Privacy policy – Jazz For Kids

This is a translation for your convenience. Only the German version is legally binding: German version

1. Controller

The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Kira Frenk – Jazz For Kids
Albert-Schweitzer-Str. 5
60437 Frankfurt am Main
Phone: 0155 65982560
Email: konzerte@jazzforkids.online

2. Summary

We only process personal data to the extent necessary to run this website and answer your requests. We only load the Meta Pixel, which sets cookies and transfers data to Meta, if you expressly agree in the cookie banner (section 9). To measure reach, we use Cloudflare Web Analytics, which works without cookies and does not create user profiles (section 3). We do not use any other analytics, tracking or advertising services. Fonts are hosted on our own server; without your consent, no third-party content (such as Google Fonts, YouTube, maps or Meta) is loaded when you open our pages.

3. Hosting and server logs

This website is delivered via Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you open a page, your browser necessarily transmits data to Cloudflare’s servers, in particular:

IP address
date and time of access
page or file requested and amount of data transferred
the website you came from (referrer)
browser type, operating system and language setting

Cloudflare processes this data to deliver the website quickly and securely and to protect it against attacks. Processing may also take place on servers outside the EU, for example in the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework, so an adequacy decision of the European Commission covers the transfer (Art. 45 GDPR). We have a data processing agreement with Cloudflare (Art. 28 GDPR). We do not analyse this data ourselves or combine it with other data.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website securely and reliably. More information: www.cloudflare.com/privacypolicy/

To measure reach, we use Cloudflare Web Analytics. Your browser loads a small script from Cloudflare (static.cloudflareinsights.com) that transmits technical information when you open a page: page visited, referrer, browser and device type, country and loading times. Cloudflare Web Analytics does not set cookies, stores nothing on your device, does not use your IP address to recognise you and does not create personal profiles. We only see aggregated statistics, such as how often a page was viewed. Cloudflare processes the data on our behalf (see above). The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in understanding which pages are used and improving our website.

Data transmitted between your browser and the server is encrypted via TLS (indicated by “https://” in the address bar).

4. Local storage in your browser (subscribe notice, cookie choice)

On the home page, a notice about our Instagram and WhatsApp channel appears. If you close it, your browser stores the time of closing in its local storage (localStorage) so that the notice does not reappear for 14 days. This entry contains no personal data, stays on your device and is not transmitted to us or third parties.

We also store your choice in the cookie banner (“Accept” or “Decline”) in localStorage, together with the time, so that the banner does not appear on every page. We ask again after 180 days.

These entries are strictly necessary for the functions you requested (§ 25(2) no. 2 TDDDG). You can remove them at any time in your browser settings (clear site data).

5. Videos

Videos on this website are hosted on our own server and only load once you click “play”. Only the technical data listed under section 3 is processed; no data is transferred to video platforms such as YouTube.

6. Contact by email, phone or WhatsApp

If you contact us by email, phone or messenger, we process your details (e.g. name, contact details, content of your message) in order to answer your request. The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract (e.g. booking a concert), otherwise Art. 6(1)(f) GDPR (legitimate interest in answering requests). Our email mailbox is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, on our behalf (Art. 28 GDPR).

We delete the data once your request has been fully dealt with, unless statutory retention obligations apply (e.g. for invoices under commercial and tax law).

If you write to us via WhatsApp, WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland, also processes your data under its own terms. If you do not want this, please email us instead.

7. Booking requests via the form

If you use the request form, we process the details you enter (name, email address, type of event, organisation, location, preferred date, message) solely to handle your request and prepare a possible booking. Required fields are marked; we cannot process your request without them. The legal basis is Art. 6(1)(b) GDPR. Section 6 applies accordingly to storage and deletion.

Your details are transmitted via our host Cloudflare (see above) as an email to our mailbox at IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, where they are stored. IONOS processes the data on our behalf (Art. 28 GDPR). We do not send a copy to your address.

8. Newsletter

For our newsletter we use our own form on this website, not an external newsletter service. We process your email address, optionally your first name, the language and topics you choose, and the time of sign-up and confirmation as proof of your consent.

We use the double opt-in procedure: after submitting the form you receive an email with a confirmation link that is valid for 7 days. We only add you to the mailing list after you confirm; unconfirmed sign-ups are not stored. Your details are processed via our host Cloudflare (see above) and sent by email through our mailbox at IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, where they are stored. IONOS processes the data on our behalf (Art. 28 GDPR).

To prevent abuse (e.g. mass sign-ups of other people’s addresses), your IP address is used briefly to allow no more than five sign-ups per minute; it is not stored permanently for this purpose. The legal basis is Art. 6(1)(f) GDPR.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future, for example by replying briefly to a newsletter email or sending us a message. We will then remove your address from the mailing list; we keep the proof of consent for up to three years (Art. 6(1)(f) GDPR, duty to provide evidence).

9. Meta Pixel (only with your consent)

We would like to know whether our ads on Facebook and Instagram reach people who are interested in our concerts. For this purpose we use the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland (“Meta”), but only if you click “Accept” in the cookie banner. Without your consent, the pixel is not loaded and no data is transferred to Meta.

Once you consent, your browser loads a script from Meta’s servers and transmits the following with every page view, in particular:

IP address
page visited, date and time, the website you came from (referrer)
information about your browser and device
an identifier in the “_fbp” cookie (stored for up to 90 days) and, if you come to us via an ad on Facebook or Instagram, the click identifier “_fbc”

Meta may link this data to your Facebook or Instagram account if you are logged in there, and may also use it for its own purposes, such as personalising ads. We use the data to measure the effectiveness of our ads (conversion tracking) and to show ads to people who have visited our website (Custom Audiences). We only receive aggregated statistics from Meta, nothing that would allow us to identify you personally.

We and Meta are joint controllers for collecting the data on our website and transmitting it to Meta (Art. 26 GDPR). Under the agreement on this (Meta Controller Addendum), Meta is responsible for fulfilling your rights regarding this data; you can, however, also contact us. Meta alone is responsible for any further processing. Meta may transfer data to Meta Platforms, Inc. in the USA; Meta is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR).

The legal basis is your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future via “Cookie settings” at the bottom of every page; we then also delete the “_fbp” cookie. Your choice is stored for 180 days (section 4). More about privacy at Meta: www.facebook.com/privacy/policy/

10. Links to social networks and other providers

We link to our profiles on Instagram and Facebook (Meta Platforms Ireland Limited, Ireland), our WhatsApp channel (WhatsApp Ireland Limited, Ireland), YouTube and Google Maps (Google Ireland Limited, Ireland), as well as ticket providers and venues. These are plain links: only when you click a link are you taken to the provider’s site, which then processes data under its own privacy policy. Simply visiting our pages does not transfer any data to these providers; the only exception is the Meta Pixel if you have consented to it (section 9).

If you buy tickets from an external ticket provider, that provider is responsible for processing your order and payment data.

11. Recipients and disclosure

We do not sell your data. The only recipients are the service providers named above acting as processors, Meta as part of the Meta Pixel if you have consented (section 9), and, where required by law, public authorities (e.g. the tax office).

12. Your rights

You have the following rights regarding your personal data at any time:

access (Art. 15 GDPR)
rectification (Art. 16 GDPR)
erasure (Art. 17 GDPR)
restriction of processing (Art. 18 GDPR)
data portability (Art. 20 GDPR)
withdrawal of consent with effect for the future (Art. 7(3) GDPR)
objection to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation (Art. 21 GDPR)

An informal message to the email address above is sufficient for any request.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 31 63, 65021 Wiesbaden, Germany, datenschutz.hessen.de

13. Further information

You are under no legal or contractual obligation to provide us with personal data; however, we cannot answer requests without contact details. We do not make any automated decisions within the meaning of Art. 22 GDPR. How Meta uses Meta Pixel data for advertising profiles is described in section 9.

We update this privacy policy when the website or the legal situation changes. The version published here applies.

Last updated: October 2026