Privacy policy

This is a courtesy translation. The German version (Datenschutzerklärung) is the legally binding one.

This website is deliberately built to process as little personal data as possible. It sets no cookies, uses no analytics or tracking, and loads third-party content only after you click. Below we explain which data is nevertheless processed when you visit, on which legal basis, and which rights you have under the General Data Protection Regulation (GDPR).

1. Controller

Roman Deska
Kopernikusplatz 25
90459 Nürnberg
Germany
E-Mail: brickwater@gmx.de

2. Hosting and server logs

This website is hosted by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (Cloudflare Pages, with delivery through the Cloudflare content delivery network, including servers in the European Union). When you access the site, Cloudflare automatically processes technical data that your browser transmits: the IP address, the date and time of the request, the requested page or file, the referring page, the browser type and version, the operating system, and the amount of data transferred. This data is needed to deliver the pages, to keep the service stable and secure (for example to ward off attacks) and for aggregated, non-personal statistics. The legal basis is Article 6 (1) (f) GDPR; our legitimate interest is the reliable and secure operation of the website. We have concluded a data processing agreement with Cloudflare under Article 28 GDPR. Cloudflare is certified under the EU-US Data Privacy Framework, and transfers to the USA are additionally safeguarded by the EU standard contractual clauses. Cloudflare keeps log data only as long as necessary for the stated purposes. Details: Cloudflare privacy policy.

3. No cookies, no tracking, no analytics

This website sets no cookies of its own and uses no web analytics, advertising or social media tracking. Nothing is stored in your browser by us. Fonts are hosted on our own server; no connection to Google Fonts or other font services is made.

4. Embedded videos and players (two-click solution)

Videos from YouTube and music players from Bandcamp are not loaded automatically. You see only a preview image or a placeholder that is served from our own server. Only when you click the play or load button does your browser connect to the respective provider and transmit the technical data described in section 2 (in particular your IP address); the provider may then set its own cookies and process your data in accordance with its own privacy policy. Each click counts as your consent for that single playback. We do not store the consent, so the next video again requires a click.

• YouTube, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use the extended privacy mode (youtube-nocookie.com). Google may transfer data to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework. Privacy policy: policies.google.com/privacy.
• Bandcamp, operated by Bandcamp Inc. (a Songtradr company), USA. Data may be transferred to the USA. Privacy policy: bandcamp.com/privacy.

The legal basis for loading the embedded content and for the access to your device it entails is your consent under Article 6 (1) (a) GDPR and Section 25 (1) TDDDG; for any transfer to the USA that is not covered by an adequacy decision, Article 49 (1) (a) GDPR. You can withdraw consent at any time with effect for the future by simply not clicking the player again.

5. Links to other services

The site links to Instagram (Meta Platforms Ireland Limited), Spotify, Apple Music, Deezer, YouTube, Bandcamp, Google Maps and, where shows are announced, to ticket providers and venues. Plain links transmit no data until you follow them. Once you do, the privacy policy of the respective provider applies.

6. Contact by email

If you write to us by email, we process the data you provide (your email address, your name if given, and the content of your message) in order to handle your enquiry. For booking enquiries the legal basis is Article 6 (1) (b) GDPR (steps prior to entering into a contract); for all other enquiries it is Article 6 (1) (f) GDPR, our legitimate interest being to answer you. We keep the correspondence for as long as it is needed to handle the matter and beyond that only where statutory retention periods (for example for business records) require it. Email is not encrypted end to end; please do not send us sensitive data by email.

7. Calendar files and downloads

The calendar files (.ics) offered for shows are static files from our server. Downloading them processes no personal data beyond the server log described in section 2.

8. Your rights

Under the GDPR you have the following rights with regard to your personal data:

• access (Article 15), rectification (Article 16), erasure (Article 17) and restriction of processing (Article 18);
• data portability (Article 20);
• withdrawal of consent you have given, at any time with effect for the future (Article 7 (3));
• lodging a complaint with a supervisory authority (Article 77). The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de. You may also contact the authority at your place of residence.

9. Data security

This site is delivered exclusively over an encrypted connection (TLS/HTTPS). No automated decision-making or profiling takes place.

10. Changes

We will update this policy whenever the site or the legal situation changes. The current version is always available on this page.

Last updated: 10 September 2026