Privacy Policy

Last updated: April 2026 · Controller: First Last Name (see Legal Notice)

1. Overview

This privacy policy informs you in accordance with Art. 13 GDPR about the processing of personal data when visiting this website.

This website uses no web analytics tools and no advertising networks. Third-party embedded content is only loaded after explicit consent (§ 25 TTDSG).

2. Data Controller

First Last Name
Sample Street 1, 12345 Sample City, Germany
Email: deine@email.de

3. Hosting & Server Logs

This website is hosted by: [HOSTING PROVIDER, COUNTRY].

The hosting provider automatically collects the following data in server log files:

• IP address (possibly anonymised)
• Date and time of access
• Requested URL
• Browser type and version, operating system
• Referring URL (referrer)
• HTTP status code

Legal basis: Art. 6(1)(f) GDPR.
Retention: Server logs are typically deleted after 7–14 days.

A data processing agreement (DPA) has been concluded with the hosting provider in accordance with Art. 28 GDPR (where required).

4. Cookies & Local Storage

This website does not set HTTP cookies by the operator. However, the browser's Web Storage (localStorage) is used for the following purposes:

Since these are Web Storage entries (not HTTP cookies) and are technically necessary for operating the consent management, they do not require prior consent under § 25 TTDSG.

5. Embedded Third-party Content: Spotify

This website may embed a Spotify player provided by Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden.

Important: The Spotify player is only loaded after your explicit consent (§ 25(1) TTDSG, Art. 6(1)(a) GDPR). No connection to Spotify is established before consent.

What data is transmitted when the Spotify player is active?

• Your IP address
• Browser type, operating system
• Referring URL (this website)
• Interactions with the player (e.g. playing a track)
• Cookies set by Spotify (tracking, personalisation, functionality)

Data transfers to third countries

Spotify AB is based in the EEA (Sweden). For processing outside the EEA, Spotify relies on EU Standard Contractual Clauses. See Spotify's Privacy Policy.

Legal basis & withdrawal

The legal basis for processing is your consent (Art. 6(1)(a) GDPR, § 25(1) TTDSG). You can withdraw your consent at any time with future effect via the "Privacy Settings" link in the footer. After withdrawal, the Spotify player will no longer be loaded automatically on your next visit.

6. External Links

This website contains links to external profiles (GitHub, LinkedIn, Twitter/X, Mastodon, email). These links open external websites whose privacy practices I am not responsible for.

No social sharing buttons or tracking pixels from social networks are embedded.

7. Your Rights (Art. 15–22 GDPR)

You have the following rights against me as the controller:

• Right of access (Art. 15 GDPR): You can request information about the personal data I process about you.
• Right to rectification (Art. 16 GDPR): You can request the correction of inaccurate or incomplete data.
• Right to erasure (Art. 17 GDPR): You can request the deletion of your data, provided no statutory retention obligations apply.
• Right to restriction of processing (Art. 18 GDPR).
• Right to data portability (Art. 20 GDPR).
• Right to object (Art. 21 GDPR): You can object to processing based on legitimate interest.
• Withdrawal of consent (Art. 7(3) GDPR): Consent given can be withdrawn at any time with future effect.
• Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority. The competent authority for Germany is:

Alternatively, the competent supervisory authority of the relevant German federal state is also responsible.

8. Changes to this Privacy Policy

This privacy policy may be updated when data processing practices change or legislation is amended. The date of the last update is shown at the top of this page. Please check this page regularly for updates.