Privacy Policy

The protection of personal data is of great importance. This Privacy Policy explains what personal data is processed when you visit this website, submit an enquiry, or take part in lessons, and what rights you have under applicable data protection law.

Liana Vlad
Art Song Atelier / Liedatelier
Windscheidstraße 20
10627 Berlin, Germany
Email: atelier@artsong.academy
Telephone: +49 179 1959124

No Data Protection Officer has been appointed, as the requirements of Article 37 GDPR and Section 38 of the German Federal Data Protection Act (BDSG) are not met.

This website is a static website delivered via Cloudflare Pages (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you access the website, Cloudflare processes technically necessary data, in particular your IP address and technical information relating to the request and the device or browser used. This is necessary to display the website and ensure its secure operation.

The legal basis for this processing is Article 6(1)(f) GDPR (legitimate interest in the secure and reliable operation of the website). A data processing agreement is in place for this processing.

The controller does not maintain any separate permanent server logs beyond what is necessary for operating the website. Where Cloudflare processes technical log data as part of the secure operation of its services, the applicable retention period is determined by Cloudflare's product-specific retention policies.

For international transfers of personal data, Cloudflare relies, depending on the particular transfer, on its certification under the EU-U.S. Data Privacy Framework and/or on the European Commission's Standard Contractual Clauses.

This website does not use cookies, analytics or tracking services. The fonts are loaded from the website's own server and are not loaded from Google.

When you use one of the forms on this website, your name, email address and any information you voluntarily provide are processed, such as your role, preferred language and format, topic or preferred times. This information is used to respond to enquiries and to organise lessons or participation in an offering.

The legal basis is Article 6(1)(b) GDPR where processing is necessary for taking steps prior to entering into a contract or for the performance of a contract; for other enquiries, the legal basis is Article 6(1)(f) GDPR.

Providing this information is neither a statutory nor a contractual requirement. However, without the information marked as required, in particular your name and email address, an enquiry cannot be processed or an offering organised.

The forms are processed through Formspark (Trampoline Software SRL, Belgium). Formspark receives, stores and forwards submissions. Formspark provides all customers with a data processing agreement as part of its Terms of Service, without requiring a separate signature.

Submissions received through Formspark are deleted once the enquiry has been dealt with and provided that there are no statutory retention obligations, and in any event no later than three months after receipt. Formspark's own technical retention periods may differ from this.

The Art Song Lab form also includes an optional checkbox for receiving information about concerts and other events. This constitutes voluntary consent pursuant to Article 6(1)(a) GDPR. Consent may be withdrawn at any time without giving a reason by sending an email to atelier@artsong.academy. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Registration, bookings and invoicing are handled by email. Email services are provided by Zoho Mail (Zoho Corporation B.V., Netherlands). In this context, the sender's email address, message content and attachments in particular are processed and stored in Zoho's European data centre. Zoho states that accounts and associated data, including emails and contacts, are assigned to and stored in the relevant regional data centre.

The legal basis is Article 6(1)(b) GDPR; for general enquiries, the legal basis is Article 6(1)(f) GDPR.

Ordinary email communication does not provide complete protection against access by third parties. Sensitive information should therefore only be sent by email where necessary.

For short organisational messages, such as arranging appointments, you may voluntarily provide a mobile phone number. The number will then be used for organisational communication via WhatsApp or iMessage. Messages will only be sent for this purpose where the number has been provided for that purpose or where the other party initiated contact. No advertising is sent via these services.

Substantive and personal matters, as well as registration, bookings and invoicing, are handled by email. Anyone who does not wish to use a messaging service can remain in contact by email or telephone. The number will be deleted upon request.

The legal basis is Article 6(1)(b) GDPR insofar as the communication serves the performance or organisation of lessons. WhatsApp Ireland Limited and Apple may process metadata relating to communications in accordance with their respective privacy policies.

Zoom is used for lessons conducted remotely, including with audio settings suitable for live collaborative music-making. Depending on how the service is used, the name or display name, audio and video data, technical information about the device and IP address may be processed.

The legal basis is Article 6(1)(b) GDPR.

Zoom is operated by Zoom Communications, Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA. Zoom has incorporated a data processing agreement into its contractual terms and is certified under the EU-U.S. Data Privacy Framework.

Recordings are made only with the express prior consent of all participants (Article 6(1)(a) GDPR). Consent is obtained before recording begins and may be withdrawn at any time.

Recordings are used solely for the follow-up and review of lessons and are not shared with third parties. They are stored locally and deleted no later than twelve months after they were created.

For invoicing and accounting purposes, names, addresses and information relating to the lessons agreed upon are stored. The legal basis is Article 6(1)(c) GDPR in conjunction with statutory tax and commercial record-keeping obligations.

Depending on the type of document, statutory retention periods of six, eight or ten years apply. Once the applicable statutory retention period has expired, the data will be deleted unless another statutory obligation or other lawful basis requires or permits continued storage.

Where personal data is transferred to third countries, such transfers are carried out, depending on the provider and the particular transfer, on the basis of an adequacy decision, certification under the EU-U.S. Data Privacy Framework, or appropriate safeguards such as the European Commission's Standard Contractual Clauses.

No automated decision-making, including profiling, within the meaning of Article 22(1) and (4) GDPR takes place.

Data subjects have the right to access their personal data (Article 15 GDPR), to rectification (Article 16 GDPR), to erasure (Article 17 GDPR), to restriction of processing (Article 18 GDPR), and to data portability (Article 20 GDPR).

Where processing is based on Article 6(1)(f) GDPR (legitimate interests), you have the right to object to the processing at any time on grounds relating to your particular situation (Article 21 GDPR). The data will then no longer be processed unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.

Consent that has been given may be withdrawn at any time with effect for the future. To do so, simply send an email to atelier@artsong.academy.

You also have the right to lodge a complaint with a data protection supervisory authority. The competent supervisory authority is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, Germany.

September 2026