Last updated: October 2026

1. Controller

PBA Agency
Owner: Torsten Echinger
Lerchenweg 17
73779 Deizisau
Germany

Phone: +49 151 11257850
Email: torsten@pbaagency.com

2. General information on data processing

We take the protection of personal data seriously. Personal data is any information that can be used to identify a natural person directly or indirectly.

We only process personal data where this is necessary to operate this website, to communicate with interested parties, promoters and business partners, and to handle booking enquiries.

Processing is carried out in particular on the basis of Art. 6(1)(b) GDPR, where it is necessary to take steps prior to entering into a contract or to perform a contract, and on the basis of Art. 6(1)(f) GDPR, where we have a legitimate interest.

3. Hosting

This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany.

When you visit the website, the hosting provider processes data that is technically required. This may include in particular:

  • the page or file accessed
  • date and time of access
  • browser type and version
  • operating system used
  • device type
  • referrer URL
  • anonymised IP address

This processing serves to provide the website securely, reliably and without technical errors, and to detect and prevent misuse and attacks.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of our website.

According to the provider, IONOS stores this visitor data for a maximum of eight weeks.

We have concluded a data processing agreement with IONOS in accordance with Art. 28 GDPR.

4. IONOS WebAnalytics

As part of our web hosting, IONOS WebAnalytics is used to evaluate the use of our website for statistical purposes.

According to IONOS, the analysis is carried out without the use of cookies. Visitors’ IP addresses are anonymised after transmission and then processed without any personal reference.

Depending on the technical implementation, the data is collected via a pixel or via the server log files. In particular, information about the pages accessed, the time of access, browser, operating system, device type and the origin of the visit may be processed.

Processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the statistical evaluation and optimisation of our website.

5. Contacting us

If you contact us by email or phone, we process the information you provide in order to handle your enquiry and any follow-up questions.

Depending on the content of your enquiry, processing is based on Art. 6(1)(b) GDPR where it relates to the initiation or performance of a contract. In all other cases, processing is based on Art. 6(1)(f) GDPR due to our legitimate interest in handling business and general enquiries.

The data is deleted as soon as it is no longer required for the respective purpose, unless statutory retention obligations apply.

6. Booking enquiry form (Artistu)

Our contact pages include a booking enquiry form provided by Artistu. The provider is Hagen NK, trading as Artistu, Utrechtseweg 310 B46, 6812 AR Arnhem, the Netherlands.

As soon as you open one of our contact pages, the Artistu embed script is loaded from artistu.nl and the form is embedded. For technical reasons, connection data is transmitted to Artistu in the process, in particular your IP address, information about your browser and, where applicable, the address of the referring page (referrer). According to Artistu, the embedded form itself does not set any cookies and does not use local storage.

Artistu uses sub-processors for this purpose, in particular Cloudflare for network security and the handling of data traffic, and Sentry for error and performance monitoring. These service providers may also process the technical connection data mentioned above.

The booking data you enter in the form is transmitted to Artistu when you submit the form.

The embedding of the form when you open a contact page is based on our legitimate interest in providing a simple and reliable way to submit booking enquiries (Art. 6(1)(f) GDPR). The booking data submitted is processed to handle your booking enquiry and to take steps prior to entering into a contract in accordance with Art. 6(1)(b) GDPR and, where necessary, on the basis of our legitimate interest in the efficient handling and management of booking enquiries in accordance with Art. 6(1)(f) GDPR.

Artistu processes the data on our behalf. We have concluded a data processing agreement with Artistu in accordance with Art. 28 GDPR.

Further information on data processing by Artistu:
https://artistu.io/en/privacy-policy (opens in a new tab)

7. Disclosure of data in connection with booking enquiries

Where this is necessary to handle a booking enquiry, to prepare a contract or to carry out an event, the data submitted with the enquiry may be passed on to the requested artist, to representatives involved on their behalf or to necessary service providers.

Data is only passed on to the extent required to handle the enquiry or to perform the respective contractual relationship.

The legal basis is, in particular, Art. 6(1)(b) GDPR.

Our website contains links to external websites and social networks, such as Instagram.

As these are ordinary links, a connection to the respective external provider is generally only established once you click on the link. From that point on, the privacy policy of the respective provider applies.

We have no influence on how external providers process data once you have left our website.

9. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption.

10. Storage period

Unless a more specific storage period is stated in this privacy policy, we only store personal data for as long as it is required for the respective purpose of processing.

Where statutory retention obligations apply, the data concerned is stored for the duration of these statutory periods and then deleted, unless there is another legal basis for further processing.

11. Your rights

Subject to the statutory requirements, you have in particular the right to:

  • access in accordance with Art. 15 GDPR
  • rectification in accordance with Art. 16 GDPR
  • erasure in accordance with Art. 17 GDPR
  • restriction of processing in accordance with Art. 18 GDPR
  • data portability in accordance with Art. 20 GDPR
  • object in accordance with Art. 21 GDPR

Where processing is based on consent, this consent may be withdrawn at any time with effect for the future.

To exercise these rights, you can use the contact details given in section 1.

12. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority about the processing of personal data.

The authority responsible for our place of business is in particular:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI Baden-Württemberg)

https://www.baden-wuerttemberg.datenschutz.de/ (opens in a new tab)

13. Changes to this privacy policy

We reserve the right to amend this privacy policy if our website, the services we use or legal requirements change.

The version published on this website at the time applies.