controls include TLS everywhere on mugwetkyro.digital, least-privilege accounts, disk encryption on edit suites, physical locks at Siebensterngasse outside bookings, and scheduled purges once archive windows expire.
Should a incident likely harm your rights, we alert the Austrian DSB where required and contact you directly for high-risk scenarios under Articles 33–34 GDPR. Transport over the public internet always carries residual risk; custody after receipt follows our internal baseline.
9. Exercising GDPR rights
You may request:
- transparency and copies (Art. 15);
- corrections (Art. 16);
- deletion when grounds apply (Art. 17);
- processing limits (Art. 18);
- structured export of supplied content (Art. 20);
- objection to interest-based uses (Art. 21);
- consent withdrawal forward-looking (Art. 7(3)).
Send requests to [email protected] or our postal seat. Standard deadline: one month, extendable by two where complexity demands — we will explain delays. Fees apply only where statutes allow charging for manifestly excessive repeats.
Supervisory authority: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Wien — dsb.gv.at. Dialogue with us first usually saves time.
10. Cookies and local storage
Trackers for analytics, ads or social widgets are absent on mugwetkyro.digital. We persist banner decisions under mgwt_consent_v1 inside localStorage for 182 days.
Accept, reject and granular toggles carry equal visual weight; optional groups contain no vendors today. Full breakdown: cookie policy. Reopen the panel through .
11. Third-party sites
Occasional outbound links (e.g. OpenStreetMap for directions) follow foreign policies we do not administer. On-site directions also summarise U3 Neubaugasse station, Siebensterngasse exit — about three minutes on foot to Siebensterngasse 19. Bus line 13A stops at Neubaugasse / Burggasse (around five minutes on foot)..
12. Revision history
Nothing here narrows mandatory consumer or data rights. We republish this text when workflows or statutes shift; effective stamp: 15 October 2026.
Material contract impacts trigger email notice when we hold your address. Registry particulars: Legal notice. Operational FAQ: FAQ.