Sonorous harmony for the soul
Art Garfunkel Jr.
Official website
Privacy Policy
The protection of your personal data is of great importance to us.
This Privacy Policy informs you about which personal data is processed when you use our website, for what purposes this processing takes place, and what rights you are entitled to under applicable data protection laws.
We process personal data exclusively in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR), as well as any other applicable national data protection regulations.
This Privacy Policy applies to the use of our website and the content and functions accessible through it.
Our website is accessible internationally. Depending on your place of residence, additional data protection rights may apply, which are taken into account in this Privacy Policy where required.
Overview of This Privacy Policy
This Privacy Policy informs you about how personal data is processed when you use our website.
In particular, you will receive information about:
-
what data we collect
-
for what purposes and on what legal basis such data is processed
-
whether and to whom data is disclosed
-
whether data is transferred to third countries outside the European Union
-
how long personal data is stored
-
which technical and organizational measures are used to protect your data
-
what rights you have as a data subject
-
and how you can contact us regarding data protection inquiries
What Data We Collect
As part of using our website, personal data and technically necessary data are processed.
1. Technical Data (Server Log Files)
Whenever you access our website, information is automatically transmitted by your browser and processed in server log files. This processing is technically necessary to provide the website, ensure its stability and security, and detect misuse.
In particular, the following data may be processed:
-
IP address
-
Date and time of access
-
Pages or content accessed
-
Browser type and version
-
Operating system
-
Referrer URL (previously visited page)
This data is processed on the basis of our legitimate interest in the technical functionality and security of the website (Art. 6(1)(f) GDPR).
2. Data When Contacting Us
If you contact us (e.g., by email), we process the personal data you provide for the purpose of handling your inquiry.
This may include in particular:
-
Name (if provided)
-
Email address
-
Content of your message
The processing is carried out to handle your request and related communication (Art. 6(1)(b) or (f) GDPR).
3. Function-Related Data
When using individual functions of our website (e.g., interactions in the blog such as likes or similar features), technically necessary data may be processed in order to provide and properly execute these functions.
4. No Special Categories of Personal Data
We do not process special categories of personal data within the meaning of Art. 9 GDPR (e.g., health data or other sensitive information).
How We Collect Data
Personal data is processed in the following contexts:
1. When Visiting Our Website
When you access our website, your browser automatically transmits technical information that is processed in so-called server log files.
This processing is necessary to provide the website, ensure its stability and security, and detect misuse.
In particular, the following data may be processed:
-
IP address
-
Date and time of access
-
Pages or content accessed
-
Browser type and version
-
Operating system
-
Referrer URL
-
2. When Using Website Functions
When using individual functions of our website (e.g., accessing content or interactions such as blog likes), technically necessary data may be processed to the extent required to provide the respective function.
3. When Contacting Us
If you contact us (e.g., by email or through provided contact options), we process the personal data you provide for the purpose of handling your inquiry.
4. Through Technical Infrastructure and Service Providers
Our website is operated via an external website or hosting provider.
As part of providing the technical infrastructure, personal data may be processed to the extent necessary for the operation, security, and stability of the website.
Why We Process This Data
We process personal data for the following purposes:
1. Provision of the Website
For the technical provision, display, and stability of our website, as well as to ensure secure and fully functional operation.
2. Communication
To process inquiries you send to us via contact options (e.g., email).
3. Security and Prevention of Misuse
To detect, prevent, and defend against security risks, misuse, or unlawful activities.
4. Website Improvement
To analyze the use of our website in anonymized or aggregated form in order to improve content and functionality.
5. Legal Obligations
To comply with legal requirements, in particular commercial, tax, or regulatory obligations, where applicable.
6. Optional Future Services
If you choose to actively use additional services in the future (e.g., a newsletter), we will process your personal data exclusively for that purpose and only on the basis of your consent.
To Whom Data Is Disclosed
Personal data is only disclosed to third parties if this is necessary to fulfill the stated purposes and there is a legal basis for doing so.
1. Technical Service Providers
We use external service providers to support the operation of our website, in particular for hosting, maintenance, and the provision of technical infrastructure.
These service providers process personal data exclusively on our behalf and on the basis of a data processing agreement in accordance with Art. 28 GDPR.
In the course of operating the website, the provider of the website platform or hosting system may in particular gain access to technically necessary data.
2. Legal Obligations
Personal data is disclosed where we are legally obliged to do so or where this is required by official or court orders.
3. Protection of Legitimate Interests
Disclosure may occur where it is necessary for the establishment, exercise, or defense of legal claims or for the protection of our legitimate interests.
4. No Further Disclosure
No further disclosure of personal data to third parties takes place beyond the cases mentioned above.
Where Data Is Stored
Our website is operated by an external service provider that supplies the technical infrastructure for the operation of the website.
As part of this provision, personal data is generally processed in data centers located within the European Union.
If, in individual cases, processing takes place in third countries outside the European Union, this is done only in compliance with the requirements of the General Data Protection Regulation (GDPR). In such cases, appropriate safeguards are implemented, in particular Standard Contractual Clauses issued by the European Commission or comparable protection mechanisms.
Note on International Access
As our website is accessible worldwide, it cannot be excluded that access may occur from countries outside the European Union. However, the processing of personal data is carried out exclusively in accordance with the applicable data protection laws.
Cookies and Similar Technologies
Our website uses cookies and similar technologies to ensure the technical functionality of the website and to enable a user-friendly and stable experience.
1. Technically Necessary Cookies
These cookies are required for the website to function properly and to provide essential features. This includes in particular:
-
saving settings
-
ensuring security and stability
-
basic site navigation
Processing is based on our legitimate interest in the technical functionality and security of the website (Art. 6(1)(f) GDPR).
2. Functional Cookies
Functional cookies enable additional features and are used to make the use of the website more convenient, for example by storing user preferences or optimizing the display of content.
Processing is carried out—where consent is required—on the basis of your consent (Art. 6(1)(a) GDPR).
3. Analytics and Tracking Technologies
Where analytics or tracking technologies are used, they are only activated based on your prior consent via the cookie banner.
This consent may be withdrawn at any time with effect for the future.
4. Cookie Settings
You may adjust your cookie settings at any time via the cookie banner or your browser settings, and delete cookies that have already been stored.
Data Security
We implement appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, or unauthorized disclosure.
Our website is operated via an external website and hosting service provider, which also applies appropriate security measures to protect data.
Data transmission is encrypted using HTTPS.
Despite these measures, complete security of data transmission over the internet cannot be guaranteed.
We therefore recommend handling sensitive information with particular care when transmitting it.
Data Storage Locations
Our website is operated by an external service provider that supplies the technical infrastructure for the operation of the website.
As a general rule, personal data is processed in data centers located within the European Union.
If, in individual cases, processing takes place in third countries outside the European Union, this is done exclusively in compliance with the requirements of the General Data Protection Regulation (GDPR). In such cases, appropriate safeguards are implemented, in particular Standard Contractual Clauses issued by the European Commission or comparable protection mechanisms.
Note on International Access
As our website is accessible worldwide, it cannot be excluded that access may occur from various countries. However, the processing of personal data is carried out exclusively in accordance with the applicable data protection laws.
Minors
Our website is intended for the general public and is generally accessible to minors as well.
We do not knowingly collect personal data from children under the minimum age required under applicable law without a legal basis or without obtaining the necessary consent from a parent or legal guardian.
If parents or legal guardians become aware that a child has provided us with personal data without the appropriate consent, they may contact us at any time so that such data can be deleted.
Parents and legal guardians should appropriately monitor and supervise their children’s online activities.
Your Rights
As a data subject, you have the following rights under applicable data protection laws in particular:
1. Right of Access (Art. 15 GDPR)
You have the right to request confirmation as to whether we process personal data about you and, if so, to request access to such data.
2. Right to Rectification (Art. 16 GDPR)
You have the right to request the correction of inaccurate personal data or the completion of incomplete personal data.
3. Right to Erasure (Art. 17 GDPR)
You have the right to request the deletion of your personal data, provided that no legal retention obligations or other legal grounds oppose deletion.
4. Right to Restriction of Processing (Art. 18 GDPR)
You have the right to request the restriction of the processing of your personal data.
5. Right to Data Portability (Art. 20 GDPR)
You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format or to request its transfer to another controller.
6. Right to Object (Art. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data where such processing is based on legitimate interests.
7. Withdrawal of Consent (Art. 7(3) GDPR)
If you have given consent to the processing of your personal data, you may withdraw it at any time with effect for the future.
8. Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.
Rights Under the California Consumer Privacy Act (CCPA/CPRA)
If you are a resident of California, you are entitled under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) to certain rights regarding your personal data.
These include, in particular, the right to request information about the personal data we process, as well as the right to request deletion of such data, unless legal retention obligations or other legal grounds prevent deletion.
We do not sell or share personal data within the meaning of the CCPA/CPRA.
Data Processing Agreement
We use an external service provider in order to operate our website as part of a website builder system and/or hosting service.
A data processing agreement in accordance with Art. 28 GDPR has been concluded with this provider.
This ensures that personal data is processed exclusively in accordance with our instructions and in compliance with applicable data protection laws.
Third-Party Services and Embedded Content
Our website uses embedded content from third-party providers.
This includes, in particular, embedded videos via YouTube as well as music and audio players from Spotify.
When such content is accessed, a connection to the servers of the respective provider is established. In doing so, personal data—such as the IP address and other technical information (e.g., browser and device data)—may be transmitted to the provider.
If you have consented to the display or use of such content (e.g., via a cookie or consent banner), the processing is based on your consent.
Service Providers in Particular:
-
YouTube (Google Ireland Limited)
-
Spotify (Spotify AB)
Some of the content used on the website is also embedded locally (e.g., images or static preview images). In such cases, no personal data is transmitted to third-party providers.
Web Analytics (Google Analytics and Similar Services)
Where web analytics services such as Google Analytics are used on our website, personal data is processed for the purpose of analyzing user behavior on our website and improving our services.
In particular, the following data may be processed:
-
pages and content accessed
-
user behavior on the website
-
technical information (e.g., browser, device type)
-
truncated IP address
-
approximate location data
-
Processing is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR.
You may withdraw your consent at any time via the cookie banner with effect for the future.
Note on Google Services
When using Google Analytics, personal data may be transferred to servers of Google LLC in the United States. In such cases, the processing is based on appropriate safeguards under the GDPR, in particular Standard Contractual Clauses issued by the European Commission.
Legal Basis for Processing
The processing of personal data is carried out on the basis of the General Data Protection Regulation (GDPR), in particular in accordance with the following legal grounds:
-
Art. 6(1)(a) GDPR – consent
-
Art. 6(1)(b) GDPR – performance of a contract or implementation of pre-contractual measures
-
Art. 6(1)(c) GDPR – compliance with a legal obligation
-
Art. 6(1)(f) GDPR – legitimate interests, in particular for the technical provision, security, and stability of the website
The applicable legal basis depends on the specific purpose of processing.
Where personal data is transferred to third countries outside the European Union, this is carried out exclusively in compliance with the requirements of the GDPR. In such cases, appropriate safeguards are implemented, in particular Standard Contractual Clauses issued by the European Commission or comparable protection mechanisms.
Changes to This Privacy Policy
This Privacy Policy may be updated, in particular in the event of changes to legal requirements or adjustments to our website or the services offered.
The current version of the Privacy Policy published on our website shall apply at all times.
In the event of material changes, we will inform you in an appropriate manner.
Contact
If you have any questions regarding the processing of your personal data or wish to exercise your rights, you may contact us at any time.
Data Controller under the GDPR
Art Garfunkel Jr.
c/o Rechtsanwalt Sebastian Köditz
Bahnhofstr. 5
69115 Heidelberg
Germany
E-mail: art@artgarfunkeljunior.com
Version of This Privacy Policy
Last updated: June 23, 2026