Privacy policy

Last updated: 16 September 2026

1. Controller

Netvista Media SL
C/ Pelica 6
03581 L´Alfas del Pi (Albir), Spain
Managing Director: Petrus Giesbers
E-mail: [email protected]
Phone: +34 (0) 628 662 912

Further mandatory details can be found in our imprint. We have not appointed a data protection officer, as the legal requirements for doing so do not apply to us.

2. Principles and legal bases

We process personal data only where this is necessary to operate this website and its features, or where you have given your consent. The legal bases are Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract and pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interests). Where information is stored on or read from your device, Section 25 TDDDG applies in addition.

This website has no user accounts: neither visitors nor the artists shown here can log in. There is no profiling and no automated decision-making within the meaning of Art. 22 GDPR. The photos and details shown on this website are supplied to us for publication by the respective artists or their agencies.

3. Hosting and delivery

Server: this website is hosted by SiteGround Spain S.L.U., Calle de Prim 19, 28004 Madrid, Spain. A data processing agreement under Art. 28 GDPR is in place. Data is processed within the EU.

Content delivery network: for fast and secure delivery we use Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare processes your IP address and technical connection data and defends the site against attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure, performant operation). Transfers to the USA are based on standard contractual clauses under Art. 46 GDPR; Cloudflare is also certified under the EU-US Data Privacy Framework.

4. Server log files

Each time the site is accessed, our server automatically records data transmitted by your browser:

  • browser type and version
  • operating system used
  • IP address
  • date and time of access
  • page requested and volume of data transferred
  • previously visited page (referrer)

The purpose is delivery of content and the stability and security of our systems. The legal basis is Art. 6(1)(f) GDPR. Log files are deleted automatically after no more than 30 days, unless they are exceptionally needed to investigate a specific security incident. They are not combined with other data.

5. Cookies and consent

Strictly necessary cookies are used so the website works: storing your cookie choice, your language selection (WPML) and – only if you tick the box on the comment form – your name and e-mail address for your next comment. Legal basis: Section 25(2)(2) TDDDG and Art. 6(1)(f) GDPR.

All other cookies and services are used only with your explicit consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can change or withdraw your choice at any time with effect for the future via the “Cookie settings” button.

For consent management we use CookieYes in the variant that runs entirely on our own server. Your choice is stored locally in your browser only and is not transmitted to third parties.

We currently use no analytics, tracking or advertising cookies. The Google Analytics measurement previously embedded here was removed completely on 16 September 2026.

6. Comments

If you leave a comment, we store the comment text, the name you provide, your e-mail address, the time and a shortened IP address (for IPv4 the last octet, for IPv6 the last 80 bits, are set to zero). Your e-mail address is never published; it is used for moderation and any follow-up questions.

The legal basis is Art. 6(1)(a) GDPR (your consent when submitting) and Art. 6(1)(f) GDPR (legitimate interest in moderation and abuse prevention). Comments remain stored until you ask us to delete them or we remove them.

We use Antispam Bee for spam detection. The check runs exclusively on our own server; no data is transmitted to third parties. Profile pictures from external services such as Gravatar are not loaded.

7. Rating feature

Comments can be rated with “like” or “dislike”. To prevent repeat voting, your IP address is stored when you do so. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a rating free from abuse).

8. Newsletter

If you subscribe to our newsletter, we process your e-mail address together with the time and IP address of your sign-up and confirmation. Sign-up uses the double opt-in procedure: you first receive an e-mail in which you must confirm your subscription.

For distribution and management we use Mailchimp, a service of Intuit Inc., 2700 Coast Avenue, Mountain View, CA 94043, USA. Mailchimp also evaluates whether and when newsletters are opened and which links are clicked, in order to improve our mailings.

The legal basis is your consent under Art. 6(1)(a) GDPR. Transfers to the USA are based on standard contractual clauses under Art. 46 GDPR and on Intuit’s certification under the EU-US Data Privacy Framework. You may withdraw your consent at any time, for example via the unsubscribe link at the end of every newsletter. Your e-mail address is deleted once you unsubscribe.

9. Contacting us by e-mail

If you write to the address given in our imprint, we process your details solely in order to handle your request. The legal basis is Art. 6(1)(b) GDPR where a contract is involved, otherwise Art. 6(1)(f) GDPR. We delete the correspondence once your request has been dealt with and no statutory retention obligations apply. E-mail from this website is sent via our own server; no external mail service provider is used.

10. Fonts

This website uses the Catamaran, Open Sans and Roboto typefaces. They are served exclusively from our own server. No connection is made to Google servers and your IP address is not transmitted to Google.

11. Accessibility tool

We embed the “Sienna” accessibility tool, which lets you adjust contrast and font size, among other things. The tool is loaded from our own server; your settings are stored locally in your browser only and are not transmitted to third parties.

12. Links to social networks and profiles

This website contains references to social networks and to external profiles of the artists shown. These are plain links only – there are no social plugins, tracking pixels or embedded content. A connection to the respective provider is established only once you click such a link. From that point on, the privacy terms of that provider apply, over which we have no influence.

13. Recipients of your data

Your data is passed on only to the service providers named in this policy: our host (SiteGround), our content delivery network (Cloudflare) and – only if you subscribe to the newsletter – Mailchimp. Beyond this, we disclose personal data only where we are legally obliged to do so or where it is necessary to establish, exercise or defend legal claims. We do not sell data.

14. Retention

We store personal data only for as long as it is needed for the relevant purpose: server log files for no more than 30 days, comments until you ask for deletion, newsletter data until you unsubscribe. Where statutory retention periods apply, for example under commercial or tax law, processing is restricted under Art. 18 GDPR instead.

15. Your rights

You have the right to information (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20).

Right to object: where we process data on the basis of legitimate interests, you may object to that processing at any time under Art. 21 GDPR on grounds relating to your particular situation.

Withdrawal of consent: you may withdraw any consent you have given at any time, without formality, with effect for the future. The lawfulness of processing carried out up to that point remains unaffected.

An informal message to [email protected] is sufficient to exercise your rights.

Right to lodge a complaint: you may lodge a complaint with a data protection supervisory authority. As a company established in Spain, our competent authority is the Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid, Spain. You may equally contact the supervisory authority of your habitual residence – in Germany, for example, the Berlin Commissioner for Data Protection and Freedom of Information.

16. Changes to this privacy policy

We update this privacy policy whenever the services used on this website or the legal situation change. The version published here is the one that applies.