Privacy Policy – echoes-of-ancestors.com

Privacy Policy

Last updated: [09/30/2025]

1. Data Controller

René Wagner Camp Hasenbachtal 1 56357 Bogel, Germany E-Mail: info@ahnenlieder.de

2. Hosting

This website is hosted by: Hostinger, UAB Jonavos g. 60C, 44192 Kaunas, Litauen. When you access our website, technical data (logfiles) are automatically collected (see below).

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in secure and efficient hosting).

3. Server Logfiles

When visiting echoes-of-ancestors.com, the following data are automatically stored:

  • IP address of the requesting device
  • Date and time of access
  • URL / name of the requested file
  • Referrer URL
  • Browser type/version, operating system
  • Name of the access provider

Legal basis: Art. 6 (1) lit. f GDPR.
Retention: Logfiles are usually deleted within [e.g. 14/30] days.

4. Cookies and Consent Management

We use cookies and similar technologies. Non-essential services (e.g. YouTube, Spotify) are only loaded after your explicit consent (so-called “two-click solution”). You can adjust your choices anytime in the cookie banner.

Legal basis: Art. 6 (1) lit. f GDPR for essential cookies, Art. 6 (1) lit. a GDPR for all others.

5. Contact

If you contact us via email or contact form, we process the data you provide (e.g. name, email address, message) in order to handle your request.

Legal basis: Art. 6 (1) lit. b GDPR (contract / pre-contractual measures) or lit. f GDPR (legitimate interest in communication).

6. Services We Use

6.1 Google Fonts

We use Google Fonts to provide consistent typography. Option A (recommended): local hosting without data transfer to Google. Option B: external request from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This may transfer your IP address and technical data.

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest). For external requests: Art. 6 (1) lit. a GDPR (consent via cookie banner).

More info: Google Fonts FAQ, Google Privacy Policy

6.2 YouTube Embeds

We embed videos from YouTube (Google Ireland Limited). Videos are only loaded after your consent (two-click solution). Once activated, YouTube/Google may collect data (IP address, device info, cookies). If you are logged in to Google, data may be linked to your account.

Legal basis: Art. 6 (1) lit. a GDPR (consent).

More info: Google Privacy Policy

6.3 Spotify Embeds

We embed Spotify players (Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden). Content is only loaded after your consent. IP address and technical data may be transferred to Spotify.

Legal basis: Art. 6 (1) lit. a GDPR (consent).

More info: Spotify Privacy Policy

6.4 Newsletter via systeme.io

For newsletters we use systeme.io (ITACWT Limited, 5 rue de la Terrasse, 75017 Paris, France). The data you enter (e.g. name, email) are stored on servers within the EU and processed for email delivery and analytics (e.g. open rates, clicks). We have a Data Processing Agreement (DPA) with systeme.io according to Art. 28 GDPR.

Legal basis: Art. 6 (1) lit. a GDPR (consent). You can unsubscribe at any time via the link in the email.

More info: Systeme.io Privacy Policy

7. Categories of Data, Purposes, Retention

  • Categories: contact data (name, email), usage data (IP, logs), content data (messages).
  • Purposes: website functionality, communication, embedding media, newsletter marketing.
  • Retention: until purpose is fulfilled and legal retention periods expire; for consent-based processing until withdrawal.

8. Legal Bases Overview

  • Art. 6 (1) lit. a GDPR – consent
  • Art. 6 (1) lit. b GDPR – contract / pre-contractual measures
  • Art. 6 (1) lit. c GDPR – legal obligation
  • Art. 6 (1) lit. f GDPR – legitimate interest

9. Data Recipients and Third Countries

Data may be processed by the services listed above. If providers are located outside the EU/EEA, data may be transferred to third countries. In such cases, safeguards according to Art. 44 ff. GDPR (e.g. EU Standard Contractual Clauses) are applied.

10. Your Rights

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent at any time (Art. 7 (3) GDPR)

You also have the right to lodge a complaint with a supervisory authority.

11. Children’s Privacy

Our website is not directed at children under 16 years of age. If you are under 16, please do not submit personal data without parental consent.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The current version is always available on this page.