Privacy Policy
With the following privacy policy, I would like to inform you about the types of your personal data (hereinafter also referred to as "data" for short) that I process, for what purposes and to what extent. The privacy policy applies to all processing of personal data carried out by us, both in the context of providing our services and, in particular, on my website, in mobile applications and within external online presences, such as my social media profiles (hereinafter collectively referred to as "Online Offer").
The terms used are not gender-specific.
The protection of your personal data is important to me. Compliance with the legal provisions, in particular the European Data Protection Regulation ("General Data Protection Regulation” (“GDPR”)) and the german Bundesdatenschutzgesetz ("BDSG"), is a matter of course for me.
Status: May 2022
Wherever this privacy policy refers to "I" or "me", this refers to the person listed below in section 1.1.1.
General provisions
1.1 Name and contact details of the responsible person
The responsible person in the sense of the European Data Protection Regulation ("General Data Protection Regulation” (“GDPR”)) and service provider in the sense of the Telemediengesetz(TMG) is
- Jonas Wintersteiger
- Theresienstraße 42
- 94032 Passau
- Tel.: +49 173 8583540
- E-Mail: jo_winti@web.de
Overview of processed data
The following overview summarizes the types of data processed and the purposes of their processing, and refers to the data subjects.
Types of data processed
- Inventory data (e.g. names)
- Content data (e.g. entries in online forms)
- Contact data (e.g. e-mail)
- Meta/communication data (e.g. device information, IP addresses)
Categories of affected persons
- Users (e.g., website visitors, users of online services)
Purposes of processing
- Provision of our online offer and user friendliness
- Contact requests and communication
- Safety measures
- Management and response to requests
Data subject rights
According to the the European Data Protection Regulation ("General Data Protection Regulation” (“GDPR”)), you are entitled to the following data subject rights, among others. To assert them, please contact Jonas Wintersteiger (see above under section 1.1). For identification purposes, please provide me with the following information:
- Name
- Postal address
- E-Mail-address
In order to be able to process your request as well as for identification purposes, I point out that I will process your personal data according to Art. 6 para. 1 lit. c European Data Protection Regulation ("General Data Protection Regulation” (“GDPR”)). You will receive an answer to your request regarding your data subject rights after the legal deadline of 4 weeks at the latest.
1.2 Information, correction, deletion, restriction of processing and data portability
- Art. 15 European Data Protection Regulation ("General Data Protection Regulation” (“GDPR”)): Right to information of the data subject
You have the right to obtain information from me about what data I process about you.
- Art. 16 European Data Protection Regulation ("General Data Protection Regulation” (“GDPR”)): Right of correction
If the data concerning you is incorrect or incomplete, you may request that incorrect information be corrected or that incomplete information be completed.
- Art. 17 European Data Protection Regulation ("General Data Protection Regulation” (“GDPR”)): Right to deletion
Under the conditions of Art. 17 European Data Protection Regulation ("General Data Protection Regulation” (“GDPR”)), you can demand the deletion of your personal data. Your right to erasure depends, among other things, on whether the data concerning you is still needed by me to fulfil my contractual and legal obligations.
- Art. 18 European Data Protection Regulation ("General Data Protection Regulation” (“GDPR”)): Right to restriction of processing
Under the conditions of Art. 18 DS-GVO, you may request the restriction of the processing of personal data concerning you.
- Art. 20 European Data Protection Regulation ("General Data Protection Regulation” (“GDPR”)): Right to data portability
Under the conditions of Art. 20 European Data Protection Regulation ("General Data Protection Regulation” (“GDPR”)), you may receive your personal data that you have provided to me in a structured, common and machine-readable format or request that it be transferred to another controller.
2. Revocation of consent
If you have given your consent to the processing of your data, you may revoke it at any time. Such a revocation affects the permissibility of the processing of your personal data after you have expressed it to me. If applicable, the permissibility of processing the data on the basis of other legal grounds also remains unaffected. If your consent was the exclusive legal basis for the processing of your data, in particular if there is no legitimate interest on my part in the processing pursuant to Art. 6 (1) sentence 1 lit. f European Data Protection Regulation ("General Data Protection Regulation” (“GDPR”)), I will delete the data immediately after revoking your consent.
3. Object to certain processing operations pursuant to Art. 21 of the European Data Protection Regulation ("General Data Protection Regulation” (“GDPR”))
Insofar as I base the processing of your personal data on a balancing of interests (Art. 6 para. 1 p.1 lit. e or f European Data Protection Regulation ("General Data Protection Regulation” (“GDPR”)), you may object to the processing of your data. When exercising such an objection, please explain the reasons why I should not process your personal data as I have done. In the event of your justified objection, I will review the merits of the case and either cease or adapt the data processing or show you my compelling legitimate grounds on the basis of which I will continue the processing.
4. Right of appeal to the supervisory authority
You have the right to complain to the supervisory authority if you believe that the processing of your data is not lawful. The address of the supervisory authority responsible for me is: Der Bayerische Landesbeauftragte für den Datenschutz, Postfach 22 12 19, 80502 München.
5. Receiver
In order to provide my online offer securely and efficiently, I use the services of a web hosting provider from whose servers (or servers managed by them) the online offer can be accessed. For these purposes, I may use infrastructure and platform services, computing capacity, storage space and database services as well as security services and technical maintenance services. The data processed in the course of providing the hosting service may include all information relating to the users of my online service that is generated in the course of use and communication. This regularly includes the IP address, which is necessary to be able to deliver the contents of online offers to browsers, and all entries made within my online offer or from websites. The web space is provided on my behalf by the company
- Hetzner Online GmbH
- Industriestr. 25
- 91710 Gunzenhausen
- Germany
Collection of access data and log files: I myself (or my web hosting provider) collect data on every access to the server (so-called server log files). The server log files may include the address and name of the web pages and files accessed, the date and time of the access, the amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page) and, as a rule, IP addresses and the requesting provider.
The server log files can be used on the one hand for security purposes, e.g. to avoid overloading the servers (especially in the case of abusive attacks, so-called DDoS attacks) and on the other hand to ensure the utilisation of the servers and their stability.
- Types of data processed: Content data (e.g. entries in online forms), usage data (e.g. websites visited, interest in content, access times), meta/commqunication data (e.g. device information, IP addresses).
- Data subjects: Users (e.g. website visitors, users of online services).
- Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f. European Data Protection Regulation ("General Data Protection Regulation” (“GDPR”))).
6. Presence in the social networks (social media)
I maintain online presences within social networks and process user data within this framework in order to communicate with users active there or to offer information about me. Insofar as you register there or want to use these services for yourself in any other way, your data will be processed in accordance with the platform's terms of use and data protection provisions.
I would like to point out that user data may be processed outside the European Union. This may result in risks for the users because, for example, the enforcement of the rights of the GDPR may be more difficult or impossible.
Furthermore, user data within social networks is usually processed for market research and advertising purposes. For example, usage profiles can be created based on the usage behaviour and resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements within and outside the networks that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behaviour and the interests of the users are stored. Furthermore, data independent of the devices used by the users may also be stored in the usage profiles (especially if the users are members of the respective platforms and are logged in to them).
For a detailed presentation of the respective forms of processing and the options to object (opt-out), we refer to the data protection declarations and information provided by the operators of the respective networks.
In the case of requests for information and the assertion of data subject rights, we would also like to point out that these can be asserted most effectively with the providers. Only the providers have access to the users' data and can take appropriate measures and provide information directly. Should you still need help, please do not hesitate to contact me.
- Types of data processed: inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. entries in online forms), usage data (e.g. websites visited, interest in content, click behaviour, access times), meta/communication data (e.g. device information, IP addresses).
- Data subjects: Users (e.g. website visitors, users of online services)
- Purposes of processing: contact requests and communication, tracking (e.g. interest/behavioural profiling, use of cookies), remarketing.
- Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f. European Data Protection Regulation ("General Data Protection Regulation” (“GDPR”)))
Services used and service providers:
- Instagram: Social network; service provider: Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA; parent company: Meta, 1 Hacker Way, Menlo Park, CA 94025, USA; website: https://www.instagram.com; privacy policy: https://instagram.com/about/legal/privacy.
7. Presence on video platforms
I maintain online presences on the video platforms and process user data in this context in order to communicate with the users active there or to offer information about me.
I would like to point out that user data may be processed outside the European Union. This may result in risks for the users because, for example, the enforcement of the users' rights could be made more difficult.
Furthermore, user data is usually processed within video platforms for market research and advertising purposes. For example, usage profiles can be created based on the usage behaviour and resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements within and outside the video platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behaviour and the interests of the users are stored. Furthermore, data independent of the devices used by the users may also be stored in the usage profiles (especially if the users are members of the respective video platform and are logged in to them).
For a detailed presentation of the respective forms of processing and the options to object (opt-out), we refer to the data protection declarations and information provided by the operators of the respective video platforms.
In the case of requests for information and the assertion of data subject rights, we would also like to point out that these can be asserted most effectively with the providers. Only the providers have access to the users' data and can take appropriate measures and provide information directly. Should you still need help, please do not hesitate to contact me.
- Types of data processed: inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. entries in online forms), usage data (e.g. websites visited, interest in content, click behaviour, access times), meta/communication data (e.g. device information, IP addresses).
- Data subjects: Users (e.g. website visitors, users of online services)
- Purposes of processing: contact requests and communication, tracking (e.g. interest/behavioural profiling, use of cookies), remarketing.
- Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f. European Data Protection Regulation ("General Data Protection Regulation” (“GDPR”)))
Services used and service providers:
- Youtube: Video platform. Service provider: Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA, Parent company: Google, Google Ireland LimitedGordon
House, Barrow Street, Dublin 4, Ireland, website: https://www.youtube.com; privacy policy: https://policies.google.com/privacy?hl=de
8. Transmission to third countries
Data processed by YouTube:
I use a YouTube channel owned by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
I would like to point out that you use the YouTube channel offered here and its functions on your own responsibility. This applies in particular to the use of the "Discussion" function.
Information on which data is processed by Google and for which purposes can be found in Google's privacy policy:
https://policies.google.com/privacy?hl=de&gl=de#infocollect
I have no influence on the type and scope of the data processed by Google, the way it is processed and used, or the transfer of this data to third parties. I also have no effective means of control in this respect.
By using Google, your personal data will be collected, transferred, stored, disclosed and used by Google and transferred to, and stored and used in, the United States, Ireland and any other country in which Google does business, regardless of your country of residence. There will be a transfer to Google affiliates and other trusted companies or individuals who process it on Google's behalf.
Google processes your voluntarily entered data such as name and user name, email address and telephone number. Google also processes the content that you create, upload or receive from others when using the services. This includes, for example, photos and videos that you save, documents and spreadsheets that you create, and comments that you write on YouTube videos.
On the other hand, Google also evaluates the content you share to determine what topics you are interested in, stores and processes confidential messages you send directly to other users, and can determine your location using GPS data, wireless network information or your IP address in order to send you advertising or other content.
Google may use analysis tools such as Google Analytics for evaluation purposes. The Federal Network Agency has no influence on the use of such tools by Google and was not informed of such potential use. If tools of this kind are used by Google for the Federal Network Agency's YouTube channel, the Federal Network Agency has neither commissioned this nor supported it in any other way. Nor is the data obtained during the analysis made available to it. Only certain subscribers' profiles can be viewed by the Federal Network Agency via its account. Moreover, the Federal Network Agency has no way of preventing or stopping the use of such tools on its YouTube channel.
Finally, Google also receives information when you view content, for example, even if you have not created an account. This so-called "log data" can be the IP address, the browser type, the operating system, information about the website you previously visited and the pages you viewed, your location, your mobile phone provider, the terminal device you use (including device ID and application ID), the search terms you used and cookie information.
You have options to restrict the processing of your data in the general settings of your Google account. In addition to these tools, Google also offers specific privacy settings on YouTube. You can find out more about this in Google's guide to privacy in Google products:
You can find more information on these points in Google's privacy policy under the term "Privacy settings":
Furthermore, you have the option of requesting information via the Google data protection form:
https://support.google.com/policies/answer/9581826?visit_id=6370545323842%2099914-2421490167&hl=de&rd=3
9. Data processed by Instagram
Note on processing of your data collected on this website in the USA by Instagram: If you voluntarily use data from me on Instagram, you also consent to your data being processed in the USA in accordance with Art. 49 (1) sentence 1 lit. a European Data Protection Regulation ("General Data Protection Regulation” (“GDPR”)). The USA has been assessed by the European Court of Justice as a country with an insufficient level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without any legal remedy.
9. Storage period
I will delete your personal data no later than two years after the purposes for which it was processed have been fulfilled.
I may also store data if this is required by national or EU law.
Longer storage may also be necessary in individual cases due to the assertion or possible assertion of claims against me in connection with a contract or pre-contractual measures.
10. Processing of data transmitted in the background
The type and scope of the processing of your personal data differs depending on whether you visit my website only to retrieve information or participate in the "Sounds of Europe" project or contact me via the contact form.
During the mere informational use of the website, i.e. if you do not transmit any content to me, I collect the following data and store it in the log files of my system. This includes the following data:
- IP address,
- Date and time of the request,
- Time zone difference from Greenwich Mean Time (GMT),
- Content of the request (concrete page),
- Access status/HTTP status code,
- the amount of data transferred in each case,
- Website from which the request comes,
- operating system and its interface,
- Browser, language and version of the browser software.
The legal basis for the processing of personal data (IP address) is Art. 6 para. 1 lit. f DS-GVO. The processing of the personal data serves me to display my website to you and to ensure the stability and security of this website. This is also my legitimate interest in processing this data.
11. Cookies
All cookies used on the website are solely for the functionality of the website.
12. Participation in the "Sounds of Europe" project
If you participate in the project "Sounds of Europe" and send me your sounds, photos, etc. (hereinafter "Content"), I will process your personal data. (hereinafter referred to as "content"), I process the personal data you provide (e.g. first name, email address, information about the sound).
I process the personal data within the framework of the "Sounds of Europe" project and for the transmission of further information on the further course of the "Sounds of Europe" project.
The legal basis for the processing of your data is Art. 6 para. 1 lit. b European Data Protection Regulation ("General Data Protection Regulation” (“GDPR”)) (processing for the performance of a contract), Art. 6 para. 1 lit. f European Data Protection Regulation ("General Data Protection Regulation” (“GDPR”)) (legitimate interests).
13. Contact (contact form, e-mail)
It is possible to contact us via the e-mail address provided. In this case, your personal data transmitted with the e-mail will be stored.
The legal basis for the processing of data when using the contact form or sending an email is Art. 6 para. 1 lit. a DS-GVO. If the contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b European Data Protection Regulation ("General Data Protection Regulation” (“GDPR”)). Furthermore, the legal basis for the processing is Art. 6 para. 1 lit. f European Data Protection Regulation ("General Data Protection Regulation” (“GDPR”)) (legitimate interests).
14. Amendment of my data protection notice
This privacy notice replaces all previous versions. I may change the notice at any time, so please check my website regularly for any updates. If the changes are significant, I will post a prominent notice on my website. In addition, I will send electronic notification of changes to our privacy notice as I deem appropriate.