Privacy

The provider named in the legal notice is the controller for data processing on this website.

When you open the site, your browser transmits technical data that the web server records: shortened IP address, date and time, the address requested, status code, amount of data transferred, referring page and browser identification.

The legal basis is Art. 6(1)(f) GDPR; the legitimate interest is the secure and reliable operation of the website. Logs are deleted after seven days and are not combined with other data.

The site is served from a server operated by netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, located in Nuremberg, Germany. A data processing agreement is in place.

Without your consent this website sets no cookies and embeds no analytics or advertising services. Fonts are served from our own server; no connection to Google Fonts or comparable services is made.

That is also why there is normally no consent banner. One only appears when there is something to consent to — see "Consent and ad measurement" below.

If you use the form, your name, email address, chosen subject and message are processed in order to answer your enquiry.

The legal basis is Art. 6(1)(b) GDPR where a contract is being initiated (booking, for example), otherwise Art. 6(1)(f) GDPR based on the interest in answering enquiries.

Delivery of the message runs through Resend (Plus Five Five, Inc.), 2261 Market Street, San Francisco, CA 94114, USA, which transfers data to the USA on the basis of EU standard contractual clauses and the EU-US Data Privacy Framework.

Enquiries are deleted once they have been dealt with and no retention obligation applies.

To guard against mass submissions, the form service counts how often something is sent from your IP address — for the contact form and the release list alike. This count is held in memory only and expires after 15 minutes. Your IP address is neither stored nor filed with your enquiry or sign-up. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest is protection against abuse.

For the release list your email address is stored. Sign-up uses double opt-in: after entering your address you receive a mail with a confirmation link, and only that click puts you on the list. Until then the address is merely pending and is deleted after seven days.

The time of sign-up and of confirmation are stored as proof. The legal basis is your consent under Art. 6(1)(a) GDPR.

You can leave at any time — via the link at the end of every mail, or by simply writing to us. The address is then deleted.

You have the right to information, rectification, erasure, restriction of processing, data portability and objection. Consent once given can be withdrawn at any time with effect for the future.

You also have the right to lodge a complaint with a supervisory authority, usually the one where you habitually reside.

Links to streaming and social media profiles are plain links. No data is transmitted to those providers unless you click the link. From that point their own privacy policy applies.

The videos page carries posts from YouTube and TikTok, the start page a Spotify player. This content is not served by us but by the respective providers.

Nothing of it loads until you agree. Where the content would sit, a button sits instead. Only your click triggers the load — before that, the provider does not learn that you are here.

Once you agree, the provider receives your IP address and browser identification and can access your browser storage, including cookies. What it does with that follows its own privacy policy; we have no influence over it and receive no data from it.

The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TTDSG. You give it separately for each provider: allowing YouTube does not allow TikTok.

Your decision is stored only in your browser (localStorage) and is never transmitted to us. You can withdraw it at any time and without disadvantage — at the bottom of this page. Withdrawing removes already loaded embeds immediately; whatever the provider received until then can only be deleted by the provider.

Providers: YouTube — Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. TikTok — TikTok Technology Limited, 10 Earlsfort Terrace, Dublin 2, Ireland. Spotify — Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden. Data may be transferred to countries outside the EU, including the USA.

We embed YouTube through youtube-nocookie.com. That address sets no advertising identifiers as long as no video is played — it does not replace the consent.

To measure whether our ads work, we may use measurement services of the advertising platforms — only if you consent. As long as none of them is switched on, no prompt appears and nothing is loaded. If one is switched on, a notice asks you on your first visit and names the services itself. Without your consent no connection to these providers is made.

The prompt loads from livepulse.fantasticmarco.de, a system of our own group of companies. This technically transmits your IP address, which is not evaluated or stored. We store your choice for twelve months in the cookie "lp_einwilligung" (§ 25(2) no. 2 TDDDG). You can change or withdraw it at any time via "Cookie settings" in the footer.

Possible services: the Meta Pixel with the Conversions API of Meta Platforms Ireland Limited (Ireland), cookies incl. "_fbp" and "_fbc"; Google Ads conversion tracking of Google Ireland Limited (Ireland), cookie incl. "_gcl_au" — the Google script is not loaded at all without consent; the TikTok Pixel with the Events API of TikTok Technology Limited (Ireland), cookie incl. "_ttp".

Transmitted are in particular IP address, technical browser data, the page visited, click IDs from ads and, if you submit a form, an event such as "enquiry sent". An email address is only passed on as a SHA-256 hash, never in plain text. The providers may link the data to your account there and also process it in the USA; the EU-US Data Privacy Framework or the EU Standard Contractual Clauses apply. For the Meta Pixel we are jointly responsible with Meta (Art. 26 GDPR). The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you can withdraw at any time.