Privacy Policy

David Effert
Römerstr. 16
53520 Schuld
Germany
Email: david.effert (at) outlook.de

We only process personal data of our users to the extent necessary to provide a functioning website and our content and services (principle of data minimization). This website deliberately does not use tracking or analytics tools, nor advertising. Your data is never shared for advertising purposes.

This website is hosted by Vercel Inc., [ADDRESS TO BE CONFIRMED], USA. When you access the site, the host processes technically necessary data (e.g. IP address, date and time of the request, page requested, browser/OS information, referrer URL) in server log files. The legal basis is our legitimate interest in a secure and stable operation of the website (Art. 6(1)(f) GDPR). Transfer to the USA is based on the EU-US Data Privacy Framework and/or standard contractual clauses. More information: vercel.com/legal/privacy-policy.

If you take part in the vote, we store the vote you cast (Track I or Track II) as well as:

• a randomly generated voter ID in a cookie, which cannot be traced back to you personally;
• a hashed value of your IP address (SHA-256 with a secret salt) — the IP address itself is never stored in plain text and cannot be reconstructed from the hash.

This is used exclusively to prevent duplicate votes. The legal basis is our legitimate interest in a fair vote (Art. 6(1)(f) GDPR).

Retention period: until the end of the vote, deleted at the latest three months after the vote ends (October 31, 2026).

Vote data is stored by Upstash, Inc. in a Redis database. Server location: [REGION TO BE CONFIRMED]. Any transfer to third countries is based on standard contractual clauses where applicable. More information: upstash.com/trust/privacy.pdf.

If you use the contact form, we process the data you provide (name, email address, message) to handle your inquiry. The legal basis is the performance of, or steps prior to entering into, a contract (Art. 6(1)(b) GDPR) as well as our legitimate interest in responding to inquiries (Art. 6(1)(f) GDPR).

To protect against abuse (spam), we additionally and briefly process a hashed value of your IP address in order to limit the number of messages per network. This value is automatically deleted after one hour.

Messages are sent by email via the service Resend (Resend, Inc., USA). The transfer is based on standard contractual clauses and/or the EU-US Data Privacy Framework.

Your details (name, email address, message) are deleted once your inquiry has been fully handled and no statutory retention obligations apply.

Both cookies are technically necessary or serve a pure user preference and are not used for tracking or analytics. Consent is not required under § 25(2) no. 2 TDDDG (German Telecommunications-Digital-Services-Data-Protection Act); no cookie banner is therefore shown.

The "Remind me" feature generates a calendar file (.ics) directly in your browser. No data is transmitted to us or to third parties in the process.

We use the typefaces "Cinzel" and "Cormorant Garamond" via Next.js's next/font feature. The font files are bundled locally onto our own server at build time and served from our own server. No connection is made to Google's servers, and no data is transmitted to Google.

This website links to external third-party services: Spotify, Apple Music, Amazon Music, Deezer, YouTube, Instagram, ArtistUP, and DistroKid. These are plain links and are not embedded (no embedding); no data is transferred to these providers before you click. Once clicked, the respective provider's privacy policy applies.

Within the scope of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of the processing, as well as a right to rectification, erasure, restriction of processing, data portability, and objection to processing based on Art. 6(1)(f) GDPR (Art. 15 to 21 GDPR). Please contact us using the address given above.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular with the data protection authority of the German federal state of Rhineland-Palatinate (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz).