Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Mathias Mondel
Alte Reichsstrasse 38
86356 Neusäß
Germany
Email: info@mygroovefamily.com

There is no statutory obligation to appoint a data protection officer. For any privacy question, write to the address above.

2. Principles

We process personal data only where this is necessary to run this website and to answer enquiries. This site uses no analytics or tracking services, no advertising networks, no social media plugins and no embedded third-party content. There is no automated decision-making and no profiling.

3. Hosting

This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When the site is opened, the hosting provider processes the connection data technically required to deliver the page: the IP address of the requesting device, the date and time of the request, the address requested, the referrer and information about the browser and operating system.

Purpose: delivering the website, operational security, abuse prevention and diagnostics.
Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest is the secure and reliable operation of this website.
Transfer to a third country: the provider is based in the USA. Vercel Inc. is certified under the EU-U.S. Data Privacy Framework and additionally relies on EU Standard Contractual Clauses. See the provider’s privacy notice.
Retention: server and log data are processed by the hosting provider and deleted according to its own rules. We do not analyse this data and do not combine it with other data.

4. Contact form

The form in the “Contact” section lets you send a non-binding enquiry. We process what you enter there: name, email address, the type of event or venue, the location and your message; optionally also a phone number and an event date. The language version you used is submitted as well, so that we can reply in the same language.

Purpose: handling and answering your enquiry.
Legal basis: for booking enquiries Art. 6 (1) (b) GDPR (pre-contractual measures taken at your request); for other matters Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries).
Retention: we keep your enquiry for as long as it is needed to handle it and any cooperation arising from it. If a booking results, statutory retention periods – in particular under commercial and tax law – may apply to the related records. The data is deleted afterwards.

The fields marked as required are needed to answer the enquiry meaningfully; without them we cannot process it. There is no obligation to provide any data – using the form is voluntary.

Spam and abuse protection

The form contains a field invisible to people and a check on how long it took to fill in. Both run on our own server; no external CAPTCHA service is used. To limit automated bulk submissions, the sender’s IP address is held in the server’s memory for a ten-minute window and discarded afterwards. It is not stored permanently, not written to a log and not combined with the enquiry. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in preventing abuse).

Delivery of the form message

We use Plus Five Five, Inc. (Resend), 2261 Market Street #5039, San Francisco, CA 94114, USA to deliver form messages to our mailbox. The details you entered are transmitted, including your email address, which is set as the reply address.

Legal basis: Art. 6 (1) (b) or Art. 6 (1) (f) GDPR, depending on how your enquiry is classified.
Processing agreement: a data processing agreement under Art. 28 GDPR is in place with the provider; it takes effect on entering into the service agreement.
Transfer to a third country: the provider is based in the USA, is certified under the EU-U.S. Data Privacy Framework and additionally relies on EU Standard Contractual Clauses. See the provider’s privacy notice.

Our email mailbox

The mailbox behind info@mygroovefamily.com is operated by Hostinger International Ltd., 61 Lordou Vironos str., 6023 Larnaca, Cyprus. Enquiries you send through the form or directly by email are received, stored and managed there, as are our reply and any further correspondence.

Purpose: receiving, storing and managing email correspondence and booking enquiries.
Data: name, email address, phone number where supplied, event information, message content and the technical metadata associated with email communication.
Legal basis: Art. 6 (1) (b) GDPR for booking and pre-contractual enquiries, Art. 6 (1) (f) GDPR for other correspondence.
Processing agreement: a data processing agreement under Art. 28 GDPR is in place with the provider; it forms part of the terms of service and applies without separate signature.
Processing locations: according to the provider, personal data may be processed and stored by it, its group companies and service providers in the United Kingdom, the Netherlands, Lithuania or Cyprus. The EU Standard Contractual Clauses are incorporated for transfers outside the EEA. See the provider’s privacy notice.
Retention: messages stay in the mailbox for as long as they are needed to handle the matter and any cooperation arising from it. If the enquiry leads to a booking, statutory retention periods may apply to the related records. There is no automatic deletion after a fixed period; we delete once the matter is closed and no retention duty remains.

5. Contact by email

If you write to us directly at the address given, we process your message and the details it contains in order to answer it. The legal basis is Art. 6 (1) (b) GDPR where a booking is being initiated, otherwise Art. 6 (1) (f) GDPR. The message stays in our mailbox until the matter is closed and no retention duties apply.

6. Cookies and local storage

This website sets exactly one cookie. It is only written once you open a language version and serves solely to remember that choice. Nothing is inferred from your browser language. No analytics, marketing or recognition cookies are used, and local storage, session storage and IndexedDB are not used at all.

The cookie is strictly necessary for the service you explicitly requested – showing the site in the language you chose – within the meaning of § 25 (2) no. 2 TDDDG. No consent is required for it, and for the same reason this website has no cookie banner. You can delete the cookie at any time in your browser settings.

7. Fonts, images, audio

The fonts used are downloaded when the site is built and served from our own server. Opening the page makes no connection to Google Fonts or any other font service. Images and the audio samples are also stored on the same server as the website; playing a sample calls no third-party service and sets no separate identifier.

8. External links

This website may link to external pages, for example to venues. Following such a link takes you off our site, and the respective provider is then responsible for any processing. Simply displaying a link transmits no data to third parties.

9. Recipients

We do not pass personal data to third parties other than the hosting, email delivery and mailbox providers named in this policy, as far as technically necessary. No data is transferred for advertising purposes. Disclosure to authorities takes place only where we are legally obliged to do so.

10. Security

Traffic between your browser and this website is encrypted exclusively via TLS/HTTPS. We also apply appropriate technical and organisational measures under Art. 32 GDPR to protect data against loss, misuse and unauthorised access.

11. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and to object to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR). An email to info@mygroovefamily.com is enough to exercise them.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht, Promenade 27, 91522 Ansbach, Germany. You may also contact the authority where you live.

12. Changes to this policy

We update this privacy policy when the technology used on this website or the legal situation changes. The version published here is the one that applies.