PRIVACY POLICY

Latest update September 2026

Information

1. Controller

The controller responsible for the processing of personal data on this website is:

Sebastian Müller
Freelance Tutor
Heinrich-Wieland-Allee 38
75177 Pforzheim
Germany

Email: smueller.onlin@gmx.de

For questions regarding the processing of personal data, you can contact me using the contact details above.

2. General information

The protection of your personal data is important to me.

This Privacy Policy explains what personal data I process when you visit the SEPAAN website, contact me, or use my online drum-learning services.

Personal data means any information relating to an identified or identifiable individual.

I process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection law.

3. Visiting this website

When you visit this website, certain technical information may be processed automatically by the website infrastructure and hosting provider.

This may include, depending on the technical configuration of the website:

IP address
date and time of access
browser type and version
operating system
referring website
pages accessed
technical information required to provide and secure the website

This information is processed primarily to provide, maintain, secure and technically improve the website and to prevent misuse.

The legal basis for this processing is Art. 6(1)(f) GDPR, based on my legitimate interest in operating a secure and functional website.

4. Contact form

You can contact me through the contact form on this website.

When you submit the form, I process the information you provide, in particular:

your name
your email address
the contents of your message

I use this information to respond to your enquiry, communicate with you and, where applicable, discuss or arrange drum lessons or other services you have requested.

The legal basis for processing is Art. 6(1)(b) GDPR where the processing is necessary to take steps at your request prior to entering into a contract, and otherwise Art. 6(1)(f) GDPR based on my legitimate interest in responding to enquiries and communicating with potential customers.

I do not use the information submitted through the contact form for newsletters or unsolicited advertising.

5. Communication by email

If you contact me by email, I process the personal data contained in your email and any subsequent correspondence.

This may include your name, email address, message content and any information you voluntarily provide.

The purpose of processing is to respond to your enquiry, communicate with you and, where applicable, provide or arrange my services.

The legal basis is Art. 6(1)(b) GDPR where the communication relates to a requested service or potential contract and otherwise Art. 6(1)(f) GDPR based on my legitimate interest in handling enquiries and business communication.

6. Online lessons via Google Meet

Online lessons may be conducted using Google Meet.

When you participate in an online lesson, Google may process information required to provide the video-conferencing service. Depending on the functions used, this may include account information, technical information and audio/video data.

I use Google Meet for the purpose of conducting online drum lessons and communicating with students.

I do not intentionally record online lessons unless this is separately agreed with the participants and the necessary legal requirements are met.

Google provides information about its handling of data in Google Meet in its own privacy documentation.

The processing carried out by Google is also subject to Google's own privacy terms and policies.

7. Payments

For paid services, payment may currently be made by PayPal or bank transfer.

For payment processing, I process the information necessary to identify the payment and assign it to the relevant customer or booking.

Depending on the payment method selected, additional personal data may be processed by the respective payment provider.

For PayPal payments, PayPal's own privacy policy applies to the processing carried out by PayPal.

I do not store credit-card information on this website.

8. Wix and hosting

This website is created and hosted using Wix.com.

Wix may process personal data of website visitors and users as part of providing its website, hosting, security and related services.

Wix acts as a data processor for certain processing activities carried out on my behalf. Wix provides a Data Processing Agreement for this purpose.

Depending on the technical services used, data may also be processed or stored outside the European Union. Wix states that data may be processed in several countries and describes the safeguards it uses for international transfers, including applicable Standard Contractual Clauses where required.

Further information is available in Wix's own privacy documentation.

9. Cookies and similar technologies

This website uses cookies and similar technologies.

Some cookies may be technically necessary for the operation, security and functionality of the website.

Under applicable law, the storage of or access to information on a user's device generally requires consent unless an applicable legal exception applies, such as where the technology is strictly necessary to provide a service explicitly requested by the user.

At present, I do not intentionally use Google Analytics, Meta Pixel, Google Ads tracking or a newsletter tracking system on this website.

Wix may nevertheless use technically necessary cookies and similar technologies required to operate the website.

Where consent is legally required for non-essential cookies or similar technologies, the relevant consent mechanism will be provided.

10. Data retention

I retain personal data only for as long as necessary for the purposes for which it was collected.

Enquiry data may be retained for as long as necessary to handle the enquiry and any resulting business relationship.

If a contractual relationship arises, relevant data may be retained for the duration of the contractual relationship and thereafter for as long as required by statutory retention obligations.

After the applicable retention period has expired, the relevant data will be deleted unless further processing is legally permitted or required.

11. Recipients of personal data

Personal data may be processed by service providers that I use to operate SEPAAN, including:

Wix.com, for website hosting and website-related services
Google, in connection with Google Meet
PayPal, where you choose PayPal as a payment method
email and communication service providers used for business communication

These providers may process personal data only to the extent necessary to provide their respective services or where otherwise legally permitted.

12. Your rights

Under the GDPR, you may have the following rights regarding your personal data:

the right to obtain information about whether and how your personal data is being processed;
the right to access your personal data;
the right to request correction of inaccurate personal data;
the right to request deletion of your personal data where the legal requirements are met;
the right to request restriction of processing where the legal requirements are met;
the right to receive personal data you have provided in a structured, commonly used and machine-readable format, where the right to data portability applies;
the right to object to certain processing, particularly processing based on legitimate interests;
the right to withdraw consent at any time where processing is based on your consent.

The exercise of these rights is subject to the applicable legal requirements.

To exercise your rights, please contact me using the contact details provided above.

13. Right to lodge a complaint

You also have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.

You may contact the supervisory authority responsible for my place of residence or business, or another competent supervisory authority where permitted by law.

14. Data security

I take reasonable technical and organisational measures to protect personal data against loss, destruction, unauthorised access, alteration or disclosure.

However, no transmission of data over the internet or electronic storage system can be guaranteed to be completely secure.

15. Changes to this Privacy Policy

I may update this Privacy Policy from time to time to reflect changes to my services, the website, the technologies used or applicable legal requirements.