Official sources support the profile
Search may reveal a provider, but names, services, locations and contact routes are checked against the provider's website or official professional channels.
DATA / RIGHTS Sources, corrections and privacy
What Forge publishes.
What Forge leaves out.
Forge lists limited professional information from official public sources and provider-confirmed updates. We do not contact researched providers. This page explains what appears in a profile and how to claim, correct, restrict or remove it.
Not published means unknown
If a provider does not publish pricing, territory or availability, Forge does not guess and does not turn the missing information into a negative claim.
You can correct or remove a profile
Providers can claim, correct, restrict or object to a profile. A removal is recorded so later research does not recreate the listing.
Is a profile wrong or out of date?
Send the profile link and tell us what should be corrected, restricted or removed.
DATA USE Profile policy
How provider profiles are researched and published
Forge publishes limited, useful professional facts only when a profile passes its source, data-use, rights, scope and suppression controls. Personal-data classification is assessed as a risk signal; the information actually displayed remains deliberately limited to professional and public-business facts.
Your right to object
You may object to processing based on legitimate interests at any time for reasons relating to your situation. You can also request access, correction, deletion or restriction. Contact kontakt@niflheimrecords.de. We record removals and suppressions so a removed profile is not silently recreated.
Controller
Niflheim Records
Luis Alfredo Godoy Alvarez
Stabiusstr. 11
90489 Nuremberg, Germany
Email: kontakt@niflheimrecords.de
Purposes and legal bases
We organise accurate professional information so bands and other music-sector users can find suitable services, understand what they offer and reach the provider’s official contact route. Researched public professional data is processed on the basis of legitimate interests under Article 6(1)(f) GDPR. The interests are an accurate, useful directory and fair representation of providers; safeguards include official-source verification, data minimisation, visible uncertainty, correction and objection routes, suppression controls and no sale of profile data.
Information a provider submits while claiming or managing a profile may also be processed to take steps at the provider’s request or perform the service under Article 6(1)(b) GDPR. Legal record-keeping may rely on Article 6(1)(c).
Data categories
- Professional or business name, entity type and public legal name where relevant.
- Professional location and service area.
- Services, facilities, public pricing or operational details.
- Official website, public business email, telephone or contact form.
- Official professional links, claim status and provider-confirmed updates.
- Source, verification date, evidence level and unresolved fields.
Forge does not intentionally publish private contact details, sensitive personal data, private addresses or inferred facts. Missing information stays unknown.
Sources
Profiles are discovered through search and directory research, then verified against provider-controlled websites, official professional social channels, public registries where relevant, provider submissions or direct confirmation. Each important researched fact keeps its source and review date.
Who receives the data
Only allowlisted profile fields that pass the publication gates are intended for public directory visitors. Necessary data may also be processed by contracted database, hosting, content-delivery, authentication and email providers acting for Forge. We do not sell profile data or provide marketing lists.
The operational database is hosted in the EU. Where a technical provider processes data outside the EEA, we use an applicable adequacy decision or contractual safeguards as required.
Retention
Active profile information is retained while the provider remains relevant to the directory and is periodically checked against official sources. Unreachable or outdated profiles are held or archived rather than presented as current. Claim and privacy-request records are retained as needed to document the action and normally for up to three years after closure. Minimal suppression identifiers may be retained while Forge operates so removed profiles are not recreated.
Your rights
Subject to the legal conditions, you may request access (Article 15), correction (Article 16), deletion (Article 17), restriction (Article 18), portability where applicable (Article 20), or object to legitimate-interest processing (Article 21). Requests are free of charge. We may ask for proportionate information to verify that the request concerns you or an organisation you represent.
Complaints and automated decisions
Forge does not make solely automated decisions that produce legal or similarly significant effects about listed people. You may lodge a complaint with a data protection authority. Our lead authority is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
Contact and profile control
Forge does not send marketing or permission requests to researched providers. Providers may approach Forge to claim, add, correct, restrict or remove a profile. A claim attaches provider control to the existing canonical profile and does not create a duplicate.
Profile policy version: 1.2 · 8 August 2026. The separate Niflheim Records shop privacy policy remains available at niflheimrecords.de.