Privacy Policy

This policy applies to the website thomasstimmel.com. It explains which personal data are collected when you visit this site, what they are used for, and what rights you have. In case of doubt, the German version of this policy prevails.

Controller

Thomas Stimmel
Oberhofen 7
4894 Oberhofen am Irrsee
Austria
Phone +43 6213 72690
E-mail info@thomasstimmel.com
VAT ID: ATU77388578

A data protection officer is not required by law and has not been appointed. Please address any privacy enquiries directly to the contact above.

How this website is built

This site is deliberately lean. It uses no analytics or statistics tools, no tracking, no advertising, no newsletter, no shop and no social media buttons. Fonts, images, audio files and scripts are served from our own server and are not loaded from third parties. Simply opening a page does not create a connection to anyone else.

The only third-party content are the Spotify and YouTube players. They load only after you click them – never before. See below for details.

Hosting and server log files

The website is hosted by:

ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstrasse 68
02742 Friedersdorf, Germany

The provider processes data on our behalf under a data processing agreement pursuant to Art. 28 GDPR. The servers are located in Germany.

Each time a page is opened, the server automatically records the following in a log file:

IP address of the requesting device
date and time of access
address requested and volume of data transferred
whether the request was successful
browser type and operating system
the previously visited page, if the browser transmits it

These data are not combined with any other source and serve solely the secure and error-free operation of the site. The legal basis is Art. 6 (1) (f) GDPR; the legitimate interest lies in technical operation and in defending against attacks. Log files are deleted after seven days at the latest, unless a security incident requires longer retention.

Encrypted transmission

The site is delivered exclusively over an encrypted connection (SSL/TLS, shown as https://). Its content cannot be read by third parties in transit.

Cookies

This website sets no cookies whatsoever for advertising, analytics or recognition. No consent banner appears either – there is nothing to consent to, because no third-party service loads without your doing.

The only technically necessary entry is a language note: when you switch between the German and the English version, the site remembers your choice in a cookie (pll_language). It contains only the language code and no identifier by which you could be recognised. The legal basis is Art. 6 (1) (f) GDPR in conjunction with § 165 (3) of the Austrian Telecommunications Act 2021; no consent is required for it. In addition, the installed consent tool Real Cookie Banner writes technical entries to your browser’s local storage; no data are transmitted to its manufacturer.

If you click a listening sample or a video, the respective provider may set its own cookies – see the next section. That decision applies to that page view only and is stored nowhere by us: on your next visit the player is inactive again and you decide anew. You therefore need not declare any withdrawal; the provider’s cookies can be deleted in your browser.

Embedded music and video (click to load)

The pages “Listen & Watch” and the home page offer listening samples and videos. As long as you do not click, you only see a button served from our own server – no connection to Spotify or YouTube is established and no data are sent there.

Only when you click such a button is the provider’s player loaded. By clicking you consent to the transfer of your data to that provider. The legal basis is Art. 6 (1) (a) GDPR. What is transferred includes your IP address, information about your browser and device, and the address of the page you are on; the provider may set cookies and, if you are logged in there, associate the visit with your account.

Spotify

Provider: Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden. Privacy policy: spotify.com/legal/privacy-policy

YouTube

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Videos are embedded in extended privacy mode via youtube-nocookie.com; according to Google, cookies are only set once you actually start a video. A transfer to Google LLC in the United States cannot be ruled out; Google LLC is certified under the EU-U.S. Data Privacy Framework. Privacy policy: policies.google.com/privacy

The concert excerpts offered as audio files on “Listen & Watch”, by contrast, are stored on our own server. Playing them transfers no data to third parties.

Links to other providers

Links to profiles on social networks and music services are plain links. They transfer data only once you click them and thereby leave this website. The respective provider is responsible for any processing on the target site.

Contacting us

This website has no contact form. If you write or call, we process your details solely in order to deal with your enquiry. The legal basis is Art. 6 (1) (b) GDPR where your enquiry concerns a contract, otherwise Art. 6 (1) (f) GDPR based on our legitimate interest in replying.

E-mail is handled by Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Switzerland. An adequacy decision of the European Commission is in place for Switzerland. Correspondence is deleted once it is no longer needed; statutory retention periods remain unaffected.

Downloads

Biography, repertoire list and press photos are available as files. No registration is required and no data are collected; only the server log described above applies.

Retention

We keep personal data only as long as necessary for the respective purpose or as required by statutory retention obligations. They are deleted thereafter.

Your rights

You have the following rights vis-à-vis the controller:

Access to whether and which data we process about you (Art. 15 GDPR)
Rectification of inaccurate data (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection to processing based on a legitimate interest (Art. 21 GDPR)
Withdrawal of consent with effect for the future (Art. 7 (3) GDPR)

An informal message to info@thomasstimmel.com is sufficient.

Right to lodge a complaint

If you believe that the processing of your data infringes data protection law, you may lodge a complaint with the supervisory authority:

Österreichische Datenschutzbehörde (Austrian Data Protection Authority)
Barichgasse 40–42
1030 Vienna, Austria
Phone +43 1 52 152-0
E-mail dsb@dsb.gv.at
dsb.gv.at

Changes to this policy

We update this policy whenever the website or the legal situation changes. The version published here is the one that applies.

Last updated: September 2026