Privacy Policy
# Overview
This privacy policy informs you about the nature, scope, and purpose of the processing of personal data within our online offering and the websites, functions, and content associated with it.
The use of our website is generally possible without providing personal data. As far as personal data (e.g. name, address, or email addresses) is collected on our pages, this is always done on a voluntary basis where possible.
# Data Controller
# Privacy Notice (Banner)
On your first visit, a notice informs you about the third-party services used on this website (music previews via Deezer and Apple iTunes, map tiles via OpenStreetMap and CARTO). Since no tracking cookies are set and you are never profiled, no consent is required.
The notice can be dismissed; your choice is stored in your browser's local storage and is not sent to us. You can reset it at any time by clearing this site's data in your browser settings.
# Data Processing on This Website
Server Log Files
The hosting provider (Vercel Inc.) automatically collects and stores information in server log files that your browser transmits automatically. These are:
- Browser type and version
- Operating system
- Referrer URL
- Hostname and IP address of the requesting device
- Time of the server request
This data is not merged with other data sources. The basis for processing is Art. 6 Para. 1 lit. f GDPR, which permits the processing of data for the legitimate interest in ensuring the stability and security of the website.
SSL / TLS Encryption
This site uses SSL or TLS encryption to protect the transmission of confidential content. You can recognize encrypted transmission by the address line changing from http:// to https:// and by the lock symbol in your browser address bar.
Local Storage
This site stores small amounts of data in your browser's local storage to remember your dismissal of the privacy notice and to cache geocoded concert locations so the concerts map does not resolve them repeatedly. This data never leaves your device.
# Hosting
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA.
Vercel processes personal data (IP addresses, access logs) for the purpose of providing the website infrastructure and ensuring operational security. Vercel is a US-based provider certified under the EU-US Data Privacy Framework.
# Web Analytics
Vercel Speed Insights
Vercel Speed Insights monitors the technical performance of the website (load times, interaction responsiveness). Data is collected anonymously and aggregated. No cookies are set and no personal profiling occurs.
Legal basis: Art. 6 Para. 1 lit. f GDPR (legitimate interest in monitoring and improving the performance of our online offering).
# Cookies
This website does not use tracking or marketing cookies and does not set any profiling identifiers. It only collects anonymous, aggregated performance data (Vercel Speed Insights, see above).
Your dismissal of the privacy notice and the map caching data are stored in your browser's local storage (not cookies) and never leave your device.
Legal basis: Art. 6 Para. 1 lit. f GDPR.
# Third-Party Services
Music Previews (Deezer, Apple iTunes)
The music section queries Deezer and Apple iTunes to load 30-second audio previews when you click play on a track. The search for a matching preview happens on our server; the preview audio file is then loaded directly from the respective provider (Deezer / Apple iTunes) into your browser. Without these requests, previews are not available.
Concerts Map (OpenStreetMap, CARTO, Open-Meteo)
The concerts map loads map tiles and its basemap style from OpenStreetMap as well as CARTO (basemaps.cartocdn.com) and resolves concert locations using the Open-Meteo geocoding API. These requests only transmit the location names being looked up and the technical data required to deliver the map tiles; they are not used to identify you.
# Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right to information about your data stored by us (Art. 15 GDPR)
- Right to rectification of inaccurate data (Art. 16 GDPR)
- Right to erasure of your data (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing based on legitimate interests (Art. 21 GDPR)
To exercise your rights, contact jesper@mahelwebdesign.com.
You also have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection law.
# Changes
We reserve the right to modify this privacy policy to reflect changes in the website or legal requirements. The current version is always available at this URL.
Last updated: September 1, 2026.