Privacy Policy
Contact
The controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is:
Information pursuant to Article 13 of the GDPR
Hochschule für Musik Karlsruhe
Postal address: Postfach 6040
76040 Karlsruhe
Tel.: +49-(0)721-66 29-0
Fax: +49-(0)721-66 29-266
E-Mail: prof.brachmann@gmail.com
If you have any questions regarding data protection or wish to exercise your rights as a data subject, you can contact me at any time using the contact details provided above.
Your Rights
You may request access to your personal data at any time and also ask for rectification, erasure, or restriction of processing. You also have the right to object to processing in certain cases (see details below).
Any consent you have given may be withdrawn at any time with future effect via the cookie banner or by sending me an email, without stating any reasons. You also have the right to lodge a complaint with the data protection supervisory authority responsible for your place of residence.
General Overview
Below, I explain which data is collected and how long it is stored.
Which categories of data are generated?
- Technical connection data – information automatically generated when my website is accessed, such as IP address, browser version, or the pages visited
- Communication data – information you actively send me by email
- Consent records – your selections in the cookie banner, documented by the consent management tool CCM19
- Media access data – when embedded Vimeo videos are played actively
What is this data used for?
- Reliable and secure operation of this website
- Responding to your inquiries
- Displaying video content after your express consent
- Complying with legal documentation obligations
Hosting & Server Operation
The technical infrastructure of this website — including web servers, storage, and network connectivity — is provided by:
Hosting Provider
united-domains GmbH
Gautinger Straße 10
82319 Starnberg
Germany
All data arising from the operation of the website is stored on this provider’s servers. A data processing agreement pursuant to Art. 28 GDPR is in place with united-domains, legally regulating the compliant handling of the data.
Art. 6(1)(f) GDPR The legal basis is the legitimate interest in a technically stable and securely operated website.
Log Files
Each time a page is accessed, the web server automatically creates a log entry. These log data are generated without any active input and are necessary for the secure operation of the website.
The following information is stored, among other things:
- IP address of the requesting device (in anonymized form)
- Date and exact time of access
- Requested page and HTTP status code of the server response
- Browser used and operating system
- Screen resolution and the previously visited page (referrer URL)
These records are used solely for technical troubleshooting, protection against unauthorized access, and monitoring server load. They are not combined with other data sources or evaluated for advertising purposes.
Art. 6(1)(f) GDPR Logging is based on legitimate interests. The data is automatically deleted after 14 days at the latest.
Cookie Consent (CCM19)
Certain services used on this website require your prior consent. To obtain and document these consents in compliance with legal requirements, I use the consent management tool CCM19 by Papoo Software & Media GmbH, Bonn.
When you first visit the website, a banner appears in which you can choose which content and services you want to enable. Your decision is stored in a technical cookie so that you do not have to make the same choice again on your next visit. All data processing by CCM19 takes place on servers in Germany — no transfer to third countries occurs.
A data processing agreement has been concluded with Papoo Software & Media GmbH.
Art. 6(1)(c) GDPR The legal basis is the statutory obligation to document consents in a verifiable manner. The cookie is deleted once you remove it in your browser or change your selection in the banner.
Embedded Vimeo Videos
Some pages contain video recordings of my performances and concerts hosted on the Vimeo platform (Vimeo Inc., 555 West 18th Street, New York, NY 10011, USA).
For privacy reasons, these videos are technically blocked until you actively consent. Only after you click “Play” — and thereby give your consent — will your browser establish a direct connection to Vimeo’s servers. The following information may then be transmitted:
- Your current IP address
- Technical device data and the time of access
- Account information, if you are logged in to Vimeo
Vimeo Inc. is based in the United States. The transfer of your data to the USA is legally safeguarded by EU Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework (DPF).
You can withdraw your consent at any time via the cookie banner or the cookie settings; from that point on, no further data will be transmitted to Vimeo. Further information on Vimeo’s data protection practices can be found at vimeo.com/privacy.
Art. 6(1)(a) GDPR Section 25(1) TDDDG The legal basis is your explicit consent.
Contact by Email
Whether you are making a booking inquiry, contacting me on behalf of the press, or simply sending a general message, when you email me I process the information contained in your message (name, email address, and message text) in order to handle your request.
The data is used exclusively for communication with you and is not passed on to third parties. Once your request has been fully handled, the data will be deleted unless legal retention obligations (for example under commercial or tax law) require longer storage.
Art. 6(1)(b) GDPR Pre-contractual or contractual communication
Art. 6(1)(f) GDPR Legitimate interest in effective communication
Transmission Security (HTTPS)
All connections to this website are transmitted using encrypted HTTPS (TLS). The padlock icon in your browser’s address bar and the https:// prefix confirm that your connection is secure. This helps prevent third parties from reading or altering transmitted data.
Storage Period & Deletion
I store personal data only for as long as the respective processing purpose requires. Once that purpose no longer applies — for example after an inquiry has been answered or after technical retention periods have expired — the data will be deleted or anonymized to the extent that no personal reference remains.
This does not apply to data subject to statutory retention obligations, such as those under the German Commercial Code (HGB) or Fiscal Code (AO). These periods are generally six or ten years. During this time, the data is protected against unauthorized further processing.
Legal Bases at a Glance
The following table summarizes the relevant legal bases:
| Processing activity | Legal basis |
|---|---|
| Website operation / log files | Art. 6(1)(f) GDPR Legitimate interest |
| Hosting (united-domains GmbH) | Art. 6(1)(f) GDPR Legitimate interest |
| Cookie consent via CCM19 | Art. 6(1)(c) GDPR Legal obligation |
| Vimeo videos (after consent) | Art. 6(1)(a) GDPR Section 25(1) TDDDG Consent |
| Email contact | Art. 6(1)(b) GDPR Art. 6(1)(f) GDPR |
Recipients of Data
In the course of operating this website, data is shared with the following recipients:
- united-domains GmbH (hosting, Germany) – data processing agreement under Art. 28 GDPR
- Papoo Software & Media GmbH (CCM19, Germany) – data processing agreement under Art. 28 GDPR
- Vimeo Inc. (USA) – only after your consent; safeguarded through Standard Contractual Clauses and the EU-U.S. Data Privacy Framework
Your personal data will not be disclosed to any other companies, authorities, or individuals unless you have expressly consented to this or a legal obligation exists.