The controller responsible for the processing of personal data in connection with the website and online learning platform "Master The Score" (https://www.masterthescore.com and https://app.masterthescore.com, hereinafter "MTS" or the "Platform") within the meaning of Art 4 (7) of the EU General Data Protection Regulation (GDPR) is:
Mr. Nikolaus Daim
Owner of the sole proprietorship "Master The Score"
Speckbachergasse 22/54, A-1160 Vienna, Austria
E-mail: info@masterthescore.com
MTS is an online learning platform offering online courses, in particular for composition, orchestration, production, mixing and/or mastering, aimed at film, TV, game and trailer composers. The booking of and participation in courses is based on an agreement concluded online between the Operator (with the purchase transaction processed by our reseller FastSpring, see section 6.4) and the participant.
This Privacy Policy informs natural persons whose personal data is processed by MTS ("data subjects" or "you") about the processing of their personal data when visiting the website, creating an account, purchasing and participating in courses, and receiving our communications.
"Personal data" is any information relating to an identified or identifiable natural person (Art 4 (1) GDPR). "Processing" encompasses, for example, the collection, recording, organization, storage, adaptation, retrieval, use, disclosure, restriction, erasure or destruction of data (Art 4 (2) GDPR).
We process personal data for the following purposes:
5.1. Account and course data. When you create a user account and use the Platform, we process: name, e-mail address, password (stored only in cryptographically hashed form), IP addresses of sign-ins, course enrollments and your learning progress (e.g. which lessons you have marked as complete). Legal basis: Art 6 (1) (b) GDPR.
5.2. Purchase data. Purchases are processed by our reseller FastSpring (see section 6.4). In this context, we receive from FastSpring in particular: name, e-mail address, billing country, purchased product, order number and payment status. We do not receive or store your full payment details (e.g. credit card numbers); these are processed exclusively by FastSpring and its payment processors. Legal basis: Art 6 (1) (b) and (c) GDPR.
5.3. Communication data. When you contact us (e.g. by e-mail), we process the data you provide in order to handle your request. Legal basis: Art 6 (1) (b) and (f) GDPR.
5.4. Usage and cookie data. When you visit the website, technically necessary data (e.g. IP address, browser type, requested pages) is processed to deliver the website securely. Optional cookies and tracking technologies (statistics, marketing) are only used with your consent via the cookie banner; you can change or withdraw your consent at any time via the cookie settings on the website. Legal bases: Art 6 (1) (f) GDPR (technically necessary) and Art 6 (1) (a) GDPR (all other cookies).
We use carefully selected service providers to operate MTS. Where these providers process personal data on our behalf, they act as processors within the meaning of Art 4 (8) GDPR on the basis of data processing agreements pursuant to Art 28 GDPR. We may engage additional or other service providers at any time (for example when changing hosting, video streaming, authentication or e-mail providers); in that case, personal data may be transferred to the new provider to the extent necessary to continue providing our services, subject to the same safeguards described in this section, and this Privacy Policy will be updated accordingly. Where personal data is transferred to countries outside the EU/EEA, we ensure an adequate level of data protection, in particular through adequacy decisions of the EU Commission — including certification of the recipient under the EU-U.S. Data Privacy Framework (Art 45 GDPR) — and/or the EU standard contractual clauses pursuant to Commission Implementing Decision (EU) 2021/914 (Art 46 (2) (c) GDPR). Copies of the relevant safeguards are available on request.
6.1. Webflow (website hosting). Our website is hosted by Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA. Webflow processes technical connection data (e.g. IP addresses, log data) required to deliver the website. Webflow is certified under the EU-U.S. Data Privacy Framework. Details: https://webflow.com/legal/privacy
6.2. Supabase (user accounts and course progress). For authentication, user accounts and course progress we use Supabase (Supabase, Inc.). Your account data described in section 5.1 is hosted on cloud infrastructure within the European Union (AWS region eu-central-1, Frankfurt, Germany). To the extent that support or maintenance access from outside the EU/EEA occurs, such access is safeguarded by standard contractual clauses. Details: https://supabase.com/privacy
6.3. Bunny.net (video streaming and content delivery). Course videos are streamed via bunny.net, a service of BunnyWay d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia (EU). When you play course videos, bunny.net processes technical connection data (e.g. IP address, device/browser information) required to deliver the video stream and to protect the content against abuse. Details: https://bunny.net/privacy
6.4. FastSpring (payments and reselling). Purchases on MTS are processed by Bright Market, LLC d/b/a FastSpring, 801 Garden Street, Suite 201, Santa Barbara, CA 93101, USA, acting as payment provider and digital reseller (merchant of record). FastSpring processes the personal data required for the purchase (name, e-mail and billing address, payment details, order data) as an independent controller for the purchase transaction. FastSpring is certified under the EU-U.S. Data Privacy Framework. Details: https://fastspring.com/privacy/
6.5. Mailchimp (e-mail marketing). For newsletters and course-related e-mail communication we use Mailchimp, a service of Intuit Inc. (The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA). For this purpose, we share your e-mail address and name with Mailchimp. Mailchimp also collects device and usage data relating to our e-mails (e.g. whether and when an e-mail was opened) using tracking technologies. Newsletters are sent only with your consent (Art 6 (1) (a) GDPR), which you can withdraw at any time via the unsubscribe link contained in every newsletter. Intuit/Mailchimp is certified under the EU-U.S. Data Privacy Framework; in addition, standard contractual clauses apply. Details: https://www.intuit.com/privacy/statement/ and https://mailchimp.com/legal/
6.6. Google Analytics and Google Ads (statistics and advertising). With your consent, we use Google Analytics and Google Ads, services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies to analyze the use of our website (including shortened/anonymized IP addresses and the URLs of pages accessed); Google Ads enables us to display ads and measure their effectiveness (conversion tracking). We do not store the raw data collected by Google. Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework. Legal basis: Art 6 (1) (a) GDPR (consent via the cookie banner, revocable at any time). Details: https://policies.google.com/privacy
6.7. Meta Pixel (advertising). With your consent, we use the Meta Pixel of Meta Platforms Ireland Ltd, Merrion Road, Dublin 4, D04 X2K5, Ireland ("Meta"). The Meta Pixel allows us to show our Meta/Instagram ads only to users who have shown interest in our offers ("custom audiences") and to measure the effectiveness of our ads (conversion tracking). Meta can match the collected data (e.g. IP address, user ID) with your Meta/Instagram account. Data may be transferred to Meta Platforms, Inc. in the USA; Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework. Legal basis: Art 6 (1) (a) GDPR (consent via the cookie banner, revocable at any time). Details: https://www.facebook.com/privacy/policy
6.8. Zapier (workflow automation). We use Zapier, a web application integration service of Zapier Inc., 243 Buena Vista Ave #508, Sunnyvale, CA 94086, USA, to connect and automate individual functions of our service providers, in particular to synchronize purchase events from FastSpring with our e-mail lists (Mailchimp) and our platform. For this purpose, name, e-mail address and purchase information may be processed by Zapier on our behalf. Data may be transferred to the USA; such transfers are safeguarded by the mechanisms described in the introduction to this section 6. Details: https://zapier.com/privacy
6.9. Resend (transactional e-mail delivery). Account-related e-mails of the Platform (e.g. sign-up confirmations, password reset and other authentication e-mails) are delivered via Resend, a service of Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA. For this purpose, Resend processes the recipient's e-mail address and the content of the respective e-mail on our behalf. Data may be transferred to the USA; Plus Five Five, Inc. is certified under the EU-U.S. Data Privacy Framework, and standard contractual clauses apply as part of Resend's data processing addendum. Details: https://resend.com/legal/privacy-policy
6.10. Advisors and authorities. Where necessary, personal data may be disclosed to professional advisors bound by confidentiality (legal, tax) for the establishment, exercise or defense of legal claims, and to courts or law enforcement authorities in the case of unlawful use of MTS (including piracy of course content). Legal basis: Art 6 (1) (c) and (f) GDPR.
Beyond the above, personal data is disclosed only to persons who are contractually bound to confidentiality, and only to the extent necessary.
Our website uses a consent management tool (cookie banner) through which you can accept, reject or individually configure the use of non-essential cookies at any time. Essential cookies (e.g. cookie consent storage, purchase functionality) are used on the basis of our legitimate interest in a functional website (Art 6 (1) (f) GDPR); all statistics and marketing cookies are used only with your consent (Art 6 (1) (a) GDPR). You can change your selection at any time via the cookie settings link on the website. An up-to-date list of the cookies used, their providers and storage periods can be found in the cookie settings.
We store personal data only for as long as necessary for the respective purpose:
All communication with the Platform and its database servers is encrypted in transit (TLS). Passwords are stored exclusively in hashed form. We maintain a record of processing activities pursuant to Art 30 GDPR and implement appropriate technical and organizational measures pursuant to Art 32 GDPR, and we oblige our processors to do the same.
You have the following rights under the GDPR:
To exercise any of these rights, or if you have questions regarding the processing of your personal data, please contact:
"Master The Score"
Owner: Mr. Nikolaus Daim
Speckbachergasse 22/54, A-1160 Vienna, Austria
info@masterthescore.com
Our website may contain links to websites and services of third parties (e.g. social media). We do not control the content of those websites; their own privacy policies apply.
We may update this Privacy Policy from time to time, in particular when our services or the legal situation change. The current version is always available at https://www.masterthescore.com/privacy-policy.
Vienna, August 2026
Online education for media composers — orchestral writing, trailer music, mixing and more, taught by working professionals.
