Legal

Privacy policy

This is how this website handles your data - short summary first, details after.

The most important points in brief

  • No cookies, no Google Analytics, no advertising or tracking services.
  • Fonts and images come from my own server - nothing is loaded from third parties while you browse.
  • An anonymous visitor statistic without cookies that does not identify any person - and that stops entirely when “Do Not Track” or “Global Privacy Control” is on.
  • Newsletter only with confirmation by email (double opt-in), unsubscribe at any time. Opens and clicks are counted anonymously with your consent, never per person.

Controller

Andreas Menke (DREES DENARO)
Hauptstraße 83
59939 Olsberg
Germany
Email: hello [at] drees-denaro [dot] com
Phone: +49 175 8484100

No data protection officer has been appointed because the statutory requirements are not met. For any questions about data protection, you can reach me directly via the contact details above.

Hosting and server log files

The website is hosted by lima-city, a service of TrafficPlex GmbH, Konsul-Smidt-Str. 90, 28217 Bremen. A data processing agreement (Art. 28 GDPR (DSGVO)) is in place with the provider; it processes the data only on my instructions.

With every request, the server automatically processes: the full IP address, date and time, the requested domain and address including URL parameters, method, status code, amount of data transferred and response time, as well as browser and connection characteristics (for example browser identifier, language setting and technical characteristics of the encrypted connection). This is necessary to deliver the page, find errors and fend off attacks. The IP address is not shortened in these log files. The legal basis is my legitimate interest in secure, working operation (Art. 6(1)(f) GDPR).

Retention period: access logs up to 90 days, error logs up to 7 days, counters of conspicuous requests to fend off attacks up to one day. The currently applicable periods are described at lima-city and form part of this statement: lima-city.de/hilfe.

The servers are located in the Telehouse data centre in Frankfurt am Main. Backups are held by Hetzner in Helsinki (Finland, EU) and are deleted after 90 days; deleted data may still be contained in older backups until then.

My email mailboxes are also hosted by lima-city. For delivery and spam and virus protection, sender, recipient, headers, content and attachments are processed; the technical logs of the mail servers are stored for up to 14 days.

The connection is encrypted via TLS (recognisable by “https://” and the padlock in the browser).

No cookies, nothing on your device

This website sets no cookies and stores nothing else on your device (no local storage, no fingerprints). Consent under § 25 TDDDG is therefore only needed for the anonymous statistics in the newsletter (see below).

Anonymous visitor statistics

So that I know which pages are read and whether enquiries arrive, a small script on my own server counts: page views, the domain of the referring page, the device type (smartphone, tablet or desktop), clicks on email, phone, WhatsApp, calendar and external links, whether the enquiry form was opened and submitted (not its content), sign-ups on the newsletter form and clicks on “Share”.

To group the visits of one day, a shortened checksum is formed from the IP address, browser identifier and a random value that is generated anew every day and deleted the following day. In addition, a database on my own server (DB-IP) is used to roughly determine from the IP address which country and city the visit comes from; only these two names are stored. The IP address itself is not stored for this. After the day changes, the checksum can no longer be assigned to anyone, and visits on different days cannot be linked. No cookies are set, no profiles are created and no data is passed to third parties.

The legal basis is my legitimate interest in data-minimising audience measurement (Art. 6(1)(f) GDPR). The statistics data is deleted after 14 months. If “Do Not Track” or “Global Privacy Control” is enabled in your browser, nothing at all is counted - this counts as an objection, without you having to do anything else.

Contact by email, phone or WhatsApp

If you write to me or call, I process your details (e.g. name, contact details, date, place and occasion of your event) to answer your enquiry and prepare an offer. The legal basis is the initiation of a contract (Art. 6(1)(b) GDPR), and for general questions my legitimate interest in answering (Art. 6(1)(f) GDPR). If no booking results, I delete the enquiry once it is dealt with, after twelve months at the latest.

The WhatsApp button is a simple link. Only when you tap it does WhatsApp open, a service of WhatsApp Ireland Ltd. (Meta). Their privacy policy applies there; WhatsApp may also transfer data to the USA. If you do not want that, please write me an email or call instead.

Enquiry form on the Booking page

The form on the Booking page runs entirely in your browser: it only assembles a text from your details. Nothing is sent until you yourself tap “Enquire now” (opens your email program) or “WhatsApp”. The “Contact” section then applies.

Bookings and contracts

If you book DREES DENARO, I process the data needed for the contract, performance and billing (Art. 6(1)(b) GDPR). I keep invoices and business-relevant documents for as long as commercial and tax law require - generally six or eight to ten years respectively (Art. 6(1)(c) GDPR, §§ 147 AO, 257 HGB).

I prepare offers and invoices with Lexware Office from Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg. Lexware processes the data on my behalf on the basis of a data processing agreement (Art. 28 GDPR). Where legally required, I pass invoice data to the tax authorities and, if engaged, to my tax adviser (Art. 6(1)(c) GDPR).

Emails to customers

If you have booked DREES DENARO before, I occasionally write you an email, for example pointing out free dates for your next event or with Christmas greetings. For this I only use the email address from your booking and only for my own similar services. The legal basis is § 7(3) UWG in conjunction with my legitimate interest in direct marketing (Art. 6(1)(f) GDPR).

You can object to this at any time, with a short reply to the email or to hello [at] drees-denaro [dot] com. No costs other than transmission costs at basic rates arise for you. After that, you will no longer receive such emails.

Newsletter

For the newsletter I only need your email address. After signing up, you receive an email with a confirmation link; only then are you registered (double opt-in). To be able to prove consent, I store the time and IP address of sign-up and confirmation. The legal basis is your consent (Art. 6(1)(a) GDPR).

The data is on my web space at the host, and sending is done via its mail server. There is no external newsletter service. To protect against abuse, a checksum of your IP address is stored for at most one hour at sign-ups (Art. 6(1)(f) GDPR).

The content is new dates, my DJ charts (top 10 of the month) and new releases. If there is a free download as a thank-you, you receive a one-time email with a personal link after confirmation; it only works as long as you are subscribed. Whether and when you use it is not evaluated.

Anonymous newsletter statistics: To see which content works, I count how often an issue is opened and which links in it are clicked. For this, each email contains an invisible image (1×1 pixel) that is loaded from my server when the email is displayed, and the links pass through my server on their way to the destination. Counting works like the website's visitor statistics: issue, clicked link, device type and a checksum made from IP address, browser identifier and a random value that changes daily. The IP address itself is not stored, and opens and clicks are not linked to your email address: no profile is created, and I do not know who opened or clicked what. This only applies if you ticked the optional box for it when signing up; without the tick you receive the newsletter without the counting image and with direct links. The legal basis is this consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR). The statistics are deleted after 14 months.

You can withdraw your consent at any time: just drop me a line and you will get the newsletter without counting from then on - or unsubscribe. If you only want to avoid the open tracking, set your email program not to load images automatically.

You can unsubscribe from the newsletter at any time via the link at the end of every email - your address is then deleted together with the proof of consent. I delete unconfirmed sign-ups after 30 days.

My profiles on social networks

DREES DENARO is also present on Instagram, TikTok, Facebook, Mixcloud and SoundCloud. If you visit a profile there, the respective platform processes your data under its own terms, including for advertising purposes and partly in the USA. I have no influence over that.

For Facebook and Instagram, I am jointly responsible with Meta Platforms Ireland Ltd. (Art. 26 GDPR), insofar as Meta provides me with aggregated statistics about visits to my profiles (Insights). I do not see personal data of individual visitors. Under the joint controllership agreement, Meta assumes primary responsibility, including for access requests; but you can also assert your rights against me.

If you send me a message or comment there, I use your details only to reply and to handle your enquiry (Art. 6(1)(b) or (f) GDPR). For enquiries via the platforms and via WhatsApp, the same otherwise applies as under “Contact by email, phone or WhatsApp”.

Links to Spotify, Apple Music, Deezer, Beatport, Mixcloud, SoundCloud, Instagram, TikTok, Facebook and other sites are simple links - there are no third-party share buttons; “Share” only uses the sharing menu of your device: nothing is loaded from there while you browse this website. Only when you click a link do you reach the respective platform; their privacy policies apply there. This also applies to “Add to Google Calendar” and “Outlook” for the dates. Calendar files (.ics) come from my own server.

Recipients and transfers to third countries

I do not sell your data and do not pass it on to third parties for their advertising. You only receive my own advertising in the newsletter (with your consent) and as an occasional email if you have already booked (see above). Recipients are only my processors, i.e. the host and Lexware for offers and invoices, and, where legally required, authorities. Data only reaches countries outside the EU via this website if you use WhatsApp. There is no automated decision-making, including profiling.

Your rights

You have the right to access your stored data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent you have given at any time with effect for the future (Art. 7(3) GDPR). An informal email is enough.

Right to object (Art. 21 GDPR): If I process data on the basis of my legitimate interest, you can object at any time on grounds relating to your particular situation. I will then no longer process the data, unless there are compelling legitimate grounds or the data serves to establish, exercise or defend legal claims. You can object to the use of your data for advertising at any time without giving reasons (Art. 21(2) and (3) GDPR); I will then no longer use it for that.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the one responsible for me: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2-4, 40213 Düsseldorf, ldi.nrw.de.

Do you have to provide data?

Not to read the website. For an enquiry or booking, I need the details required for an offer; for the newsletter, your email address. Without them, I cannot provide the respective service.

As of: November 2026. If the website changes, I will update this statement.