Privacy Policy
Last updated: 12 November 2026
1. Data Controller
The controller responsible for processing personal data on this website is:
Adna Kadic
Richardstrasse 111
12043 Berlin
Germany
Email: hej@adna.se
Website: https://www.adna.se
ADNA is the artist and business name under which I operate my website and present my artistic activities.
2. General Information on Data Processing
I take the protection of your personal data seriously. I process personal data in accordance with applicable data protection legislation, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).
Personal data means any information relating to an identified or identifiable individual.
I process personal data for the following purposes:
Providing and maintaining my website.
Responding to enquiries by email.
Managing newsletter subscriptions and sending newsletters.
Analysing and improving my online presence.
Providing links to external music, sales and social media platforms.
Processing music sales made through Bandcamp and organising the associated shipping.
Maintaining the security and functionality of my website.
I process personal data only where an applicable legal basis under Article 6 GDPR exists.
3. Website Hosting and Technical Provision (Squarespace)
My website is created and operated using the Squarespace platform.
Squarespace provides the technical infrastructure for my website and processes personal data on my behalf as a service provider and, where applicable, under its own data protection responsibilities.
When you visit my website, the following technical information may be collected and processed:
IP address
Date and time of access
Pages visited
Browser type and version
Operating system
Referrer URL
Technical connection and access information
This information is processed to provide the website, maintain its security and identify technical issues.
The legal basis is Article 6(1)(f) GDPR. My legitimate interest is to ensure the secure and reliable operation of my website.
International Data Transfers
Squarespace may process personal data through affiliated companies and subprocessors in various countries. This includes Squarespace, Inc. in the United States.
International transfers are carried out in accordance with applicable data protection requirements.
Squarespace, Inc. uses the EU-US Data Privacy Framework for certain international transfers, where the relevant requirements are met.
Where required, appropriate safeguards are used under Articles 44 et seq. GDPR. These may include the Standard Contractual Clauses approved by the European Commission.
Squarespace provides a Data Processing Addendum (DPA) governing data processing on behalf of its customers and international data transfers.
Further information:
Privacy Policy:
https://www.squarespace.com/privacy
Data Processing Addendum:
https://www.squarespace.com/dpa
4. Domain Registration and Email Services (Loopia)
I use Loopia for domain registration and business email hosting.
In connection with these services, technical information, contact details and communication data may be processed.
If you contact me by email, the information you provide, including your email address and message content, will be processed for the purpose of responding to your enquiry.
The legal basis is Article 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures. In other cases, processing is based on my legitimate interest in responding to enquiries under Article 6(1)(f) GDPR.
Further information about Loopia's data protection practices:
https://www.loopia.com/about-loopia/data-protection/
5. Contact by Email
You can contact me using the email address provided on my website:
If you contact me by email, I process the personal information you provide.
This may include:
Name
Email address
Content of your message
Any additional information you voluntarily provide
I use this information solely to respond to your enquiry and for any necessary follow-up communication.
The legal basis is Article 6(1)(b) GDPR for contract-related enquiries and Article 6(1)(f) GDPR for other enquiries.
I delete the information when it is no longer necessary for the purpose for which it was collected, unless statutory retention obligations or other legitimate reasons for retention apply.
6. Music Sales via Bandcamp
To sell my own music releases, particularly vinyl records, CDs and other physical music formats, I use my external Bandcamp shop:
https://artistadna.bandcamp.com/
My website, www.adna.se, is used solely to present my artistic activities and contains an external link to my Bandcamp shop.
There is no shopping cart, ordering or payment functionality on my website. Visitors can view and purchase products exclusively through the external Bandcamp platform.
When you click the Bandcamp link, you leave my website and are redirected to the Bandcamp platform. From that point onwards, your personal data is processed by Bandcamp in accordance with its own Privacy Policy.
Bandcamp provides the technical platform for product presentation, order processing and payment processing. Transactions are facilitated through Bandcamp and its payment service providers.
When using Bandcamp, the following personal data may be processed:
Name and contact details
Email address
Billing and delivery address
Order and purchase information
Payment and transaction details
Technical usage data and IP address
Information relating to an existing Bandcamp account, where applicable
As part of the order process, Bandcamp may provide me with certain buyer and order information necessary to fulfil my shipping obligations.
Where I receive personal data relating to buyers, I process this information primarily to prepare, package and ship ordered products and to respond to related customer enquiries.
The legal basis is Article 6(1)(b) GDPR where processing is necessary to perform the relevant contract. Where legal obligations apply, the legal basis is Article 6(1)(c) GDPR.
Bandcamp processes personal data under its own responsibility in relation to operating the platform and facilitating payments. I am independently responsible for personal data that I use to organise shipping and communicate with buyers.
Through certain features, Bandcamp may also share so-called Fan Information with artists. I may only use such information in accordance with applicable data protection legislation and Bandcamp's Terms of Use. In particular, buyer information will not be added to my newsletter without an appropriate legal basis or consent.
Bandcamp may also process personal data in the United States and other countries. International transfers are carried out using the transfer mechanisms indicated by Bandcamp and in accordance with applicable data protection requirements.
Further information:
Bandcamp Privacy Policy:
https://bandcamp.com/privacy
Bandcamp Terms of Use:
https://bandcamp.com/terms_of_use
7. Shipping and Delivery (DHL)
Orders for my physical music releases are placed through my Bandcamp shop.
I personally organise and handle the packaging and shipping of ordered products. For delivery, I use the shipping provider DHL.
As part of the order process, Bandcamp provides me with the shipping information necessary to send the ordered products to the relevant delivery address.
This may include:
First and last name
Delivery address
Order information
Email address, where necessary for shipping
Other information required for delivery
I use this information exclusively to process and fulfil the relevant order, organise shipping and communicate information about the shipment.
The personal data necessary for delivery is transferred to DHL where required to transport and deliver the shipment.
DHL may also process this information to provide shipment tracking and delivery notification services.
The legal basis for processing shipping information is Article 6(1)(b) GDPR where processing is necessary to fulfil the relevant contractual obligations.
Further information about DHL's data protection practices:
https://www.deutschepost.de/de/f/footer/datenschutz.html
8. Newsletter and Squarespace Email Campaigns
If you subscribe to my newsletter, I use your email address to send you news, updates and, where applicable, offers relating to ADNA.
I use Squarespace Email Campaigns to manage and send my newsletters.
Subscription is voluntary. Your email address will only be used for newsletter communications if you have given your explicit consent.
Double Opt-In Procedure
My newsletter subscription process uses a double opt-in procedure.
After entering your email address, you will receive a confirmation email. Your subscription is only completed once you click the confirmation link.
The time of registration and confirmation, as well as relevant technical log information, may be stored to demonstrate that consent was obtained.
The legal basis for newsletter delivery is Article 6(1)(a) GDPR and Section 7(2)(3) of the German Unfair Competition Act (UWG).
Newsletter Analytics and Individual Tracking
Squarespace Email Campaigns provides analytics features for evaluating sent newsletters.
The email open and link-click tracking features are enabled and, according to information provided by Squarespace, cannot be disabled.
The following information may be collected and analysed:
Whether and when a newsletter was opened.
Whether a link within a newsletter was clicked.
Which links were clicked.
Statistical information about the use and performance of individual newsletter campaigns.
To measure open rates, Squarespace uses an invisible image (tracking pixel), which is requested when images in the email are loaded.
Link clicks may also be recorded through tracked links. Click activity may be associated with an individual newsletter subscriber.
These analytics are used to evaluate the reach, effectiveness and design of my newsletters and to improve future communications.
Open rates may be technically inaccurate. For example, email services such as Apple Mail Privacy Protection can affect the loading of tracking pixels.
Legal basis and consent:
Consent to receive the newsletter through the double opt-in procedure does not automatically constitute consent to individual open and link-click tracking.
Where individual tracking requires consent under Article 6(1)(a) GDPR, separate and voluntary consent must be obtained. Where tracking involves storing information on or accessing information from your device, Section 25 TDDDG must also be observed.
I will obtain and document any separate consent required before using tracking for which consent is legally necessary. Consent to tracking must not be a condition for receiving the newsletter.
Any consent given may be withdrawn at any time with effect for the future. You can unsubscribe from the newsletter using the unsubscribe link included in each newsletter email. For data protection enquiries, you can contact me at hej@adna.se.
Further information about Squarespace:
https://www.squarespace.com/privacy
Information about campaign analytics:
https://support.squarespace.com/hc/en-us/articles/360001277427-Tracking-email-campaign-analytics
9. Website Analytics – Squarespace Analytics
I use Squarespace Analytics to obtain information about how visitors use my website and to improve my online presence.
The information processed may include:
Number of website visits
Pages visited
Time spent on the website
Sources of website traffic
Devices and browsers used
Interactions with my website
Cookies or similar technologies may be used for these purposes.
Non-essential analytics cookies are restricted by default and are only activated after you have given your consent through my cookie banner.
Where consent is required, processing is based on Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
You may withdraw your consent at any time with effect for the future.
Further information:
https://support.squarespace.com/hc/en-us/articles/360001264507-The-cookies-Squarespace-uses
10. Cookies and Consent Management
My website uses cookies and similar technologies.
Cookies are small text files stored on your device that contain certain information.
I use the integrated Squarespace cookie banner to allow you to manage your cookie preferences.
When visiting my website, you can choose between the following options:
Accept all cookies.
Reject non-essential cookies.
Manage individual cookie preferences.
Non-essential cookies are restricted by default and are only activated after you have given your consent.
Strictly necessary cookies may be used where they are required for the provision and proper functioning of my website.
The legal basis for storing information on or accessing information from your device is Section 25 TDDDG.
Where personal data is subsequently processed, the applicable legal basis under Article 6 GDPR also applies.
You can change or withdraw your consent at any time through the cookie settings on my website.
11. External Social Media and Music Platforms
My website contains links to external platforms and services, including:
Spotify
Facebook
Instagram
TikTok
Apple Music
Tidal
SoundCloud
YouTube
These are ordinary external links. Social media feeds, videos and music players from these platforms are not embedded directly into my website.
Simply visiting my website does not therefore automatically transmit personal data to these platforms solely because the links are present.
When you click on an external link, you leave my website and are redirected to the relevant platform. From that point onwards, the platform operator is responsible for its own data processing activities.
Please consult the respective platform's Privacy Policy for further information.
12. Data Retention
I retain personal data only for as long as necessary for the purposes for which it was collected or where statutory retention obligations apply.
In particular:
Contact enquiries are deleted once they have been fully dealt with and no further retention is required.
Newsletter data is retained until consent is withdrawn, unless other legal retention requirements apply.
Technical access data is retained in accordance with operational and security requirements.
Information made available to me in connection with Bandcamp purchases is retained only for as long as necessary for the relevant purpose or where statutory retention obligations apply.
Records of consent may be retained to demonstrate compliance with legal obligations.
13. Your Rights
Subject to the applicable legal requirements, you have the following rights:
Right of access under Article 15 GDPR.
Right to rectification under Article 16 GDPR.
Right to erasure under Article 17 GDPR.
Right to restriction of processing under Article 18 GDPR.
Right to data portability under Article 20 GDPR.
Right to object under Article 21 GDPR.
Right to withdraw consent under Article 7(3) GDPR.
Where personal data is processed on the basis of legitimate interests, you may object to such processing under the conditions set out in the GDPR.
You also have the right to object at any time to the processing of your personal data for direct marketing purposes.
To exercise your rights regarding personal data processed by me, please contact me at:
If your request concerns data processing carried out by Bandcamp, you may also contact Bandcamp directly.
14. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.
A relevant contact point for my business location in Berlin is:
Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
Germany
Website: https://www.datenschutz-berlin.de/
15. Data Security
I implement appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access and other forms of unlawful processing.
My security measures are reviewed and adapted in accordance with technological developments and applicable legal requirements.
16. Automated Decision-Making
No automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place as part of the processing activities described in this Privacy Policy.
17. Changes to This Privacy Policy
I reserve the right to update this Privacy Policy if my website, the services I use or applicable legal requirements change.
The latest version published on my website shall apply.