Privacy policy
This is a translation. The German version (Datenschutzerklärung) is legally binding.
This website does not use any analytics or tracking services and loads its fonts from its own server. I only process personal data when you send me a request through the form.
1. Controller
Michele Nigrelli
Missundestr. 10
22769 Hamburg
Germany
Phone: +49 170 9186112
Email: info@michelenigrelli.com
2. Hosting and server log files
The website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. Each time the site is accessed, the server automatically stores your IP address, date and time, the page requested, the previously visited page (referrer) and your browser and operating system in log files. I need this data to deliver the website securely and without errors. The legal basis is my legitimate interest under Art. 6(1)(f) GDPR. The log files are deleted automatically after the period set by the host. Hostinger processes this data on my behalf on the basis of a data processing agreement under Art. 28 GDPR, which is part of Hostinger’s terms.
3. Encryption
The website uses SSL/TLS encryption. You can recognise it by the padlock symbol and “https://” in the address bar. This means data you send through the request form cannot be read by third parties.
4. Request form for a custom backing track
When you use the request form, I process your name, your email address, the song you want and its original artist, your suggested times for our call, the type of call you prefer and, if you provide them, a link to the original, your preferred key, tempo and length, your ideas for the style, the occasion, the date of your performance, your phone number and your message. I also store the language in which you use the site and the time of your request.
I only use this information to answer your request, arrange a call with you and, where applicable, to prepare and carry out an order. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures and contract).
Your request is sent as an email to my mailbox. You receive a confirmation at the email address you entered. My mailbox is hosted by Google Workspace, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes the emails on my behalf. A transfer to Google LLC in the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework, on the basis of which the EU Commission has found an adequate level of data protection. So that no request gets lost if sending an email fails, the website also stores a copy on the server at Hostinger.
I delete your request and the copy on the server once the request has been dealt with and no statutory retention obligations apply. If an order is placed, I keep business records such as quotes and invoices for as long as German tax law requires (§ 147 AO).
5. Spam protection
To prevent the form from being misused by automated programs, the website counts how many requests came from the same IP address within the last hour. It stores the IP address only as a checksum (hash) together with the time of the request. The website deletes these entries automatically once they are older than one hour. The legal basis is my legitimate interest in a working, secure form under Art. 6(1)(f) GDPR.
6. Cookies
On the page with the request form, the website sets a technically necessary session cookie (PHPSESSID). It ensures that only requests actually sent through the form are accepted and so protects against misuse. The cookie contains no personal information and is deleted when you close your browser. The legal basis is § 25(2) No. 2 TDDDG (German Telecommunications Digital Services Data Protection Act) and my legitimate interest under Art. 6(1)(f) GDPR. All other pages set no cookies.
7. Links to other websites
The website links to michelenigrelli.com and to Instagram. These are plain links without embedded content, so no data is transferred to these sites unless you click. After you click, the privacy policy of the respective site applies.
8. Your rights
You have the right to access your stored data (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21). An informal message to info@michelenigrelli.com is enough for all of this.
You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany, datenschutz-hamburg.de.
9. Note for visitors from Switzerland
For people in Switzerland, the Swiss Federal Act on Data Protection (FADP) also applies. You have the rights listed above under it as well. Your data is processed in Germany, the EU and, where Google is involved, possibly in the USA. Switzerland recognises data protection in the EU as adequate, and the Swiss-US Data Privacy Framework applies to the USA. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).
10. Obligation to provide data and automated decisions
You are not obliged to give me any data. Without your name, email address, song and suggested times, however, I cannot answer a request. There is no automated decision-making or profiling.
Last updated: October 2026