The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Michael Müller-Kasztelan Holthagen 2 24113 Molfsee Germany
E-mail: michael@muellerkasztelan.com
Phone: +49 179 900 53 70
Website: www.muellerkasztelan.com
I take the protection of your personal data seriously. This Privacy Policy explains what personal data is processed when you visit this website, contact me, or use functions provided on this website.
This website is an artist portfolio and professional information website. As a rule, you may visit the website without actively providing personal data.
Personal data means any information relating to an identified or identifiable natural person, such as name, e-mail address, telephone number, IP address, communication data or online identifiers.
This may include in particular:
This processing is technically necessary in order to display the website, ensure stability and security, and prevent misuse.
The legal basis is Article 6(1)(f) GDPR. My legitimate interest lies in the secure, stable and efficient operation of this website.
Where the hosting provider processes personal data on my behalf, this is done on the basis of a data processing agreement pursuant to Article 28 GDPR.
This website may use cookies and similar technologies.
Cookies are small text files that are stored on your device. Similar technologies may include pixels, tags, scripts, local storage or comparable technologies.
This website distinguishes between:
Technically necessary technologies are required for the operation, security and basic functionality of the website.
Optional analytics, marketing, tracking or third-party media technologies are used only if you have given your prior consent through the consent banner or cookie settings.
The legal basis for the use of technically necessary technologies is Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Where personal data is processed in this context, the legal basis is Article 6(1)(f) GDPR.
The legal basis for optional analytics, marketing, tracking and third-party media technologies is your consent pursuant to Section 25(1) TDDDG and Article 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future by changing your cookie settings.
This website uses, or may use in the future, a consent management solution in order to obtain, document and manage user consent for optional cookies and similar technologies.
When you visit the website, you may be able to choose whether you wish to accept or reject optional services, or configure your preferences individually.
Optional services must not be loaded before you have given the corresponding consent.
Your consent status may be stored in a technically necessary cookie or comparable technology so that your preferences can be remembered.
You may change or withdraw your consent at any time via the cookie settings link provided on this website.
If you contact me by e-mail, telephone or other means, I process the personal data you provide in order to respond to your enquiry.
This may include:
The legal basis is Article 6(1)(b) GDPR if your enquiry relates to a contract or pre-contractual measures. In all other cases, the legal basis is Article 6(1)(f) GDPR. My legitimate interest lies in responding to enquiries and maintaining professional communication.
Your enquiry will be deleted once it is no longer required, unless statutory retention obligations apply or continued storage is necessary for the establishment, exercise or defence of legal claims.
This website may use analytics services in the future in order to understand how visitors use the website and to improve its content, structure and performance.
Analytics services may process, depending on the configuration:
Analytics services are used only if you have given your prior consent.
The legal basis is Section 25(1) TDDDG and Article 6(1)(a) GDPR.
If analytics services are not active on this website or if you do not give your consent, no analytics tracking is carried out.
This website may use Google Analytics in the future, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics helps to analyse how visitors use the website. For this purpose, Google may process information such as pages visited, duration of visit, interactions, technical device information, approximate location and online identifiers.
Google Analytics will be used only after you have given your prior consent.
The legal basis is Section 25(1) TDDDG and Article 6(1)(a) GDPR.
Google Analytics should be implemented with a consent-based setup. In particular, Google tags must not be loaded for analytics purposes before the corresponding consent has been given.
Google may process data in the United States or other third countries. Where personal data is transferred to third countries, this will take place only in accordance with Articles 44 et seq. GDPR, for example on the basis of an adequacy decision, the EU-U.S. Data Privacy Framework where applicable, or Standard Contractual Clauses.
Further information on Google’s processing of personal data can be found in Google’s privacy information.
If Google Analytics is not active on this website or if you do not give your consent, no Google Analytics tracking is carried out.
This website may use Google Tag Manager in the future, a tag management system provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is used to manage website tags through a central interface. The Google Tag Manager itself does not create user profiles or carry out analytics on its own. However, it can be used to trigger other tags, including analytics or marketing tags.
Google Tag Manager must be configured in such a way that optional analytics or marketing tags are not activated before the corresponding consent has been given.
The legal basis for the use of Google Tag Manager, insofar as it is technically necessary for managing consent-based services, is Article 6(1)(f) GDPR. Where Google Tag Manager is used to activate optional services, those services are loaded only on the basis of your consent pursuant to Section 25(1) TDDDG and Article 6(1)(a) GDPR.
This website may use Meta Pixel or other Meta Business Tools in the future. These services are provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
Meta Pixel and Meta Business Tools may be used to measure the effectiveness of advertising, understand visitor interactions with the website, create custom audiences, and display more relevant advertisements on Meta platforms such as Facebook and Instagram.
Depending on the configuration, Meta may process:
Meta Pixel and Meta Business Tools are used only after you have given your prior consent.
The legal basis is Section 25(1) TDDDG and Article 6(1)(a) GDPR.
Meta Pixel must not be loaded before consent has been given. Advanced matching or comparable extended functions should only be activated if they are technically necessary for the intended purpose, clearly disclosed, and covered by valid consent.
Meta may process data in the United States or other third countries. Where personal data is transferred to third countries, this will take place only in accordance with Articles 44 et seq. GDPR, for example on the basis of an adequacy decision, the EU-U.S. Data Privacy Framework where applicable, or Standard Contractual Clauses.
If Meta Pixel or Meta Business Tools are not active on this website or if you do not give your consent, no Meta tracking is carried out on this website.
This website may contain links to external platforms such as YouTube, Instagram, Facebook or other third-party websites.
If you click on such a link, you leave this website. The respective external provider is responsible for any data processing that takes place on its platform.
This website may display locally stored thumbnails or preview images that link to external videos or profiles. In such cases, no direct connection to the external platform is established merely by loading this website. A connection to the external provider is established only when you click the link and leave this website.
This website does not load embedded third-party media, such as YouTube videos, Google Maps, SoundCloud players, social media plugins or comparable external content, without the necessary legal basis.
If third-party content is embedded in the future, it will either be loaded only after your prior consent or implemented in a privacy-friendly way, for example by using a two-click solution.
When third-party content is loaded, the respective provider may process personal data such as your IP address, device information, browser data, referrer URL and interaction data.
The legal basis for loading optional embedded third-party content is Section 25(1) TDDDG and Article 6(1)(a) GDPR, unless the content is technically necessary for the provision of a function requested by the user.
I maintain professional profiles on social media platforms. If you visit or interact with these profiles, the respective platform provider may process personal data. I have no full control over the data processing carried out by these platforms.
Please refer to the privacy policies of the respective platforms for further information about their processing activities, legal bases, storage periods and your rights.
This website does not currently offer a newsletter subscription.
If a newsletter is introduced in the future, this Privacy Policy will be updated before any newsletter data is collected. Newsletter subscriptions will only be processed on the basis of consent or another applicable legal basis.
Personal data may be processed by technical service providers that support the operation, security, maintenance or improvement of this website.
This may include in particular:
Personal data will not be sold to third parties.
As far as possible, personal data is processed within the European Union or the European Economic Area.
If personal data is transferred to countries outside the European Union or the European Economic Area, such transfer will take place only where the requirements of Articles 44 et seq. GDPR are met, for example on the basis of an adequacy decision by the European Commission, the EU-U.S. Data Privacy Framework where applicable, or Standard Contractual Clauses.
Personal data will only be stored for as long as necessary for the respective purpose.
Server log files are generally deleted or anonymised after a short period, unless longer storage is necessary for security reasons, investigation of misuse or legal defence.
Communication data will be stored for as long as required to process the enquiry and, where applicable, for the duration of statutory retention periods.
Consent records may be stored for as long as necessary to document consent and comply with legal accountability obligations.
Analytics and marketing data, where activated, will be stored only for the period configured in the respective service and disclosed in the consent settings.
You have the following rights under the GDPR:
The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
To exercise your rights, you may contact me using the contact details stated above.
You also have the right to lodge a complaint with a data protection supervisory authority.
The supervisory authority responsible for Schleswig-Holstein is:
Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD) Holstenstraße 98 24103 Kiel Germany
E-mail: mail@datenschutzzentrum.de
Appropriate technical and organisational measures are used to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction.
Please note, however, that data transmission over the internet, for example when communicating by e-mail, may have security vulnerabilities. Complete protection against access by third parties cannot be guaranteed.
I reserve the right to update this Privacy Policy if legal requirements change or if the website’s technical setup is modified.
If new analytics, marketing, tracking or third-party services are introduced, this Privacy Policy and the consent settings will be updated accordingly before such services are activated.
The version published on this website is the current version.
