JUAN CERNADAS

PRIVACY POLICY

  1. Controller

This website is operated by Juan Jos茅 Cernadas Carrera, artist name Juan Cernadas.

For privacy-related questions or to exercise your data protection rights, you can contact me at:

[email protected]

Further provider information can be found in the Legal page of this website.

  1. General information

This Privacy page explains how personal data is processed when you visit this website, use the shop, purchase digital products, or contact me.

I process personal data only to the extent necessary to operate the website, provide content, sell and deliver digital products, respond to inquiries, secure the website, and comply with legal obligations.

This website is operated from Germany and is intended for an international audience.

  1. Categories of data processed

Depending on how you use the website, I may process the following personal data:

technical access data, such as IP address, browser type, operating system, date and time of access, referrer URL, requested page, and device information;

communication data, if you contact me by email;

order and transaction data, such as name, billing details, email address, purchased product, payment status, and order identifiers;

download and delivery data, such as download access, timestamps, and technical delivery logs;

analytics data, if you consent to analytics;

consent and cookie preference data, where applicable.

  1. Legal bases

Where applicable, processing is based on one or more of the following legal bases:

performance of a contract or steps prior to entering into a contract, for purchases and order handling;

compliance with legal obligations, especially accounting and tax retention obligations;

legitimate interests, especially for secure technical operation, fraud prevention, and basic site administration;

consent, especially for analytics, non-essential cookies, and third-party embedded media where consent is required.

  1. Hosting

This website is hosted by Hostinger.

When you visit the website, server log data may be processed automatically in order to provide the website, maintain stability and security, and detect misuse. This may include IP address, date and time of access, browser information, operating system, requested files, referrer URL, and status information.

Legal basis: legitimate interests in the secure and reliable operation of the website.

  1. Domain and infrastructure

This website uses Cloudflare for domain, security, and performance-related infrastructure.

To the extent Cloudflare is used for DNS resolution, traffic protection, or abuse prevention, technical connection data may be processed, including IP address, browser or device information, request metadata, and security-related information required to deliver the website securely and protect it against malicious traffic or misuse.

Legal basis: legitimate interests in secure and reliable website delivery, abuse prevention, and technical protection of the website.

  1. Website platform and shop

This website is built with WordPress and uses WooCommerce for the shop.

If you place an order, I process the data required to handle the purchase, provide the digital download, maintain order records, and communicate with you if needed. This may include:

name;

billing information;

email address;

purchased product or products;

order number;

payment status;

download access information;

any support communication relating to the order.

Legal basis: performance of a contract and compliance with legal obligations.

  1. Digital product purchases and delivery

The shop sells digital products such as music downloads and, in the future, sample packs and presets.

After purchase, digital products are delivered electronically by direct download.

For this purpose, order and technical delivery data may be processed in order to:

confirm the purchase;

make the download available;

prevent abuse and unauthorized access;

document the transaction;

provide customer support;

comply with tax and accounting requirements.

Legal basis: performance of a contract, legal obligations, and legitimate interests in fraud prevention and secure delivery.

  1. Payments

Payments are processed through the payment methods and payment providers actually displayed during checkout.

When you choose a payment method, the information required to process the payment is transmitted to the relevant payment provider. I do not store full payment card data unless such storage is explicitly part of the payment provider鈥檚 service and legally permitted.

The relevant payment provider processes personal data under its own privacy responsibility for payment handling, fraud prevention, regulatory compliance, and transaction security.

Legal basis: performance of a contract and compliance with legal obligations.

  1. Small business status

I operate as a Kleinunternehmer under German tax law. VAT is therefore not separately shown, unless the legal situation changes.

Order and invoice-related data may nevertheless be stored to comply with accounting and tax obligations.

  1. Email contact

If you contact me by email, I process the data you provide in order to respond to your request.

This may include:

your name;

your email address;

the content of your message;

any additional information you provide voluntarily.

Legal basis:

performance of a contract or pre-contractual communication, if your request relates to a purchase, lesson, or business inquiry;

legitimate interests in responding to general inquiries.

  1. No contact form, no comments, no customer accounts, no newsletter

At present:

there is no contact form on the website;

comments are not enabled;

customer accounts are not enabled;

there is no newsletter signup.

If this changes in the future, this Privacy page should be updated accordingly.

  1. External booking link

The website may contain a link to Cal.com for lesson or appointment booking.

This is an external link. Personal data is generally transferred to that third-party service only after you click the link and interact with that service.

Please consult the privacy information of the respective external service when using it.

  1. Embedded media and external platforms

This website contains embedded or linked content from third-party platforms, in particular:

YouTube;

SoundCloud;

Spotify.

If such content is embedded, the relevant third-party provider may process personal data such as your IP address, device or browser information, and interaction data. Cookies or similar technologies may also be used by those providers.

Where legally required, such embedded content should only be loaded after your consent. Even when media does not autoplay, embedded players can still involve third-party requests and device-side storage depending on technical setup.

If the website only links to those services without loading embedded content, data is generally transferred only after you actively click the external link.

Legal basis:

consent, where required;

otherwise legitimate interests in presenting artistic work and media content.

  1. Analytics

This website uses Google Analytics only if and after the user has given valid consent through the consent banner.

Google Analytics may process usage data such as IP-related information, browser and device data, page views, session data, interactions, and approximate location information in order to measure website traffic and user behavior.

Legal basis: consent.

  1. Cookies and similar technologies

This website uses cookies and similar technologies.

These include:

– technically necessary technologies required for core website, shop, security, and consent-management functions;

– analytics technologies, if activated by the user through the consent banner;

– technologies connected to embedded third-party media, where applicable and where activated with the required consent.

Where required by applicable law, non-essential technologies are used only after the user has given valid consent.

Users can accept, reject, or manage their preferences through the consent banner and can later change those choices through the cookie settings function available on the website.

  1. Recipients of personal data

Personal data may be shared with service providers only where necessary, in particular with:

Hostinger;

Cloudflare;

WordPress or WooCommerce-related service providers to the extent technically involved;

payment providers such as Stripe and PayPal;

analytics providers such as Google Analytics;

IT, hosting, security, and maintenance providers where necessary;

public authorities, tax authorities, courts, or advisers where legally required.

  1. International transfers

Some service providers named above may process personal data outside the European Union or the European Economic Area, especially large international technology providers.

Where this happens, processing should be based on an appropriate legal transfer mechanism, such as an adequacy decision or standard contractual clauses, where required.

  1. Retention periods

Personal data is stored only for as long as necessary for the relevant purpose or for as long as required by law.

Typical retention logic:

server log data: only for as long as needed for security and technical operation;

email inquiries: until the request has been handled, plus a reasonable retention period if needed for follow-up or legal defense;

order, invoice, and transaction data: for the legally required retention period under commercial and tax law;

analytics and consent data: according to the chosen tool configuration and applicable legal requirements.

  1. Your rights

Under applicable data protection law, you may have the right to:

access your personal data;

request rectification of inaccurate data;

request erasure of your data;

request restriction of processing;

object to processing based on legitimate interests;

receive your data in a portable format, where applicable;

withdraw consent at any time with effect for the future;

lodge a complaint with a competent supervisory authority.

To exercise your rights, contact: [email protected]

  1. No automated decision-making

I do not carry out automated decision-making, including profiling, that produces legal effects or similarly significant effects on individuals, unless explicitly stated otherwise for a specific service.

  1. Changes to this Privacy page

I may update this Privacy page if legal, technical, or business circumstances change. The version published on this website is the current version.