Privacy policy

1. Controller and contact

Jan Hirte is responsible for the processing of personal data described below. You can contact me about privacy, your rights or the removal of a guestbook entry using these details:

2. Hosting and access data

This website is provided through OpenAI Sites and uses Cloudflare infrastructure for delivery and database storage. Requests therefore reach these technical service providers. Data needed to deliver and protect the website includes the IP address, requested URL, access time, browser and operating system information, and technical response information. This processing serves the reliable delivery of the website, troubleshooting and protection against abuse. The legal basis is Article 6(1)(f) GDPR; my legitimate interest is operating a secure, functioning website.

The service providers can process data internationally, including in the United States. OpenAI identifies OpenAI Ireland Limited (1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland) as its controller for the EEA in its EU privacy policy. Cloudflare's privacy contact is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. The providers describe adequacy decisions and European Commission standard contractual clauses as transfer safeguards; Cloudflare also provides information about the EU–US Data Privacy Framework. Information about applicable safeguards, copies of them and provider retention arrangements can be requested through the contacts in their privacy information: OpenAI, Cloudflare, Cloudflare data processing and transfer terms.

Technical access data is retained for the period needed for delivery, security or the investigation of an incident; the provider's retention arrangements apply to its own systems. I do not maintain a separate visitor analytics database.

3. Contact, booking, lessons and orders

When you use the contact form, the information you enter is stored: name, email address, message and type of enquiry; optionally telephone number, organisation and the selected project. For booking enquiries this can also include venue, city, requested date and expected audience. The enquiry is stored in the website database and can be transferred to my booking application so that I can organise and answer it. These details are not published.

Email links, including CD order enquiries and actor coaching enquiries, open your own email application. The website does not send an email automatically. When you contact me by email or telephone, I process your contact details and the contents of your enquiry to respond. Technical hosting and email service providers are involved in providing these services.

For an enquiry about a booking, lesson or purchase, the legal basis is Article 6(1)(b) GDPR (steps before or performance of a contract). For other correspondence it is Article 6(1)(f) GDPR; my legitimate interest is responding to enquiries. Required fields are marked in the form. Providing data is voluntary, but I cannot respond without the necessary information. Enquiries are retained while needed for processing, an ongoing booking or the related business relationship. Once these purposes end, data is deleted unless legal retention obligations or the establishment, exercise or defence of legal claims require further storage. Statutory retention is based on Article 6(1)(c) GDPR.

4. Guestbook

The guestbook stores your name or nickname, your message, the concert you optionally identify, the submission time and the moderation status. You do not need to provide an email address or your real name. After my approval, your name or nickname, message, optional concert and submission date are publicly visible. Public content can be copied or indexed by other people and search engines. Please do not include private contact details or personal information about other people.

Publication is based on your consent under Article 6(1)(a) GDPR, given through the publication checkbox. You may withdraw consent at any time by contacting me and identifying the entry. The withdrawal does not affect the lawfulness of earlier processing. Published entries remain available until removal, withdrawal or the end of the guestbook service. Unpublished entries are retained only while needed for moderation or the handling of abuse.

To limit spam, a pseudonymous hash derived from the IP address is stored with the entry. This is not published and is used to limit the number of submissions within an hour. It remains stored with the entry until that record is deleted. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is protecting the guestbook against automated abuse.

5. Cookies, quiz and external content

The website application does not use advertising or analytics trackers. Quiz answers and the score are processed in the current browser session without sending them to a server. If you choose to send your result by email, your email application opens and you decide whether to send the message. Images and fonts used by the website application are loaded from this website. Infrastructure providers may use technically necessary mechanisms for delivery, security or administrator login; these are subject to their respective privacy information.

Links to Instagram, Facebook, YouTube, music services, ticket providers and other websites open the respective provider's website. Social media or music players are not loaded automatically on the homepage. Once you follow a link, that provider processes data under its own privacy policy.

The booking-app survey is a separate website on OpenAI Sites. Its embedded page is loaded only after you explicitly choose to load it; alternatively, you can open it in a new window. Loading transfers access data such as the IP address and browser information to its hosting providers. Any survey answers you submit are processed by that survey. Please also read the information provided there before submitting personal details. Consent to load the embedded page is based on Article 6(1)(a) GDPR and, where access to your device requires it, Section 25(1) TDDDG. You can stop the embedded content by hiding it or leaving the page; the choice is not stored for later visits.

6. Your rights

Subject to the applicable legal conditions, you have the right to access, rectification, erasure, restriction of processing and data portability (Articles 15–20 GDPR). You can withdraw consent at any time with effect for the future. Where processing is based on legitimate interests, you may object for reasons relating to your particular situation under Article 21 GDPR. Please contact me using the details above. I do not use the data described here for automated decisions with legal or similarly significant effects, or for profiling.

You may also lodge a complaint with a data protection supervisory authority. The local authority is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, Germany. Contact and complaint information: datenschutz-berlin.de.