Data Protection

1. Controller

GoFish Records / Armaora Records
Responsible person: Mike Wornath
Kobelsberg 19
94469 Deggendorf
Germany

Electronic enquiries can be sent through our secure contact form.

2. General information

Personal data is processed only where necessary to operate this website, answer enquiries, process purchases and provide secure digital downloads.

3. Hosting and server logs

When this website is accessed, technically necessary data may be processed in order to deliver the pages and maintain system security. This can include the IP address, date and time of access, browser and operating-system information, referrer URL and requested content.

Server logs may be stored for technical monitoring, security and error analysis.

4. Contact form

If you contact us through the website, the information you enter is processed so that we can handle and reply to your enquiry. The form asks for your name, email address, subject and message. No external form-processing provider is used.

To reduce automated abuse, the form uses a honeypot, a short timing check and rate limiting. For rate limiting, a one-way hash derived from the requesting IP address may be stored temporarily on the server together with submission timestamps.

5. Orders and digital downloads

When a purchase is made through Armaora, information required to process the order may be stored. This can include the release, price, currency, PayPal order/payment references, buyer email information transmitted by PayPal and technical information relating to the protected download.

Armaora creates time-limited download permissions for protected files. Expiry time, permitted download count and completed downloads may be stored. PayPal, card or bank login credentials are not stored by Armaora.

6. PayPal

PayPal is used as the payment service provider for selected digital purchases. Information required to create, verify and complete a payment is exchanged between Armaora and PayPal. Payment processing itself takes place on PayPal systems.

Further information is available in PayPal's privacy information .

7. Cookies and technically necessary sessions

Armaora does not currently use marketing or analytics cookies that require consent. Technically necessary session cookies may be used for security, administrator login, CSRF protection and purchase or contact-form functions.

8. Audio previews and media

Audio previews, cover artwork and other media are delivered through the Armaora website. Standard technical web-server access data is processed when these files are requested.

9. External links

This website may contain links to external platforms and websites. A normal external link does not automatically transmit data to those services. Once an external link is opened, the privacy terms of that provider apply.

10. SSL/TLS encryption

This website uses SSL/TLS encryption for secure data transmission.

11. Retention

Personal data is normally retained only for as long as required for the relevant purpose. Statutory retention obligations remain unaffected. Temporary contact-form abuse-prevention data is automatically limited to recent submission timestamps.

12. Your rights

Subject to the applicable legal requirements, data subjects may have rights including:

• access,
• rectification,
• erasure,
• restriction of processing,
• data portability,
• objection, and
• the right to lodge a complaint with a competent data-protection authority.

13. Changes to this notice

This Data Protection notice may be updated when technical functions, services or legal requirements change.