Chauvel Mastering
Privacy policy
Controller
Stephan Chauvel · Chauvel Mastering
Forststraße 23
32423 Minden
Germany
Website and hosting
Alfahosting GmbH in Germany provides website, database and email hosting. Requests involve technically necessary connection data, including IP address, time, requested URL, browser information and technical status messages. Processing serves website delivery, troubleshooting and security (Article 6(1)(f) GDPR). Technical logs are retained as necessary for these purposes and according to hosting settings; specific security incidents may require longer retention. Alfahosting privacy information.
Enquiries and contact
We process contact details and the information you provide by form, email or telephone to respond. The legal basis is Article 6(1)(b) GDPR for contractual and pre-contractual enquiries, otherwise our legitimate interest in communication (Article 6(1)(f)). The form acknowledgement confirms that you have read this notice; it is not marketing consent. Required details are necessary to handle an enquiry.
Booking and private project portal
We process your name, email, project details, requested services, formats, deadlines, notes, prices and currency, uploaded files and filenames, project status, approvals, revisions and payment information to prepare and fulfil your order (Article 6(1)(b) GDPR). Access is provided through a private project link. Anyone who receives the link can access the project, so share it only with authorised people. Files are used to work on and deliver your project, not published as listening examples without separate permission.
Retention and deletion
Project files may remain available in the portal after completion for repeat downloads. You may request deletion by email. We regularly review whether ongoing availability is necessary and delete files when that purpose ends. There is no unlimited archiving or availability guarantee. Enquiries and other personal data are deleted when their purpose ends unless a legal obligation or legitimate reason requires further retention. Invoice and tax records are retained for legally required periods (Article 6(1)(c) GDPR); records needed to establish or defend claims may be retained until relevant limitation periods expire. Backup copies are overwritten through the regular backup cycle and are not used as an active customer archive.
Public client reviews
Reviews are published only after approval. We process the display name, text, rating, optional uploaded image and consent time and version. Publication is based on consent (Article 6(1)(a) GDPR). Email addresses and private project links are not published as part of the review. You may withdraw consent prospectively by email; earlier processing remains lawful. Upload only content you are authorised to publish.
PayPal payments
We offer PayPal payments for approved projects enabled for payment. Real money is transferred in the currency shown in the payment area. Payments explicitly labelled as sandbox tests remain simulations.
When you open a project page enabled for PayPal payment, the payment area loads PayPal software. This connects your browser to PayPal before you click the PayPal button; in particular, your IP address and browser and device information may be transmitted. PayPal may use its own cookies and similar technologies. During checkout, PayPal processes account and payment information under its own privacy terms and as an independent data controller.
For payment processing, we send the amount, currency and an order reference identifying the project. We store order and transaction references, amount, currency and payment status. Our payment integration does not transmit uploaded audio files to PayPal. We do not store PayPal passwords or complete card or bank login details. Our processing to fulfil your order is based on Article 6(1)(b) GDPR. Payment records required by law are retained under Article 6(1)(c) GDPR.
PayPal may process data outside the European Economic Area. Its privacy statement explains the responsible PayPal companies, data processed, retention periods, recipients, transfer safeguards and your rights.
Browser storage, security and fonts
Contact and review forms and administrator login use session cookies for secure forms and authentication, not advertising tracking. These generally end with the browser session. Temporary project information and currency choice may remain in the individual tab’s session storage until it is closed, supporting the requested booking and portal flow. Necessary storage is used under Section 25(2)(2) TDDDG; personal data is processed for the purposes described above. Request limits and pseudonymised identifiers derived from connection data help prevent abuse (Article 6(1)(f) GDPR). Fonts and website images are hosted locally. We do not embed our own analytics or advertising trackers. For the PayPal software, please see “PayPal payments” above.
Social media links
Instagram, Facebook and YouTube are linked, without embedded feeds. Following a link opens the relevant service, where its privacy rules apply.
Your rights
Subject to statutory conditions, you have rights of access, rectification, erasure, restriction and portability. You may object to processing based on legitimate interests for reasons relating to your particular situation. Consent may be withdrawn prospectively at any time. Contact the email above to exercise your rights. You may complain to a supervisory authority, particularly where you live or work. In North Rhine-Westphalia: State Commissioner for Data Protection and Freedom of Information. We do not make solely automated decisions producing legal or similarly significant effects.
Updated: 8 October 2026