IMPRESSUM

Last updated: 2026-05-04

This privacy policy explains how personal data is processed when you visit this website, contact us, subscribe to our newsletter, or interact with embedded content.

Personal data means any information that can identify you directly or indirectly, such as your name, email address, IP address, device information, website usage data, or messages you send to us.

We try to keep this understandable. Unfortunately, German data protection law was apparently designed by people who considered “simple” a personal insult.

1. Controller / Verantwortlicher

The person responsible for data processing on this website is:

[Your full name / company name]
[Street and house number]
[Postcode and city]
Germany

Email: [your email address]
Phone: [optional phone number]

“Controller” means the person or company that decides why and how personal data is processed. In normal language: the person legally responsible for this website.

2. General information

We process personal data only where necessary to operate this website, communicate with visitors, provide our services, run our newsletter, present our work, comply with legal obligations, or where you have given consent.

The main legal bases are:

• Art. 6(1)(a) GDPR — consent

• Art. 6(1)(b) GDPR — performance of a contract or pre-contractual communication

• Art. 6(1)(c) GDPR — legal obligation

• Art. 6(1)(f) GDPR — legitimate interests

Our legitimate interests include operating a secure and functional website, responding to inquiries, presenting our artistic and professional work, managing bookings or collaborations, and protecting the website from misuse.

3. Website hosting: Squarespace

This website is hosted by:

Squarespace Ireland Ltd / Squarespace, Inc.
[Use Squarespace’s current legal address from your account/legal documents]

Squarespace provides the technical infrastructure for this website. When you visit the site, Squarespace may process technical data such as your IP address, browser information, device information, pages accessed, date and time of access, and other information necessary to deliver and secure the website.

This processing is necessary to make the website available and to keep it stable and secure.

Legal basis: Art. 6(1)(f) GDPR

Squarespace provides information about GDPR compliance and offers a Data Processing Addendum for cases where Squarespace processes personal data on behalf of website owners.  

Because Squarespace is a global provider, personal data may be processed outside the EU/EEA, including in the United States. Squarespace states that it uses Standard Contractual Clauses and related transfer safeguards for international data transfers involving the EEA, UK, and Switzerland.  

Germany has seen this and is calmly adjusting its glasses.

4. Domain registration: 123-reg

The domain for this website is registered through:

123-reg
[Add current legal company name/address from your 123-reg account or their legal page]

123-reg may process personal data necessary for domain registration, DNS services, billing, account management, and technical operation of the domain.

This may include name, contact details, billing information, domain registration data, account information, and technical data related to domain services.

Legal basis:

• Art. 6(1)(b) GDPR, where processing is necessary for domain registration or account services

• Art. 6(1)(c) GDPR, where legal retention obligations apply

• Art. 6(1)(f) GDPR, for secure and reliable domain operation

5. Server log files

When you visit this website, technical data may be automatically collected in server log files. This may include:

• IP address

• date and time of access

• requested page or file

• browser type and version

• operating system

• referrer URL

• amount of data transferred

• technical status codes

This data is processed to deliver the website, ensure technical stability, detect misuse, and improve security.

Legal basis: Art. 6(1)(f) GDPR

Storage period: [insert Squarespace setting / “according to Squarespace’s retention periods”]

If there is a German form for “an IP address existed for 0.3 seconds,” we assume someone has already laminated it.

6. Contact by email

If you contact us by email, we process the information you send to us. This may include:

• your name

• email address

• message content

• attachments

• project, booking, release, studio, or business-related information you choose to provide

We use this data to respond to your inquiry, communicate with you, prepare or perform contracts, and manage our professional relationship.

Legal basis:

• Art. 6(1)(b) GDPR, if your message relates to a contract, booking, project, collaboration, or possible business relationship

• Art. 6(1)(f) GDPR, for general communication

• Art. 6(1)(c) GDPR, where legal retention obligations apply

Email provider: Google Workspace / Google Ireland Ltd / Google LLC

Since email is handled through Google Workspace, Google may process email-related data on our behalf, including sender and recipient details, message contents, attachments, metadata, and technical security data.

Google may process data outside the EU/EEA. Where legally required, this is based on appropriate transfer safeguards, such as Standard Contractual Clauses or other permitted mechanisms.

7. Contact form

This website also includes a contact form.

If you use the contact form, we process the data you enter into the form, such as:

• name

• email address

• message

• project or inquiry details

• any other information you provide

The form may also collect technical data such as IP address, date and time of submission, browser information, and anti-spam/security data.

The contact form is provided through Squarespace and may be connected to our email system and/or other tools used to manage inquiries.

Legal basis:

• Art. 6(1)(b) GDPR, for contract-related or pre-contractual inquiries

• Art. 6(1)(f) GDPR, for general inquiries and secure form operation

• Art. 6(1)(a) GDPR, where consent is required for optional processing

Please do not send sensitive personal information through the form unless it is necessary. This includes health information, highly private personal details, or anything that would make a German data protection officer spill their coffee.

8. Newsletter

This website offers a newsletter.

If you subscribe to the newsletter, we process your email address and, if provided, your name and other subscription preferences.

We use this data to send updates, news, release announcements, event information, studio updates, or related professional/artistic information.

Newsletter provider: [insert provider: Squarespace Email Campaigns / Mailchimp / Brevo / Substack / Buttondown / other]

The newsletter registration may use a double opt-in process. This means you receive a confirmation email and must confirm your subscription before receiving the newsletter.

Legal basis: Art. 6(1)(a) GDPR

You can unsubscribe at any time using the unsubscribe link in each newsletter or by contacting us directly.

We may store proof of consent, such as the subscription time, confirmation time, IP address, and email address, in order to document that consent was given.

Legal basis for storing consent records: Art. 6(1)(f) GDPR

Storage period: until you unsubscribe, plus any period necessary to document consent or comply with legal obligations.

9. Cookies and similar technologies

This website uses cookies and similar technologies.

Cookies are small text files stored on your device. Some cookies are necessary for the website to work. Others may be used for analytics, embedded content, newsletter signups, marketing, or improving the website.

Necessary cookies

These cookies are required for the website to function properly, provide security, remember privacy settings, or enable basic features.

Legal basis: Art. 6(1)(f) GDPR

Optional cookies

Optional cookies may be used for analytics, embedded media, newsletter tools, marketing, or similar purposes.

Legal basis: Art. 6(1)(a) GDPR

Optional cookies are only used where you have given consent through the cookie banner or consent settings.

You can change or withdraw your consent here:

[Link to cookie settings / privacy preferences]

Cookies are the tiny files. The giant emotional reaction is the German part.

10. Squarespace Analytics

Squarespace may provide built-in analytics showing how visitors use this website. This may include information such as page views, traffic sources, device types, approximate location, and interactions with the site.

Depending on the configuration, Squarespace Analytics may process visitor data and use cookies or similar technologies.

We use this information to understand website traffic, improve the site, and see which pages or projects are useful to visitors.

Legal basis:

• Art. 6(1)(a) GDPR, where consent is required

• Art. 6(1)(f) GDPR, where analytics are limited, privacy-friendly, and legally permitted without consent

Provider: Squarespace

Squarespace explains that its products may process visitor data and that website owners are responsible for how third-party services and Squarespace tools are configured for GDPR compliance.  

11. Google Analytics

Use this section only if Google Analytics is actually installed. If not, delete it.

This website may use Google Analytics, a web analytics service provided by Google.

Provider:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Analytics helps us understand how visitors use the website. It may process data such as:

• pages visited

• time spent on pages

• interactions with the site

• approximate location

• device and browser information

• referrer URL

• IP address, usually shortened or otherwise processed depending on configuration

• cookie or device identifiers

Google Analytics should only be used after consent where required. German and EU data protection authorities have treated Google Analytics as requiring careful consent and transfer safeguards, especially because data may be processed by Google and transferred outside the EU/EEA.  

Legal basis: Art. 6(1)(a) GDPR

You can withdraw your consent at any time through the cookie settings.

Data may be processed in the United States or other countries outside the EU/EEA. Google may rely on appropriate transfer mechanisms, such as Standard Contractual Clauses or other legally permitted safeguards.

12. Google Fonts

This website may use fonts provided by Google Fonts.

Provider:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

If Google Fonts are loaded directly from Google servers, your browser may connect to Google and transmit technical data such as your IP address and browser information.

Because of GDPR risks in Germany, Google Fonts should ideally be hosted locally, so that fonts are loaded from this website rather than directly from Google servers. The 2022 Munich Regional Court decision on remote Google Fonts made this issue especially relevant for German website operators.  

Legal basis if loaded locally: Art. 6(1)(f) GDPR
Legal basis if loaded externally from Google servers: Art. 6(1)(a) GDPR, where consent is required

Practical note: if Squarespace allows the fonts to be served locally or without third-party Google requests, that is preferable.

This is one of those very German moments where a font becomes a legal character in the story.

13. Embedded music, video, and social media content

This website may embed or link to content from third-party platforms, including:

• Spotify

• SoundCloud

• Bandcamp

• YouTube

• Vimeo

• Instagram

• Apple Music

• other music, video, or social media platforms

When embedded content is loaded, the third-party provider may process personal data such as your IP address, browser information, device information, cookies, usage data, and interactions with the embedded player or post.

Some providers may process data outside the EU/EEA.

Where required, embedded content is loaded only after you have given consent.

Legal basis: Art. 6(1)(a) GDPR

If you do not give consent, some embedded players or posts may not load.

External platforms are responsible for their own data processing. Please review the privacy policies of the relevant providers:

• Spotify: [insert link]

• SoundCloud: [insert link]

• Bandcamp: [insert link]

• YouTube / Google: [insert link]

• Vimeo: [insert link]

• Instagram / Meta: [insert link]

This is why a music website in Germany sometimes needs a consent banner before it can play a song. Very normal. Completely relaxed country.

14. Social media links

This website may link to external profiles on platforms such as Instagram, YouTube, Spotify, Bandcamp, SoundCloud, Vimeo, Facebook, LinkedIn, TikTok, or similar services.

If you click one of these links, you leave this website. The respective platform is responsible for the data processing that happens there.

We do not control how those platforms process your data.

15. Data sharing

We do not sell personal data.

We may share personal data with service providers where necessary to operate this website and provide our services. These may include:

• Squarespace, for hosting and website operation

• 123-reg, for domain registration and DNS services

• Google Workspace, for email and communication

• newsletter provider, for sending newsletters

• analytics providers, if used

• embedded content providers, if you consent to loading their content

• technical service providers, designers, developers, legal/accounting advisers, or similar professional support

These providers process data either on our behalf, under their own responsibility, or as joint/independent controllers depending on the service.

16. International data transfers

Some service providers may process personal data outside the EU/EEA, including in the United States.

Where this happens, we rely on legally permitted safeguards, such as:

• EU adequacy decisions

• Standard Contractual Clauses

• the EU-U.S. Data Privacy Framework, where applicable

• your consent, where required

• other lawful transfer mechanisms under the GDPR

Squarespace states that it uses Standard Contractual Clauses and related safeguards for transfers involving the EEA, UK, Switzerland, and the United States.  

This is the part where the internet is global, but the paperwork remains extremely local.

17. Storage periods

We store personal data only as long as necessary for the purpose for which it was collected.

Typical storage periods:

• server logs: according to Squarespace’s retention settings

• contact form messages: as long as needed to respond and manage the relationship

• email communication: as long as needed for the communication, business relationship, or legal retention obligations

• newsletter data: until you unsubscribe

• consent records: as long as needed to prove consent

• business records: according to statutory retention periods

Where legal retention obligations apply, data may be stored for longer.

18. Your rights

Under the GDPR, you have the following rights:

• right of access — Art. 15 GDPR

• right to rectification — Art. 16 GDPR

• right to erasure — Art. 17 GDPR

• right to restriction of processing — Art. 18 GDPR

• right to data portability — Art. 20 GDPR

• right to object — Art. 21 GDPR

• right to withdraw consent — Art. 7(3) GDPR

• right to lodge a complaint with a supervisory authority — Art. 77 GDPR

To exercise your rights, contact:

[your email address]

You also have the right to lodge a complaint with a data protection supervisory authority. In Germany, this is usually the authority responsible for your federal state.

19. Right to object

If we process your personal data based on legitimate interests under Art. 6(1)(f) GDPR, you have the right to object to that processing for reasons arising from your particular situation.

If you object, we will stop processing the relevant data unless we have compelling legitimate grounds or the processing is necessary for legal claims.

20. Right to withdraw consent

If we process data based on your consent, you may withdraw that consent at any time.

The withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

In normal language: you can change your mind. Even the GDPR, beneath all the laminated seriousness, allows for personal growth.

21. Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure.

This website uses encrypted transmission via HTTPS where available.

No method of transmission over the internet is completely secure, but we take reasonable steps to protect your data.

22. Changes to this privacy policy

We may update this privacy policy from time to time, especially if the website changes, new services are added, or legal requirements change.

The current version is always available on this website.

23. Final note

This privacy policy is intended to be understandable rather than terrifying. If anything is unclear, you can contact us.

Germany may require many things, but it does not yet require a fax machine for privacy questions. Probably.