Data Protection Statement
Last updated: 1 October 2026
This statement explains the legal side of the plain-language Privacy Policy.
Controller
Joy Infant James, Munich, Germany.
Email: joyinfant99@gmail.com
What is processed, why, and on what legal basis
- Analytics (Google Analytics, Microsoft Clarity). Pages visited, time on page, device and browser type, approximate location, clicks and scrolling. Purpose: understanding how the site is used so I can improve it. Legal basis: your consent, Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Nothing is loaded before you accept.
- Contact form on the music pages. Your name, email address and message. Purpose: answering your message. Legal basis: Art. 6(1)(f) GDPR (my legitimate interest in replying to people who write to me).
- Technical server logs. IP address, browser type and time of the request. Purpose: security and stable operation. Legal basis: Art. 6(1)(f) GDPR.
- Your cookie choice. Stored in your browser (local storage) so it can be remembered. This is needed to respect your decision.
I do not use automated decision-making or profiling, and I do not sell personal data.
Recipients and service providers
- Vercel Inc. (website hosting)
- Google Ireland Ltd. / Google LLC (Google Analytics, and YouTube when a video is played)
- Microsoft Corporation (Clarity)
- FormSubmit (delivers music-page contact form messages to my inbox)
- Cloudinary (image delivery)
- Spotify AB (embedded player on music pages)
Some of these providers are based in the USA. Where data is transferred there, it relies on the safeguards the provider offers, such as the EU-US Data Privacy Framework or standard contractual clauses.
How long data is kept
- Analytics data: for the period set in the respective analytics account, and you can stop it at any time by rejecting or withdrawing consent.
- Contact form messages: only as long as needed to reply, then deleted.
- Server logs: for a short period, as set by the hosting providers.
Your rights
Under the GDPR you have the right to:
- access the data held about you,
- have incorrect data corrected,
- have your data erased,
- restrict how it is processed,
- receive it in a portable format,
- object to processing based on legitimate interest, and
- withdraw consent at any time, with effect for the future. You can do this with at the bottom of each page.
To use any of these rights, write to joyinfant99@gmail.com.
Complaints
You can complain to a data protection authority. For Bavaria this is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), www.lda.bayern.de.
Security
The site is served over an encrypted (HTTPS) connection.
Changes
I will update this statement and its date if the way the site works changes.