Privacy Policy

This Privacy Policy explains which personal data I process when you visit this website or contact me. It applies to both the German- and English-language sections of rasmus-song.com.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Rasmus Schumacher
c/o autorenglück.de
Franz-Mehring-Str. 15
01237 Dresden
Germany

Email: info@rasmus-song.de

2. General legal bases

Personal data is processed only where a legal basis exists. Depending on the processing activity, the relevant legal bases are in particular:

  • Article 6(1)(a) GDPR where you have given consent,
  • Article 6(1)(b) GDPR where processing is necessary for a contract or pre-contractual steps,
  • Article 6(1)(c) GDPR where processing is necessary to comply with a legal obligation, and
  • Article 6(1)(f) GDPR where processing is necessary for legitimate interests that are not overridden by your interests or fundamental rights.

You may withdraw consent at any time with effect for the future.

3. Website access, hosting and server logs

When you access this website, technically necessary data is processed. This may include your IP address, date and time of access, the requested address and file, amount of data transferred, HTTP status code, referring page, browser type and version, operating system and internet service provider.

This processing is necessary to deliver the website, maintain its stability and security, identify errors and prevent misuse. The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure and reliable operation of this website. Where the website is accessed in connection with a contract or steps prior to entering into a contract, Article 6(1)(b) GDPR also applies.

The technical hosting provider may receive and process this data as a processor. Server logs are deleted once they are no longer required for the stated purposes. They may be retained for longer where necessary to investigate a security incident, establish or defend legal claims, or comply with legal obligations.

The website also contains an internal search function. The search term and technically necessary access data are processed on the web server. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is providing a user-friendly site search.

4. Contact by email

If you contact me by email, I process the information you provide, in particular your email address, name, the content of your message and any other information you choose to include.

For booking, contract or quotation enquiries, the legal basis is Article 6(1)(b) GDPR. For other enquiries, the legal basis is Article 6(1)(f) GDPR; the legitimate interest is responding properly to your enquiry. Where a statutory retention obligation applies, Article 6(1)(c) GDPR also applies.

The data is deleted when the enquiry has been fully dealt with, unless a legal retention requirement or a legitimate interest in further storage, such as establishing or defending legal claims, applies. The technical email provider may process the data as a processor.

5. Font Awesome via cdnjs/Cloudflare

This website loads a Font Awesome style sheet through the cdnjs content delivery network to display icons. cdnjs is provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When a page is opened, your browser connects directly to Cloudflare. Cloudflare may process data such as your IP address, the time of access, the requested file, the referring address, browser information and operating-system information.

The purpose is to display the icons used on the website consistently and reliably. The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the functional and consistent presentation of the website. Further information is available in Cloudflare’s Privacy Policy.

6. YouTube videos and preview images

This website embeds videos provided by YouTube. For users in the European Economic Area, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, cannot be ruled out.

The video players are not loaded immediately. However, certain preview images are retrieved from the YouTube domains img.youtube.com or i.ytimg.com when a page is opened. As a result, Google receives data including your IP address, the time of access, and browser, device and referrer information. The legal basis for loading the preview images is Article 6(1)(f) GDPR. The legitimate interest is the visual presentation of the music videos offered on this website.

Only when you deliberately activate a video using the play button is the player loaded from youtube-nocookie.com in privacy-enhanced mode. This establishes a connection to Google. Google may process the playback event, IP address, device and browser information and other usage data, and may store or access information on your device. If you are signed in to Google, the activity may be associated with your account.

Activating the player is voluntary. Where consent is required, the legal basis is Article 6(1)(a) GDPR and, for storing or accessing information on your device, Section 25(1) TDDDG. You can avoid activating the player by not pressing the play button. Data already transferred cannot be retrieved by a later withdrawal of consent.

According to YouTube, privacy-enhanced mode reduces the use of playback for personalisation, but it does not prevent all data transfers. Further information is available in Google’s Privacy Policy and the YouTube Terms of Service.

7. Cookies and similar technologies

This website does not itself use analytics or marketing cookies and does not operate its own visitor tracking. Strictly necessary cookies or comparable storage technologies may be used where required for a function expressly requested by you or for website security. After you voluntarily activate a YouTube video, YouTube may use cookies or other storage technologies. Please see the section “YouTube videos and preview images” for details.

8. External links and social networks

This website contains ordinary links to external services, including YouTube, Facebook, Instagram, Spotify and Deezer. An ordinary link does not by itself create a connection to the relevant provider. Once you click a link, you leave this website and the external provider is responsible for the subsequent processing of personal data.

9. Recipients and international data transfers

Personal data is disclosed only where a legal basis exists. Categories of recipients may include hosting and email service providers, technical service providers, Cloudflare, Google/YouTube, and public authorities where disclosure is required by law.

Cloudflare and Google may process data in the United States and other countries outside the European Economic Area. For transfers to the United States, the adequacy decision for the EU-US Data Privacy Framework may be relied on where the recipient is appropriately certified. Otherwise, transfers may be based on the European Commission’s Standard Contractual Clauses and supplementary safeguards. Despite these measures, countries outside the EEA may provide a level of data protection that differs from that of the European Union.

10. Retention periods

Where no specific retention period is stated in this Privacy Policy, personal data is deleted when it is no longer required for the purpose for which it was processed. Data may be retained for longer where statutory retention obligations apply or where it is required for the establishment, exercise or defence of legal claims.

11. Your rights

Subject to the applicable legal requirements, you have in particular the following rights:

  • access under Article 15 GDPR,
  • rectification under Article 16 GDPR,
  • erasure under Article 17 GDPR,
  • restriction of processing under Article 18 GDPR,
  • data portability under Article 20 GDPR,
  • objection to processing based on Article 6(1)(e) or (f) GDPR under Article 21 GDPR, and
  • withdrawal of consent with effect for the future under Article 7(3) GDPR.

To exercise your rights, email info@rasmus-song.de. Under Article 77 GDPR, you also have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. In Saxony, you may contact the Saxon Data Protection and Transparency Commissioner.

12. Requirement to provide data and automated decision-making

The technical data generated when the website is accessed is necessary to provide the website. Information supplied by email is voluntary; however, an enquiry cannot be answered without the contact information required for a response. No automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place.

13. Data security

This website uses an encrypted HTTPS connection. This protects data in transit against unauthorised interception. Complete protection of data transmitted over the internet cannot nevertheless be guaranteed.

14. Changes to this Privacy Policy

This Privacy Policy will be updated if the website, the services used or the legal requirements change.

Last updated: 19 September 2026