Privacy Policy

Last updated: December 2025

This website is accessible only to a closed, internally defined group of individuals and is used solely for internal communication and documentation within a circle of colleagues.

With this Privacy Policy, I inform users about the processing of personal data when visiting the website.

1. Controller

Nina Hinderberger

2. Purpose and Legal Basis of Data Processing

When accessing this password-protected website, only those personal data are processed that are technically necessary to provide the website.

The legal basis for this is Art. 6 (1) lit. f GDPR (legitimate interest in the technically secure provision of the content).

No processing is carried out for analytics, tracking, or marketing purposes.

3. Data Processing When Accessing the Website

When visiting the website, the web server automatically collects the following data (“server log files”):

IP address
Date and time of access
Retrieved file
Browser type and operating system used
Referrer URL (if transmitted)

These data are required for technical and security purposes and are automatically deleted by the hosting provider.

No combination of this data with other data or any evaluation takes place.

4. No Disclosure to Third Parties

No personal data are shared with third parties.
No data is transferred to third countries.

5. Only Technically Necessary Cookies

The website uses only technically necessary cookies, required to maintain the protected access.

No cookies for tracking, analytics, or advertising are set.

6. Local Use of Fonts

All fonts used on this website (e.g. Google Fonts or other fonts) are hosted locally on the server.

No connection is made to external services such as Google Fonts, Adobe Fonts, or similar.

7. Embedded Content and Forms

This website uses the following:

Spotify embeds

Some pages include embedded Spotify content.
When you play these elements, a connection to Spotify’s servers is established.
Spotify may process technical data (e.g., IP address).
For more information, please refer to Spotify’s own Privacy Policy.

Forms (e.g., guestbook or “Add a song”)

The website contains simple forms through which users can voluntarily submit content.
Only the data entered into the form is processed.
This data is used solely for internal purposes and is not shared with third parties.
No tracking or analytics tools are used in connection with these forms.

8. Storage Period

Server log files are automatically deleted by the hosting provider as soon as they are no longer required to ensure the secure technical operation of the website.

9. Rights of Data Subjects

Users have the following rights under the GDPR:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to object (Art. 21 GDPR)

Requests can be submitted to the contact address mentioned above.

10. Amendments to This Privacy Policy

This Privacy Policy will be updated as necessary if technical or legal changes require it.