Privacy Policy

The entity responsible for data processing on this website is:

Fabian Günther
Bernhard-Göring-Straße 17
04107 Leipzig
Germany

Telephone: +49 159 02225021

Personal data is only processed to the extent necessary for providing a functional website, processing inquiries, executing contracts, handling bookings and orders, or fulfilling legal obligations.

The processing is carried out in particular on the basis of Article 6(1) GDPR:

• Article 6 paragraph 1 letter a GDPR in the case of consent
• Article 6 paragraph 1 letter b GDPR for contract initiation and contract fulfillment
• Article 6 paragraph 1 letter c GDPR for the fulfillment of legal obligations
• Article 6 paragraph 1 letter f GDPR on the basis of legitimate interests, in particular for security, stability and the prevention of misuse.

This website is hosted by the following provider:

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany

As part of the hosting process, the data required for the provision, security and technical stability of the website is processed.

A data processing agreement pursuant to Art. 28 GDPR has been concluded with Hetzner Online GmbH.

When you access this website, technical information is automatically collected that is necessary for the delivery of the website and system security:

• IP address
• Date and time of access
• pages and files accessed
• Referrer URL
• Browser type and browser version
• operating system
• Access status

The processing is carried out for technical provision, error analysis, and to defend against misuse and attacks.

When you contact us via a contact form, by telephone or by other means, the data you provide will be processed to handle your request:

• name
• Project name or artist name, if provided
• Telephone number, if provided
• Email address or other feedback channel
• Message content
• possibly project-related or order-related information

The data is processed for the purpose of handling the request and for initiating a contract.

To protect the website and contact forms from automated messages, bot access and abusive entries, technical and organizational security measures are used:

• Honeypot fields
• Time check during form submission
• Server-side validation
• IP-based security audits
• Rate Limiting
• Blocking obviously abusive access

Technical data such as IP address, time, browser data, form behavior and security features may be processed, insofar as this is necessary to defend against spam and abuse.

This website and the associated main site use Google Analytics 4 with your consent, see the section „Google Analytics 4 and Google Tag Manager“ below. Without that consent, no further analytics or marketing cookies are used.

Further analytics, marketing, or external convenience features are only loaded after prior consent, where consent is legally required.

Google Analytics 4 and Google Tag Manager

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“). Google Tag Manager is used for the technical integration; it sets no cookies of its own and processes no personal data, but merely manages other tags (such as Google Analytics 4).

Purpose and scope of processing: Google Analytics 4 allows the analysis of usage behaviour on this website, such as pages viewed, time spent and clicks. This information is used to improve what this website offers and to detect errors. No plain-text data such as name, email address or postal address is transmitted to Google. The IP address is shortened by Google within member states of the European Union or the European Economic Area before, in rare exceptional cases, it is transmitted in full to a Google server in the USA and shortened there.

Legal basis: The processing takes place exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR in conjunction with § 25(1) TDDDG (formerly TTDSG). You can withdraw your consent at any time through the cookie settings with effect for the future.

Storage period: The cookies set by Google Analytics 4 (_ga, _ga_*) have a validity of 2 years. The event data recorded by Google Analytics 4 is stored on the server side for a maximum of 14 months and is then deleted automatically.

Recipients and transfer to third countries: Google also processes the data in the USA. Google is certified under the EU-US Data Privacy Framework, which the European Commission has recognised as providing an adequate level of data protection (adequacy decision of the EU Commission of 10 July 2023).

Further information on how Google Analytics handles user data can be found in Google's privacy policy: https://policies.google.com/privacy

If online bookings, appointment reservations or orders are offered on this website, the data required for contract execution will be processed:

• Name and, if applicable, company name
• Billing address
• Contact details
• Booking or order data
• selected services
• Payment status
• Optional project details

The processing is carried out for the purpose of implementing pre-contractual measures and fulfilling the contract.

Appointment management. For bookings with a fixed appointment, your name, contact details, the service booked, the appointment date and time, and the total amount are transferred to Google Calendar for internal appointment scheduling. Google Calendar is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a company of the Google group also based in the USA. A transfer to the USA and other third countries cannot be ruled out. This processing is carried out by Google under its own responsibility; its privacy policy is available at https://policies.google.com/privacy . Independently of this, the customer additionally receives their own calendar entry in iCal format by email. The legal basis is Art. 6(1)(b) GDPR (performance of a contract).

External payment service providers may be used for payment processing, provided that corresponding payment methods are offered.

Depending on the offer and selection, these could include, for example, PayPal, Klarna, credit card providers, Apple Pay, Google Pay or bank service providers for transfers.

The data required for payment is transferred to the selected provider. Payment by invoice is also possible on request.

Personal data is processed for the purpose of invoicing, accounting and fulfilling tax obligations, insofar as this is legally required or necessary for contract processing:

• Name and company name
• Address
• VAT identification number (if applicable)
• Performance data
• Invoice data
• Payment information

Within the framework of existing or prospective business relationships, contact details and communication content are processed insofar as this is necessary for scheduling appointments, project management, preparing offers, invoicing or answering inquiries.

This includes in particular communication with musicians, artists, private projects and other clients in connection with the studio services offered.

WhatsApp. WhatsApp is offered as an additional communication channel on the contact page and in the footer. WhatsApp is provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a company of the Meta group of companies (Meta Platforms, Inc., USA).

When using WhatsApp, your phone number, profile data, connection data, and message content are processed by WhatsApp. Transfer to the USA and other third countries cannot be ruled out. WhatsApp is solely responsible for this data processing; their privacy policy can be found at [link to privacy policy]. https://www.whatsapp.com/legal/privacy-policy-eea available.

The legal basis for processing data transmitted to me in the context of WhatsApp communication is Art. 6 para. 1 lit. f GDPR, legitimate interest in efficient direct communication, as well as Art. 6 para. 1 lit. b GDPR for contractual inquiries. The use of WhatsApp is voluntary. Alternatively, email, phone and the contact form are available.

This website may contain links to social networks and platforms, for example Instagram, TikTok, Facebook, YouTube, Pinterest, LinkedIn or X.

When you merely visit this website, simple links generally do not transfer data to the respective platforms. Only when you click such a link do you leave this website. The privacy policies of the respective provider then apply.

If external content is integrated on individual pages – such as videos, maps, audio players, fonts or other third-party content – a connection to servers of these providers may be established.

In particular, IP address, browser data and information about the accessed page may be processed.

Such content will only be loaded after appropriate consent, where legally required, or only used where it is technically necessary or otherwise permissible.

If a newsletter is offered on this website, the data entered for this purpose will be processed exclusively for sending the requested information.

You can unsubscribe at any time with effect for the future.

Personal data will only be stored for as long as is necessary for the respective purposes or as long as a legal obligation to retain it exists:

• Requests will only be processed for as long as necessary for handling and follow-up.
• Contract and booking data for contract processing and within the framework of statutory documentation periods.
• Invoicing and tax-relevant data regularly stored for up to 10 years in accordance with legal requirements.

Personal data will only be transferred to third parties if this is legally permissible or necessary for the performance of a contract:

• Hosting providers
• Payment service provider
• Accounting and billing service provider
• Calendar and appointment management services
• technical service providers for website operation and security
• government agencies or authorities, insofar as a legal obligation exists

Personal data will only be transferred to countries outside the European Union or the European Economic Area if this is necessary for specific services, consent has been given, or another data protection basis exists.

If external providers with headquarters or data processing in third countries are used, this will only be done within the framework of the legal requirements.

Technical and organizational measures are taken to protect personal data from loss, misuse, unauthorized access or unauthorized disclosure:

• encrypted transmission via HTTPS
• Security measures for servers and websites
• Access restrictions
• Abuse and spam protection mechanisms

Within the scope of the statutory requirements, you have the following rights in particular:

• Right to information
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object
• Right to revoke consents given with effect for the future

To exercise your rights, please contact me using the Imprint specified contact methods.

If you believe that the processing of your personal data is not lawful, you have the right to lodge a complaint with a competent data protection supervisory authority.

The responsible supervisory authority for Saxony is the Saxon Data Protection Commissioner, Devrientstraße 5, 01067 Dresden.

Automated decision-making or profiling within the meaning of the GDPR does not take place on this website, unless explicitly stated otherwise in individual services.

This privacy policy may be amended if necessary due to legal, technical, or organizational changes. The current version published on this website is authoritative.