Legal Notices

Kromson Audio

Last Updated: 16.03.2026

Controller: Kromson Audio, Saxony, Germany

1. Overview

We are committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data when you visit our website and purchase our products. We comply with the EU General Data Protection Regulation (GDPR) and the German Bundesdatenschutzgesetz (BDSG).

2. What Data We Collect

We collect only the data necessary to process your order and provide you with the product.

Identity Data: First name, last name.

Contact Data: Email address.

Payment Data: When you purchase, your payment details (such as credit card information) are processed directly by Squarespace Payments. We do not see or store your full payment card details. Squarespace provides us only with confirmation of payment and the last four digits of your card for reference.

Technical Data: IP address, browser type, and device information when you visit our website. This is collected by Squarespace's servers for security and analytics.

License Data: When you activate your plugin, the LicenseSpring service receives your name, email address, and a unique identifier for your computer (machine ID) to validate your license. This is necessary to prevent unauthorized use and to ensure only paying customers can use the software.

3. How We Collect Your Data

Direct Interactions: You provide us with your Identity and Contact Data by filling in forms on our website or by corresponding with us via email.

Automated Technologies: When you visit our website, Squarespace automatically collects Technical Data about your equipment and browsing actions.

Plugin Activation: When you activate your plugin in your DAW, the plugin connects to LicenseSpring's servers to verify your purchase.

4. How We Use Your Data (Legal Basis)

We will only use your personal data when the law allows us to. Most commonly, we will use your data in the following circumstances:

To process your purchase and deliver the download link

Data used: Identity, Contact, Payment

Legal basis: Performance of contract (Article 6(1)(b) GDPR)

To send you important updates about the software (e.g., bug fixes, security updates)

Data used: Contact

Legal basis: Legitimate interest (Article 6(1)(f) GDPR)

To validate your license and prevent piracy

Data used: Identity, Contact, License Data

Legal basis: Performance of contract and legitimate interest (Article 6(1)(b) and (f) GDPR)

To improve our website and detect security threats

Data used: Technical

Legal basis: Legitimate interest (Article 6(1)(f) GDPR)

Squarespace (USA) - Website hosting, payment processing, and analytics.

Note: Squarespace Payments may use additional processors depending on your selected payment method (credit card, PayPal, Apple Pay, etc.). All are subject to Squarespace's privacy terms.

LicenseSpring (Canada/USA) - License validation and management.

Data processed: Name, email, machine ID, and license status.

6. International Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States and Canada. We ensure appropriate safeguards are in place:

For transfers to the US, we rely on the EU-US Data Privacy Framework or Standard Contractual Clauses where applicable.

LicenseSpring and Squarespace both provide adequate GDPR compliance guarantees.

7. Data Retention

We keep your data only as long as necessary:

Customer data: Retained for as long as you have an active license, plus any period required by tax laws (in Germany, typically 10 years for financial records).

Email correspondence: Retained for up to 3 years after your last interaction.

Website logs: Retained by Squarespace for up to 30 days.

8. Your Rights

Under GDPR, you have the following rights:

Access: Request a copy of your personal data.

Rectification: Correct inaccurate data.

Erasure: Request deletion of your data ("right to be forgotten").

Restriction: Limit how we use your data.

Portability: Receive your data in a machine-readable format.

Objection: Object to processing based on legitimate interests.

Withdraw Consent: Where consent was given, you may withdraw it at any time.

To exercise any of these rights, email us at lushkrom@gmail.com. We will respond within 30 days.

9. Data Security

We have implemented appropriate technical measures to protect your data:

Our website uses HTTPS encryption (SSL).

Payment processing is handled by Squarespace Payments, which is PCI-DSS compliant.

LicenseSpring uses industry-standard encryption for license validation.

10. Cookies

Our website (Squarespace) uses essential cookies to function properly, such as those needed for the shopping cart and checkout process. Squarespace may also use analytics cookies to help us understand visitor behavior. You can control cookies through your browser settings.

11. Children's Privacy

Our products are not intended for children under 16. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this policy from time to time. The latest version will always be available at www.kromsonaudio.com/legal. Significant changes will be notified via email.

13. Contact and Supervisory Authority

If you have any questions about this policy or how we handle your data:

Email: lushkrom@gmail.com

If you are unsatisfied with our response, you have the right to lodge a complaint with a data protection supervisory authority, particularly in your EU member state or in Germany:

Sächsische Datenschutz- und Transparenzbeauftragte (Saxony Data Protection Authority)

Website: https://www.datenschutz.sachsen.de

Impressum:

Roy Peischl

Hopfgartener Str. 61, 09430 Drebach

lushkrom@gmail.com