Privacy Policy
This English version is provided for convenience only. In case of any discrepancy, the German version is legally binding.
1. Controller
The controller responsible for data processing on this website is:
Maya Schmid
Heppenheimer Str. 23
68309 Mannheim, Deutschland
Email: mayaes2018@gmail.com
2. General information on data processing
I only process personal data of users of this website to the extent necessary to provide a functional website and my content and services. Processing takes place only with the user's consent or on another legal basis, in particular where processing is necessary for contract performance, to safeguard legitimate interests (Art. 6(1)(f) GDPR), or for other legally permitted reasons.
3. Hosting and Content Delivery Network (Vercel & Cloudflare)
This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA, and delivered via the content delivery network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.
When you visit this website, Vercel and/or Cloudflare automatically collect information in so-called server log files that your browser transmits: IP address, date and time of the request, requested page, access status/HTTP status code, amount of data transferred, referring website, browser, operating system and its interface.
Processing is based on my legitimate interest in the technically error-free presentation and optimization of my website (Art. 6(1)(f) GDPR). Data processing agreements pursuant to Art. 28 GDPR are in place with both providers. As Vercel and Cloudflare are U.S. companies, personal data may be transferred to the USA (a third country without a full EU adequacy decision). This transfer relies on the EU Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR and, where certified, the EU-U.S. Data Privacy Framework.
4. Cookies
This website itself does not set any marketing, analytics, or advertising cookies. Strictly necessary, short-lived cookies or comparable technologies from the hosting infrastructure may be used where required for the website to function; under Sec. 25(2) No. 2 TTDSG, no consent is required for these.
5. Contact by email
If you contact me by email, your details (email address, and, where applicable, name and message) will be stored by me for the purpose of processing your inquiry. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in responding to your inquiry) or Art. 6(1)(b) GDPR where the inquiry serves to initiate a contract. Data will be deleted once it is no longer required for the purpose for which it was collected, unless statutory retention obligations apply.
6. External links to social networks
This website contains links to my profiles on Instagram, Spotify, YouTube Music, LinkedIn, X (Twitter) and TikTok. These are plain hyperlinks (not embedded plug-ins), so no data is transmitted to these providers when you visit this website. Only if you actively click one of these links and visit the respective platform do that platform's own privacy terms apply, over which I have no control.
7. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption to protect the transmission of confidential content. You can recognize an encrypted connection by the "https://" prefix and the lock icon in your browser's address bar.
8. Your rights as a data subject
You have the right at any time to:
- request information about your personal data processed by me pursuant to Art. 15 GDPR,
- request rectification of inaccurate data pursuant to Art. 16 GDPR,
- request erasure of your data pursuant to Art. 17 GDPR,
- request restriction of processing pursuant to Art. 18 GDPR,
- receive your data in a common, machine-readable format pursuant to Art. 20 GDPR,
- object to the processing of your data pursuant to Art. 21 GDPR,
- lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR.
The competent supervisory authority depends on my state of residence in Germany. An overview of all German state data protection authorities is available from the Datenschutzkonferenz (DSK): datenschutzkonferenz-online.de.
9. Currency and amendment of this privacy policy
This privacy policy is currently valid (as of July 2026). As my website evolves or legal requirements change, it may become necessary to amend this policy.