Privacy Policy

Last updated: 4 November 2026

Thank you for visiting thegatesociety.com. Protecting your personal data matters to us. This policy explains what data we collect when you visit our website, contact us or work with us, why we collect it, and what rights you have. It applies to visitors from the European Union, Germany and every other country.

1. Who is responsible

The controller under the EU General Data Protection Regulation (GDPR) is:

The Gate Media & Entertainment
Owner: Gönenç Kaya (sole proprietorship)
Wedekindstraße 25, 10243 Berlin, Germany
Email: kaya@thegatesociety.com
Phone / WhatsApp: +49 178 436 5566

We are not required to appoint a data protection officer. For any privacy question, write to kaya@thegatesociety.com.

2. Overview

We process personal data only when it is needed to run this website, answer your request, prepare and carry out a booking, or when you have given your consent. We never sell your data.

Personal data is any information that identifies you, such as your name, email address, phone number, IP address or a photo of you.

3. Legal bases

We rely on the following legal bases of the GDPR:

  • Consent (Art. 6(1)(a) GDPR), for example for cookies that are not essential, the guest list or embedded content. You can withdraw your consent at any time with effect for the future.

  • Contract and pre-contractual steps (Art. 6(1)(b) GDPR), for example when you request an offer, book a shoot or a live show, or apply as an artist.

  • Legal obligations (Art. 6(1)(c) GDPR), for example tax and accounting rules that require us to keep invoices.

  • Legitimate interests (Art. 6(1)(f) GDPR), for example a secure, stable website and answering general messages.

For storing or reading information on your device (cookies and similar technologies), we also rely on § 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG): essential technologies need no consent, all others only with your consent.

4. Hosting

Our website is hosted by Squarespace. For users in the EU, the provider is Squarespace Ireland Limited, Dublin, Ireland; its parent company is Squarespace, Inc., New York, USA. When you visit our website, Squarespace processes your data on our behalf to deliver the pages, our forms and our image galleries.

We have a data processing agreement with Squarespace (Art. 28 GDPR). Data may also be transferred to the USA. Squarespace, Inc. is certified under the EU-U.S. Data Privacy Framework, and Squarespace also uses the EU Standard Contractual Clauses. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a reliable and secure website, and Art. 6(1)(a) GDPR where you have consented. More: squarespace.com/privacy.

5. Server log files

Each time you visit, the hosting provider automatically records technical data that your browser sends: IP address, date and time, the page you visited, the website you came from, browser type and version, operating system and device. We need this data to show the website correctly and to keep it secure, for example against attacks. It is not combined with other data. Legal basis: Art. 6(1)(f) GDPR. Log files are deleted by the host after a short period.

6. Cookies and consent

Our website uses cookies, small text files stored on your device.

  • Essential cookies are needed for the website to work, for example to remember your cookie choice or keep forms secure. They are set without consent (§ 25(2) TDDDG, Art. 6(1)(f) GDPR).

  • Analytics and marketing cookies and embedded content from other providers are only used if you agree in our cookie banner (§ 25(1) TDDDG, Art. 6(1)(a) GDPR).

You can change or withdraw your choice at any time using the cookie settings link at the bottom of every page. You can also block or delete cookies in your browser settings; some features may then not work fully.

7. Contact form, email, phone and WhatsApp

When you send us a request through our contact form, by email, phone or WhatsApp, we process the details you give us, such as your name, company, email address, phone number, event date, location and your message, to answer you and prepare an offer.

Legal basis: Art. 6(1)(b) GDPR if your request relates to a booking or a contract, otherwise Art. 6(1)(f) GDPR, our legitimate interest in answering messages. Form messages are sent to us by Squarespace and stored in our email inbox. We keep them as long as needed to handle your request and delete them when the purpose no longer applies, unless legal retention periods require us to keep them.

WhatsApp: if you contact us on WhatsApp, your messages are also processed by WhatsApp Ireland Limited, Dublin, Ireland, a company of Meta Platforms. Data may be transferred to the USA; Meta is certified under the EU-U.S. Data Privacy Framework. If you prefer, contact us by email or phone instead. More: whatsapp.com/legal/privacy-policy-eea.

8. Artist applications

When you apply to join our roster, we process the data you send us: name, stage name, email, phone, Instagram handle, city, style and the link to your performance video. We use it only to review your application and to contact you. Legal basis: Art. 6(1)(b) GDPR (steps before a possible contract) and your consent for anything beyond that (Art. 6(1)(a) GDPR). If we don't work together, we delete your application after 6 months at the latest, unless you agree that we keep it for future projects.

9. Guest list and newsletter

If you join our guest list, we use your first name, email address and (optional) Instagram handle to send you news about our events, early access to tickets and tables. Legal basis: your consent (Art. 6(1)(a) GDPR). We use the double opt-in procedure where available: you confirm your subscription by clicking a link in an email. You can unsubscribe at any time with the link in every email or by writing to us. Your data is then deleted from the list. Emails are sent with Squarespace Email Campaigns (see Hosting).

10. Embedded content: Instagram, YouTube and Vimeo

We show posts and videos from other platforms on our website. These are loaded only after you agree in our cookie banner. Once loaded, the provider receives your IP address and technical data and may set cookies. Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG).

  • Instagram: Meta Platforms Ireland Limited, Dublin, Ireland. Privacy policy

  • YouTube: Google Ireland Limited, Dublin, Ireland. We use YouTube's privacy-enhanced mode where possible. Privacy policy

  • Vimeo: Vimeo.com, Inc., New York, USA. Privacy policy

Data may be transferred to the USA. Meta, Google and Vimeo are certified under the EU-U.S. Data Privacy Framework.

We also link to our Instagram profile @thegatesociety. A simple link transfers no data until you click it.

11. Fonts

Our website uses fonts provided through Squarespace. They are delivered by Squarespace's servers as part of the hosting, so no separate connection to Google Fonts or Adobe is made from your browser by us. Legal basis: Art. 6(1)(f) GDPR, our interest in a consistent design.

12. Website statistics

We use Squarespace Analytics to understand how our website is used, for example which pages are visited and how visitors find us. Squarespace uses only the information needed for these statistics and, as far as cookies or similar technologies are involved, only with your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). We do not use the statistics to identify individual visitors.

13. Photos and videos at events and shoots

At the events we film and at shoots we produce, we take photos and videos in which people can be recognised.

  • Clients and booked artists: the use of photos and videos is agreed in our contract (Art. 6(1)(b) GDPR).

  • Guests at events: the event host is responsible for informing guests that filming takes place. We film in a discreet way and focus on the atmosphere and the stage.

  • Our portfolio, website and social media: we only show recognisable people when we have a contract or their consent, or when they appear as part of a public event or crowd (Art. 6(1)(a), (b) or (f) GDPR, together with §§ 22–23 of the German Art Copyright Act, KUG).

If you see yourself in our content and want it removed, write to kaya@thegatesociety.com and we will review it promptly.

14. Transfers outside the EU

Some of the providers named above are based in the USA or may process data there. We only use providers that guarantee an adequate level of protection, either through certification under the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR) or through the EU Standard Contractual Clauses (Art. 46 GDPR).

15. How long we keep your data

We keep personal data only as long as needed for the purpose it was collected for. Booking, invoice and accounting records are kept for up to 10 years because German tax and commercial law requires it (§ 147 AO, § 257 HGB). Messages without a booking are deleted when your request is complete. You can ask us to delete your data at any time, unless we are legally required to keep it.

16. Your rights

You have the right to:

  • Access the personal data we hold about you (Art. 15 GDPR)

  • Correct inaccurate data (Art. 16 GDPR)

  • Delete your data (Art. 17 GDPR)

  • Restrict how we process it (Art. 18 GDPR)

  • Receive your data in a common, machine-readable format (Art. 20 GDPR)

  • Withdraw your consent at any time, with effect for the future (Art. 7(3) GDPR)

  • Object to processing based on legitimate interests (Art. 21 GDPR)

Right to object: if we process your data on the basis of Art. 6(1)(f) GDPR, you can object at any time for reasons arising from your particular situation. You can always object to the use of your data for direct marketing, without giving a reason.

To use any of these rights, write to kaya@thegatesociety.com. We reply within one month.

17. Right to complain

You can complain to a data protection supervisory authority, in particular in the EU country where you live or work. Our competent authority is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61, 10555 Berlin, Germany
datenschutz-berlin.de

18. Security

Our website uses SSL/TLS encryption, recognisable by "https://" and the lock symbol in your browser. We protect your data with appropriate technical and organisational measures. Please note that data sent over the internet, for example by email, can never be completely secure.

19. Visitors and clients outside the EU

We apply the GDPR standard to everyone, wherever you live. In addition:

  • United Kingdom: we process your data in line with the UK GDPR and the Data Protection Act 2018. You have the same rights as listed above and can complain to the Information Commissioner's Office (ico.org.uk).

  • Switzerland: we process your data in line with the Swiss Federal Act on Data Protection (FADP). You can contact the Federal Data Protection and Information Commissioner (FDPIC).

  • USA, including California: we do not sell or share your personal information for cross-context behavioural advertising. You can ask us what personal information we hold about you, ask us to correct or delete it, and you will not be treated differently for using these rights.

  • Other countries: you can use the rights listed in section 16 regardless of where you live. Where your local law gives you additional rights, we will respect them.

If we work with you on an event outside the EU, we only share the data needed for that event with local partners (for example the venue), and only under appropriate safeguards.

20. Children

Our services are aimed at adults. We do not knowingly collect personal data from children under 16 without the consent of a parent or guardian. Artists under 18 can only apply with the consent of a parent or guardian.

21. Changes to this policy

We may update this policy when our services or the law change. The current version is always available on this page, with the date it was last updated.

22. Contact

Questions about your data? Write to us at kaya@thegatesociety.com, call +49 178 436 5566 or send a letter to The Gate Media & Entertainment, Wedekindstraße 25, 10243 Berlin, Germany.