1. Our Philosophy on Data
We believe in keeping things simple and respectful. This website is built to connect you with the music of Paul Corvin, not to harvest your personal information. We only collect the absolute minimum data required to keep the site secure, functional, and to communicate with you if you explicitly ask us to.
2. Data Controller
For the purposes of the General Data Protection Regulation (GDPR), the data controller responsible for this website is Paul Corvin. Full contact details and legal identity can be found on our Impressum (Legal Notice) page.
3. What We Collect & Why
- Server Logs & Hosting: This site is securely hosted by Firebase. When you visit, the servers automatically log standard technical data (like your IP address, browser type, and time of visit) to deliver the website to your screen and prevent cyber attacks. This is processed under our legitimate interest in maintaining a secure infrastructure.
- Security & Bot Protection: We use Google reCAPTCHA and Firebase App Check to protect our systems from spam and abuse. These services use cookies and collect hardware/software information (such as device data and interaction patterns) to perform background risk analysis. For more details, please review the Google Privacy Policy and Terms of Service.
- Newsletter (If Applicable): If you choose to sign up for our newsletter, we securely store your email address. We use this exclusively to send you updates about music and tours. We rely on your explicit consent for this, and you can withdraw from it at any time.
4. Cookies & Security Consent
We intentionally keep our website free of invasive third-party marketing cookies, tracking pixels, and advertising brokers. We do not track you across the internet to sell you things.
However, to protect this site and our forms from malicious bots, we must use Google reCAPTCHA. Because this security service places cookies and transmits data to Google for risk analysis, European law (ePrivacy Directive & GDPR) requires us to inform you and obtain your consent.
This is why you see a minimal consent banner when you first arrive. By clicking "Got it," you agree to the use of these specific security cookies. We remember your choice using a single, harmless local storage item (cookie_consent) so the banner doesn't annoy you on every visit. If you wish to revoke this consent, you can simply clear your browser's local storage and cookies for this site.
5. Data Sharing
We do not sell or rent your data. We only share data with trusted infrastructure partners (like our hosting provider and newsletter service) who act strictly on our behalf and are legally bound to protect your data under GDPR compliance standards.
6. Your GDPR Rights
Under European law, you have absolute control over your data. You have the right to:
- Request access to the personal data we hold about you.
- Request correction of any incorrect data.
- Request the complete deletion of your data ("Right to be Forgotten").
- Withdraw your consent for communications (e.g., unsubscribing from the newsletter).
To exercise any of these rights, simply reach out to us. Additionally, you have the right to lodge a complaint with the Data Protection Authority in Austria if you believe your rights have been violated.
7. Updates to this Policy
As web technologies or legal requirements evolve, we may occasionally update this Privacy Policy. Any changes will be posted directly to this page.