Skip to content
Innenstadt, Linz • Mon-Fri 10-7, Sat 11-4 0732 60 17 86 • By Appointment Only

Data Processing Agreement (DPA)

The legally binding version of this page is the German one: AVV

Updated on 13 October 2026

Summary of Key Points:
  • We process your music files and contact details exclusively to provide our mixing and mastering services.
  • We utilize certified subcontractors for professional hosting and secure communication.
  • Your data is deleted after the project term or the expiration of statutory retention periods.
  • We guarantee technical and organizational security measures in compliance with GDPR standards.

1. Subject Matter and Definitions

This agreement governs the processing of personal data by Barbreshift GmbH (Processor) on behalf of the Client (Controller). This contract is based on the General Data Protection Regulation (GDPR/DSGVO) and the Austrian Data Protection Act (DSG). The terms "processing", "personal data", and "data subject" are used as defined within the GDPR.

2. Nature and Purpose of Processing

The processing involves data transmitted during the provision of audio services (Mixing, Mastering, Vocal Tuning). This includes:

  • Data Categories: Name, email address, phone number, audio files (stems, masters), and project-specific notes.
  • Data Subjects: Employees of the client, participating artists, or music producers.
  • Purpose: Technical processing of audio material and project-related communication.

3. Obligations of the Processor

Barbreshift GmbH undertakes to process personal data only on the documented instructions of the Client. We ensure that all persons authorized to process the data are bound by strict confidentiality. For further information on our general business terms, please refer to Terms Art. 3.

4. Sub-processors

To fulfill the service, the following sub-processors are employed:

  • World4You Internet Services GmbH (Wolfgang-Pauli-Straße 2, BT3, 4020 Linz) for the provision of hosting infrastructure.
  • FormSubmit (USA) for the technical transmission of contact inquiries. The Client is advised that data may be transferred to third countries, as detailed in our Privacy Policy.

5. Security of Processing

We implement appropriate technical and organizational measures (TOM) to protect data against unauthorized access, loss, or destruction. These measures include encrypted transmission protocols and strict access restrictions within our team in Linz.

6. Deletion and Return of Data

Upon completion of the service or at the request of the Client, all data will be deleted or returned. According to our business rules, project files are stored for a period of 6 months to facilitate revisions, unless a longer statutory retention period applies.

7. Audit and Control

The Client is entitled to verify compliance with data protection obligations through audits. Such audits must be announced in writing with 14 days' notice and must not disproportionately disrupt the operational activities of Barbreshift GmbH.

8. Final Provisions

This agreement is governed by the laws of the Republic of Austria. The place of jurisdiction for all disputes is Linz. In case of GDPR violations, the competent supervisory authority, the Austrian Data Protection Authority (DSB), Barichgasse 40-42, 1030 Vienna, can be contacted at https://www.dsb.gv.at.

Contact for Data Protection Inquiries:
Barbreshift GmbH
Landstraße 142, 4020 Linz
Director: Verena Fischer
Email: [email protected]
Tel: 0732 60 17 86