Privacy Policy
Datenschutzerklärung
Who is responsible
Douglas Bruce Andrews (Doug Andrews Music), Eva-Maria-Mazzucco-Platz 2/409, 1220 Wien, Österreich, info@doug-andrews.net. Write to that address with any question about your data.
Visiting the site
The site is hosted by Vercel Inc. (USA). When you load a page, the server briefly logs technical data such as your IP address, browser, the page requested and the time, to deliver the site and keep it secure (Art. 6(1)(f) GDPR, legitimate interest). There is no analytics or tracking, and fonts are served from this site rather than from Google. This site sets no cookies for visitors; its only cookies are for my own admin login. Embedded services (Spotify, Cal.com, below) may set their own.
Contact form and email
When you use the contact form, your name, email address, subject and message are sent to me by email through Resend Inc. (USA) and stored in the site's database, run by Neon, Inc. (USA) on servers in Frankfurt, Germany. I use them only to answer you (Art. 6(1)(b) GDPR, or (f) for general enquiries), and delete them when they are no longer needed for that conversation. The same applies when you email me directly.
Newsletter
If you sign up, I send you occasional news about music, shows and lessons, based on your consent (Art. 6(1)(a) GDPR). The list is run by Brevo (Sendinblue SAS, Paris, France), which processes your email address on my behalf on servers in the EU. Your address is sent straight to Brevo and is not stored on this site.
Sign-up uses double opt-in: Brevo first emails you a confirmation link, and you are added to the list only after you click it. Brevo records when you signed up and confirmed, as proof of your consent. If you don't confirm, you are not added. Brevo also records whether a newsletter is opened and which links are clicked, so I can see what readers find useful.
Every newsletter has an unsubscribe link, and you can also write to me. Unsubscribing withdraws your consent for the future; I then stop sending to your address and keep it only as a record that you opted out.
Lesson bookings and payments
Lessons are booked through Cal.com, Inc. (USA). The lessons page loads Cal.com's booking script, so opening that page connects your browser to Cal.com, which receives your IP address and may store data in your browser under its own privacy policy. When you book, Cal.com receives your name, email address, chosen time and any notes you add. Payments are processed by Stripe Payments Europe, Ltd. (Ireland), which receives your payment details; I never see your full card number. The written song review is ordered through a Stripe payment page that also asks for a link to your recording. These data are needed to deliver the lesson or review and take payment (Art. 6(1)(b) GDPR). Booking and payment records are kept for seven years because Austrian tax law requires it (§ 132 BAO, Art. 6(1)(c) GDPR). Stripe also processes data under its own privacy policy, for example to prevent fraud.
Spotify player
The home page embeds a Spotify player. Loading it connects your browser to Spotify AB (Sweden), which receives your IP address and may set its own cookies under its own privacy policy.
Transfers outside the EU
Vercel, Resend and Cal.com are based in the USA, and Neon is a US company even though the database itself is in Germany. Data these providers process are protected by the EU-US Data Privacy Framework or by the European Commission's standard contractual clauses.
Your rights
You have the right to access, correct and delete your data, to restrict or object to its processing, to data portability, and to withdraw consent at any time without affecting earlier processing (Art. 15–21 GDPR). Write to info@doug-andrews.net. You can also complain to the Austrian data protection authority (Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, dsb.gv.at).