PRIVACY POLICY

1. Controller

The controller responsible for processing personal data is Jerry Lu, Ravensburger Straße 82, 50739 Cologne, Germany. Email: info@jerrylu.de.

2. Hosting and technical delivery

This website is delivered through hosting, database and storage infrastructure based on Cloudflare services. When you visit, data such as your IP address, date and time, requested URL or file, referrer, browser and device information, transferred data volume and HTTP status may be processed. This is necessary to deliver the website, operate it reliably and protect it against misuse.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website. Technical log data is retained only for as long as necessary for operation, security and troubleshooting, or where required by law.

3. Cookies and browser storage

Your language choice is stored under “jerry-lu-language” in local browser storage and in a cookie for up to one year. Your privacy choice is stored under “jerry-lu-cookie-consent” in local browser storage and in a cookie for up to one year. A return position within the website may be stored temporarily in browser session storage.

These operations provide features you expressly requested and remember your privacy choice. The legal bases are Section 25(2)(2) TDDDG and Article 6(1)(f) GDPR. Optional access takes place only with your consent under Section 25(1) TDDDG and Article 6(1)(a) GDPR. You can change your choice at any time through “Privacy settings” in the footer.

4. Internal audience measurement

If you consent to the “Analytics” category, your browser sends the path of the page viewed to our own statistics interface. An aggregated counter is increased for each calendar day and page path. The application does not store an individual visitor identifier or create a cross-device profile. The legal bases are your consent under Article 6(1)(a) GDPR and, where terminal-device information is involved, Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future.

5. Contact and booking enquiries

The website provides email links for contact and booking enquiries. Clicking a link does not itself send a message through the website; it normally opens the email application configured on your device. If you write to us, we process your contact details and message to handle the enquiry. The legal basis is Article 6(1)(b) GDPR for contractual or pre-contractual enquiries and otherwise Article 6(1)(f) GDPR. We delete enquiries once they are complete and no legal, contractual or evidentiary reason requires continued retention.

6. Adobe Fonts

For consistent typography, the website loads font files from Adobe Fonts, creating a connection to Adobe servers. Adobe technically receives data including the IP address, fonts served, web project ID, embed type and host name. Adobe states that it does not set cookies for web-font delivery and does not store the IP address. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is a consistent presentation. Further information: https://www.adobe.com/privacy/policies/adobe-fonts.html.

7. YouTube and Bandcamp

The website may embed YouTube videos in enhanced privacy mode through youtube-nocookie.com and music players from Bandcamp. External content is loaded only after your express activation. This creates a connection to the relevant provider, which may process data including your IP address, device and browser information, referrer, time, page viewed and interactions, and may store or access information on your device.

The legal bases are your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Processing in the United States or other third countries cannot be ruled out. You may use the rest of the website without consenting. Provider information: https://policies.google.com/privacy and https://bandcamp.com/privacy.

8. Concert data and external links

Concert data may be retrieved server-side through Bandsintown. Under the technical implementation used, merely visiting our concert pages does not transmit visitor information to Bandsintown. Links to Bandsintown, ticket providers, Spotify, Instagram, YouTube, Apple Music, Bandcamp, retailers and other websites are ordinary external links. Only when you open such a link do you leave our website; the relevant operator is generally responsible for subsequent processing.

9. Recipients and international transfers

Data is disclosed only to parties that need it for the purposes described. These may include hosting, security, database and storage providers and providers of external media that you activate. Where required, processor agreements are concluded under Article 28 GDPR. Transfers outside the European Economic Area take place only under Articles 44 et seq. GDPR, in particular on the basis of an adequacy decision or appropriate safeguards such as EU standard contractual clauses.

10. Retention

Unless a specific period is stated, we retain personal data only for as long as necessary for the relevant purpose. It is then deleted or anonymised unless legal retention duties, security requirements or the establishment, exercise or defence of legal claims require further retention.

11. Your rights

Subject to the statutory requirements, you have rights including access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent at any time with effect for the future. To exercise your rights, email info@jerrylu.de.

You may also lodge a complaint with a data protection supervisory authority. The competent authority is generally the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, poststelle@ldi.nrw.de, https://www.ldi.nrw.de.

12. Security and changes

We take appropriate technical and organisational measures to protect personal data. Transmission between your browser and the website is encrypted using HTTPS. This policy will be updated when features, providers or legal requirements change.