Privacy Policy

July 2026  ·  Data controller: Hanno Müller-Brachmann  ·  Contact: prof.brachmann@gmail.com

Contact

The controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is:

Information pursuant to Article 13 of the GDPR

Hochschule für Musik Karlsruhe
Postal address: Postfach 6040
76040 Karlsruhe
Tel.: +49-(0)721-66 29-0
Fax: +49-(0)721-66 29-266
E-Mail: prof.brachmann@gmail.com

If you have any questions regarding data protection or wish to exercise your rights as a data subject, you can contact me at any time using the contact details provided above.

Your Rights

You may request access to your personal data at any time and also ask for rectification, erasure, or restriction of processing. You also have the right to object to processing in certain cases (see details below).

Any consent you have given — such as loading an embedded video — applies only to the current page view and can be ended at any time by leaving or reloading the page. You also have the right to lodge a complaint with the data protection supervisory authority responsible for your place of residence.

General Overview

Below, I explain which data is collected and how long it is stored.

Which categories of data are generated?

  • Technical connection data – information automatically generated when my website is accessed, such as IP address, browser version, or the pages visited
  • Communication data – information you actively send me by email
  • Media access data – when embedded Vimeo videos are played actively

What is this data used for?

  • Reliable and secure operation of this website
  • Responding to your inquiries
  • Displaying video content after your express consent
  • Complying with legal documentation obligations

Hosting & Server Operation

The technical infrastructure of this website — including web servers, storage, and network connectivity — is provided by:

Hosting Provider

united-domains GmbH
Gautinger Straße 10
82319 Starnberg
Germany

All data arising from the operation of the website is stored on this provider’s servers. A data processing agreement pursuant to Art. 28 GDPR is in place with united-domains, legally regulating the compliant handling of the data.

Art. 6(1)(f) GDPR The legal basis is the legitimate interest in a technically stable and securely operated website.

Log Files

Each time a page is accessed, the web server automatically creates a log entry. These log data are generated without any active input and are necessary for the secure operation of the website.

The following information is stored, among other things:

  • IP address of the requesting device (in anonymized form)
  • Date and exact time of access
  • Requested page and HTTP status code of the server response
  • Browser used and operating system
  • Screen resolution and the previously visited page (referrer URL)

These records are used solely for technical troubleshooting, protection against unauthorized access, and monitoring server load. They are not combined with other data sources or evaluated for advertising purposes.

Art. 6(1)(f) GDPR Logging is based on legitimate interests. The data is automatically deleted after 14 days at the latest.

No Cookies, No Tracking

This website does not set any cookies of its own and does not use any analytics or tracking services. External content (Vimeo videos, see below) is only loaded after you have expressly consented by clicking. A cookie banner is therefore not required.

Embedded Vimeo Videos

Some pages contain video recordings of my performances and concerts hosted on the Vimeo platform (Vimeo Inc., 555 West 18th Street, New York, NY 10011, USA).

For privacy reasons, these videos are technically blocked until you actively consent: instead of the video, you will initially see only a notice with the button “Load video”. Only after you click — and thereby give your consent — will your browser establish a direct connection to Vimeo’s servers. The player is embedded with the “Do Not Track” parameter, which disables Vimeo’s tracking features. The following information may then be transmitted during playback:

  • Your current IP address
  • Technical device data and the time of access
  • Account information, if you are logged in to Vimeo

Vimeo Inc. is based in the United States. The transfer of your data to the USA is legally safeguarded by EU Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework (DPF).

Your consent applies only to the current page view and is not stored. As soon as you leave or reload the page, the video is blocked again and no further data is transmitted to Vimeo. Further information on Vimeo’s data protection practices can be found at vimeo.com/privacy.

Art. 6(1)(a) GDPR Section 25(1) TDDDG The legal basis is your explicit consent.

Contact by Email

Whether you are making a booking inquiry, contacting me on behalf of the press, or simply sending a general message, when you email me I process the information contained in your message (name, email address, and message text) in order to handle your request.

The data is used exclusively for communication with you and is not passed on to third parties. Once your request has been fully handled, the data will be deleted unless legal retention obligations (for example under commercial or tax law) require longer storage.

Art. 6(1)(b) GDPR Pre-contractual or contractual communication
Art. 6(1)(f) GDPR Legitimate interest in effective communication

Transmission Security (HTTPS)

All connections to this website are transmitted using encrypted HTTPS (TLS). The padlock icon in your browser’s address bar and the https:// prefix confirm that your connection is secure. This helps prevent third parties from reading or altering transmitted data.

Storage Period & Deletion

I store personal data only for as long as the respective processing purpose requires. Once that purpose no longer applies — for example after an inquiry has been answered or after technical retention periods have expired — the data will be deleted or anonymized to the extent that no personal reference remains.

This does not apply to data subject to statutory retention obligations, such as those under the German Commercial Code (HGB) or Fiscal Code (AO). These periods are generally six or ten years. During this time, the data is protected against unauthorized further processing.

Recipients of Data

In the course of operating this website, data is shared with the following recipients:

  • united-domains GmbH (hosting, Germany) – data processing agreement under Art. 28 GDPR
  • Vimeo Inc. (USA) – only after your consent; safeguarded through Standard Contractual Clauses and the EU-U.S. Data Privacy Framework

Your personal data will not be disclosed to any other companies, authorities, or individuals unless you have expressly consented to this or a legal obligation exists.