Legal
Privacy Policy
1. Controller
2. Hosting & Technical Operation
This website is hosted by a third-party hosting provider. When you visit the site, your browser automatically transmits technical data to the server, including:
- IP address (anonymised where possible)
- Date and time of access
- Browser type and version
- Referring URL
- Pages visited
This data is processed on the basis of Art. 6(1)(f) GDPR (legitimate interest) to ensure the technical operation of the website.
3. Cookies
This website uses cookies โ small text files stored in your browser. We distinguish between:
Essential Cookies
Required for the website to function. No consent is required. These cannot be disabled.
Analytics Cookies (Google Analytics)
With your consent, we use Google Analytics 4 to understand how visitors interact with this site. Google Analytics uses cookies and transmits anonymised data to Google LLC servers in the USA. IP anonymisation is enabled. Legal basis: Art. 6(1)(a) GDPR. You may withdraw consent at any time via the cookie settings.
Embedded Content (Spotify, Apple Music, YouTube, Deezers, Amazon)
Pages on this site may contain Spotify embeds. When you interact with these embeds, Spotify (Spotify AB, Sweden) may set cookies and collect data per their own privacy policy. Legal basis: Art. 6(1)(a) GDPR.
Marketing (Facebook Pixel)
With your consent, we use the Meta Pixel (Facebook) to measure ad effectiveness and retarget visitors. Data is transmitted to Meta Platforms Ireland Ltd. Legal basis: Art. 6(1)(a) GDPR.
4. Contact Form
When you submit the contact form, the data you enter (name, email address, message) is transmitted to us by email and stored temporarily. This data is used solely to respond to your inquiry.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). Data is deleted once your inquiry has been resolved and no statutory retention periods apply.
5. Data Transfers to Third Countries
Some of the services used (Google, Meta) transfer data to the USA. These transfers are based on Standard Contractual Clauses (SCCs) approved by the European Commission pursuant to Art. 46(2)(c) GDPR.
6. Your Rights
Under the GDPR, you have the following rights:
- Access โ request a copy of your data (Art. 15)
- Rectification โ correct inaccurate data (Art. 16)
- Erasure โ request deletion of your data (Art. 17)
- Restriction โ limit processing of your data (Art. 18)
- Portability โ receive your data in a structured format (Art. 20)
- Objection โ object to processing based on legitimate interest (Art. 21)
- Withdraw consent โ at any time, without affecting prior processing
To exercise your rights, contact: contact@simon-neshama.com
You also have the right to lodge a complaint with your local data protection authority. In Germany, this is the relevant Landesbeauftragter fรผr Datenschutz in your state.
7. Retention Periods
Personal data is retained only as long as necessary for the stated purpose or as required by law (e.g. tax records: 10 years under German law). Contact form data is deleted once your inquiry is fully resolved.
8. Changes to This Policy
We may update this Privacy Policy from time to time. The current version is always available at this URL. The date at the top of the page indicates when the policy was last revised.
