Extreme Metal Tributes

Legal

Imprint

Extreme Metal Tributes is not a registered company or other legal entity. The site is a network connecting venues and festivals with independent tribute acts, operated by: Blood Fire Death GbR Represented by: Paul Oesterwitz Rheinaustrasse 10 68163 Mannheim, Germany Email: booking@bloodfiredeath.de Extreme Metal Tributes does not represent, manage, or act as booking agent for any band on this roster. Each band maintains its own listing directly and is solely responsible for its content. Booking terms, contracts, and performance obligations are agreed exclusively between the venue and the band — Extreme Metal Tributes is not a party to that agreement and accepts no liability for its outcome. Band profiles, biographies, contact details, and documents are submitted and maintained by each band through its own account and are not independently verified. We review submissions for plausibility but cannot guarantee their accuracy or completeness; contact us above to report anything incorrect or outdated. Links to third-party sites (band homepages, social media, video platforms) are checked when added; responsibility for their content rests with their own operators. We will remove a link promptly if we become aware it points to unlawful content.

Privacy Policy

Controller Blood Fire Death GbR, Rheinaustrasse 10, 68163 Mannheim, booking@bloodfiredeath.de — see Imprint above. Hosting Visiting this site causes technical data (IP address, timestamp, browser type, referring page) to be logged temporarily by our hosting provider to keep the site secure and operational. This happens automatically for every visit and is deleted after a short retention period. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, functioning website). Booking requests Selecting bands and clicking “Send Request” does not submit any data to our servers. It opens your own email application with a pre-filled message addressed directly to the selected band(s)' own email address. That message is sent from your own mail account straight to the band; Extreme Metal Tributes never receives, stores, or has access to it. Language Your browser tells every website it visits which languages you prefer, and this site reads that to choose between English and German. That happens on our server, because the page is rendered there. Your choice is then remembered in a cookie named NEXT_LOCALE so the site does not keep guessing. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in showing the site in a language you can read). Band area The band area is at /login and is reachable only by invitation. What is stored for an account is described under Band accounts below. Cookies This site sets two cookies and no others. NEXT_LOCALE remembers whether you are reading in German or English. If you sign in to the band area, a session cookie keeps you signed in; it is removed when you sign out and expires by itself. Neither is used to recognise you across sites or devices. No tracking or analytics There are no analytics, no advertising, and no third-party scripts, fonts or embeds. Fonts are served from this site's own server. Nothing about your visit is sent to anyone else. Your rights You have the right to access, correct, or erase your data, to restrict or object to its processing, and to data portability, under Art. 15–21 GDPR. You may also lodge a complaint with your local data protection supervisory authority (Art. 77 GDPR). To exercise any of these rights, contact us using the details above.

Band accounts

Members of the bands on this roster have accounts so they can maintain their own page. For those accounts we store: the email address the invitation was sent to, a display name, a one-way hash of the password, the settings for the second factor (an encrypted authenticator secret, or the public key of a passkey), and a record of sign-ins and changes made. That record exists so a band can see who changed their page and when, and so an attempted break-in leaves a trace. It is kept for one year and then deleted. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in an account area that can be secured and audited). Photos and documents a band uploads are stored on our own server and served from it. Deleted files are removed permanently after seven days. There is no analytics, no tracking and no advertising on this site. When anyone, member or not, tries to sign in or opens an invitation link, that attempt is recorded with the time, the address the request came from, a one-way hash of the browser identification, and what was attempted. This is what makes an attempted break-in visible. It is kept for one year and then deleted automatically. If outgoing mail is configured, invitation and password-reset messages pass through that mail provider. Nothing else leaves this server. Every save keeps a version of the band's own page so a mistake can be undone; those versions contain the band's own contact details and are removed when the band is deleted.