The controller responsible for the processing of personal data in connection with the website and online learning platform "Master The Score" (https://www.masterthescore.com and https://app.masterthescore.com, hereinafter "MTS" or the "Platform") within the meaning of Art 4 (7) of the EU General Data Protection Regulation (GDPR) is:
Mr. Nikolaus Daim
Owner of the sole proprietorship "Master The Score"
Speckbachergasse 22/54, A-1160 Vienna, Austria
E-mail: info@masterthescore.com
MTS is an online learning platform offering online courses, in particular for composition, orchestration, production, mixing and/or mastering, aimed at film, TV, game and trailer composers. The booking of and participation in courses is based on an agreement concluded online between the Operator (with the purchase transaction processed by our reseller FastSpring, see section 6.4) and the participant.
This Privacy Policy informs natural persons whose personal data is processed by MTS ("data subjects" or "you") about the processing of their personal data when visiting the website, creating an account, purchasing and participating in courses, and receiving our communications.
"Personal data" is any information relating to an identified or identifiable natural person (Art 4 (1) GDPR). "Processing" encompasses, for example, the collection, recording, organization, storage, adaptation, retrieval, use, disclosure, restriction, erasure or destruction of data (Art 4 (2) GDPR).
We process personal data for the following purposes:
5.1. Account and course data. When you create a user account and use the Platform, we process: name, e-mail address, password (stored only in cryptographically hashed form), IP addresses of sign-ins, course enrollments and your learning progress (e.g. which lessons you have marked as complete). Legal basis: Art 6 (1) (b) GDPR.
5.2. Purchase data. Purchases are processed by our reseller FastSpring (see section 6.4). In this context, we receive from FastSpring, in particular: name, e-mail address, billing country, purchased product, order number and payment status. We do not receive or store your full payment details (e.g. credit card numbers); these are processed exclusively by FastSpring and its payment processors. Legal basis: Art 6 (1) (b) and (c) GDPR.
5.3. Communication data. When you contact us (e.g. by e-mail), we process the data you provide in order to handle your request. Legal basis: Art 6 (1) (b) and (f) GDPR.
5.4. Usage and cookie data. When you visit the website, technically necessary data (e.g. IP address, browser type, requested pages) is processed to deliver the website securely. Optional cookies and tracking technologies (statistics, marketing) are only used with your consent via the cookie banner; you can change or withdraw your consent at any time via the cookie settings on the website. Legal bases: Art 6 (1) (f) GDPR (technically necessary) and Art 6 (1) (a) GDPR (all other cookies).
Please be aware that we do not use automated decision-making, including profiling, within the meaning of Art 22 GDPR.
We use carefully selected service providers to operate MTS. Where these providers process personal data on our behalf, they act as processors within the meaning of Art 4 (8) GDPR on the basis of data processing agreements pursuant to Art 28 GDPR. We may engage additional or other service providers at any time (for example when changing hosting, video streaming, authentication or e-mail providers); in that case, personal data may be transferred to the new provider to the extent necessary to continue providing our services, subject to the same safeguards described in this section, and this Privacy Policy will be updated accordingly. Where personal data is transferred to countries outside the EU/EEA, we ensure an adequate level of data protection, in particular through adequacy decisions of the EU Commission — including certification of the recipient under the EU-U.S. Data Privacy Framework (Art 45 GDPR) — and/or the EU standard contractual clauses pursuant to Commission Implementing Decision (EU) 2021/914 (Art 46 (2) (c) GDPR). Copies of the relevant safeguards are available on request.
6.1. Webflow (website hosting). Our website is hosted by Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA. Webflow processes technical connection data (e.g. IP addresses, log data) required to deliver the website. Webflow is certified under the EU-U.S. Data Privacy Framework. Details: https://webflow.com/legal/privacy
6.2. Supabase (user accounts and course progress). For authentication, user accounts and course progress we use Supabase (Supabase, Inc.) which is located in Singapore. We signed standard contractual clauses pursuant Art 46 (2) (c) GDPR with Supabase, Inc. Your account data described in section 5.1 is hosted on cloud infrastructure within the European Union (AWS region eu-central-1, Frankfurt, Germany). To the extent that support or maintenance access from outside the EU/EEA occurs, such access is safeguarded by standard contractual clauses. Details: https://supabase.com/privacy
6.3. BunnyWay d.o.o. (video streaming and content delivery). Course videos are streamed via bunny.net, a service of BunnyWay d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia (EU). When you play course videos, bunny.net processes technical connection data (e.g. IP address, device/browser information) required to deliver the video stream and to protect the content against abuse. Details: https://bunny.net/privacy
6.4. FastSpring (payments and reselling). Purchases on MTS are processed by Bright Market, LLC d/b/a FastSpring, 801 Garden Street, Suite 201, Santa Barbara, CA 93101, USA, acting as payment provider and digital reseller (merchant of record). FastSpring processes the personal data required for the purchase (name, e-mail and billing address, payment details, order data) as an independent controller for the purchase transaction. FastSpring is certified under the EU-U.S. Data Privacy Framework. Details: https://fastspring.com/privacy/
6.5. Mailchimp (e-mail marketing). For newsletters and course-related e-mail communication we use Mailchimp, a service of Intuit Inc. (The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA). For this purpose, we share your e-mail address and name with Mailchimp. Mailchimp also collects device and usage data relating to our e-mails (e.g. whether and when an e-mail was opened) using tracking technologies. Newsletters are sent only with your consent (Art 6 (1) (a) GDPR), which you can withdraw at any time via the unsubscribe link contained in every newsletter. Intuit/Mailchimp is certified under the EU-U.S. Data Privacy Framework. Details: https://www.intuit.com/privacy/statement/ and https://mailchimp.com/legal/
6.6. Google Fonts, Google Analytics and Google Ads (statistics and advertising). With your consent, we use Google Analytics and Google Ads, services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies to analyze the use of our website (including shortened/anonymized IP addresses and the URLs of pages accessed); Google Ads enables us to display ads and measure their effectiveness (conversion tracking). We do not store the raw data collected by Google. Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework. Legal basis: Art 6 (1) (a) GDPR (consent via the cookie banner, revocable at any time). Details: https://policies.google.com/privacy
6.7. Meta Pixel / Facebook and Instagram Ads (advertising). With your consent, we use the Meta Pixel, a Meta Business Tool provided by Meta Platforms Ireland Ltd, Merrion Road, Dublin 4, D04 X2K5, Ireland ("Meta"). The Meta Pixel enables us to measure the effectiveness of our Facebook and Instagram advertising campaigns, create advertising audiences, display interest-based advertisements on Meta platforms and recognize whether users have reached our website via a Meta advertisement or have performed certain actions on our website, such as viewing pages or purchasing courses. For these purposes, information about your use of our website, including technical identifiers, IP address, browser and device information, visited pages, time of access, referrer URL and conversion events, may be transmitted to Meta. If you are logged into a Facebook or Instagram account, Meta may associate this information with your account and use it for its own advertising and analytics purposes. We use the Meta Pixel only after you have given your consent via the cookie banner; you may withdraw your consent at any time via the cookie settings on the website. Legal basis: Art 6 (1) (a) GDPR. Where we and Meta jointly determine the purposes and means of the collection and transmission of event data through Meta Business Tools, we are joint controllers with Meta within the meaning of Art 26 GDPR. The essential terms of the joint controllership arrangement are set out in Meta's Controller Addendum for Business Tools. According to this arrangement, we are responsible in particular for providing transparent information and obtaining any required consent for the use of the Meta Pixel on our website, while Meta is responsible for enabling data subjects to exercise their rights in relation to Meta's subsequent processing of the transmitted data. You may nevertheless exercise your rights both against us and against Meta. Data may be transferred to Meta Platforms, Inc. in the USA; Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework. Further information is available at https://www.facebook.com/privacy/policy and in Meta's Business Tools terms.
6.8. Zapier (workflow automation). We use Zapier, a web application integration service of Zapier Inc., 243 Buena Vista Ave #508, Sunnyvale, CA 94086, USA, to connect and automate individual functions of our service providers, in particular to synchronize purchase events from FastSpring with our e-mail lists (Mailchimp) and our platform. For this purpose, name, e-mail address and purchase information may be processed by Zapier on our behalf. Data may be transferred to the USA; such transfers are safeguarded by the mechanisms described in the introduction to this section 6. Zapier, Inc. is certified under the EU-U.S. Data Privacy Framework. Details: https://zapier.com/privacy
6.9. Resend (transactional e-mail delivery). Account-related e-mails of the Platform (e.g. sign-up confirmations, password reset and other authentication e-mails) are delivered via Resend, San Francisco, CA 94114, USA. For this purpose, Resend processes the recipient's e-mail address and the content of the respective e-mail on our behalf. Data may be transferred to the USA; Resend is certified under the EU-U.S. Data Privacy Framework. Details: https://resend.com/legal/privacy-policy
6.10. Advisors and authorities. Where necessary, personal data may be disclosed to professional advisors bound by confidentiality (Dr. Tobias Tretzmüller Rechtsanwalts GmbH) for the establishment, exercise or defense of legal claims, and to courts or law enforcement authorities in the case of unlawful use of MTS (including piracy of course content). Legal basis: Art 6 (1) (c) and (f) GDPR.
Beyond the above, personal data is disclosed only to persons who are contractually bound to confidentiality, and only to the extent necessary.
Our website uses a consent management tool (cookie banner) through which you can accept, reject or individually configure the use of non-essential cookies at any time. Essential cookies (e.g. cookie consent storage, purchase functionality) are used on the basis of our legitimate interest in a functional website (Art 6 (1) (f) GDPR); all statistics and marketing cookies are used only with your consent (Art 6 (1) (a) GDPR). You can change your selection at any time via the cookie settings link on the website. An up-to-date list of the cookies used, their providers and storage periods can be found in the cookie settings.
We store personal data only for as long as necessary for the respective purpose:
All communication with the Platform and its database servers is encrypted in transit (TLS). Passwords are stored exclusively in hashed form. We maintain a record of processing activities pursuant to Art 30 GDPR and implement appropriate technical and organizational measures pursuant to Art 32 GDPR, and we oblige our processors to do the same.
You have the following rights under the GDPR:
To exercise any of these rights, or if you have questions regarding the processing of your personal data, please contact:
"Master The Score"
Owner: Mr. Nikolaus Daim
Speckbachergasse 22/54, A-1160 Vienna, Austria
info@masterthescore.com
We may update this Privacy Policy from time to time, in particular when our services or the legal situation change. The current version is always available at https://www.masterthescore.com/privacy-policy.
Vienna, August 2026
Online education for media composers — orchestral writing, trailer music, mixing and more, taught by working professionals.
