Protecting your personal data is important to me. Below, I explain which data are processed when you visit this website, and for what purpose. Personal data are all data with which you can be personally identified.
1. Controller
The controller responsible for data processing on this website is:
Lillian Simbeck-Hampson
Provinostr. 25
86153 Augsburg
Germany
Email: [email protected]
2. Hosting
This website is operated by an external service provider (host). The personal data collected on this website are stored on the host’s servers. This is done in the interest of a secure, fast and reliable provision of the online offering (Art. 6(1)(f) GDPR) and in order to fulfil pre-contractual and contractual obligations (Art. 6(1)(b) GDPR).
The host processes the aforementioned data solely on our behalf and in accordance with our instructions, on the basis of a data processing agreement pursuant to Art. 28 GDPR.
3. Server log files
When you access this website, information is automatically stored in so-called server log files that your browser transmits: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request, and the IP address. These data are not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the technically error-free presentation and security of the website). These data are deleted after a short time.
4. Content Delivery Network (Cloudflare)
To deliver its content securely and faster, this website uses the content delivery network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Traffic between your browser and the website is technically routed through Cloudflare’s network (Art. 6(1)(f) GDPR). Any transfer of data to the USA is based on the European Commission’s standard contractual clauses. Further information: cloudflare.com/privacypolicy.
5. SSL/TLS encryption
For security reasons, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address bar begins with “https://”.
6. Cookies and consent management
This website uses cookies. Technically necessary cookies are set on the basis of Art. 6(1)(f) GDPR or § 25(2) TDDDG. All other cookies, as well as the loading of external services (e.g. statistics, embedded videos), take place only with your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). The “Complianz” consent tool is used to manage your consent. You can withdraw or adjust your consent at any time with effect for the future via the cookie banner.
7. Contact and booking enquiries
If you send me an enquiry via the form on the booking page, your details (name, email address, phone number where applicable, type of enquiry, preferred date, place/venue, and your message) are stored in order to process the enquiry and in case of follow-up questions. Processing is based on Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). To deliver the notification, an email is sent via the Google (Gmail) service (see section 12). The data remain with me until the purpose of storage no longer applies or you request deletion; statutory retention periods remain unaffected.
8. Newsletter
To send the newsletter, I need your email address. Sign-up is based on your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time, for example via the unsubscribe link or by message to me. The lawfulness of the processing carried out until withdrawal remains unaffected. After you unsubscribe, your email address is deleted.
9. Web analytics with Google Analytics 4
This website uses – only with your consent – Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Your IP address is processed in truncated form. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). A transfer of data to the USA cannot be ruled out and is based on the European Commission’s standard contractual clauses. You can withdraw your consent at any time with effect for the future.
10. Embedded third-party content
This website embeds third-party content – in particular videos from YouTube in extended privacy mode (youtube-nocookie.com, Google Ireland Limited), music players from Spotify (Spotify AB, Sweden), and posts from Instagram (Meta Platforms Ireland Ltd.). This external content is loaded only after you have given your consent via the cookie banner (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Only then can the providers receive data (including your IP address) and, where applicable, transfer them to third countries; without consent, you see only a placeholder. The short song excerpts on the music page, by contrast, are delivered directly from this website; no cookies are set and no data are transmitted to third parties.
11. Local fonts
To ensure a consistent display of fonts, only fonts stored locally on our own server are used. No connection to third-party servers (such as Google Fonts) is established in the process.
12. Email delivery
To send notification emails (e.g. for form enquiries), the application programming interface (API) of the Google (Gmail) service provided by Google Ireland Limited is used. The data required for delivery are transmitted to Google. The legal basis is the legitimate interest in reliable email delivery (Art. 6(1)(f) GDPR).
13. Your rights
Within the framework of the statutory provisions, you have the right at any time to information (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and to object to the processing (Art. 21 GDPR). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). For this, and for any further questions about data protection, please contact me at any time.
14. Right to lodge a complaint with a supervisory authority
In the event of breaches of the GDPR, you have the right to lodge a complaint with a supervisory authority. The competent supervisory authority is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.
15. Storage period
Unless a more specific storage period is stated in this privacy policy, your personal data remain with me until the purpose of processing no longer applies. If you assert a legitimate request for erasure or withdraw your consent, your data are deleted, provided there are no legally permissible reasons to the contrary for storing them.
Last updated: September 2026
