Privacy Policy
Effective date: 8 July 2026
1. Controller
The controller responsible for the processing of personal data on this website is:
Matthias Schwengler
Gutenbergstraße 124
50823 Cologne
Germany
Phone: +49 176 54716672
Email: matthiasschwengler@gmail.com
No data protection officer has been appointed, as there is currently no legal obligation to appoint one.
2. General information about this website
This website provides information about the musical work of Matthias Schwengler, including projects, releases, media, concerts and contact details.
According to the current technical setup, this website does not use analytics tools, advertising trackers, marketing pixels, a newsletter system, contact forms, customer accounts, a shop, CRM integrations, profiling or automated decision-making.
Fonts, JavaScript files, images, audio files, preview images and other website assets are hosted locally where technically possible. The website does not load Google Fonts or external CDN resources.
According to the current technical setup, this website does not set cookies in the public frontend and does not use its own localStorage or sessionStorage mechanisms. For this reason, no global cookie or consent banner is used. YouTube videos are blocked by default and are loaded only after an individual two-click consent decision for the respective video.
3. Hosting and server log files
This website is hosted by:
DomainFactory GmbH
c/o WeWork
Neuturmstrasse 5
80331 Munich
Germany
Hosting product: Webhosting Standard Special
DomainFactory states that its servers are located in data centres in Strasbourg, France, and Cologne, Germany. Data processing therefore takes place within the European Union.
When this website is accessed, technical access data is processed by the hosting environment in order to deliver the website, ensure technical stability, troubleshoot errors and protect the website against misuse and attacks.
According to DomainFactory, internal webserver log files may include the following data:
- domain
- IP address
- requests
- user agent
- timestamp
- status code
According to DomainFactory, these internal webserver log files are retained for 7 days.
For Webhosting and Webhosting Plus environments, DomainFactory also states that Apache log files and error log files may be retained for 14 days and that statistics-tool data may be stored until deletion by the administrator. According to the current configuration, no optional additional Apache access log copies in the webspace and no optional visitor statistics have been intentionally activated by the website operator. If technical log or statistics data is nevertheless made available by the hosting environment, it is used only for technical operation, troubleshooting, security and abuse prevention and is deleted where technically possible once it is no longer required.
The legal basis for the processing of server log files is Art. 6(1)(f) GDPR. The legitimate interest lies in the secure, stable and functional operation of this website.
DomainFactory processes hosting-related data as a service provider. A data processing agreement pursuant to Art. 28 GDPR has been concluded with DomainFactory.
4. Email communication
If you contact Matthias Schwengler by email, the data transmitted with your email will be processed. This may include your email address, your name, the content of your message and technical metadata of the email communication.
The purpose of the processing is to handle and respond to your enquiry.
The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or pre-contractual communication. In all other cases, the legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in responding to incoming enquiries and maintaining communication.
The email address info@matthiasschwengler.de is hosted by DomainFactory GmbH. According to the current setup, there is no forwarding to Gmail or Google.
According to DomainFactory, email log files may contain metadata such as sender, recipient, time, IP address and message size. According to DomainFactory, email log files are retained for 3 days.
Email correspondence is stored for as long as necessary to process the enquiry. If statutory retention obligations apply, or if the communication is relevant for contractual, accounting or legal documentation, it may be retained for a longer period. Emails that are no longer required are deleted.
5. YouTube videos with two-click consent
This website may include YouTube videos. The videos are not loaded automatically when the page is opened.
Instead, a locally stored preview image is displayed first. Before you actively consent, no connection to YouTube or Google is established through the video embed. The actual YouTube iframe is blocked and is inserted only after you click the button labelled “Accept and load YouTube video”.
After you consent, the video is loaded via the domain youtube-nocookie.com in YouTube’s privacy-enhanced mode. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Depending on the processing, Google LLC and other Google companies may also receive data.
After you load a YouTube video, the following data may be transmitted to Google:
- IP address
- browser and device information
- the page from which the video is loaded
- date and time of access
- referrer information
- information about video playback and interaction
- identifiers, cookies or similar technologies, to the extent used by YouTube or Google for the embedded player
If you are logged into a YouTube or Google account, Google may be able to associate the video access with your account. Matthias Schwengler has no control over this processing by Google.
The legal basis for loading the YouTube video and transmitting data to Google after your active consent is Art. 6(1)(a) GDPR. To the extent YouTube or Google stores information on your device or accesses information already stored on your device, this is based on your consent pursuant to Section 25(1) TDDDG.
Your YouTube decision is not stored permanently by this website. If you reload or leave the page, the video returns to the blocked state. You can therefore withdraw your consent in practice by reloading or leaving the page; the video will not be loaded again unless you actively consent again.
For possible transfers of personal data to the United States, Google states that it relies, among other mechanisms, on the EU-U.S. Data Privacy Framework where the relevant recipient is certified.
6. External links to social media, streaming services, labels and shops
This website contains ordinary outbound links to external services and platforms, including Instagram, YouTube, Spotify, Apple Music, KLAENG, Music Hub and external shops or music platforms.
These are ordinary links. When you merely visit this website, no data is transmitted to those external providers through these links. Data is transmitted to the respective provider only when you click an external link and leave this website.
Matthias Schwengler actively operates profiles on Instagram and YouTube. If you visit or interact with these profiles, the respective platform provider processes personal data under its own responsibility. This may include information about your account, your IP address, your device, your interactions, comments, messages and usage behaviour. Please refer to the privacy information of the respective platform provider for details.
7. No analytics, no marketing tracking, no profiling
According to the current technical setup, this website does not use:
- web analytics
- conversion tracking
- advertising or retargeting pixels
- marketing cookies
- externally loaded web fonts
- newsletter tools
- contact forms
- customer accounts
- an online shop
- profiling
- automated decision-making
8. Storage periods
Personal data is stored only for as long as necessary for the respective purpose. Data is deleted when it is no longer required, unless statutory retention obligations, documentation obligations or legitimate interests require longer storage.
9. Your rights
Subject to the legal requirements, you have the following rights under the GDPR:
- right of access under Art. 15 GDPR
- right to rectification under Art. 16 GDPR
- right to erasure under Art. 17 GDPR
- right to restriction of processing under Art. 18 GDPR
- right to data portability under Art. 20 GDPR
- right to object to processing based on Art. 6(1)(f) GDPR under Art. 21 GDPR
- right to withdraw consent with effect for the future under Art. 7(3) GDPR
To exercise your rights, you can contact Matthias Schwengler at any time using the contact details provided above.
10. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority.
The competent supervisory authority for Cologne, North Rhine-Westphalia, is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Germany
Phone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
You may also contact any other competent data protection supervisory authority.
11. Changes to this Privacy Policy
This Privacy Policy may be updated if the legal, technical or organisational circumstances of this website change.