Privacy Policy

Last updated: 26/10/2026

Thank you for visiting tequilla11.com, the official website of the independent music artist tequilla11. This Privacy Policy explains what personal data is processed when you visit this website or get in touch with us, why it is processed, on which legal basis, how long it is kept and which rights you have.

This policy is designed to meet the requirements of the EU General Data Protection Regulation (GDPR), the national rules on cookies and similar technologies that implement Art. 5(3) of the ePrivacy Directive (in particular the Закон за електронните съобщения and the German Telecommunications Digital Services Data Protection Act, TDDDG), the UK GDPR, the Swiss Federal Act on Data Protection (FADP) and, where applicable, US state privacy laws such as the California Consumer Privacy Act as amended by the CPRA (CCPA).

1. Privacy at a Glance

  • You can browse this website without creating an account and without telling us who you are.
  • We do not sell your personal data, and we do not use it for advertising profiles.
  • No analytics or advertising tools are used on this website.
  • Optional cookies and third-party content (such as YouTube videos) are only loaded after you consent through the cookie banner. You can change your choice at any time.
  • If you write to us, we use your details only to answer you.

2. Who Is Responsible for Your Data (Controller)

tequilla11.com is operated by 365уебит ЕООД. The controller responsible for the processing of personal data on this website within the meaning of the GDPR is:

365уебит ЕООД
бул. „Сливница“ 56
9000 Варна, България
ЕИК / UIC: 208922152
Управител / Managing Director: Томас Машлер
Email: privacy@tequilla11.com

For any question about data protection or to exercise your rights, simply write to the email address above. We are not legally required to appoint a data protection officer and have not appointed one.

3. Hosting and Server Log Files

This website is hosted by PowerHost.bg (the “host”). Whenever you visit the website, your browser automatically sends information that the host stores in server log files:

  • IP address of the requesting device
  • Date and time of the request
  • Page or file requested and the amount of data transferred
  • Referrer URL (the page you came from)
  • Browser type and version, operating system
  • HTTP status code

Purpose: to deliver the website, keep it stable and secure, and detect and defend against attacks and misuse.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website.
Retention: log files are deleted after 14 days at the latest, unless a specific security incident requires longer storage for investigation.

The host processes data on our behalf under a data processing agreement in accordance with Art. 28 GDPR. The website’s data is stored on servers located in Germany.

4. Security, Encryption and Backups

This website uses SSL/TLS encryption to protect the data you send, such as contact form messages. You can recognise an encrypted connection by “https://” and the padlock symbol in your browser’s address bar.

Login protection: to protect the website against brute-force attacks, the security plugin Loginizer records the IP address, time and username of failed log-in attempts to the administration area and can temporarily block IP addresses after repeated failures. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest being the security of the website. These records are only kept as long as necessary for security purposes and are deleted regularly.

Backups: regular backups of the website are made with the plugin Backuply to prevent data loss. Backups may contain personal data stored on the website, such as blog comments. They are kept in protected storage that only we can access and are deleted on a rolling basis. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest being the availability and integrity of the website.

5. Cookies and Consent Management

Cookies are small text files stored on your device. Some are strictly necessary for the website to work. Others, and any technology that reads or stores information on your device for non-essential purposes, are only used with your prior consent.

Strictly necessary cookies

These cookies store, for example, your cookie preferences and enable secure log-in for site administrators. They do not require consent.
Legal basis: the exemption for strictly necessary storage under Art. 5(3) of the ePrivacy Directive as implemented in national law (including § 25(2) no. 2 TDDDG) for storage on your device, and Art. 6(1)(f) GDPR for any resulting processing of personal data. Our legitimate interest is a working website and the ability to document your consent choices.

Optional cookies and third-party content

Functional, analytical and advertising cookies, as well as embedded content from third parties, are only activated if you consent.
Legal basis: your consent under Art. 5(3) of the ePrivacy Directive as implemented in national law (including § 25(1) TDDDG) and Art. 6(1)(a) GDPR.

Cookie banner (CookieAdmin)

We use the WordPress plugin CookieAdmin to obtain and manage your consent. The plugin runs on this website’s own server. It stores your choice in a cookie on your device so that the banner does not appear on every page, and it keeps a consent log on our server to be able to prove your choice. No consent data is sent to the plugin provider.
Retention: the consent cookie and the consent log are kept for 12 months, after which you are asked again.

Changing or withdrawing your consent: you can change your cookie settings or withdraw your consent at any time with effect for the future via the “Cookie Settings” link at the bottom of every page. You can also delete or block cookies in your browser settings, but some features of the website may then not work properly.

6. Contact Form and Email

When you contact us through the contact form or by email, we process the data you provide, such as your name, email address and the content of your message, in order to answer your request and handle any follow-up questions.

Legal basis: Art. 6(1)(b) GDPR if your request relates to a contract or to steps prior to entering into a contract (for example a booking or music licensing enquiry). In all other cases, Art. 6(1)(f) GDPR, based on our legitimate interest in responding to messages we receive.
Retention: we delete your enquiry once it has been fully dealt with, at the latest 12 months after our last exchange, unless statutory retention obligations (for example under commercial or tax law) require us to keep it longer.

The contact form is provided by the WordPress plugin WPForms Lite, which runs on this website’s own server. Messages are not stored in the website’s database. They are sent by email to our company mailbox. Please do not send sensitive personal data (such as health information) through the contact form or by email.

[OPTIONAL: keep this paragraph only if form data is passed to Make] To organise enquiries, form submissions may be passed to the automation service Make, operated by Celonis s.r.o., {{MAKE_OPERATOR_ADDRESS}}, which processes the data on our behalf under a data processing agreement (Art. 28 GDPR). Data is hosted in {{MAKE_DATA_REGION}}.

7. Blog Comments

If you leave a comment on the blog, your comment, the name you entered, your email address (not published), the time of the comment and your IP address are stored. This helps us to identify and act against abuse, such as spam or unlawful content. Comments are reviewed before they are published.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is offering a comment function and protecting it against misuse. Publishing the comment is based on your request (Art. 6(1)(b) GDPR).
Retention: comments and the related data stay stored until you ask us to delete them or until the comment or the article is removed.

[OPTIONAL: keep this paragraph only while Gravatar avatars stay enabled] This website shows profile pictures via the Gravatar service of Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. When a page with a Gravatar image is loaded, your IP address is transmitted to Automattic. If you comment, an encrypted (hashed) version of your email address is sent to Gravatar to check whether you have a profile picture. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest being an attractive presentation of comments. Automattic is certified under the EU-US Data Privacy Framework. Gravatar privacy policy: https://automattic.com/privacy/.

8. YouTube Videos

This website shows videos from the tequilla11 YouTube channel, both embedded in blog posts and in video galleries and feeds (provided by the WordPress plugins Automatic YouTube Gallery and SocialFeeds). YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Videos, and their preview images, are only loaded from YouTube after you consent to the “Functional” category in the cookie banner. Before that, no connection to YouTube is established. Once a video is loaded, your IP address and technical information about your device are transmitted to Google, and Google may set cookies or use similar technologies on your device. If you are logged in to your Google account, YouTube can associate your viewing behaviour with your profile. To avoid this, log out before playing a video. Where possible, videos are embedded in YouTube’s privacy-enhanced mode (youtube-nocookie.com).

Legal basis: your consent under Art. 5(3) of the ePrivacy Directive as implemented in national law (including § 25(1) TDDDG) and Art. 6(1)(a) GDPR. You can withdraw your consent at any time via the cookie settings.
Google may also process data in the United States. Google LLC is certified under the EU-US Data Privacy Framework. More information: https://policies.google.com/privacy.

9. Links to Streaming Platforms and Social Networks

This website contains ordinary links to music and social platforms, such as Spotify, Apple Music, Amazon Music, Tidal, SoundCloud, Audiomack, YouTube, Instagram, TikTok, Facebook, X, Linktree and DistroKid HyperFollow. The share buttons below blog posts are also simple links. No data is sent to these platforms just because you visit this website. Data is only transferred when you click a link and are taken to the platform, where its own privacy policy applies.

tequilla11 also has artist profiles on these platforms. When you interact with tequilla11 there (for example by following, liking or commenting), the respective platform is responsible for its processing. Where a platform and we are joint controllers under Art. 26 GDPR (for example for page statistics on Facebook and Instagram, operated by Meta Platforms Ireland Limited), you can exercise your rights with either party.

10. Custom Music and Licensing Requests

The “Order now” buttons for custom songs and business music lead to music.365webit.com, which is also operated by 365уебит ЕООД. The privacy policy published on that website applies to the data you enter there.

11. Language Selection

The language switcher on this website is provided by the WordPress plugin TranslatePress, which runs on this website’s own server. Your language choice may be stored in your browser so that pages are shown in the language you selected. No data is sent to third parties for this purpose. Legal basis: the exemption for strictly necessary storage (including § 25(2) no. 2 TDDDG) and Art. 6(1)(f) GDPR, based on our legitimate interest in showing the website in your preferred language.

12. Analytics and Advertising

This website does not use any analytics, tracking or advertising tools. If this changes, we will only activate them with your prior consent and will update this Privacy Policy first.

13. Who Receives Your Data

Your data is only shared where this is necessary for the purposes described above, required by law, or based on your consent. Recipients may include:

  • our hosting and email provider (as processors bound by data processing agreements);
  • third-party services you choose to use through this website, such as YouTube after your consent;
  • public authorities, where we are legally obliged to disclose data.

We do not sell or rent your personal data to anyone.

14. International Data Transfers

Some of the services named above are based in, or may process data in, countries outside the European Economic Area (EEA), in particular the United States. Such transfers only take place where an adequate level of protection is ensured, for example through an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework for certified companies) or through standard contractual clauses approved by the European Commission (Art. 46(2)(c) GDPR). You can request a copy of the relevant safeguards by contacting us.

15. How Long Data Is Kept

Unless a more specific period is stated in this policy, we keep personal data only for as long as it is needed for the purpose for which it was collected. Data is then deleted, unless statutory retention obligations require us to keep it longer. In that case, its processing is restricted to that purpose.

16. Your Rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you (Art. 15 GDPR);
  • Rectification of inaccurate or incomplete data (Art. 16 GDPR);
  • Erasure of your data (Art. 17 GDPR);
  • Restriction of processing (Art. 18 GDPR);
  • Data portability, meaning to receive your data in a structured, commonly used and machine-readable format (Art. 20 GDPR);
  • Withdraw your consent at any time with effect for the future (Art. 7(3) GDPR);
  • Object to processing, as explained below (Art. 21 GDPR).

To exercise any of these rights, write to privacy@tequilla11.com. We will respond within one month. We may ask you to verify your identity before acting on your request.

Right to object

Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time, on grounds relating to your particular situation. We will then stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. If your data is processed for direct marketing, you can object at any time without giving reasons, and your data will no longer be used for that purpose.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU or EEA member state of your habitual residence, your place of work or the place of the alleged infringement. The supervisory authority responsible for us is the Commission for Personal Data Protection (Комисия за защита на личните данни), бул. „Проф. Цветан Лазаров“ № 2, 1592 София, България, https://www.cpdp.bg. We would appreciate the chance to address your concerns first, so please feel free to contact us directly.

17. Is Providing Data Required?

You are not legally or contractually obliged to provide personal data. However, the website cannot be delivered without the technical data described in Section 3, and we cannot answer your message without a way to reach you.

18. No Automated Decision-Making

We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you (Art. 22 GDPR).

19. Children

This website is intended for a general audience and is not directed at children. We do not knowingly collect personal data from children under 16. The contact form and comment function are only for persons aged 16 or older. If you believe a child has provided us with personal data, please contact us and we will delete it.

20. Visitors from the United Kingdom

If you are in the United Kingdom, the UK GDPR and the Data Protection Act 2018 apply. You have the same rights as described in Section 16. You can also lodge a complaint with the Information Commissioner’s Office (ICO), https://ico.org.uk.

21. Visitors from Switzerland

If you are in Switzerland, the Swiss Federal Act on Data Protection (FADP) applies. You have comparable rights, and you can contact the Federal Data Protection and Information Commissioner (FDPIC), https://www.edoeb.admin.ch.

22. Visitors from the United States (including California)

We are a small company and do not meet the thresholds that make the CCPA or other US state privacy laws applicable. Nevertheless, we want to be transparent:

  • Categories of personal information collected in the last 12 months: identifiers (such as name, email address and IP address) and internet activity information (such as server log data), from you directly or from your device, for the purposes described in this policy.
  • No sale or sharing: we do not sell your personal information and do not share it for cross-context behavioural advertising. We do not use or disclose sensitive personal information.
  • Your choices: you can ask to know, access, correct or delete your personal information by writing to privacy@tequilla11.com. You will not be discriminated against for exercising your rights.
  • Do Not Track and Global Privacy Control: because we do not track visitors across websites or sell or share personal information, there is no tracking to switch off. Optional cookies are only set after you consent in the cookie banner.

23. Visitors from Other Countries

We apply the protections described in this policy to all visitors, wherever they are. If the data protection law of your country (for example Canada’s PIPEDA or Brazil’s LGPD) gives you additional rights, you can exercise them by contacting us.

24. Changes to This Privacy Policy

We may update this Privacy Policy when the website, its features or the law change. The current version is always available on this page, and the date at the top shows when it was last updated.