Skip to content
Altstadt • Mon-Fri 10-20, Sat 11-18
0662 83 60 37 • By Appointment Only

Data Processing Agreement (DPA)

The legally binding version is the German version available at AVV

Summary for our B2B Partners:

  • We process your audio data strictly according to your documented instructions.
  • Your data is stored securely and archived or deleted after 24 months.
  • We utilize trusted subcontractors including World4You and FormSubmit.
  • You maintain full control over your personal data and master recordings.

1. Subject Matter and Roles

This agreement governs the cooperation between the Client (Controller) and Barecatyra GmbH (Processor), located at Getreidegasse 142, 5020 Salzburg, represented by Managing Director Verena Winkler (Share Capital: 20,000 €). This document is based on the General Data Protection Regulation (GDPR/DSGVO) and the Austrian Data Protection Act (DSG).

The Controller appoints Barecatyra GmbH to process personal data in the context of studio services, including but not limited to vocal recording, mixing, and mastering.

2. Nature and Purpose of Processing

Processing activities include the creation, editing, and storage of audio files, contact information, and project-related data. The purpose is the delivery of the studio services agreed upon in the service contract. Data subjects typically include musicians, voice actors, or employees of the Client.

For further details regarding general data usage, please refer to our Privacy Policy.

3. Obligations of the Processor

Barecatyra GmbH undertakes to process personal data exclusively on the basis of documented instructions from the Controller. All involved staff members (including Julia Mayer, Elisabeth Huber, and Martin Eder) are bound by strict confidentiality agreements.

We provide necessary assistance to the Controller in responding to data subject requests and in reporting data breaches to the competent supervisory authority.

4. Sub-processors

To fulfill the agreed services, Barecatyra GmbH employs the following sub-processors:

  • World4You Internet Services GmbH (Wolfgang-Pauli-Straße 2, BT3, 4020 Linz) for the hosting of project data.
  • FormSubmit (USA) for the transmission of initial contact inquiries.

We ensure that these service providers adhere to the same data protection standards established in this agreement.

5. Data Security and Confidentiality

We implement appropriate technical and organizational measures (TOM) to protect data against unauthorized access. This includes encrypted backups and strict access controls within the studio infrastructure.

In the event of a data breach, the Client will be informed without undue delay. The competent supervisory authority is the Austrian Data Protection Authority (DSB, Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at).

6. Deletion and Return of Data

Upon termination of the cooperation, data will be returned or deleted at the request of the Client. In accordance with our business rules, we maintain project archives for a period of 24 months, unless other statutory retention obligations apply.

Further conditions regarding project handling can be found in our Terms (Section 3).

7. Liability and Final Provisions

Liability is governed by the statutory provisions of the Republic of Austria. The place of jurisdiction for all disputes arising from this contract is Salzburg.

Amendments to this agreement must be made in writing. This DPA supplements the general privacy provisions and the Disclaimer.

Updated on: 13 October 2026

For inquiries, please contact us at: [email protected] or by phone at 0662 83 60 37.