Privacy Policy

Last updated: 21 August 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Dennis Broszio
Bessemerstraße 51
12103 Berlin
Germany

Email: contact@daymianbaumann.com

2. General information on data processing

We process personal data only to the extent necessary to provide this website, handle enquiries, take steps before entering into a contract, perform a contract, or where another legal basis permits the processing. Personal data means any information relating to an identified or identifiable natural person.

The relevant legal bases include Article 6(1)(b) GDPR for pre-contractual and contractual communication, Article 6(1)(f) GDPR for the secure, functional and economical operation of the website, and Article 6(1)(a) GDPR where consent is exceptionally obtained. Consent may be withdrawn at any time with effect for the future in accordance with Article 7(3) GDPR.

3. Hosting and server log data

When you access this website, the hosting provider processes connection data that is technically necessary. This may include your IP address, date and time of access, requested file or URL, referrer URL, browser type and version, operating system, hostname of the accessing device, HTTP status code and the volume of data transferred.

The processing is necessary to deliver the website, maintain the stability and security of the service, analyse errors and prevent misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and technically reliable operation of the website. The hosting provider processes this data as a processor pursuant to Article 28 GDPR.

Log data is deleted or anonymised as soon as it is no longer required for these purposes. It is retained for longer only where a security-related incident must be investigated or statutory obligations require this. The applicable retention periods are those of the hosting configuration in use.

4. Contact by form and email

If you contact us using the contact form or by email, we process the data you provide. The contact form currently collects your name, email address, subject and an optional message. Technically necessary connection data is also generated.

The data is processed to handle and respond to your enquiry. If the enquiry relates to a contract or pre-contractual steps, the legal basis is Article 6(1)(b) GDPR. Other enquiries are processed on the basis of our legitimate interest in appropriate communication pursuant to Article 6(1)(f) GDPR.

The contact form is operated using Contact Form 7. The current configuration does not include external anti-spam, CAPTCHA, newsletter, payment or CRM services. Form data is transmitted to us by email. As no plugin for the permanent storage of form submissions is active, the content is not additionally stored in the WordPress database. Recipients may include us, the hosting provider and the service providers used to send or receive email.

Enquiry data is deleted once the enquiry has been fully dealt with and no statutory retention obligations or legitimate reasons require continued storage. Communication relevant to commercial or tax law may be retained for the applicable statutory periods.

5. Cookies and access to end devices

The publicly accessible website currently does not use analytics, marketing or profiling cookies. In the non-public administration and login areas, WordPress uses technically necessary cookies to authenticate logged-in users, protect their sessions and store display options. These cookies are intended solely for authorised administrators and editors.

Storage of or access to information on an end device that is strictly necessary is based on Section 25(2)(2) of the German Telecommunications and Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz – TDDDG). If non-essential technologies are used in the future, they will be activated only after consent has been obtained pursuant to Section 25(1) TDDDG in conjunction with Article 6(1)(a) GDPR, and this privacy policy will be updated accordingly.

6. Locally hosted fonts

The “Barlow” and “Barlow Condensed” fonts used on this website are served locally from our own web server. Visiting the website therefore does not establish a connection to Google Fonts or any other font provider.

7. Self-hosted audio, video and image files

Audio, video and image files are loaded from the WordPress media library or our own hosting provider. No players from Spotify, SoundCloud, YouTube, Vimeo or comparable external media platforms are embedded. To deliver these files, the server processes the technical data described under “Hosting and server log data”. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the presentation of the musical and audiovisual portfolio.

8. WordPress and installed administration tools

The website is operated using WordPress. Advanced Custom Fields Pro is used to manage website content in the protected administration area. The WordPress Importer is used only for administrative import operations. In the current configuration, these tools do not independently disclose visitor data to their providers. Automatic update checks and licence queries in the administration area may transmit technical server data to the relevant providers; they do not concern ordinary visits to the public website.

9. Links to Instagram and TikTok

The footer contains simple links to our Instagram and TikTok profiles. No social media plugins, tracking pixels or embedded content from these platforms are integrated. Merely visiting our website therefore does not establish a connection to Instagram or TikTok.

Only when you click one of these links do you leave our website. The relevant platform provider then processes data under its own responsibility. This may include your IP address, device and browser data, time of access and data associated with an account held with that provider. The privacy notices of Instagram/Meta and TikTok apply. These providers may transfer data to countries outside the European Economic Area.

10. Recipients and processors

Personal data is disclosed only to parties that require it for the purposes described above. Categories of recipients include hosting, IT maintenance and email service providers. Where service providers process personal data on our behalf, they are contractually bound in accordance with Article 28 GDPR. Data is disclosed to other recipients only where permitted or required by law or where you have given your consent.

11. Storage period

Unless a more specific period is stated in this privacy policy, we retain personal data only for as long as the relevant purpose continues. The data is then deleted unless statutory retention obligations, the establishment, exercise or defence of legal claims, or other lawful reasons require continued storage.

12. Your rights

Subject to the statutory requirements, you have the following rights in particular:

• access to your personal data pursuant to Article 15 GDPR,
• rectification of inaccurate data pursuant to Article 16 GDPR,
• erasure pursuant to Article 17 GDPR,
• restriction of processing pursuant to Article 18 GDPR,
• data portability pursuant to Article 20 GDPR,
• objection to processing based on Article 6(1)(e) or (f) GDPR pursuant to Article 21 GDPR,
• withdrawal of consent with effect for the future pursuant to Article 7(3) GDPR.

To exercise your rights, simply send a message to contact@daymianbaumann.com. To prevent unauthorised disclosure, we may request suitable proof of your identity.

13. Right to object

Where we process personal data on the basis of Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.

14. Right to lodge a complaint

Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority. For controllers based in Berlin, the relevant authority is in particular:

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
Email: mailbox@datenschutz-berlin.de
Website: www.datenschutz-berlin.de

15. Requirement to provide data and automated decision-making

You are generally not required to provide personal data. However, without the information marked as required in the contact form, we cannot process your enquiry through that form. No solely automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place.

16. Data security and changes

We take appropriate technical and organisational measures to protect personal data. In production, the website is provided over an encrypted HTTPS connection. Please note that completely risk-free transmission of data over the internet cannot be guaranteed.

We update this privacy policy when the website, the services used or the legal requirements change. The version published on this page is the applicable version.

Language notice

This privacy policy is provided in English for the website’s international audience. German and European data protection law remains applicable; German statutory names and references are included where relevant.