1. Controller
The controller responsible for processing personal data on this website is:
Christian Maurer
Kleinschmidtstraße 11
69115 Heidelberg, Germany
Email: christian.maurer@crima.de
2. Hosting and server log files
This website is hosted by dogado under its “Webhosting” plan. When you access the website, the hosting provider processes technically necessary connection data, including the requested page or file, time of access, amount of data transferred, referrer, browser and operating system information, and IP address. According to dogado, log files are used to maintain server operation and for statistical analysis. The legal basis is Article 6(1)(f) GDPR; my legitimate interest is the secure and reliable operation of the website. A data processing agreement is required for the hosting provider’s processing of personal data.
For its web hosting plans, dogado states that the last octet of the IP address is set to zero after 24 hours and log files are deleted after no more than seven days. The log files can be viewed in the customer area. Further information is available in dogado’s privacy information.
3. Locally hosted fonts
The Inter and Cormorant Garamond fonts are served directly by this website. Loading them does not establish a connection to Google Fonts or any other external font provider.
4. YouTube videos
Videos are not loaded automatically. A connection to YouTube is established only when you activate a video, at which point the YouTube player is loaded in privacy-enhanced mode (youtube-nocookie.com). This may transmit your IP address and device and browser information to Google/YouTube. Once playback starts, the provider’s privacy policy and terms of service also apply.
YouTube states that playback in privacy-enhanced mode is not used to personalise the YouTube browsing experience or advertising outside this website. However, the mode does not prevent all data transfers to Google/YouTube once you start a video. Further information: Google Privacy Policy and information about YouTube embeds.
5. External links
This website contains links to external services, including YouTube, Instagram, TikTok, Spotify, Apple Music and Amazon Music. When you follow a link, you leave this website; from that point onward, the respective provider processes data under its own responsibility. Please refer to that service’s privacy information. The newsletter form is loaded only after you click its button. This establishes a connection to Brevo and Google reCAPTCHA; your IP address and device and browser information may be processed. Further information is available in Brevo’s Privacy Policy and Google’s Privacy Policy.
6. Contact
If you use the contact form, I process your name, email address, optional subject and message to respond to your enquiry. The form is handled through the hosting provider dogado, and the message is forwarded to my email inbox. The legal basis is Article 6(1)(b) GDPR for pre-contractual or contractual matters; otherwise it is Article 6(1)(f) GDPR, based on my legitimate interest in responding to enquiries. The data is deleted once the enquiry has been fully dealt with, unless statutory retention obligations apply.
Alternatively, you can email me directly. Please do not send special categories of personal data through the form.
If you subscribe to the newsletter, I process your email address, subscription status and the information needed to document your consent so I can send occasional updates about music and projects. Subscription is completed only after you confirm via the double opt-in link in the email. The newsletter form and delivery provider and processor is Brevo (Sendinblue GmbH). The legal basis is your consent under Article 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by using the unsubscribe link in any newsletter email.
7. Cookies, analytics and advertising
This website does not integrate analytics services or set its own analytics cookies. YouTube, Brevo and Google reCAPTCHA may process data of their own and may use cookies or similar technologies when their content is activated. The newsletter form and reCAPTCHA are loaded only after you click the form button. Any settings or services enabled by the hosting provider or technical delivery outside the website code are not covered here and must be checked separately.
8. Your rights
Subject to the legal requirements, you have the right to access your personal data and to request rectification, erasure, restriction of processing and data portability. Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. You may withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.
To exercise your rights, email me at christian.maurer@crima.de.
9. Updates
This Privacy Policy will be updated if the website or its data processing changes. Before publication, please verify that the information on hosting, data processing arrangements and services used matches the actual configuration.