Skip to content
Harry Pepl * 1945  † 2005
Contact Sign in

Information under the General Data Protection Regulation (GDPR)

Privacy policy

This platform manages without tracking, without analytics tools and without cookies for visitors who are not signed in. Here you can read which data are nevertheless generated, for what purpose and for how long.

Controller

The controller for the processing of personal data on this website is the media owner named in the legal notice: Daniel Pepl / Fullmax Recordings, Staudgasse 47/9-10, 1180 Vienna, Austria, email daniel.pepl@fullmax.at.

Principles

We do not use tools for audience measurement, analytics or advertising, and we do not embed content from third-party servers unless you trigger this yourself. Fonts, scripts and images are loaded from our own server. If you only read the pages, you receive no cookies.

Hosting and server logs

The website is hosted by hosttech GmbH in Switzerland; for Switzerland there is an adequacy decision by the European Commission. When a page is requested, the server automatically processes technical access data in log files: IP address, date and time, page requested and browser type. This is necessary for delivering the pages, for security and for troubleshooting. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR, the General Data Protection Regulation; DSGVO in German). The server rotates the logs automatically and deletes older log files once the set number of stored files is reached, as a rule after a few months. We do not evaluate them for statistics, and only in individual cases for troubleshooting or to repel attacks. To protect the server, the security software Imunify360 analyses requests in order to repel attacks.

Cookies

We use only technically necessary cookies, for which no consent is required (§ 165 para. 3 TKG 2021, the Austrian Telecommunications Act 2021):

  • hp_csrf: is set only when you open a page with a form (contact, access, contribute) and protects the form against misuse by third-party websites. It contains a random number and is deleted when you close the browser.
  • hp_sitzung: only for signed-in accounts; keeps you signed in for up to 30 days and ends when you sign out.
  • hp_vorschau: only during the set-up phase, for people who have received a preview link; valid for up to 60 days.

If you only read the website, you receive no cookies.

If you choose light or dark under “Display” at the bottom of the page, your browser remembers this choice in its own storage (localStorage, entry hp_thema). The setting never leaves your device and only serves the display you asked for; “automatic” deletes the entry again.

Contact form

When you write to us via the contact form, we store your enquiry, your name, your email address, the message and, if provided, organisation and reference. The enquiry is stored in our database and forwarded to us by email so that we can reply. As protection against misuse, instead of your IP address we store only a check value (hash) calculated from it with a secret key. The legal bases are your consent, which you give by submitting the form (Art. 6(1)(a) GDPR), and the handling of your enquiry (Art. 6(1)(b) and (f) GDPR). We keep enquiries for up to three years and then delete them. You may withdraw your consent at any time and request deletion.

For a personal access account we store the details from your application: name, email address, institution, media outlet or ensemble (optional), the type of access and the stated purpose. Every application is reviewed personally. Sign-in is passwordless: on request we send a link to your email address that is valid for 15 minutes and can be used only once. Passwords are not stored. For signed-in accounts we also store your saved list and log security-relevant events such as sign-ins, likewise only with a check value instead of the IP address. The legal bases are your consent and the provision of the access (Art. 6(1)(a) and (b) GDPR). Your account remains until you request its deletion; we then also delete the data associated with it.

The security log is deleted after twelve months.

Contributions to the archive and invitations

Signed-in people can submit photographs, documents, recordings, memories and information via Contribute. For this we store the details entered in the form (title, description, date, place, people involved, creator, intended use) and the uploaded files together with a checksum. The files are held on our server outside the publicly accessible area and are accessible only to the editorial team. Only what you have approved for the chosen use is published, and only with the stated photo credit. The legal bases are your consent and the agreement on the use of the material (Art. 6(1)(a) and (b) GDPR). Submitted material remains part of the archive until you request its deletion; rejected contributions we delete after twelve months at the latest.

We also invite people by email to set up an account. For this we store name, email address and the text of the invitation. An invitation that has not been accepted expires after 30 days.

Spotify player

On individual pages you can listen to recordings through a player from Spotify. The player is loaded only when you click “Load player” (two-click solution). Before that, no data are transmitted to Spotify. After the click, your browser connects to Spotify; Spotify AB, Stockholm, Sweden, then receives, among other things, your IP address and details of your device, and Spotify may set cookies. A transfer to countries outside the EU is also possible. The legal basis is your consent by clicking (Art. 6(1)(a) GDPR). Further details are in Spotify's privacy policy. Instead of the player you can also use the link “Open on Spotify”.

YouTube videos

On individual pages you can watch videos from YouTube. A video is loaded only when you click “Load video” (two-click solution); before that, no data are transmitted to YouTube, not even preview images. After the click, the video is embedded via the address youtube-nocookie.com (extended privacy mode). Your browser then connects to YouTube; Google Ireland Limited, Dublin, Ireland, then receives, among other things, your IP address and details of your device, and cookies or similar techniques may be used. A transfer to countries outside the EU, in particular to the USA, is also possible. The legal basis is your consent by clicking (Art. 6(1)(a) GDPR). Further details are in Google's privacy policy. Instead of the embedded video you can also use the link “Watch on YouTube”.

Saved list in the browser

The saved list stores the releases, works, people and press entries you have saved in your browser's storage (localStorage). These data do not leave your device as long as you are not signed in. Only when you sign in with an access account is the saved list stored with your account on our server. In your browser, you delete the saved list by removing the site data for harrypepl.com.

The platform links to other websites, such as streaming services, labels or reference works. Data are transmitted to the respective provider only when you follow such a link; the provider is responsible for the processing there.

Your rights

You have the right of access, rectification, erasure and restriction of processing, the right to data portability, and the right to object to processing based on our legitimate interest. You may withdraw consent at any time with effect for the future. To do so, contact the address given above or use the contact form. You can also lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde): Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at.

Last updated: October 2026

This translation is provided for convenience; the German version is legally binding.

Last updated: 15 Oct 2026