Privacy

Overview

This privacy policy explains which personal data is processed when you visit this website. The website sets no cookies, stores nothing in your browser, uses no analytics or tracking tools and loads nothing from third-party servers unless you start a video yourself. Fonts, images, app videos and downloads are served from my own server.

The apps have their own privacy policies: Zementio and Zementor.

Controller

Kai Röhr, contact details in the legal notice. For questions about data protection, you can reach me at the email address given there.

Hosting

The website and its mail server run on a server in Germany operated by netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany. A data processing agreement under Art. 28 GDPR is in place with netcup.

Visiting the website

To deliver the pages to your browser, the server processes your IP address, the time, the requested address and your browser identification. Visits to the website are not logged. The only exception are app downloads: for these, the server stores only when which file was downloaded and whether the transfer was complete, without your IP address and without your browser identification. I use this to count how often each version was downloaded; these details cannot be traced back to you. Only if a technical error occurs while delivering a page can an error message containing your IP address end up in the server’s system log. The system log is deleted automatically after 14 days. Legal basis: Art. 6 (1) (f) GDPR; my legitimate interest is delivering the website and operating the server securely.

When you first open the home page, a small script picks the German or English version based on your browser’s language setting. This check happens only in your browser and is not sent to the server.

Encryption

The connection to this website is encrypted with TLS (shown by “https://” and the padlock icon in your browser). Data you send through the contact form therefore cannot be read by third parties on its way to the server.

Contact form and email

If you write to me through the contact form, I process your email address, your message and, if you provide them, your name, subject and topic selection. The web server does not store these details but immediately delivers them to me as an email to my own mail server. To prevent abuse, the server keeps your IP address in memory for at most one hour to limit the number of messages per sender; it is neither stored nor included in the email. The legal basis for this is Art. 6 (1) (f) GDPR; my legitimate interest is protecting the form against mass abuse. The same applies to emails you send me directly, without this limit.

I use your details solely to answer your request and do not pass them on. Legal basis: Art. 6 (1) (b) GDPR if your request relates to a contract or steps prior to one, otherwise Art. 6 (1) (f) GDPR (my legitimate interest in answering requests). I delete the message once your request has been dealt with, unless retention is required by law.

YouTube videos

Music videos are embedded using YouTube’s privacy-enhanced mode (youtube-nocookie.com) and are only loaded when you click a video and agree in the notice that then appears. Only then is a connection made to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which transmits your IP address among other data. YouTube may use cookies or similar technologies, and data may also be transferred to the USA. Google is certified under the EU-US Data Privacy Framework. Legal basis: your consent (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). It applies to the videos on the page where you gave it until you leave or reload that page, and it is not stored; if you start no video, no connection to YouTube is made. See Google’s privacy policy: https://policies.google.com/privacy.

Links to Spotify, Apple Music, Amazon Music, Deezer, YouTube, Instagram, Facebook, DistroKid and similar services are plain links. Only when you follow such a link do you leave this website, and the provider’s privacy policy applies.

Your rights

You have the right of access to the data I hold about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7 (3) GDPR). Simply contact me at the email address given in the legal notice.

Right to object: Where I process data on the basis of Art. 6 (1) (f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the country or German state where you live.

Further information

You are not obliged to provide any data; without an email address, however, I cannot reply to you. No automated decision-making or profiling takes place.

Last updated: November 2026