Privacy policy

This is a translation of the German privacy policy. The German version at soundgrindstudio.com/de/datenschutz is the legally binding one.

This website runs without tracking, without advertising networks, without analytics and without embedded third-party content. Fonts, images and audio files are served exclusively from my own server; loading the site contacts no external server. No cookies are set. That is also why there is no consent banner here: there is nothing to consent to. What data does arise is set out below, separated by processing operation.

Controller

The controller for the processing of personal data on this website within the meaning of Art. 4 (7) GDPR is:

Felix Jeckstadt
Soundgrind Studio
Hammersteinstrasse 104
31137 Hildesheim
Germany

Phone: +49 151 51001238
Email: felix@soundgrindstudio.com

No data protection officer has been appointed. The conditions of Section 38 (1) of the German Federal Data Protection Act are not met.

1. Visiting the website

Data: When you visit the site, the hosting provider automatically processes data your browser transmits: the address requested, date and time of the request, browser type and version, operating system, amount of data transferred, status code, referrer URL and your IP address.

In addition, Cloudflare instructs your browser via the Report-To and NEL headers to report failed requests to a Cloudflare reporting service. Technical details of the failed request, including your IP address, are transmitted in the process. Successful requests are not reported. The recipient is the same processor as for hosting.

Purpose: Delivering the site, operational security, detecting and preventing attacks and automated access.

Legal basis: Art. 6 (1) (f) GDPR. My legitimate interest is to provide the website free of technical faults and to protect it against overload, misuse and attacks.

Recipients: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, represented in the European Union by Cloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany. Cloudflare processes this data as a processor on my behalf; a contract pursuant to Art. 28 GDPR is in place.

Transfers to third countries: Processing in the USA cannot be ruled out. Cloudflare is certified under the EU-US Data Privacy Framework, for which the European Commission has issued an adequacy decision. In addition, the European Commission's Standard Contractual Clauses have been agreed. You can obtain a copy of the Standard Contractual Clauses on request using the contact details above.

Storage period: Log data is stored by the hosting provider according to its own retention rules and deleted regularly. I do not access this data myself and do not combine it with other data. No evaluation relating to you personally takes place.

2. Contact form

Data: Your name, your email address, the type of project you tick, your message, and the language in which you are using the site so that I can reply in that language. In addition, the time between the form loading and being submitted is measured, and there is a field invisible to you. Both serve solely to fend off automated submissions and are not evaluated.

Purpose: Handling and answering your enquiry, preparing a possible contract, spam prevention.

Legal basis: Art. 6 (1) (b) GDPR where your enquiry is aimed at concluding a contract or at pre-contractual measures. Otherwise Art. 6 (1) (f) GDPR; my legitimate interest is to answer enquiries and to protect the form against automated misuse. Consent is not required for this and is not obtained.

Recipients: Transmission is encrypted via HTTPS to the server function at Cloudflare (address above). From there the message is delivered via the email delivery service Brevo, provided by Sendinblue SAS, 17 rue Salneuve, 75017 Paris, France, registered with the Paris Trade and Companies Register under number 498 019 298. Processing takes place on servers in France and Germany. My mailbox is operated through Google Workspace, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data processing agreements pursuant to Art. 28 GDPR are in place with all of these providers.

Transfers to third countries: Email delivery takes place exclusively within the European Union. For hosting and for the mailbox, however, processing in the USA cannot be ruled out. This is based on the adequacy decision for the EU-US Data Privacy Framework and, in addition, on the European Commission's Standard Contractual Clauses. You can obtain a copy on request using the contact details above.

Storage period: At the delivery service, your message remains in its delivery logs for a limited period beyond delivery itself; these logs serve to evidence delivery and to troubleshoot faults, and are deleted in accordance with the provider's policy. If no contract is concluded, I delete the enquiry and my reply no later than six months after the last correspondence. If a contract is concluded, I keep the correspondence for as long as it is required to perform the contract and to assert or defend legal claims; statutory commercial and tax retention periods of six and ten years respectively remain unaffected.

Are you obliged to provide this data? No. Providing it is neither required by law nor by contract. Without your name, email address and message, however, I cannot answer your enquiry. No other disadvantage arises for you. You are welcome to write to me directly by email instead.

3. Enquiries by email or telephone

If you contact me directly by email or by telephone, I process the data arising in order to deal with your request. Legal basis, storage period and recipients are as set out under number 2.

4. Storage on your device

This website sets no cookies. It stores a single entry in your browser's local storage, and only once you operate the language switch yourself:

sg-lang — the language you chose, so that the site greets you in that language on your next visit. The entry expires after 180 days and is then removed automatically.

This entry never leaves your device, is not transmitted, contains no personal reference and is not evaluated. It is strictly necessary in order to provide the service you explicitly requested in the language you chose; storing it is therefore exempt from consent under Section 25 (2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG). You can delete it at any time via your browser settings.

5. Links to social networks

In the footer you will find links to my profiles on Instagram and Facebook. These are ordinary links. No content from those services is embedded and no buttons are loaded; no data is transmitted to those providers before you click. Only when you click such a link do you leave this website, and the privacy terms of the respective provider then apply.

Your rights

You have the following rights against me regarding personal data concerning you:

Right of access to whether and which data I process (Art. 15 GDPR)
Rectification of inaccurate data and completion of incomplete data (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability, meaning receipt in a common, machine-readable format or direct transmission to another controller where technically feasible (Art. 20 GDPR)
Objection to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)

An informal message to felix@soundgrindstudio.com is enough for all of these.

Right to object

You have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you which is based on Art. 6 (1) (f) GDPR. If you do so, I will no longer process that data unless I can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

Right to lodge a complaint

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement (Art. 77 GDPR). The authority responsible for me is:

Die Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstrasse 5, 30159 Hanover, Germany
lfd.niedersachsen.de

No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

Encryption

This website is delivered over a TLS-encrypted connection throughout. You can recognise this by the "https://" address and the padlock symbol in your browser.

Status of this policy

This policy describes the state of this website as of its last change. Should further services be integrated in future, it will be adapted beforehand.