Privacy policy

1. Controller

Mark Dickfeld
Carrer de les Roselles, 2
17310 Lloret de Mar
Girona, Spain
Email: mon.repos@icloud.com

2. The essentials

• This website sets no cookies and uses no analytics, tracking or advertising services.
• There are no social media plugins, no ad networks and no profiling.
• Video and music are delivered from our own server, not through YouTube or comparable services.
• Personal data essentially arise only when you write to us through a form.

3. Visiting the site and server logs

This website is hosted by Netlify, Inc., USA. When you open a page, your browser transmits technically necessary data which are recorded in server logs: IP address, date and time of the request, the file requested, the amount of data transferred, the referrer, and browser and operating system identifiers.

The purpose is technical operation, delivery of the content and the detection and prevention of attacks. The legal basis is our legitimate interest in a secure and functioning service, Article 6(1)(f) GDPR. A data processing agreement is in place with the host.

4. Enquiry form and event sign-up

When you submit the enquiry form or the sign-up form on the events page, we process the details you enter: name, email address, optionally a telephone number, the period you are interested in or the date you selected, the number of people, your message, and the language of the page on which you filled in the form.

The sole purpose is to handle and answer your enquiry. The legal basis is Article 6(1)(b) GDPR for steps prior to entering into a contract, and Article 6(1)(a) GDPR, since you expressly consent to storage in the form. You may withdraw that consent at any time; the lawfulness of processing carried out beforehand remains unaffected.

The details are stored in a database operated by Supabase, Inc., USA, with which a data processing agreement is in place. They are not passed on to third parties. You are under no obligation to use the form; without a name and an email address, however, we cannot answer an enquiry.

5. Availability calendar and list of dates

The availability calendar on the home page and the list of dates on the events page load their data from the same database when the page opens. In doing so your IP address is technically transmitted to the provider. Only periods and public event details are retrieved, never personal data of other guests. The legal basis is our legitimate interest in showing current availability, Article 6(1)(f) GDPR.

6. Storage on your device

No cookies are set. If you switch the background music on or off, that decision is noted in your browser’s session storage so that the music follows your choice. The entry is deleted when you close the browser tab and contains nothing but the value “on” or “off”. It serves solely the function you requested, Section 25(2) of the German TDDDG.

7. Fonts

The typefaces Cormorant Garamond and Inter are currently loaded from Google Fonts when the page opens, a service of Google Ireland Limited and Google LLC, USA. Your IP address is transmitted to Google in the process. The legal basis is our legitimate interest in a consistent presentation, Article 6(1)(f) GDPR. A switch to self-hosted fonts is planned; after that no connection to Google will take place.

8. Recipients and transfers to third countries

We share data only with service providers required to operate this website:

• Netlify, Inc., USA — hosting and delivery of the website
• Supabase, Inc., USA — database for availability, events and enquiries
• Google Ireland Limited / Google LLC, USA — provision of the typefaces

Where data are transferred to the USA, this takes place on the basis of the European Commission’s standard contractual clauses or an adequacy decision. Data are never passed on for advertising purposes.

9. Retention

Server logs are deleted automatically after a short period. We keep enquiries for as long as is necessary to deal with them and to answer follow-up questions, at most until statutory retention periods expire, and delete them afterwards. On request we delete an enquiry sooner.

10. Your rights

You have the right of access to the data held about you (Article 15 GDPR), to rectification (Article 16), to erasure (Article 17), to restriction of processing (Article 18), to data portability (Article 20) and to object to processing based on a legitimate interest (Article 21). Any consent given may be withdrawn at any time.

A message to the email address above is sufficient to exercise these rights.

Independently of this, you may lodge a complaint with a data protection supervisory authority. The competent authority is the Spanish Agencia Española de Protección de Datos (AEPD, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es); you may also contact the authority where you live.

11. No automated decision-making

No automated decision-making, including profiling, within the meaning of Article 22 GDPR takes place. We decide on enquiries personally.

12. Changes

We update this policy when the website or the legal situation changes. The version published here is the one that applies.