Privacy Policy

1. Controller

Jonathan Meinhof
Rosenstr. 10
53111 Bonn
Germany

Email: denada.4music@gmail.com

2. Hosting through GitHub Pages

This website is hosted through GitHub Pages. When you access the website, GitHub processes technical connection data required to deliver and secure the site. This can include your IP address, date and time of access, requested page or file, referrer URL, browser type and version, operating system, and device information. GitHub states that visitors' IP addresses are logged and stored for security purposes.

The purpose is the secure, stable, and technically correct delivery of the website. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is the reliable and secure operation of this website. The relevant providers are GitHub, Inc. and, for certain processing in Europe, GitHub B.V.

GitHub may process data in the United States and other countries. GitHub participates in the EU-U.S. Data Privacy Framework and generally relies on the European Commission's Standard Contractual Clauses where an adequacy decision does not apply. I do not receive or have access to GitHub's visitor logs. GitHub determines the storage period for data processed in its own systems.

Further information: GitHub Pages and GitHub Privacy Statement.

3. Domain registration and DNS

The domain denada.rocks is registered through Squarespace Domains II LLC and managed through Squarespace. Technical connection data such as the requested domain, IP address, date and time, and DNS request data can be processed when the domain is resolved. The purpose is to make the website reachable and to protect the domain infrastructure. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is the reliable and secure provision of the domain.

Squarespace services for users in the European Region are generally provided through Squarespace Ireland Limited. Squarespace group companies may process data outside the EEA, including in the United States. Squarespace relies on the EU-U.S. Data Privacy Framework and, where required, Standard Contractual Clauses. Further information is available in the Squarespace Privacy Policy.

4. Contact by email, telephone, and Instagram

If you contact me, I process the information necessary to handle and answer your request. Depending on the contact channel, this includes your name or profile name, email address or telephone number, message content, attachments, visible profile information, date and time, and technical delivery metadata. I may also retain correspondence needed to document the request.

The legal basis is Art. 6(1)(b) GDPR when the request relates to a contract or pre-contractual measures. For other requests, the legal basis is Art. 6(1)(f) GDPR; my legitimate interest is responding to messages addressed to me and maintaining necessary correspondence. Without the information required for the chosen contact channel, I may be unable to respond.

Email through Gmail

I use Gmail to receive and send email. For users in the EEA, the service is provided by Google Ireland Limited; data may also be processed by Google LLC and other group companies outside the EEA, including in the United States. Google participates in the EU-U.S. Data Privacy Framework and uses Standard Contractual Clauses where required. Further information: Google Privacy Policy and Google data transfer frameworks.

Contact through Instagram

If you contact me through Instagram, Meta Platforms Ireland Limited processes your data independently under its own terms. Meta may also transfer data to Meta Platforms, Inc. and other recipients outside the EEA. Information about the processing and transfer mechanisms is available in the Meta Privacy Policy.

5. Spotify player

The Spotify player is blocked by default. It is loaded only when you select “Consent and load Spotify.” When loaded, a direct connection to Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden, is established. Your IP address, browser and device information, referrer information, and information about this page visit are transmitted to Spotify. Spotify and third parties may store or access cookies and similar technologies on your device and use the resulting usage information to provide, secure, analyse, and personalise the player and Spotify services.

The legal basis for the transmission and subsequent processing initiated by the embed is your consent under Art. 6(1)(a) GDPR. The legal basis for storing or accessing information on your device is your consent under § 25(1) TDDDG. You can refuse without disadvantage and can withdraw consent at any time by selecting “Disable Spotify.” Consent is not saved for future page views.

Disabling the player removes the embed and prevents further connections by that embed. It cannot delete cookies or identifiers that Spotify may already have stored. You can remove these through your browser settings and manage available Spotify choices as described in the Spotify Cookies Policy. Spotify may process data outside the EEA and describes the applicable adequacy decisions, Standard Contractual Clauses, and additional safeguards in its Privacy Policy.

6. External links, including SubmitHub

Normal links to SubmitHub, Spotify, Apple Music, Deezer, YouTube Music, and other external services do not establish a connection to those services until you click the respective link. When you click a link, you leave this website. The destination provider then receives the connection data required to open its page and processes that data under its own responsibility and privacy policy. Further information about SubmitHub is available in its Privacy Policy.

7. Recipients and international transfers

Depending on how you use the website, recipients may include GitHub, Inc., GitHub B.V., Squarespace Ireland Limited, Squarespace Domains II LLC, Google Ireland Limited, Google LLC, Meta Platforms Ireland Limited, Meta Platforms, Inc., and Spotify AB. External providers may involve additional processors listed in their privacy information.

Where personal data is transferred outside the EEA, the provider may rely on an adequacy decision, including the EU-U.S. Data Privacy Framework where applicable, or on safeguards such as the European Commission's Standard Contractual Clauses. Details and current recipients are available through the provider links in the relevant sections above.

8. Storage periods

I delete general enquiries and the related correspondence no later than six months after the matter has been finally resolved, unless the information is still required to establish, exercise, or defend legal claims or a longer statutory retention obligation applies. Contractual, business, accounting, and tax-relevant correspondence is retained for the applicable statutory retention period and then deleted. Data processed independently by external providers is retained according to their respective policies; I cannot control or shorten those periods.

9. Your rights

Subject to the legal requirements, you have the following rights:

• Right of access under Art. 15 GDPR
• Right to rectification under Art. 16 GDPR
• Right to erasure under Art. 17 GDPR
• Right to restriction of processing under Art. 18 GDPR
• Right to data portability under Art. 20 GDPR
• Right to withdraw consent at any time with future effect under Art. 7(3) GDPR
• Right to lodge a complaint with a supervisory authority under Art. 77 GDPR

11. Supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The authority competent in North Rhine-Westphalia is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).

12. Last updated

29 July 2026