This is an English translation for your convenience. Only the German version is legally binding.
Here you can find out which personal data we process when you visit drawnbyevil.de, for what purpose and on what legal basis. You can change your choice in the cookie banner at any time via the cookie settings.
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Maximilian Lilpob
Nauwieserstraße 19
66271 Kleinblittersdorf
Germany
Phone: +49 6805 2049455
Email: contact@drawnbyevil.de
We have not appointed a data protection officer, as we are not legally required to do so. If you have any questions about data protection, you can reach us at the email address above.
We only process personal data where this is necessary for a working website, our content and our services, or where you have given your consent.
We delete data as soon as the purpose no longer applies and no statutory retention obligations prevent deletion. Specific periods are given for the individual processing operations.
Some providers (Google, Meta, Vimeo) are based in the USA or process data there. For the USA there is an adequacy decision of the EU Commission (EU-US Data Privacy Framework); the providers named are certified under it. In addition, standard contractual clauses are in place. A residual risk that US authorities access data cannot be ruled out. Such transfers only take place if you have consented to the respective service.
This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with STRATO.
Every time you visit, your browser automatically transmits data to the server, which is stored in log files:
This serves the secure and stable operation of the website and the defence against attacks. The legal basis is Art. 6(1)(f) GDPR. The log files are deleted after 7 days unless they are needed to investigate a security incident.
To deliver pages faster, we cache finished pages (page cache). No personal data is stored in the process.
On your first visit, a banner asks which optional services you would like to allow. Without your consent, the website does not load any analytics, marketing or embedded third-party content. The solution was developed by us and runs entirely on our server; no data is transferred to third parties in the process.
| Category | Services | Purpose |
|---|---|---|
| Essential | Cookie “dbe_consent” | stores your choice |
| Essential | Cookie “dbe_lang” | stores your language choice if you switch languages (12 months) |
| Statistics | Google Analytics 4 | evaluate reach and usage |
| Marketing | Meta Pixel | show and measure ads on Facebook/Instagram |
| External media | YouTube, Vimeo | load embedded videos |
To prevent abuse, your IP address is only stored briefly in the website’s database as an irreversible check value (hash) to limit excessive requests. The value expires after 10 minutes and is deleted after 24 hours at the latest.
The legal basis for the essential cookies is Section 25(2) no. 2 TDDDG; for the proof of consent Art. 6(1)(c) in conjunction with Art. 7(1) GDPR.
The website is available in German and English. If you open the home page for the first time and your browser is not set to German, we redirect you to the English version. Only your browser’s language setting is checked, directly in your browser; nothing is stored or transmitted to us. If you switch the language yourself using the “DE | EN” switch, we remember your choice in the cookie “dbe_lang” (12 months) so that you are not redirected again. The legal basis is Section 25(2) no. 2 TDDDG, as you actively use this function.
Withdrawal: You can change or withdraw your choice at any time via the “Cookie settings” button at the bottom left or the link of the same name in the footer. The withdrawal takes effect for the future; analytics and marketing cookies are deleted. In the settings you can see your consent ID, which allows us to tell you about your consent on request.
Regardless of your choice in the banner, we count anonymously how often our pages are visited and how often links to streaming and social media platforms (e.g. Spotify, Apple Music, YouTube) are clicked. This shows us which releases and campaigns work.
In doing so, no cookies are set, nothing is stored on your device and no IP addresses or identifiers are stored. We only record daily totals of: date, page visited, type of event (visit or click), target platform and – if contained in the link – the campaign and source (utm_campaign, utm_source). It is not possible to draw conclusions about individual visitors. The same short-lived hash procedure as in section 4 is used to prevent abuse.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to measure the success of our releases and campaigns. As nothing is stored on or read from your device, no consent under Section 25 TDDDG is required. You can object to this processing under Art. 21 GDPR.
If you consent to “Statistics”, we use Google Analytics 4, an analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Without your consent, Google Analytics is not loaded.
Google Analytics evaluates how visitors use our website, e.g. pages viewed, time spent, scroll depth, clicks on outbound links, approximate origin (country/region), device type and browser. For this purpose the cookies “_ga” and “_ga_<ID>” are set with a lifetime of up to 2 years. Google does not store your IP address; it is only used to determine your approximate location and then discarded.
We have deactivated Google Signals, personalised advertising and granular location and device data. The data is deleted after 14 months. A data processing agreement is in place with Google. We use Google Consent Mode: Google receives the signal whether you have consented; without consent, no connection to Google is established.
The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time via the cookie settings. Data may be transferred to the USA (see section 2). Further information: Google privacy policy.
If you consent to “Marketing”, we use the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). Without your consent, the pixel is not loaded and no connection to Meta is established.
The pixel allows us to reach visitors of our website on Facebook and Instagram with advertising for our releases and concerts, to build similar audiences and to measure whether our ads work. Among other things, pages viewed, clicks on links to streaming platforms (event “StreamingClick” with platform and campaign), automatically detected button clicks, device and browser information and your IP address are recorded. For this purpose the cookies “_fbp” and possibly “_fbc” are set with a lifetime of up to 3 months. If you are logged in to Facebook or Instagram, Meta can assign the data to your account.
We also use Meta’s automatic advanced matching. The pixel reads details you enter into forms on our website (e.g. email address, name, phone number), converts them into irreversible check values (hashes) while still in your browser and only transmits these to Meta. Meta matches them with its user accounts to better attribute visits and ad performance. This, too, only happens with your consent to “Marketing”.
We and Meta are joint controllers for the collection and transmission of the data to Meta (Art. 26 GDPR); a joint controller agreement is in place. Meta alone is responsible for any further processing.
The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time via the cookie settings. Data may be transferred to the USA (see section 2). Further information: Meta privacy policy.
We embed videos from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and possibly Vimeo (Vimeo.com Inc., 330 West 34th Street, New York, NY 10001, USA). As long as you have not consented, you only see a preview image loaded from our own server; no connection to YouTube or Vimeo is established.
Only when you click “Load video” or have consented to “External media” is the video loaded from the respective provider. At least your IP address, the date and time and the page visited are transmitted to the provider; the provider may use cookies or similar technologies. We embed YouTube videos in privacy-enhanced mode (youtube-nocookie.com) and Vimeo with the “Do Not Track” parameter. If you are logged in with the provider, it can assign the view to your account.
The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you give by clicking “Load video” or in the cookie banner and can withdraw at any time. Data may be transferred to the USA (see section 2). Further information: Google privacy policy, Vimeo privacy policy.
If you write to us via the contact form or by email, we process your name, your email address and your message in order to answer your enquiry. The form sends your details to us by email; they are not stored in the website’s database.
To protect against spam, the form contains a field that is invisible to humans and only filled in by automated programs; such submissions are discarded. We also accept a maximum of 3 messages within 10 minutes from the same internet connection. For this purpose we briefly store only an irreversible check value (hash) of your IP address; it expires after 10 minutes and is deleted after 24 hours at the latest. No data is transferred to third parties in the process; a service such as Google reCAPTCHA is not used. The legal basis for the spam protection is Art. 6(1)(f) GDPR (our interest in protecting the form against abuse).
If you have consented to “Marketing”, the Meta Pixel may transmit the details you enter in the form to Meta as hash values (automatic advanced matching, see section 7).
The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract (e.g. booking), otherwise Art. 6(1)(f) GDPR (our interest in answering enquiries). We delete your enquiry once it has been dealt with and no retention obligations apply.
On our website we link to Spotify, Apple Music, Amazon Music, YouTube, Instagram, Facebook and SoundCloud, among others. These are normal links: only when you click one are you forwarded to the respective platform, which then processes data under its own responsibility. No data is transmitted to these providers beforehand. We count the click anonymously (section 5) and – only with your consent – via Google Analytics and the Meta Pixel (sections 6 and 7).
All fonts are hosted on our own server. No connection to Google Fonts or other font providers is established when you visit the website.
You have the following rights with regard to your personal data:
Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation.
Right to lodge a complaint: You can lodge a complaint with a data protection supervisory authority, e.g. the Unabhängiges Datenschutzzentrum Saarland, Fritz-Dobisch-Straße 12, 66111 Saarbrücken, Germany.
For all matters, an email to contact@drawnbyevil.de is sufficient.
Last updated: November 2026
Stores your choice in this banner (cookie “dbe_consent”, 12 months, or 6 months if you decline) and – if you switch languages – your language choice (cookie “dbe_lang”, 12 months). Allowed without consent.
Helps us understand which content you are interested in. Provider: Google Ireland Ltd. (Google Analytics 4). Cookies: _ga, _ga_* (up to 2 years). Data may be transferred to the USA.
Lets us show releases and concerts to metal fans on Facebook and Instagram and measure whether it works. Provider: Meta Platforms Ireland Ltd. (Meta Pixel). Cookies: _fbp, _fbc (up to 3 months). Data may be transferred to the USA.
Loads embedded videos from YouTube (Google) and Vimeo directly on the page. Data is transferred to these providers, possibly also to the USA.
Your consent ID: –
You can change or withdraw your choice at any time via “Cookie settings”.