Privacy statement

This statement takes effect on 1 March 2026.

The German Datenschutzerklärung is legally binding. This English page is a convenience translation.

In brief

• Controller: Voxlyra GmbH, Lychener Straße 54, 10437 Berlin.
• Requests stored 12 months, session archive 18 months, tax records 10 years.
• FormSubmit processes the form in the United States.
• Your choice sits 180 days in localStorage under vxly-consent.
• Complaint: Berlin Commissioner for Data Protection and Freedom of Information.

Contents

1. Controller
2. Purposes
3. Legal bases
4. Requests
5. Contract and archive
6. FormSubmit
7. Hosting
8. localStorage vxly-consent
9. No third-party tracking pixels
10. Recipients
11. Rights
12. Duty to provide
13. Automated decisions
14. Children

1. Controller

Voxlyra GmbH, Lychener Straße 54, 10437 Berlin, hello@voxlyra.click, phone +49 30 44721980, managing director Lena Hoffmann. GDPR applies, supplemented by the BDSG; for digital services the TDDDG.

2. Purposes

Running the website, answering booking requests, performing contracts, invoicing, studio archive of commissioned recordings, IT security, documenting consent to optional storage categories.

3. Legal bases

Contract and pre-contract steps, legal duties (tax, retention), legitimate interests in secure operation, consent where the TDDDG requires it for storing or reading non-necessary information. Necessary localStorage that only documents your choice is required so we do not prompt you again.

4. Requests

Required fields: name, email, message, consent checkbox. Storage 12 months. Without those data, contact does not occur.

5. Contract and archive

Contract data and invoices: generally 10 years. Session files 18 months after acceptance, then deletion unless an extension or duty blocks it.

6. FormSubmit

The contact form posts to FormSubmit (formsubmit.co), a service in the United States. A third-country transfer occurs. FormSubmit refers to standard contractual clauses and processing on behalf of the using party. We cannot supervise a US service as we would an on-premises EU processor. Alternative: email hello@voxlyra.click without the form. The service captcha is switched off in our form (_captcha=false); a honeypot field catches machines.

7. Hosting

Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, processes server logs (IP, time, resource) for operational security. Processing agreement with a provider established in the EU.

8. localStorage vxly-consent

Key vxly-consent, retention 180 days, payload {v, t, c} with version, timestamp and categories nec, fun, ana, mar, per. No HTTP cookies, no sessionStorage. The site is readable before you choose. Functional, analytics, marketing and personalisation modules are not currently embedded; the categories exist so a later addition cannot run without a new choice.

9. No third-party tracking pixels

There are no embedded font, analytics or ad networks. Type and script sit on this host. Google Ads may point at this domain but sets no tag here unless you enable analytics or marketing and we add a tag later.

10. Recipients

Host Hetzner, form transmission FormSubmit, tax adviser and bank in the usual scope, authorities on legal request. Sub-processors in the DPA.

11. Rights

Access, rectification, erasure, restriction, objection, portability, withdrawal of consent for the future. Complaint to the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, https://www.datenschutz-berlin.de/.

12. Duty to provide

Contact data are required for a contract, and for a recording the person and consent data needed for production. Website use without the form is possible without optional categories.

13. Automated decisions

No automated decision with legal effect within the meaning of the GDPR.

14. Children

Studio minimum age 16. The website is not directed at children under 16.

Cookies: cookie notice. DPA: DPA. Legal notice: legal notice.