Privacy

In short

• No analytics, no advertising, no tracking, no social-media plugins and no embedded players.
• The website itself sets no cookies and stores nothing in your browser.
• Pictures, music and fonts come from this website, not from other services.
• Like every website, it cannot be delivered without your browser’s technical request data (see “Hosting”).
• If you write through the contact form, your message is sent to the owner by e-mail.

Who is responsible

This website is run by:

Monte Christo
Heidelberg, Baden-Württemberg, Germany

For any question about this website or your data, please write through the contact form.

Hosting and delivery

The website is hosted and delivered by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). To send a page to your browser, Cloudflare necessarily processes the data every browser sends with a request: your IP address, the date and time, the address requested, your browser’s identification (user agent) and, when you follow a link here, the address of the page you came from. Cloudflare also uses this data to protect the website against attacks and abuse.

Cloudflare processes this data on the owner’s behalf under its Data Processing Addendum. Cloudflare may process data in the United States; it is certified under the EU-U.S. Data Privacy Framework and also uses the EU Standard Contractual Clauses. Legal basis: Art. 6(1)(f) GDPR, the legitimate interest in delivering the website reliably and securely.

The website itself keeps no visitor logs. Cloudflare keeps request data according to its own privacy policy and data processing terms.

Cookies and storage in your browser

The website sets no cookies and uses no local storage or similar technology. The music player loads a song only when you press Play and remembers nothing about you.

If Cloudflare’s protection against automated attacks becomes active, Cloudflare can set a technically necessary security cookie (such as __cf_bm or cf_clearance) that distinguishes people from bots. Such cookies are not used for tracking or advertising. Because they are strictly necessary for providing the website securely, no consent is required for them (§ 25(2) no. 2 of the German TDDDG).

Contact form

When you send a message through the contact form, the details you enter (name, e-mail address, subject and message) are passed to a small program on Cloudflare and sent by Cloudflare’s e-mail routing to the owner’s mailbox, which is hosted by Google (Gmail). The website does not store your message. It is used only to reply to you; your e-mail address is set as the reply address.

To prevent the form from being flooded, your IP address is used as the key of a short-lived counter that allows a few messages per minute. Message contents are never written to logs.

Legal basis: Art. 6(1)(b) GDPR where your message concerns a possible agreement, otherwise Art. 6(1)(f) GDPR, the legitimate interest in answering messages. Messages stay in the owner’s mailbox until the owner deletes them; you can ask at any time for your messages to be deleted (see “Your rights”).

Spam protection: the contact page uses Cloudflare Turnstile, a check that tells people from automated programs without puzzles. It runs only on the contact page: it loads a script from Cloudflare, evaluates technical characteristics of your browser and can set the security cookiecf_clearance. Your browser's answer is checked by Cloudflare when you send the form. It serves only to protect the form you are using (Art. 6(1)(f) GDPR; for the access to your browser, § 25(2) no. 2 TDDDG).

Links to other services

The website links to Monte Christo’s pages on Spotify, Apple Music, YouTube and YouTube Music, Instagram and Facebook. These are ordinary links: nothing from those services is loaded until you click one. When you do, you leave this website and the privacy policy of that service applies. This website tells the other service only its own address, not the page you were on.

Your rights

Under the GDPR you have the right to:

• access the personal data concerning you (Art. 15),
• have it corrected (Art. 16) or erased (Art. 17),
• restrict its processing (Art. 18) and receive it in a portable format (Art. 20),
• object to processing based on a legitimate interest (Art. 21),
• lodge a complaint with a data protection supervisory authority (Art. 77), for example the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.

To use any of these rights, please write through the contact form.