Legal
Privacy Policy
English translation pending legal review. See the German original.
1. Data controller
The controller responsible for processing personal data on this website is:
Johannes Fresz
Altreick 21
01237 Dresden
Germany
Telephone: +49 151 50706575
Email:
2. Hosting and server logs
This website is hosted by DreamHost, LLC, in the United States. As part of its hosting services, DreamHost processes personal data generated when you access the website.
This includes your IP address, the date and time of access, the requested page or file, the HTTP status, the amount of data transferred and, where applicable, the referring page and information about your browser and operating system.
This data is used to deliver the website, diagnose technical problems and prevent misuse. The legal basis is Article 6(1)(f) GDPR. My legitimate interest is the secure and reliable operation of this website.
According to DreamHost, HTTP access logs are retained for seven days by default. In the event of a specific security incident, relevant data may be kept for longer where necessary to investigate the incident or pursue legal action.
DreamHost provides a Customer Data Processing Addendum. It includes EU Standard Contractual Clauses as safeguards under Article 46 GDPR for the transfers of personal data to the United States covered by the addendum.
DreamHost Customer Data Processing Addendum and contractual clauses
3. Visitor statistics
I use DreamHost’s server-side visitor statistics. These analyse the website’s access logs, including the number of visits, pages viewed, devices used and approximate geographic origin.
I use these statistics to understand how the website is used, identify technical problems and improve the site. The legal basis is Article 6(1)(f) GDPR. My legitimate interest is to meet visitors’ needs and improve the technical operation of the website.
I do not use an additional analytics service such as Google Analytics for this purpose.
4. Contact form and email
If you contact me through the contact form or by email, I process the details you provide, including your name, email address, subject and message, to handle your enquiry.
The contact form uses the Joomla Contacts component. The hosting provider, DreamHost, may have access to the data needed for technical processing.
For enquiries about a contract or steps before entering into a contract, the legal basis is Article 6(1)(b) GDPR. For other enquiries, the legal basis is Article 6(1)(f) GDPR. My legitimate interest is responding to messages addressed to me.
Providing this information is voluntary. If you omit information needed to handle your enquiry, I may be unable to respond.
I delete the data once your enquiry has been resolved and further retention is unnecessary. Statutory retention duties and any retention needed to establish, exercise or defend legal claims continue to apply.
5. Protection against spam and misuse
The contact form is protected by Joomla’s built-in proof-of-work CAPTCHA and a locally operated honeypot.
With proof of work, your browser solves a computational task in the background. The honeypot uses a hidden form field to detect automated submissions. No external CAPTCHA provider is used.
The legal basis is Article 6(1)(f) GDPR. My legitimate interest is preventing automated spam and keeping the contact form operational.
6. Links to music and sales platforms
This website links to Spotify, Apple Music, YouTube and Bandcamp. Their players are not embedded on this website.
The links alone do not load platform content when you visit this website. Clicking a link takes you to the external platform. Its provider is responsible for processing data generated when you access the platform, and its privacy policy applies.
My sheet music is available through Bandcamp. Orders and payments are handled outside this website.
7. Your rights
Subject to the applicable legal conditions, you have the right to access your personal data, have it corrected or erased, restrict its processing and receive it in a portable format.
Where processing is based on Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation.
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. This does not affect the lawfulness of processing before withdrawal.
To exercise your rights, email
You also have the right to lodge a complaint with a data protection supervisory authority, particularly in the place where you normally live or work or where the alleged infringement occurred.
8. Changes to this Privacy Policy
This Privacy Policy will be updated if the functions of this website or the related data processing change.
Last updated: September 2026