1. Privacy in General
The protection of your personal data is of particular importance to F-Cat Productions GmbH. We appreciate your interest in our company, our artists, our events, and our website. We treat personal data confidentially and exclusively in accordance with the applicable data protection regulations.
With this Privacy Policy, we would like to provide you with comprehensive information about which personal data we collect, the purposes for which we process it, the legal basis for such processing, and the rights to which you are entitled as a data subject. We place particular emphasis on transparency and the responsible handling of your personal data.
This Privacy Policy applies to the use of our website www.f-cat.de, to all services offered through our website, and to communication with our company. Furthermore, it provides information on the processing of personal data in connection with applications, newsletters, ticket purchases, events, and contacting F-Cat Productions GmbH.
The processing of personal data is carried out in particular on the basis of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), the Telecommunications Digital Services Data Protection Act (TDDDG), and the German Digital Services Act (DDG).
2. Controller
The controller within the meaning of Article 4(7) GDPR responsible for the processing of personal data is:
F-Cat Productions GmbH
Pohlstraße 39
10785 Berlin
Germany
Phone: +49 (0)30 261032920
E-mail: info@f-cat.de
Managing Director: Frank Abraham
If you have any questions regarding data protection or the processing of your personal data, you may contact us at any time.
E-mail: datenschutz@f-cat.de
3. Principles of Data Processing
Personal data is processed exclusively in accordance with the applicable legal provisions and in compliance with the principles of lawfulness, transparency, purpose limitation, and data minimisation.
We process personal data only to the extent necessary for providing our services, performing contracts, fulfilling legal obligations, or safeguarding our legitimate interests. Where processing is based on your consent, such consent is given voluntarily. Any consent granted may be withdrawn at any time with effect for the future.
As a general rule, we collect only the personal data necessary for the respective purpose. Personal data will only be used for other purposes where a legal basis exists or where you have expressly consented.
Furthermore, we implement appropriate technical and organisational measures to protect your personal data against loss, manipulation, unauthorised access, or any other unlawful processing.
4. Legal Bases for Processing
Depending on the respective processing activity, personal data is processed on different legal bases.
In particular, the following legal bases apply:
• Article 6(1)(a) GDPR, where you have given us your consent to process your personal data, for example for sending our newsletter or using certain analytics and marketing services.
• Article 6(1)(b) GDPR, where processing is necessary for the performance of a contract or for taking steps prior to entering into a contract. This applies in particular to the purchase of tickets, communication with promoters, artists or business partners, and the organisation of our events.
• Article 6(1)(c) GDPR, where we are subject to legal obligations, for example commercial or tax-related retention obligations.
• Article 6(1)(f) GDPR, where processing is necessary for the purposes of our legitimate interests, provided that your interests or fundamental rights and freedoms do not override those interests. This includes, in particular, ensuring the security of our website, optimising our online presence, defending legal claims, and communicating with interested parties and business partners.
For the processing of personal data in connection with recruitment procedures, Section 26 of the German Federal Data Protection Act (BDSG) also applies.
Where special categories of personal data pursuant to Article 9 GDPR are processed, this is done exclusively on the basis of the legal requirements set out therein.
5. Your Rights
The General Data Protection Regulation grants you extensive rights regarding the processing of your personal data. You have the right to:
• request information as to whether and which personal data concerning you we have stored. This includes, in particular, information about the purposes of processing, the categories of personal data, the recipients of the data, the planned storage period, and the origin of the data where it was not collected directly from you.
• request the correction of inaccurate or incomplete personal data.
• request the deletion of your personal data where the legal requirements are met. This applies in particular where the data is no longer necessary for the original purposes, where consent has been withdrawn, or where processing is unlawful. Statutory retention obligations and overriding legitimate interests remain unaffected.
• request the restriction of the processing of your personal data where the legal requirements are fulfilled.
• where processing is based on your consent or on a contract and carried out by automated means, you also have the right to data portability.
• where processing is based on our legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to such processing. Where personal data is processed for direct marketing purposes, you have an unrestricted right to object. Any consent granted may be withdrawn at any time with effect for the future. The lawfulness of processing carried out prior to the withdrawal remains unaffected.
• lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.
To exercise your rights, an informal notification sent to datenschutz@f-cat.de is sufficient.
6. Security of Your Data
The protection of your personal data is of great importance to F-Cat Productions GmbH. For this reason, we implement appropriate technical and organisational measures to protect your data against loss, destruction, manipulation, unauthorised access, and any other unlawful processing.
Our security measures are regularly reviewed and continuously adapted to reflect technological developments. These measures include, in particular, access controls, data backup procedures, system security, and the protection of our IT infrastructure.
The transmission of personal data between your browser and our website is encrypted using current TLS (Transport Layer Security) technology. You can recognise an encrypted connection by the prefix "https://" and the padlock symbol displayed in your browser's address bar.
Despite all technical and organisational security measures, we point out that complete security of data transmission over the Internet or electronic storage of data cannot be guaranteed. Absolute security therefore cannot be assured by its very nature.
7. Collection and Processing of Personal Data
Personal data means any information relating to an identified or identifiable natural person. This includes, in particular, names, addresses, telephone numbers, e-mail addresses, payment information, contractual data, and any information that allows conclusions to be drawn about your identity.
As a general rule, we collect personal data only if you voluntarily provide it to us or if its processing is necessary for the provision of our services.
This may occur in particular in the following cases:
Furthermore, when you visit our website, technical information required for the secure operation of our online presence is collected automatically. This includes, in particular, server log files as well as technical information about your browser and end device.
8. Purposes of Data Processing
Personal data is processed exclusively for the purposes for which it was collected or where permitted by law.
In particular, we process personal data:
Personal data will only be processed for other purposes where a legal basis exists or where you have given your prior explicit consent.
9. Retention Period
As a general rule, we store personal data only for as long as necessary to fulfil the respective purpose of processing.
Once the respective purpose no longer applies, personal data will be deleted unless statutory retention obligations or other legitimate interests prevent deletion.
Statutory retention periods arise in particular from commercial and tax law requirements. In such cases, the relevant data will be retained until the expiry of the applicable retention periods and subsequently deleted.
Where personal data is required for the establishment, exercise, or defence of legal claims, it will be retained until the expiry of the applicable statutory limitation periods.
10. Recipients of Personal Data
Within our company, access to personal data is granted only to those employees who require such data in order to perform their respective duties.
Furthermore, personal data may be transferred to external recipients where this is legally permissible or necessary for the performance of a contractual relationship.
These recipients include, in particular:
Where required by law, we conclude data processing agreements with these service providers in accordance with Article 28 GDPR.
11. Transfer of Data to Third Countries
Personal data is transferred to countries outside the European Union or the European Economic Area only where this is necessary for the provision of our services or where you have expressly consented.
Where personal data is transferred to companies located in the United States or other third countries, such transfers are carried out exclusively in accordance with the requirements of Articles 44 et seq. GDPR.
Where necessary, appropriate safeguards are implemented, in particular the Standard Contractual Clauses adopted by the European Commission or an adequacy decision of the European Commission (e.g. the EU-U.S. Data Privacy Framework).
When selecting our service providers, we ensure that they maintain an adequate level of data protection.
12. Data Processing in Connection with Applications
We appreciate your interest in working with F-Cat Productions GmbH and thank you for your application. The personal data collected during the recruitment process is, of course, treated confidentially and processed exclusively for the purpose of conducting the recruitment process.
When you apply for a position with us, we process the personal data that you voluntarily provide as part of your application. This includes, in particular, your personal details (e.g. name, address, and contact information), information regarding your professional qualifications, your cover letter, curriculum vitae, references, certificates, and any other documents or information submitted in connection with your application.
This data is processed exclusively for the purpose of reviewing your application, conducting the recruitment process, and—where an employment relationship is established—preparing and initiating the employment relationship.
The legal basis for this processing is Article 6(1)(b) GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG).
As a general rule, your application documents will not be disclosed to third parties. Access to your application data is granted only to those employees directly involved in the recruitment process.
If your application is unsuccessful, your personal data will be deleted no later than six months after completion of the recruitment process unless statutory retention obligations apply or you have expressly consented to a longer retention period. This retention period serves, in particular, the establishment, exercise, or defence of potential legal claims under the German General Equal Treatment Act (AGG).
We kindly ask you, wherever possible, not to submit special categories of personal data pursuant to Article 9 GDPR (e.g. health data, information concerning religious beliefs, or political opinions) unless such information is absolutely necessary for your application. Should such data nevertheless be provided voluntarily, it will be processed exclusively in accordance with the applicable legal provisions.
Please note that applications submitted by e-mail may generally be transmitted without encryption. If you wish to ensure a particularly confidential transmission, we recommend using another secure method to submit your application documents.
13. Newsletter
On our website, you have the opportunity to subscribe to various newsletters offered by F-Cat Productions GmbH. Through our newsletters, we regularly inform promoters, media representatives, business partners, and interested individuals about tours, concerts, artists, and other news relating to our company.
Our newsletters are sent exclusively on the basis of your explicit consent pursuant to Article 6(1)(a) GDPR.
We use the so-called double opt-in procedure for newsletter subscriptions. After registering, you will first receive an e-mail requesting you to confirm your subscription by clicking on a confirmation link. Your e-mail address will only be added to our mailing list after this confirmation has been completed.
As part of the newsletter subscription process, we process the following data in particular:
This data is stored exclusively for the purpose of documenting your consent and ensuring the proper operation of our newsletter service.
You may, of course, withdraw your consent at any time with effect for the future. To do so, simply use the unsubscribe link included in every newsletter or notify us accordingly by e-mail.
The lawfulness of the processing carried out before the withdrawal of consent remains unaffected.
14. Sending Our Newsletter via CleverReach
For the creation, management, and distribution of our newsletters, we use the CleverReach service provided by CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany.
We have concluded a data processing agreement with CleverReach in accordance with Article 28 GDPR. CleverReach processes personal data exclusively on our behalf, in accordance with our instructions, and solely for the purpose of sending newsletters.
The data is not used for CleverReach's own purposes and is not disclosed to unauthorized third parties.
Further information on data protection at CleverReach can be found at:
https://www.cleverreach.com/de/datenschutz/
15. Newsletter Tracking
In order to continuously improve our newsletters and better tailor them to the interests of our recipients, we use the statistical evaluation tools provided by CleverReach.
In particular, the following information is collected:
These evaluations are carried out exclusively for statistical purposes and to improve the information we provide.
The legal basis for this processing is your consent pursuant to Article 6(1)(a) GDPR.
If you do not wish your newsletter interactions to be tracked, you may withdraw your consent at any time by unsubscribing from the newsletter.
16. Data Processing When Visiting Our Website
You may generally visit our website without directly providing us with any personal data. However, when you access our website, technically necessary information is automatically transmitted by your browser to our web server.
This information is required to properly provide our website, ensure its stability and security, and identify and resolve technical issues.
We only collect personal data beyond this where you voluntarily provide it to us, for example when contacting us, subscribing to a newsletter, or otherwise communicating with our company.
Personal data is processed exclusively in accordance with the applicable legal provisions and only for the purposes described in this Privacy Policy.
17. Server Log Files
When you visit our website, information is automatically collected and stored in so-called server log files by our server system.
This includes, in particular, the following data:
This data is processed exclusively for the following purposes:
This data is not combined with other data sources.
Processing is carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR.
Server log files are retained only for as long as necessary to fulfil the above purposes and are subsequently deleted automatically.
18. Contacting Us
You have various options for contacting our company, in particular by e-mail or telephone.
When you contact us, we process the personal data you provide exclusively for the purpose of handling your enquiry.
Depending on the nature of your enquiry, this may include in particular:
Processing is carried out solely for the purpose of responding to your enquiry, communicating with you, and, where applicable, initiating or performing a contractual relationship.
The legal basis for this processing is Article 6(1)(b) GDPR where your enquiry relates to the conclusion or performance of a contract. In all other cases, processing is based on our legitimate interest pursuant to Article 6(1)(f) GDPR in maintaining efficient communication with interested parties, promoters, artists, and business partners.
Your data will be deleted once your enquiry has been fully processed, provided no statutory retention obligations prevent its deletion.
19. Communication with Business Partners
As an international concert agency and event promoter, we regularly communicate with artists, artist managements, concert promoters, festivals, agencies, members of the press, service providers, and other business partners around the world.
Within the scope of this business communication, we process personal data only to the extent necessary for conducting our business activities.
This includes, in particular:
Processing is carried out for the purpose of taking pre-contractual measures, performing existing contractual relationships, or on the basis of our legitimate interest in the efficient organisation of our business operations pursuant to Article 6(1)(b) and Article 6(1)(f) GDPR.
Personal data is made available only to those employees who require it in order to perform their respective duties.
20. Cookies
Our website uses cookies and similar technologies to ensure the technical functionality of our website and to provide certain features in a more convenient and user-friendly manner.
Cookies are small text files stored by your browser on your device. They do not cause any damage and do not contain malware such as viruses or trojans.
Depending on their function, we distinguish between technically necessary cookies and cookies used for analytics or marketing purposes.
Technically Necessary Cookies
Technically necessary cookies are required for our website to function properly. Without these cookies, certain features of our website cannot be provided or can only be provided to a limited extent.
Processing is carried out on the basis of Section 25(2) TDDDG in conjunction with Article 6(1)(f) GDPR.
Analytics and Marketing Cookies
Where cookies are used to analyse user behaviour or for marketing purposes, they are stored exclusively with your explicit consent.
The legal basis for this processing is Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
You may withdraw your consent at any time with effect for the future.
Regardless of this, you can configure your browser at any time to restrict or completely prevent the storage of cookies. Please note, however, that this may result in certain functions of our website no longer being fully available.
21. SSL/TLS Encryption
To protect your personal data and ensure the confidential transmission of all content between your browser and our website, we use modern TLS (Transport Layer Security) encryption.
You can identify an encrypted connection by the prefix "https://" and the padlock symbol displayed in your browser's address bar.
The encryption technology used protects the data you transmit from access by unauthorised third parties.
Our encryption technologies are regularly updated to reflect the current state of the art.
22. Google Analytics 4
Where you have expressly given your consent, we use the web analytics service Google Analytics 4 provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google") on our website.
Google Analytics is used to statistically analyse the use of our website and to continuously improve our online services. Among other things, the service provides us with information about which content is accessed most frequently, how visitors arrive at our website, and which areas of our online presence can be further optimised.
Google Analytics uses cookies and comparable technologies that are stored on your device and enable an analysis of your user behaviour.
The following information may be processed in particular:
The information collected by Google Analytics is analysed on our behalf and is used exclusively for statistical purposes and to improve our online services.
We have activated the IP anonymisation function. As a result, your IP address is shortened within the European Union or the European Economic Area before any further processing takes place. Only in exceptional cases is the full IP address transmitted to Google's servers in the United States and shortened there.
Processing takes place exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.
Where personal data is transferred to the United States, this is carried out on the basis of the EU-U.S. Data Privacy Framework and, where necessary, the Standard Contractual Clauses adopted by the European Commission.
Further information is available at:
https://policies.google.com/privacy
23. Meta Pixel
Where you have expressly given your consent, we use the Meta Pixel provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, on our website.
The Meta Pixel enables us to analyse the effectiveness of our advertisements on Facebook and Instagram and to continuously improve our marketing activities.
When you visit our website, the Meta Pixel may collect various types of information regarding your user behaviour. This includes, in particular, information about:
Depending on your use of our website, various standard events may also be processed, including:
The data collected in this way is used exclusively for statistical evaluations and to optimise our advertisements. As a general rule, we do not use this data to identify individual persons.
Processing takes place exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.
Where Meta processes personal data in third countries, this is carried out on the basis of the EU-U.S. Data Privacy Framework or other appropriate safeguards pursuant to Articles 44 et seq. GDPR.
Further information is available at:
https://www.facebook.com/privacy/policy/
24. Google Maps
Our website may incorporate map services provided by Google Maps, a service of Google Ireland Limited.
Google Maps enables us to display event venues and other locations in a clear and user-friendly way and to provide convenient route planning.
Google Maps is only loaded on our website after you have given your explicit consent.
Only after your consent has been obtained will a connection be established between your browser and Google's servers. As a result, Google may become aware of:
We have no influence over the further processing of this data by Google.
The legal basis for processing is Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
Further information is available at:
https://policies.google.com/privacy
25. YouTube
Videos from the YouTube platform may be embedded on our website.
The provider is Google Ireland Limited.
The integration of videos enables us to make audiovisual content directly available on our website.
Once an embedded video is loaded following your consent, a connection is established to Google's servers. In this context, personal data may be transmitted to Google, in particular:
An enhanced privacy mode is currently not used.
If you are simultaneously logged into a Google account while visiting our website, Google may associate your visit to our website with your user account.
Processing takes place exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.
Further information is available at:
https://policies.google.com/privacy
26. Google Fonts
For the consistent display of fonts, our website uses Google Fonts, a service provided by Google Ireland Limited.
The fonts are loaded dynamically from Google's servers.
When accessing our website, a connection is therefore established to Google's servers. In this process, your IP address and additional technical information about your browser and device may be transmitted to Google.
The use of Google Fonts serves the purpose of ensuring a consistent and visually appealing presentation of our website.
Processing takes place exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.
Where personal data is transferred to Google in third countries, this is carried out on the basis of the EU-U.S. Data Privacy Framework or other appropriate safeguards pursuant to Articles 44 et seq. GDPR.
Further information is available at:
https://policies.google.com/privacy
27. Ticketing Platforms
For the sale of tickets to our events, we cooperate with external ticket service providers. Our website contains links to the respective ticketing platforms, in particular DICE and Eventim.
Simply visiting our website or viewing an event listing does not result in any personal data being transmitted to these ticket service providers. Data is transferred only once you click on the respective ticket link and access the website of the corresponding ticket provider.
From that point onwards, any further processing of personal data is carried out exclusively by the respective ticket service provider under its own responsibility as data controller. We have no influence over this processing.
As a general rule, we do not receive any personal data of ticket purchasers unless this is necessary for the organisation of the respective event or required by law. Where applicable, ticket providers only provide us with the information necessary for organising and conducting our events, such as aggregated sales figures or—where required—participant or guest lists.
Please note that the privacy policies of the respective ticket providers apply exclusively to the processing of personal data on those platforms.
There is no joint controllership pursuant to Article 26 GDPR between F-Cat Productions GmbH and the above-mentioned ticketing platforms.
28. Social Media Presence
F-Cat Productions GmbH maintains corporate profiles on various social media platforms in order to inform interested parties, promoters, artists, and business partners about current events, tours, news, and other services offered by our company.
We currently maintain corporate profiles on the following platforms in particular:
Through these platforms, you have the opportunity to contact us, for example by sending direct messages, commenting on our posts, or interacting with our content in other ways.
Where you communicate with us via our social media profiles, we process the personal data you provide exclusively for the purpose of handling your enquiry or communicating with you.
The legal basis for this processing is Article 6(1)(f) GDPR.
Our legitimate interest lies in maintaining modern communication with interested parties, customers, and business partners and in presenting our company and our events.
The operators of the respective social media platforms also process personal data independently. This may include, in particular, usage data, device information, IP addresses, location data, and information regarding your user behaviour. We have no complete control over the nature, scope, or purpose of this processing.
Where the platform operators provide us with statistical evaluations ("Insights"), we use these exclusively in anonymised or aggregated form to better understand the reach of our posts and continuously improve the information we provide. As a general rule, we are unable to identify individual users.
For certain processing operations relating to Facebook and Instagram Insights, joint controllership may exist between Meta Platforms Ireland Limited and F-Cat Productions GmbH pursuant to Article 26 GDPR. Meta Platforms Ireland Limited bears primary responsibility for processing Insights data and fulfilling the corresponding information obligations under data protection law.
Further information on the processing of personal data by the respective platform operators can be found in the privacy policies of the respective providers.
29. External Links
Our website contains links to third-party websites. These include, for example, event venues, ticketing platforms, partner companies, artist websites, and social media platforms.
Please note that we have no influence over the content of these external websites or the processing of personal data on them.
By clicking on an external link, you leave our website. Responsibility for compliance with applicable data protection regulations and for the content of the respective websites lies solely with their operators.
We therefore recommend that you read the privacy policies of the respective providers before using their websites or transmitting any personal data.
30. Automated Decision-Making
F-Cat Productions GmbH does not carry out automated decision-making, including profiling, within the meaning of Article 22 GDPR.
31. Amendments to this Privacy Policy
F-Cat Productions GmbH reserves the right to amend this Privacy Policy where this is necessary due to changes in legal requirements, technological developments, or changes to our services.
This applies in particular where new processing activities are introduced, existing services are modified, or new legal requirements need to be implemented.
The current version of this Privacy Policy is available on our website at any time. The version published at the time of your visit shall apply.
We therefore recommend that you review this Privacy Policy regularly in order to stay informed about any changes.
32. Version of this Privacy Policy
This Privacy Policy is effective as of:
August 2026