Privacy policy

Here we explain which personal data we process when you visit our website, contact us, apply as a DJ or subscribe to our newsletter.

1. Data controller and contact

Tobias Wicht, trading as Butan
Pahlkestrasse 61
42115 Wuppertal
Germany

E-mail: info@butanclub.de
Newsletter: newsletter@butanclub.de
Booking: booking@butanclub.de

This notice covers the services described here at butanclub.com and the domains pointing to it: butanclub.de, butan.club, butan-club.com and butan-club.de. Associated services such as newsletter.butanclub.com are included where their processing is described below.

2. Technical support and hosting

wupper.io GmbH, Alter Kirchweg 9, 42389 Wuppertal, Germany, handles all technical administration, development and maintenance of our systems. This includes in particular web and mail services, newsletters, databases, technical access, backups and troubleshooting. Where necessary, wupper.io can access personal data processed in these systems. Technical support is provided for our purposes and according to our instructions.

The infrastructure is operated in Germany. Our data-centre provider is Portunity GmbH, Zillertal 1, 42349 Wuppertal. During the ongoing transition, some systems also remain with Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen. Hetzner’s involvement ends only once the relevant data and backups there have been properly dealt with. Storage, backups and administrative access outside Germany are currently also excluded from the technical processing we commission.

Processing for secure and reliable provision is based on Article 6(1)(f) GDPR. Our legitimate interest is the proper and secure operation of our services. The legal basis for each processing activity, such as newsletter registration or a DJ enquiry, is described in the following sections.

3. Server logs and security

When you access our services, the server processes in particular your IP address, the time, requested address, HTTP status and volume of data transferred, and where applicable the referrer and browser and operating-system information. Error and security logs help us troubleshoot, defend against abusive requests and investigate disruptions.

The legal basis is Article 6(1)(f) GDPR. We use these data for technical operation and security. Personal log data must be deleted once they are no longer needed for these purposes. In the event of a specific security incident, separate retention limited to that incident may be necessary for investigation and legal action.

4. Aggregated website statistics and ticket links

We analyse existing server logs to count page views and ticket redirects in aggregate. Known automated requests are filtered out. The resulting statistics contain daily counts per page or event, not IP addresses, browser identifiers, referrers or individual visitor profiles. The underlying server logs are separate and are covered by section 3.

No cookies are set and no additional analytics scripts are loaded in your browser for these website statistics. Where personal log data are processed during aggregation, Article 6(1)(f) GDPR is the legal basis. Our interest is to understand how our services are used through aggregated figures.

Ticket links redirect you to the relevant ticket provider. We count the redirect; these statistics do not tell us whether you subsequently buy a ticket. When you open the ticket shop, its operator processes data under its own responsibility.

5. Contact and email

When you contact us, we process your contact details, message contents, any attachments and technical sending and receiving information. This is used to handle and answer your enquiry and, where applicable, to establish and carry out a collaboration.

Article 6(1)(b) GDPR applies to contract-related enquiries. We handle other enquiries under Article 6(1)(f) GDPR; our interest is appropriate communication. Legally required retention is based on Article 6(1)(c) GDPR. After processing is completed, data are deleted unless an ongoing purpose, legal obligation or specific need to safeguard claims requires otherwise.

6. DJ applications and artist enquiries

Through the application form, we process your DJ or artist name, email address, phone number, Instagram profile, demo-set and press-kit links, and any optional messages. We also process submission time, processing status, internal processing comments and technical information to prevent abuse. This includes a hash calculated from the IP address; it is a pseudonymous identifier, not information guaranteed to be anonymous.

We manage this information in our listmonk system. Authorised people use it to assess your enquiry and contact you. Processing helps arrange a possible performance and is based on Article 6(1)(b) GDPR. Article 6(1)(f) GDPR additionally applies to organisational processing and security measures.

The information marked as required is needed to process the application. Without it, the form cannot be submitted in full. There is no legal obligation to apply. No decision about a performance is made solely by automated means.

The data are retained while the enquiry is being handled or while they are necessary for a resulting collaboration. Afterwards they must be deleted unless another lawful retention purpose or necessary protection of claims applies. Newsletter registration is separate and takes place only if you additionally select it.

7. Newsletter

We use listmonk at newsletter.butanclub.com for registration, mailing-list management and sending newsletters. We process in particular your email address, optional name, selected list, registration and confirmation status, registration time, technical registration information, and unsubscribe and delivery information.

The legal basis for sending the newsletter is your consent under Article 6(1)(a) GDPR. Your email address is required for delivery; providing a name is optional. You can withdraw your consent at any time using the unsubscribe link in a newsletter or by contacting us. Withdrawal does not affect the lawfulness of earlier processing.

To compile newsletter statistics, we count requests for a tracking pixel and visits through tracked links. We store the campaign, the link for clicks and the calendar date in the statistics, without linking them to individual subscribers. We use these to produce totals; no personal reading or click profiles are kept. Repeated requests caused by technical factors and automated requests can affect these figures. Connecting to the newsletter server also generates technically necessary connection data such as the IP address; the hosting and server-log information applies to these. Newsletter analytics are separate from website statistics.

Delivery data and newsletter subscription management are separate from the website statistics in section 4. Necessary evidence of registration and consent, along with minimal suppression information, may be retained for specific purposes after unsubscribing to demonstrate consent and prevent further unwanted mailings. The legal basis is Article 6(1)(f) GDPR; retention is no longer necessary once these purposes cease to exist.

8. Form spam protection

When you fill in the newsletter form, the ALTCHA component is loaded from newsletter.butanclub.com. It checks a technical task to prevent automated registrations. Technically necessary request data and the verification result are processed for this purpose.

The DJ form uses a server-signed security question and time-limited verification information. Technical information, including the IP address, is processed to limit repeated or abusive requests. The legal basis is Article 6(1)(f) GDPR. Our interest is to protect the forms against automated abuse.

9. Administration accounts and necessary cookies

For authorised administration users, we process user identifiers, contact details, roles, password hashes and, where applicable, two-factor, recovery, session and password-reset data. This enables secure access and traceable administration. The legal basis is Article 6(1)(f) GDPR and, where applicable, Article 6(1)(b) GDPR.

The administration area uses the PHPSESSID session cookie to maintain a secure session and protect form actions. It is set as a session cookie without a permanent expiry date; its actual retention may also depend on your browser’s session-restore features. The server ends the session after an extended period of inactivity. This cookie is necessary for the requested administration access; storing or accessing it is based on section 25(2), point 2 TDDDG.

The public information pages do not use tracking cookies requiring consent for the website statistics described here.

When you select a language, we store your choice for one year in the butan_language cookie. It contains only the language code and remembers your choice for later visits. If no choice is stored, the home page uses the language sent by your browser.

10. Domains and DNS

We use Greenmark IT GmbH, Leinstraße 3, 31061 Alfeld (Leine), through its resellerinterface service for domain registration and management. Domain-holder and technical contact data may be processed for this purpose. Where DNS services are used, technical request data necessary for name resolution are generated. A domain query does not transmit the contents of a DJ application or newsletter profile.

Domain providers and the relevant registries process certain registration data for their own duties and responsibilities. Their specific role depends on the service concerned. Our commissioning of technical domain management is based on Article 6(1)(f) GDPR; our interest is the availability and secure management of our services.

11. Recipients and external services

Access is granted to people authorised for the task and to the necessary technical service providers. Other recipients may be involved where this is necessary for a requested service, you have consented or a legal obligation applies. Technical service providers are not given blanket permission to use your data for their own advertising.

Our website links in particular to ticket shops, Instagram, TikTok, Telegram and Linktree. You access the external service only when you follow such a link. Its operator is responsible for its data processing, which may take place outside Germany or the EU. The Germany-only requirement for our commissioned technical infrastructure is not a promise about third-party websites or your own email provider.

12. Retention limits and backups

Retention depends on the purposes, processing stages and legal duties described in the relevant sections. If there is a claim or a specific legal dispute, limited retention may be necessary to establish, exercise or defend legal claims.

Backups enable recovery after data loss or disruptions. Personal data in them remain subject to purpose and retention limits. Data no longer required must also be deleted from backups or blocked from further use pending deletion. After restoration, deleted or blocked data must not return to operational use without again respecting the deletion or block.

13. Your rights

Subject to the legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You may withdraw consent at any time with effect for the future. Contact info@butanclub.de or the postal address above to do so.

Right to object: You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. We will then stop processing the data unless there are compelling legitimate grounds or the processing serves legal claims. You may object to processing for direct marketing at any time without giving reasons; processing for that purpose will then stop.

14. Right to lodge a complaint

You may complain to a data protection supervisory authority, particularly where you habitually live or work or where a suspected infringement occurred. In North Rhine-Westphalia, one point of contact is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia: www.ldi.nrw.de.

15. Changes

We update this notice when our services or processing change. Version: 8 October 2026.