Privacy policy.
1. Controller and contact
The controller responsible for this website is:
BRIGHTSIGHT MEDIA GmbH
Fluss Straße 12
50374 Erftstadt
Germany
Represented by Managing Director Götz Bökler
Telephone: +49 172 271 83 65
Email: info@brightsight-media.de
distinct booking, formerly db booking, is an agency operated by BRIGHTSIGHT MEDIA GmbH. Please contact the controller above with questions about your personal data.
2. Hosting and server logs
The website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you visit it, connection data is processed to deliver the requested content and maintain secure operation. This includes your IP address, request date and time, requested URL, status information, transferred data volume, browser and operating system information and, where transmitted, the referring page.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is reliable delivery and the protection of the website against misuse and attacks. According to STRATO’s published hosting information, visitor IP addresses used to detect and prevent attacks are retained for a maximum of seven days. This statement concerns that security-related retention and does not mean that every hosting statistic or customer-accessible log has the same retention period. Further processing and any other log retention depend on the contracted hosting functions. STRATO hosting information.
3. Booking enquiries and other contact
When you contact us by form, email or telephone, we process the information you provide to respond and coordinate the requested booking. Depending on your enquiry, this may include the contact person and promoter, email and phone number, artist, event name, date, venue and address, fee offer, travel and accommodation information and your message. Required form fields are marked with an asterisk; other details are voluntary.
The form sends your enquiry to booking@db-booking.com. It does not store the enquiry in a website database. The connection from the website to the configured SMTP server is encrypted. Subsequent mail delivery depends on the participating mail providers. We use commissioned hosting and email providers for processing. Where needed to coordinate your request, relevant details may be shared with the artist or their authorised representative; this is limited to information needed for that purpose.
The legal basis is Article 6(1)(b) GDPR for enquiries by a prospective contracting party before entering into a contract. Where you act on behalf of a company or contact us for another business purpose, Article 6(1)(f) GDPR applies; our legitimate interest is handling business communication and coordinating bookings. Acknowledging this privacy information is not consent to advertising. Without the information necessary to process a booking, we may not be able to respond to or arrange it. The request does not itself create a confirmed booking.
4. Retention criteria
Enquiries are retained for as long as needed to respond, coordinate and complete the relevant matter. When that purpose ends, data is deleted unless it remains necessary to comply with statutory retention duties or establish, exercise or defend legal claims. If a booking results, data required for performance and the corresponding business records is retained for those purposes and for the applicable statutory periods. This website does not automatically delete messages from the agency’s email system. Information stored by external providers is governed by their applicable retention rules.
5. Essential session cookie and form protection
The booking form uses the session cookie __Secure-distinct. It contains a random session identifier and is used for CSRF protection and to display the result of your submission. The cookie is set with Secure, HttpOnly and SameSite=Lax attributes and has no fixed browser expiry date; it is intended as a session cookie, although browsers may restore sessions. The form token’s validity is limited by the form logic. It is not used for marketing or cross-site profiling.
Access to your device for this requested form function is based on section 25(2)(2) TDDDG; related personal-data processing is based on Article 6(1)(f) GDPR, reflecting our interest in secure communications. Cookie consent is not requested for this essential functionality.
To limit abuse, the server temporarily stores a keyed hash of the requesting IP address and a request counter. This is pseudonymisation, not a claim of irreversible anonymisation. The counters use a one-hour window; expired entries are removed when the next valid form request triggers cleanup. Enquiries themselves are not stored in that rate-limit file. Technical error logs may contain error categories, timestamps and reference numbers, but the application does not deliberately write enquiry contents or mailbox passwords to them. The legal basis is Article 6(1)(f) GDPR for misuse prevention and technical troubleshooting. Error logs are retained only as long as needed to investigate and resolve the technical issue or document a security incident; the operator must review and delete obsolete logs.
6. Optional SoundCloud players
Artist pages offer players from SoundCloud Global Limited & Co. KG, Karl-Marx-Strasse 101, 12043 Berlin, Germany. Before you give your consent, the website does not create the SoundCloud iframe or fetch its player resources. There is no automatically remembered approval across page loads.
Choosing “Agree & load SoundCloud” enables an external player. SoundCloud then receives connection information including your IP address and browser/device details and may process playback interactions. Depending on its service and your settings, SoundCloud may access or store cookies and similar technologies for playback, analytics and advertising, associate activity with an existing SoundCloud account and involve service providers or companies outside the EEA, including the USA.
The legal basis for optional device access is section 25(1) TDDDG and for the associated personal-data processing Article 6(1)(a) GDPR. SoundCloud describes its own purposes, recipients, retention and international-transfer safeguards in its policies. SoundCloud states that it uses safeguards such as European Commission-approved standard contractual clauses or another legally approved mechanism for international transfers. Information on these safeguards and how to obtain a copy is available in its privacy policy or from SoundCloud at dataprotection@soundcloud.com. Transfers outside the EEA can involve different protections and more limited practical redress.
You can withdraw your consent at any time with “Disable SoundCloud” under the player or “External media” in the footer. This removes the embedded player and stops further player connections initiated by that embed. Previously transmitted data is not recalled, and cookies already stored by SoundCloud cannot automatically be deleted by this website. Browser settings and SoundCloud’s controls can be used to manage those cookies. Withdrawal does not affect the lawfulness of processing before withdrawal. You can use the remaining website without enabling SoundCloud.
SoundCloud privacy policy · SoundCloud cookie policy · Provider information
7. Local resources, external links and downloads
This website package does not include advertising pixels, analytics scripts or externally hosted fonts. Its own images, scripts, styles and fonts are served locally. Ordinary external links only connect to the linked service when you follow them. Downloads are delivered by the hosting provider and may generate server-log entries as described above. If additional services are added, this notice and any consent mechanism must be updated.
8. Your rights
Subject to the legal conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18) and data portability (Article 20). You may withdraw consent at any time with future effect. Where processing is based on Article 6(1)(f), you may object under Article 21 for reasons arising from your particular situation. You may object to processing for direct marketing at any time.
You may lodge a complaint with a supervisory authority, particularly in your place of habitual residence, place of work or place of an alleged infringement. For the controller’s location, the competent authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany: www.ldi.nrw.de.
We do not use the booking form to make decisions based solely on automated processing with legal or similarly significant effects.
9. Changes and version
Version: 23 October 2026. We update this information when the processing or integrated services change. German and English versions provide corresponding information.