Last updated · Version 1.4
Privacy policy
Here you can read what information we process, why, and how long we keep it.
In short
- We only use statistics, and videos and music from other services, if you say yes in our cookie banner. Otherwise we only set the cookies needed to sign in and to remember your choice (see Cookies).
- When you open a DJ profile, we count the view on our server for the DJ's statistics. This needs no consent, because we store nothing on and read nothing from your device. If your browser sends Global Privacy Control, we don't count you.
- We don't store IP addresses, and our statistics use no cookies.
- Contact details on a DJ profile are only shown when a visitor clicks.
- The database and the visitor statistics are on our own server in Denmark. Images are stored with Cloudflare R2 in the EU. Emails are sent via Resend, which stores them in the US for 30 days.
- You can correct, export and delete your information whenever you like.
Who is the data controller
djbasen.dk is run by DJBasen ApS, CVR no. 40769994, Agern Allé 24, 2970 Hørsholm, Denmark. We are the data controller for the information we process about you on djbasen.dk.
If you have questions about your information, write to hej@djbasen.dk.
We have not appointed a data protection officer (DPO), because djbasen neither processes sensitive data on a large scale nor monitors people systematically.
This is a translation. If it differs from the Danish version, the Danish version applies.
Whose information we process
- Visitors who search for DJs and view profiles. You don't need an account.
- DJs who have an account and perhaps a DJ profile.
- Reporters who report a profile.
When you visit djbasen
What we process
- Technical information. Your browser sends your IP address and information about the browser (user agent) when you open a page. We use them briefly to show the page, to protect it against abuse (rate limiting and bot protection) and to create a visit id (see below). We don't store your IP address. Cloudflare, which runs the site for us, may keep it briefly in its security logs.
- Statistics for DJ profiles. We record when a profile is shown in search results, when a visitor opens a profile, and when a visitor reveals a DJ's contact details. We only record link clicks and plays if you have said yes to statistics. See "The statistics".
- Visit id. To count unique visits, we calculate a one-way code (a sha256 hash) from your IP address, your user agent and a random value that changes every day and is deleted after one day. While the value exists, the code is pseudonymised personal data. Once it is deleted, the code can neither be traced back to you nor linked to your visits on other days. We store nothing on your device to do this.
- Visitor statistics for the whole site. Only if you have said yes to statistics. See "The visitor statistics".
- Your location, if you choose "Use my location". The location is rounded to about 1 km and is only used to find DJs nearby. We don't store or log it.
- Enquiries. If you write to us, we process your email address and what you write.
The statistics
DJs get statistics about how their profile is used. They are based on two kinds of records:
- Without consent: that a profile was shown in search results, that a visitor opened a profile, and that a visitor revealed a DJ's phone number, email or WhatsApp. We count these on our server from the request your browser sends anyway to show the page. We store nothing on your device and read nothing from it. Bots, link previews and the DJ's own visits aren't counted. If your browser sends Global Privacy Control (GPC), we don't count your profile views.
- Only with your consent to statistics: link clicks and plays of videos and mixes, which your browser sends to us.
The statistics use no cookies, and we store no IP addresses. Each record stores only the profile, what happened, the time, the day's visit id and one detail: where the visitor came from as a rough category, which link was clicked, or which service a video or mix came from (for example "Google", "Website" or "YouTube"). We never store the full address of the page you came from.
We delete the individual records after 90 days. Every night we add the records up into numbers per profile and day: views, unique visitors, views in search, clicks on phone, email and WhatsApp, link clicks per platform, plays and where visitors came from. A visitor who comes back on another day counts again. The totals contain no visit ids and can't be traced back to the individual visitor. We keep them as long as the profile exists, so that the DJ can follow their profile over time. The DJ and our administrators only see the totals, never who visited a profile.
The visitor statistics
To see how djbasen is used, such as which pages are viewed and where visitors come from, we use the statistics tool Umami. It only runs if you have said yes to statistics, and it runs on our own server in Denmark. The connection to it goes through Cloudflare, like the rest of the site. Nobody else gets access to the information, and we don't use it for advertising. These statistics are separate from the DJs' statistics above, and DJs don't see them.
When a page has been shown, your browser sends:
- the page's address without what comes after "?" and "#". If the link is tagged with a campaign (
utm_source,utm_medium,utm_campaign,utm_contentorutm_term), those tags are included. Everything else, such as a sign-in link or your search filters, is never sent; - the page's title;
- the address of the page you came from, without what comes after "?";
- your screen size and your browser's language.
While the visit is recorded, Umami uses your IP address and your user agent to find your country, region and town, your browser, your operating system and your type of device, and to create a visit id so it can count unique visitors. The visit id is a one-way code of your IP address, your user agent and a value that changes every month. It is pseudonymised personal data. Umami doesn't store your IP address, sets no cookies and stores nothing in your browser.
We don't count visits to the admin pages, and nothing is sent if your browser asks sites not to track you (Do Not Track or Global Privacy Control).
We delete the visits after 25 months, so we can compare a year with the year before.
Why, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Showing the site, keeping it secure and preventing abuse | Legitimate interest (Article 6(1)(f) of the General Data Protection Regulation): running a secure service |
| Recording profile views, views in search and clicks on contact details for the DJs' statistics | Legitimate interest (Article 6(1)(f)): the DJs' and our interest in seeing whether the profiles work |
| Recording link clicks and plays for the DJs' statistics | Consent (Article 6(1)(a)) |
| Visitor statistics for the whole site (Umami) | Consent (Article 6(1)(a)) |
| Finding DJs near you | Legitimate interest (Article 6(1)(f)): you asked for it yourself |
| Replying to enquiries | Legitimate interest (Article 6(1)(f)) |
You can always withdraw your consent under "Cookie settings" at the bottom of the page.
When you have a DJ account
What we process
- Sign-in. Your email address, your language, and when you accepted the terms and which version. If you sign in with Google, we only store an id for your Google account and your name, your email address and your profile picture. We store no access tokens from Google and don't ask Google for access to anything else, such as your email or calendar. There are no passwords.
- Sessions. When you are signed in, we store a session so you stay signed in. We don't store your IP address or information about your browser (user agent) on the session.
- Protection against abuse. We briefly count how many sign-in links are requested for an email address, so nobody can use djbasen to flood an inbox.
- Your profile. Stage name, profile URL, tagline, description, years of experience, whether you are a solo DJ or a group, postal code and city (not your address), how far you travel, genres, music cultures, occasions, number of guests, languages, equipment, photos, videos and mixes, links to your website and your social media, a guide price and the contact details you choose to show.
- Music culture. Is the music tradition you play, for example Arabic or Kurdish music, not your own background. You choose whether to show it, and we infer nothing about your ethnic origin from it.
- Photos. We remove hidden information (such as EXIF data and GPS location) from the photos you upload, and store only the processed versions, not the original.
- Contact details. Your public email, your phone number and your WhatsApp number are only shown if you switch them on, and only when a visitor clicks. They are not in the page's source code until someone has clicked. If your public email differs from your sign-in email, we send an email to it so you can confirm it.
- Statistics about your profile. The totals for views, views in search, clicks on contact details and links, and where visitors came from (see "The statistics").
- Moderation. If your profile is reported, suspended or closed, or we close your account, we store the report, our decision and the reasons, and who at djbasen made the decision. If we suspend a profile or close your account, we keep a one-way code (hash) of your email address for 12 months, so it can't be used for a new account straight away. The code can recognise your email address if it is used again, so it is pseudonymised personal data. This also applies if you delete the account yourself afterwards.
- Emails to you. Sign-in links, confirmation of your contact email, notice when your profile is live or verified, notice when your welcome post is published, notice of suspension, closure or restoration, notice of changes to the terms, and a confirmation when you delete your account. We send no newsletters or marketing.
What you must give us
To create an account, you must give us an email address, either directly or through your Google account, and accept the terms. To publish a profile, you must fill in a stage name, a profile picture, a city, at least one genre, one occasion, one number of guests and one contact method you show. Without them, you can't create an account or publish a profile. Everything else is optional.
Your profile is public
When you publish your profile, anyone can see it. It can be found in search on djbasen, on pages such as "Wedding DJ in Copenhagen" and in search engines such as Google. When someone shares the link, your stage name, your tagline and your cover photo or profile picture are shown in the preview. Your contact details are never included in the information we give search engines.
If your profile is verified, you can be welcomed with a post on our own social media, Instagram and Facebook. Under "Promotion" on your page you see the post before it's published: an image with your stage name, your city, your genres and your profile URL, and a text we write from your profile. It is only published if you tick the box and approve it. We store your consent with what you approved: the photo you chose and how you cropped it, the texts, the version of the consent text and the time. The image is made at Cloudflare, as our processor, and published with our own publishing tool on our own server. You can withdraw the post until it's published, and afterwards ask for it to be removed in the same place; we then remove it within 7 days. Read more in the terms.
Search engines and social media may keep copies of what is public, even after you have deleted it on djbasen. We have no control over that.
Why, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Your account, your sign-in and the emails that come with it | Contract (Article 6(1)(b)): it is necessary to provide djbasen to you |
| Showing your profile publicly, in search and in search engines | Contract (Article 6(1)(b)): it is the service itself |
| Showing you statistics about your profile | Contract (Article 6(1)(b)): the statistics are part of the service. How the numbers come about is described under "The statistics" |
| Using content from your profile when we market djbasen | Consent (Article 6(1)(a)) |
| Moderation, suspension, closure and blocking an email | Legal obligation (Article 6(1)(c)) under the EU Digital Services Act (DSA) and legitimate interest (Article 6(1)(f)): keeping djbasen free of fake profiles and abuse |
| Documenting that you accepted the terms | Legitimate interest (Article 6(1)(f)) |
Accepting the terms is not consent under data protection law. We only ask for consent where consent is the legal basis: statistics, videos and music from other services, and marketing.
When you report a profile
If you report a profile, we process the reason, your description, which profile it concerns, your language and your email address, or your account if you are signed in. If you write to us about illegal content, we also process your name. We use your email for the receipt, to tell you about our decision and to contact you if we need more information. We don't tell the DJ who reported the profile.
The legal basis is our legal obligation to handle reports under the Digital Services Act (Article 6(1)(c)) and our legitimate interest in keeping djbasen free of abuse (Article 6(1)(f)).
Cookies
The first time you visit djbasen, we ask whether you say yes to statistics and to videos and music from other services. You can always change your choice under "Cookie settings" at the bottom of the page. Without your yes we only set the cookies that are needed: your login session, a short-lived security cookie of 5 minutes when you sign in with Google, and a cookie that remembers your choice for 12 months. Our fonts are hosted by us, so your browser doesn't fetch anything from services such as Google Fonts. The full list is on the cookies page.
Videos and mixes from other services
Videos and mixes from YouTube, Vimeo, TikTok, SoundCloud, Mixcloud and Spotify only load if you have said yes to videos and music, and only when you click them. Until then we show an image stored by us and the name of the service. When you click, your browser fetches the content directly from the service. The service then receives your IP address and information about your browser, and may set its own cookies under its own rules.
We are joint controllers with the service for your browser fetching the content and sending the information to the service. What the service then does with it is the service's own responsibility and is described in its own privacy policy. The legal basis is your consent (Article 6(1)(a)). YouTube videos play from youtube-nocookie.com.
Where your data is stored
The database and the visitor statistics (Umami) are on our own server in Denmark. Images are stored with Cloudflare R2 in the EU. Backups of the database are stored on our own backup server and with Cloudflare R2 in the EU.
Emails are sent via Resend. Resend sends from the EU, but stores information about sent emails, including their content, in the US for 30 days. The website itself runs on Cloudflare's network. Public pages, such as published DJ profiles, may be stored temporarily in Cloudflare's data centres, also outside the EU, so they load quickly. This only applies to pages that anyone can see.
Cloudflare, Inc. and Resend, Inc. are US companies. Both are certified under the EU-US Data Privacy Framework, which the European Commission approved in an adequacy decision (10 July 2023). If the certification lapses, the EU standard contractual clauses in their agreements apply. You can get a copy of the standard contractual clauses by writing to hej@djbasen.dk.
Processors
We use these suppliers to run djbasen. They only process information on our instructions, and we have data processing agreements with them.
| Supplier | What they do for us |
|---|---|
| Cloudflare | Runs the website and the connection to the database and the visitor statistics, stores images and backups (R2, EU), processes images, makes the images for welcome posts and protects forms against bots (Turnstile) |
| Resend | Sends emails (stores them in the US for 30 days) |
Others who receive information
These services are independent controllers for what they themselves do with the information, under their own privacy policies:
| Service | When |
|---|---|
| When you sign in with Google. Google confirms who you are and sends us your name, your email and your profile picture | |
| YouTube, Vimeo, TikTok, SoundCloud, Mixcloud and Spotify | When you have said yes to videos and music and play something (see "Videos and mixes from other services") |
| Cloudflare (Turnstile) | When you sign in or report a profile. Cloudflare also uses the information to improve its protection against bots |
| Meta (Instagram and Facebook) | When we publish your welcome post, with your consent |
How long we keep data
| Raw statistics | 90 days |
|---|---|
| Daily statistics | Totals per profile and day without personal data. Kept as long as the profile exists |
| The daily value behind the visit id | Deleted after one day |
| Visitor statistics for the whole site (Umami) | 25 months |
| Your choice in the cookie banner | 12 months, in your browser |
| Account and profile | Until you delete them |
| Welcome post | Your answer, your consent and the post's texts are kept as long as the profile exists. The post's images are deleted when you withdraw it, when it's removed, or when you delete the profile. We remove posts on Instagram and Facebook within 7 days of your request |
| Deleted profile | Tagline, description, contact details, links and photos are deleted at once, and the profile disappears from djbasen. The rest, such as stage name, profile URL, city, genres and statistics, is deleted after 30 days. Until then the profile's address shows that the profile has been deleted |
| Deleted account | Anonymised at once: your email, your name, your picture and your acceptance of the terms are removed, and you are signed out everywhere. Your profile is deleted as above. The rest is deleted after 30 days, except what is listed below |
| Account we close with notice | As a deleted account, from the day the account is closed |
| Reports | 12 months after the decision, or together with the profile if it is deleted first |
| Hash of an email after suspension or closure | 12 months, also if the account is deleted earlier |
| Moderation log (our decisions and reasons) | 3 years, the general Danish limitation period. If the profile is deleted earlier, we keep only the stage name and profile URL with the decision |
| Emails to us (hej@djbasen.dk) | 12 months after the case is closed |
| Information about sent emails at Resend | 30 days |
| Sessions | Deleted when you sign out, otherwise at the latest the day after they expire (30 days after you last used djbasen) |
| Sign-in links | Valid for 15 minutes. Deleted when used, otherwise at the latest the next day |
| Backups | 30 days. Information deleted from the database may therefore remain in a backup for up to 30 days |
Your rights
You have the right to:
- access the information we hold about you. Under "Account" you can download everything we have about you as a JSON file. It contains nothing about others, such as who reported your profile.
- rectification of incorrect information. You can edit your profile yourself at any time.
- erasure of your information. Under "Account" you can delete your profile or your whole account yourself. If you delete the profile, it disappears from djbasen at once. If you delete the account, your profile disappears too, your information is anonymised at once, and you get a confirmation by email. The rest is deleted within the periods under "How long we keep data". If your email is blocked after a suspension or closure, the block still applies.
- restriction of the processing of your information.
- data portability: receiving your information in a machine-readable format. That is the JSON file under "Account".
- withdraw your consent at any time. You change statistics and videos and music under "Cookie settings" at the bottom of the page, and the welcome post under "Promotion" on your page. What we did before you withdrew your consent remains lawful.
Right to object. You always have the right to object to processing based on our legitimate interest, for example the recording of profile views, views in search and clicks on contact details. Write to us, and we stop processing your information unless we have compelling legitimate grounds to continue. If your browser sends Global Privacy Control (GPC), we don't count your profile views.
To use your rights, write to hej@djbasen.dk. We reply within one month.
We make no decisions about you based solely on automated processing. The order of search results is calculated automatically; it is described in the terms.
You can complain to the Danish Data Protection Agency (Datatilsynet), www.datatilsynet.dk.
Security
The connection to djbasen is encrypted (HTTPS). The database can't be reached directly from the internet, only through an encrypted connection via Cloudflare. Only a few people at djbasen have access to the admin area. You sign in without a password, with a link by email or with Google.
Changes
If we change this policy, it gets a new date and a new version number at the top of the page. For significant changes, we notify DJs who have an account by email before the changes take effect.
Contact
DJBasen ApS, CVR no. 40769994, Agern Allé 24, 2970 Hørsholm, Denmark. Email: hej@djbasen.dk.