Privacy policy

This is a translation for convenience. The legally binding version is the German Datenschutzerklärung.

Last updated: October 2026

This page explains which personal data is processed when you visit this website, for what purpose and on what legal basis, and what rights you have.

1. Controller

No data protection officer has been appointed, as there is no legal obligation to do so.

2. In short

This website uses no cookies, no analytics or tracking toolsand no advertising services. Fonts, images and the video come from the same server as the website. There is a contact form for enquiries (section 7); alternatively you can reach me by email or on Instagram.

3. Hosting and server log files

This website is delivered via Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.

Each time the site is accessed, Cloudflare automatically processes technical data transmitted by your browser: IP address, date and time, the page requested, the volume of data transferred, status code, referrer URL, browser and operating system. This data is required to deliver the website and to protect it against attacks. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in providing the website in a stable and secure manner.

Cloudflare operates a worldwide network of data centres; your request is usually answered by a data centre near you. This may involve a transfer to the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework, which is covered by an adequacy decision of the European Commission (Art. 45 GDPR). A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare. Cloudflare stores this data only for as long as is necessary for these purposes; see the Cloudflare privacy policyfor details.

4. Encryption

This website uses TLS encryption. You can recognise it by the padlock symbol and by “https://” in the address bar.

5. No cookies, nothing stored on your device

No information is stored on or read from your device beyond what is strictly necessary to provide the website (§ 25(2)(2) TDDDG). A cookie banner is therefore not required.

6. Fonts, images and video

The fonts, all images and the video on the homepage are delivered together with the website (see section 3). No connection is made to Google Fonts, YouTube or any other third party.

7. Getting in touch

If you contact me by email or on Instagram, I process the information you provide (for example name, contact details, date, location and occasion of the event) in order to answer your enquiry and, where applicable, to prepare a quote. The legal basis is Art. 6(1)(b) GDPR where a booking is concerned, otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

My mailbox is provided by an email provider that processes messages on my behalf; a data processing agreement pursuant to Art. 28 GDPR is in place with that provider.

Contact form

You can send me an enquiry using the form on the contact page (/en/kontakt/). Name, email address and message are required; date, location, occasion and number of guests are optional. I use these details solely to answer your enquiry and, where applicable, to prepare a quote. An automatic confirmation with your details is sent to the email address you provide. The legal basis is Art. 6(1)(b) GDPR, otherwise Art. 6(1)(f) GDPR.

The form stores nothing on your device and embeds no captcha or other third-party service in the page. To deter automated submissions it uses a field that is invisible to you, plus a limit on the number of enquiries per IP address. The IP address is only held briefly in memory for this purpose and is not stored permanently.

The form data is received by a server function at Cloudflare (see section 3) and handed to the sending service Resend for delivery. The provider is Plus Five Five, Inc. (Resend), 2261 Market Street #5039, San Francisco, CA 94114, USA. Resend processes the data solely for the purpose of delivery, in the USA. Resend is certified under the EU-U.S. Data Privacy Framework (adequacy decision, Art. 45 GDPR); in addition, the EU Standard Contractual Clauses form part of the data processing agreement pursuant to Art. 28 GDPR that is in place with Resend.

I delete enquiries once they have been dealt with and no further correspondence is expected, at the latest after twelve months. If a booking is made, the statutory retention periods apply (see section 9).

8. Instagram

This website contains plain links to my Instagram profile (@dj_jannis_). These are not embedded content or plugins; simply visiting this website transmits no data to Instagram. Only when you click a link or message me on Instagram does the operator, Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland, process data under its own responsibility. You will find details in Instagram’s privacy policy.

9. Retention periods

Personal data is stored only for as long as is necessary for the respective purpose. For data arising from bookings, the statutory retention obligations under German tax and commercial law apply, generally six or eight years.

10. Recipients

Your data is passed on only to the service providers named above (hosting, email, form delivery), who act as processors bound by instructions, or where there is a legal obligation. On transfers to the USA, see sections 3 and 7.

11. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR). An informal message to the contact details above is sufficient.

Right to object under Art. 21 GDPR

Where I process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. I will then stop processing the data unless there are compelling legitimate grounds that override your interests, or the processing serves to assert, exercise or defend legal claims.

Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart,www.baden-wuerttemberg.datenschutz.de.

12. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.