Privacy Policy

Information on the processing of personal data in accordance with the GDPR

1. Controller

beats per micha · Michael Zimmermann
Am Waldhang 1 · 86551 Aichach, Germany
Phone: +49 176 700 580 27
E-Mail:

2. General

Personal data is only collected to the extent necessary to provide the website or to process enquiries. Data is not passed on to third parties unless otherwise described below.

3. Server Log Files

When this website is accessed, the hosting provider automatically stores information in server log files (IP address, browser type, operating system, referrer URL, date and time of access). This data is technically required to deliver the website and is deleted after no more than 7 days. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).
Hosting provider: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. Privacy policy: ionos.de/terms-gtc/datenschutzerklaerung.

4. Contact Form

When you submit an enquiry via the contact form or by e-mail/phone, the data provided (name, e-mail, phone, message, event details such as date and venue) is stored exclusively for the purpose of processing your enquiry and, if applicable, initiating a contract. Legal basis: Art. 6(1)(b) GDPR. Data is deleted once the enquiry has been concluded, subject to statutory retention obligations (commercial and tax law: up to 10 years).

The contact form is submitted directly to my own server, where the data is stored immediately in my internal booking system (CRM) to manage enquiries efficiently and respond promptly. No data is passed on to external form-processing services (for the optional passing on to DJ colleagues see section 4a). Legal basis and deletion periods as in the preceding paragraph.

Optional form fields: Providing a billing address, budget range or how you heard about me is voluntary. Source information is used solely for internal analysis of my marketing channels. Legal basis: Art. 6(1)(f) GDPR. No data is passed on to third parties, except with your consent under section 4a.

4a. Passing on to my DJ network (optional)

If you tick the optional "backup option" in the form, I will pass your enquiry on to suitable independent DJ colleagues in my network if I am already booked on your date, so that they can send you an offer. The data passed on is your name, e-mail, phone number, date, location, occasion, number of guests and your message, as far as you provided them. The recipients are independent controllers within the meaning of the GDPR and process the data solely to answer your enquiry. Without the tick nothing is passed on, and your enquiry is handled anyway.

Legal basis: consent, Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by e-mail to dj@beats-per-micha.de; this does not affect the lawfulness of processing carried out until then. I store the time and the version of the consent text as proof.

5. Notifications via Telegram

When a contact form enquiry is received, an automatic notification is sent via the messaging service Telegram (Telegram Messenger Inc., 548 Market St., Suite 51375, San Francisco, CA 94104, USA) to me for internal processing. This notification contains only a brief summary of the enquiry (event type, date, name) for the purpose of timely processing. Data is not used for any other purpose. The transfer to the USA is based on standard contractual clauses (Art. 46(2)(c) GDPR). Telegram privacy policy: telegram.org/privacy. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in prompt processing of enquiries).

6. External Services

This website integrates the following external services. Where technical data (in particular IP address, browser identifier) is transmitted to the respective providers, this is described under the relevant services. Where servers are operated outside the EU/EEA and no EU Commission adequacy decision exists, the transfer is based on standard contractual clauses (Art. 46(2)(c) GDPR).

Fonts (self-hosted): All fonts used on this website (Barlow Condensed, Bebas Neue, Outfit, Playfair Display, Inter) are served directly from my own server. No data is transferred to Google or any other external font provider.

Mixcloud (Mixcloud Ltd., 7-15 Greatorex Street, London E1 5NF, United Kingdom): Embedded audio player for live mixes. The player is only loaded after an explicit click – either on "Load Mixcloud Player" or directly on a mix in the list (click-to-load). Only then is data (in particular your IP address) transferred to Mixcloud. An EU adequacy decision exists for the UK. Privacy policy: mixcloud.com/privacy. Legal basis: Art. 6(1)(a) GDPR (consent by clicking).

YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland): Individual blog articles may embed YouTube videos. The player is only loaded after an explicit click on the preview thumbnail (click-to-load); before that, only a static preview image is shown and no data is transferred to Google. After clicking, the video is embedded via the privacy-friendlier youtube-nocookie.com domain. Only then is data (in particular your IP address) transferred to Google/YouTube. Privacy policy: policies.google.com/privacy. Legal basis: Art. 6(1)(a) GDPR (consent by clicking).

Nominatim / OpenStreetMap (OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, UK): Address autocomplete in the contact form. When you type in the venue field, your search text and IP address are transmitted to retrieve address suggestions. Privacy policy: osmfoundation.org/Privacy_Policy. Legal basis: Art. 6(1)(f) GDPR.

WhatsApp (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland): Link for direct contact. WhatsApp/Meta's privacy policy applies when you click the link. Data is only transferred when you actively click the WhatsApp link.

Instagram (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland): This website contains links to my Instagram profile. Clicking redirects you to Instagram; Meta's privacy policy applies. Data is only transferred when you actively click the link. Individual blog articles may also embed Instagram reels. Here too, the content is only loaded after an explicit click on the preview tile (click-to-load); only then is data transferred to Meta. Legal basis for both profile links and embedded reels: Art. 6(1)(a) GDPR (consent by clicking). Instagram videos on the home page (with consent only): If you choose "Accept all" in the cookie banner, the home page and other pages of this website additionally show the latest reels and stories of my Instagram account as a video preview (muted at first, with sound only after you tap). To do so, your browser loads the video files directly from Meta servers (cdninstagram.com). Technically necessary data, in particular your IP address and browser details, is transmitted to Meta. Without your consent the page only shows preview images loaded from my own server, and no data is transmitted to Meta for the videos. Retrieval of reels and stories: My server retrieves my reels and stories at regular intervals via the official Instagram interface (Instagram API), using only the access key of my own account. No data of visitors to this website is transmitted to Meta in the process. My server caches preview images of the reels and stories and delivers them from there. Stories appear as a notice in the upper part of the page and in a separate window: as images without any connection to Meta, as videos only with your consent as described above. Which reels appear on which page depends on keywords (hashtags) in my posts, not on your behaviour. If you have consented to traffic measurement (section 7), clicks on these elements may be recorded there as well. Legal basis for the videos: Art. 6(1)(a) GDPR and Section 25(1) TDDDG (consent); for the server-side retrieval of my own content and the display of preview images: Art. 6(1)(f) GDPR (legitimate interest in an up-to-date presentation of my work). You can withdraw your consent at any time with future effect by clicking "Cookie Settings" in the footer and selecting "Necessary only". Privacy policy: privacycenter.instagram.com/policy.

Google Maps / Google Reviews: This website contains links to Google Maps (for reviews and address). These are click-links only — no embedded maps. Data is only transferred to Google when you actively click the link.

Deezer (Deezer S.A., 47 rue de Babylone, 75007 Paris, France): On the individual playlist pages (excluded from search engines via "noindex"; reachable via the footer link "Playlists of past events" and via personal links), cover images for the listed songs and preview clips are only loaded from Deezer's servers after you have clicked "Load covers" in the notice bar or chosen "Accept all" in the cookie banner; your IP address is transmitted to Deezer in the process. Without this consent no connection to Deezer is made. The playlist preview on all pages that include it (the home page as well as the wedding, birthday, corporate event and Christmas party pages, and the pages for areas, towns and regions) only shows these covers after you have chosen "Accept all" in the cookie banner (Art. 6(1)(a) GDPR); without consent the tile stays without an image and no connection to Deezer is made. When you play a preview clip (15 seconds), an audio file is additionally loaded from Deezer's servers. Privacy policy: deezer.com/legal/personal-datas. Legal basis: Art. 6(1)(a) GDPR (consent) and Section 25(1) TDDDG.

Blog comments and "Like": Below the blog articles you can leave a comment or click "Like". For a comment, the name (or nickname) you enter, the comment text and the date are stored on my server; the comment is only published after I have reviewed it. Please do not enter data you do not want to be publicly readable. For a "Like", no name is stored, but a one-way hash of your IP address per article, generated with a secret salt, so that each person counts only once; the IP address cannot be recalculated from the hash. To prevent abuse (20-second spam lock), a cookie without personal reference is set for one minute after a comment is submitted. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in moderated exchange below the articles and in preventing abuse). I delete comments at any time on request (email to the address in section 1); a "Like" is deleted together with the article.

7. Analytics and Traffic Measurement

With your consent via the cookie banner ("Accept all"), I use two analytics tools to understand how this website is used and to continuously improve it. Without this consent, no traffic measurement takes place at all; the website functions fully independently of it. You can withdraw your consent at any time with future effect by clicking "Cookie Settings" in the footer of this website and selecting "Necessary only".

Own, self-hosted tracking: This records pages viewed, time on page and scroll depth (only while the browser tab is active), clicks on key elements (e.g. phone, e-mail and WhatsApp links, navigation), and referral information (referrer, UTM parameters, landing page). A randomly generated visitor and session identifier that cannot be traced back to you personally is stored locally in your browser (see section 8). Your IP address is never stored. Analysis takes place via a server I operate myself; data is not shared with advertising networks or any other third-party analytics service. Legal basis: Art. 6(1)(a) GDPR (consent).

Location lookup via ipapi.co: As part of my own tracking (only after consent, see above), your browser queries the geolocation service ipapi.co once per session. Your IP address is transmitted to that service, which derives a rough origin (city, region, country) from it. Only this rough origin is reported to and stored on my own server; I do not store your IP address. Processing by the service is outside my control; the provider is Kloudend, Inc., 1887 Whitney Mesa Dr #4080, Henderson, NV 89014, USA. The transfer to the USA is based on standard contractual clauses (Art. 46(2)(c) GDPR), see ipapi.co/dpa. The provider's privacy policy: ipapi.co/privacy. Legal basis: Art. 6(1)(a) GDPR (consent via the cookie banner).

Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; processing may also involve Google LLC, USA): In addition to my own tracking, I use Google Analytics 4 for traffic measurement, likewise only after consent and with Google Consent Mode v2 enabled — without consent, Google's data storage remains technically disabled. After consent, usage data (including pages visited, time on page, technical device data) is transmitted to Google; IP addresses are shortened (IP anonymisation). Transfer to the USA may take place on the basis of standard contractual clauses (Art. 46(2)(c) GDPR). Privacy policy: policies.google.com/privacy. Legal basis: Art. 6(1)(a) GDPR (consent).

8. Local Storage / Session Storage

This website stores the following technically necessary settings locally in your browser (localStorage), not on a server: colour scheme (light/dark), language preference (German/English), and your cookie banner choice ("necessary only" or "accept all"). Only if you consent to traffic measurement (section 7), a randomly generated, anonymous visitor identifier (localStorage) and a session identifier (sessionStorage, cleared when the browser tab is closed) are additionally stored. Your Mixcloud consent is also stored in sessionStorage for the duration of your visit. In addition, the site stores in the session (sessionStorage, cleared when the tab is closed) a random number (bpm-rv) so that customer reviews appear in a different order on each visit, and a flag (bpm-tip) that a usage hint in the player has already been shown. Neither contains personal data and neither is transmitted to a server. When blog articles are opened, a technically necessary session cookie (PHPSESSID) may also be set to secure the comment and "Like" function; it contains no personal data, is not used for advertising or measurement, and expires after 30 days at the latest. The session also notes whether the preview of my Instagram story has already been shown to you, so that it does not reappear on every page; nothing is transmitted to a server or to Meta in the process. No data is permanently transferred to a server except as described in section 7. You can delete this data at any time via your browser settings.

9. Use of AI Tools (Art. 50 AI Act)

Text: Parts of the text on this website were created or revised with the assistance of AI-based tools. All content was subsequently reviewed, approved and editorially signed off by Michael Zimmermann, who holds editorial responsibility.

Images and video: The photographs on this website were taken by the site owner or commissioned (see Copyright, German only). Individual illustrations and backgrounds, as well as some of the image and video material, were generated using AI tools. This AI material is purely illustrative: it does not depict events that actually took place, real guests, or documentary footage of services rendered. Some of this content is additionally marked directly on the image or video with a small indicator (“KI”, German for AI).

Not in use: There is no AI chatbot or comparable interactive AI system on this website. I deliberately do not use AI avatars or AI recreations of real, identifiable persons.

Legal basis for this disclosure: Art. 50 of Regulation (EU) 2024/1689 (AI Act).

10. Your Rights

You have the following rights: access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection (Art. 21). To exercise your rights, contact:

11. Right to Lodge a Complaint

You have the right to lodge a complaint with the competent supervisory authority:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
www.lda.bayern.de

Last updated: August 2026