Privacy Policy

1. Controller

2. General Information & Mandatory Information

The use of our website is generally possible without providing personal data. Insofar as personal data is collected on our pages, this is always done on a voluntary basis. This data will not be passed on to third parties without your express consent. We would like to point out that data transmission over the Internet can have security vulnerabilities. A complete protection against access by third parties is not possible.

3. Server Log Files

The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are: browser type and browser version, operating system used, referrer URL, hostname of the accessing computer, time of the server request, and IP address. This data is not merged with other data sources. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in the secure operation of the website). The data is automatically deleted after 7 days.

4. Contact

If you send us enquiries by e-mail or via the contact form, your details, including the contact data you have provided, will be stored for the purpose of processing the enquiry and in case of follow-up questions. We will not pass on this data without your consent. The legal basis is Art. 6 para. 1 lit. b GDPR (performance of a contract or pre-contractual measures) and Art. 6 para. 1 lit. f GDPR (legitimate interest in responding to your enquiry).

5. Sending of E-Mails

Messages sent via our contact form are delivered through our hosting provider Hostinger’s SMTP service using the WordPress plugin “WP Mail SMTP”. No further disclosure to third parties takes place; the e-mail is delivered directly to our own inbox. The legal basis is Art. 6 para. 1 lit. b or lit. f GDPR (as described under “Contact” above).

6. Cookies & Consent

Our website uses technically necessary cookies (legal basis: Art. 6 para. 1 lit. f GDPR). We use the cookie consent tool “Klaro” to manage your consent. In addition, we only use optional cookies — in particular Google Analytics — with your express consent (Art. 6 para. 1 lit. a GDPR); no optional cookies are set and no corresponding scripts are loaded prior to your consent. You can adjust or revoke your consent at any time via the “Adjust cookie settings” link in the footer. Technically necessary cookies are deleted when you close your browser. Consents are stored for 365 days and can be revoked at any time.

7. Fonts (Locally Hosted)

This website uses fonts (Cormorant Garamond, Inter) that are stored locally on our server. No connection is made to external servers (e.g. Google Fonts CDN). No personal data is transmitted to third parties in this process.

8. OpenStreetMap

To display our studio location, we use an embedded map from OpenStreetMap (OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge CB4 0WS, United Kingdom) — not Google Maps. When the map loads, your IP address is transmitted to OpenStreetMap’s servers; the legal basis is our legitimate interest in providing a clear visual location (Art. 6 para. 1 lit. f GDPR). A switch to Google Maps only occurs if you actively click the “Open in Google Maps” button; this is a separate, voluntary redirection independent of this map display. Further information: https://osmfoundation.org/wiki/Privacy_Policy

9. Storage Period

Personal data is stored only for as long as is necessary for the respective processing purpose or statutory retention periods apply. Contact enquiries are deleted after complete processing and expiry of any statutory retention periods (generally 6 years pursuant to § 257 HGB or 10 years pursuant to § 147 AO).

10. Your Rights as a Data Subject

You have the following rights vis-à-vis us under the GDPR: right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on legitimate interests (Art. 21 GDPR). In addition, you have the right to revoke any consent given pursuant to Art. 7 para. 3 GDPR at any time. To exercise your rights, please contact: kontakt@harmonie-tasten.de

11. Automated Decision-Making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place on our website.

12. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with the competent data protection supervisory authority.

For Berlin:

13. SSL Encryption & Hosting

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://”. The website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider. Server log files are automatically deleted after 7 days. There is no merging with other data sources.

14. Technical & Organisational Measures

To protect your data, we apply appropriate technical and organisational measures (TOMs) pursuant to Art. 32 GDPR, including SSL/TLS encryption of data transmission, a data processing agreement with our hosting provider, automatic deletion of server log files after 7 days, and consent-based control of optional cookies and tracking scripts. Access to personal data is limited to what is necessary for website administration.

15. WhatsApp

This website offers the option of contacting us via WhatsApp. The operator is Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. When you click on the WhatsApp button, personal data (e.g. telephone number and message content) may be transmitted to Meta Platforms Ireland Ltd. Legal basis: Art. 6 para. 1 lit. a GDPR (consent by active clicking). Use is entirely voluntary — the same enquiry can alternatively be sent via the contact form or by e-mail to kontakt@harmonie-tasten.de. A transfer of data to the USA cannot be ruled out; Meta states that it bases international data transfers on the EU-US Data Privacy Framework or, alternatively, on EU Standard Contractual Clauses pursuant to Art. 46 GDPR. You can find the privacy policies of WhatsApp/Meta at: https://www.whatsapp.com/legal/privacy-policy

16. Instagram

Our website may include content or links referring to Instagram. The operator is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Legal basis is your consent by actively clicking the relevant link or content (Art. 6 para. 1 lit. a GDPR). A transfer of data to the USA cannot be ruled out; Meta states that it bases international data transfers on the EU-US Data Privacy Framework or, alternatively, on EU Standard Contractual Clauses pursuant to Art. 46 GDPR. Further information: https://privacycenter.instagram.com/

17. LinkedIn

Our website includes a link to our LinkedIn profile. The operator is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. This is a simple reference link, not an embedded plug-in — merely visiting our website does not transmit any data to LinkedIn. Only if you actively click the link do you leave our website, at which point LinkedIn’s own privacy terms apply. Legal basis: Art. 6 para. 1 lit. a GDPR (consent by active clicking). Further information: https://www.linkedin.com/legal/privacy-policy

18. Testimonials

We occasionally publish testimonials from students or their legal guardians on our website. These are only published with the express, prior consent of the person concerned (Art. 6 para. 1 lit. a GDPR; where a testimonial refers to health-related information, e.g. ADHD, additionally Art. 9 para. 2 lit. a GDPR). Consent given can be withdrawn at any time with future effect; the relevant testimonial will then be removed without delay. To do so, please contact: kontakt@harmonie-tasten.de

19. Google Analytics

This website uses Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, for the statistical analysis of visitor behaviour. Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

Google Analytics is used only with your express consent (Art. 6 para. 1 lit. a GDPR), obtained via the cookie consent banner (see section “Cookies & Consent”) — no analytics scripts are loaded and no cookies are set prior to consent. You can revoke your consent at any time via the cookie settings. We have activated IP anonymisation so that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted. For further information on data protection at Google, please visit: https://policies.google.com/privacy We additionally use Google Search Console to technically monitor our website’s visibility in Google Search; no personal data of our website visitors is processed for this purpose.