Data protection
Privacy Policy
For xxxsoundxxx.com · Last updated: 12 September 2026
This Privacy Policy explains how GI Invest GmbH, operating under the name xXx Sound, processes personal data in connection with xxxsoundxxx.com, ticket sales, merchandise sales and customer communications.
1. Data controller
The controller is GI Invest GmbH, operating under the name xXx Sound, represented by Michael Holstein, Hermannstrasse 25 A, 64285 Darmstadt, Germany. Email: info@xxxsoundxxx.com. Commercial register: Local Court of Darmstadt, HRB 89040. VAT ID: DE271990122.
2. Website visits
When you visit our website, your browser transfers technical information necessary to deliver it. This may include IP address, date and time of access, requested page, browser and operating system information, referring page and technical response status.
We process this information to operate and secure the website, diagnose technical problems and prevent misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website.
The website is hosted by Hostinger International Ltd. Hostinger processes technical information as required to provide hosting and infrastructure services. Server logs are retained only for the period necessary for security, troubleshooting and legal obligations.
We process this information to operate and secure the website, diagnose technical problems and prevent misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website.
The website is hosted by Hostinger International Ltd. Hostinger processes technical information as required to provide hosting and infrastructure services. Server logs are retained only for the period necessary for security, troubleshooting and legal obligations.
3. Contact by email
If you contact us by email, we process the information you provide, including your email address, name, contact details, message content and related correspondence. We use this information to respond to you and, where relevant, to prepare or perform a contract. The legal basis is Article 6(1)(b) GDPR for contract-related enquiries and Article 6(1)(f) GDPR for other enquiries.
4. Tickets and merchandise
Tickets and merchandise are offered through Sphere Music at music.sphere.art/music. Sphere Music operates the relevant purchase process. Its own privacy information and terms displayed during purchase also apply to its processing activities.
For ticket sales and merchandise orders, GI Invest GmbH receives: city, name, telephone number, email address, merchandise size, delivery address and order number.
We use this information to organise admission, fulfil orders, provide support, communicate necessary information, handle returns or refunds, prevent fraud and comply with accounting and legal obligations. The legal basis is Article 6(1)(b), Article 6(1)(c) and Article 6(1)(f) GDPR, as applicable.
For ticket sales and merchandise orders, GI Invest GmbH receives: city, name, telephone number, email address, merchandise size, delivery address and order number.
We use this information to organise admission, fulfil orders, provide support, communicate necessary information, handle returns or refunds, prevent fraud and comply with accounting and legal obligations. The legal basis is Article 6(1)(b), Article 6(1)(c) and Article 6(1)(f) GDPR, as applicable.
5. Newsletter and marketing
xXx Sound does not currently operate an email newsletter and does not collect newsletter subscription data through this website. If a newsletter is introduced, this Privacy Policy will be updated before newsletter data is processed.
6. Cookies, browser storage and external resources
We do not currently use advertising or analytics cookies. The website uses only technically necessary browser storage to restore your position when navigating between pages.
The website currently loads fonts from Google Fonts. When requested, technical connection data, including IP address, may be transmitted to Google. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is consistent display and readable design.
No advertising pixels, analytics services or profiling tools are currently used.
The website currently loads fonts from Google Fonts. When requested, technical connection data, including IP address, may be transmitted to Google. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is consistent display and readable design.
No advertising pixels, analytics services or profiling tools are currently used.
7. Recipients and international transfers
Personal data may be received by service providers that help us operate the website and fulfil purchases, including Hostinger and Sphere Music. We disclose data only where necessary for the purposes stated in this policy or required by law.
Some providers may process data outside the European Economic Area. Where this occurs, we require an appropriate GDPR transfer mechanism, such as an adequacy decision or European Commission Standard Contractual Clauses, where applicable.
Some providers may process data outside the European Economic Area. Where this occurs, we require an appropriate GDPR transfer mechanism, such as an adequacy decision or European Commission Standard Contractual Clauses, where applicable.
8. Retention periods
We retain personal data only as long as necessary for the purpose for which it was collected. Order information is retained for fulfilment, customer support, accounting, tax and legal obligations. Correspondence is retained until the enquiry is resolved and applicable limitation periods expire. Technical logs are retained for the shortest period necessary for operation and security.
9. Your rights
Under the GDPR, you may request access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests and to direct marketing at any time.
To exercise your rights, contact info@xxxsoundxxx.com. You also have the right to lodge a complaint with a supervisory authority. The supervisory authority for GI Invest GmbH is Der Hessische Beauftragte fuer Datenschutz und Informationsfreiheit, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany. Website: datenschutz.hessen.de.
To exercise your rights, contact info@xxxsoundxxx.com. You also have the right to lodge a complaint with a supervisory authority. The supervisory authority for GI Invest GmbH is Der Hessische Beauftragte fuer Datenschutz und Informationsfreiheit, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany. Website: datenschutz.hessen.de.
10. Changes to this Privacy Policy
We may update this Privacy Policy if our services, data processing activities or legal obligations change. The current version is published on xxxsoundxxx.com.
