Back to homepage

Privacy Policy

Last updated: 26 October 2026

This English version is provided for convenience. In case of doubt, the German version applies.

This policy explains which personal data are processed when you visit frithjof-dyck.de, for what purpose, on which legal basis and for how long. It also explains your rights.

1. Controller

Frithjof Dyck
Frithjof Audio Production
Maximilian-Kolbe-Straße 29
64846 Groß-Zimmern
Germany
Email: hallo@frithjof-dyck.de

I have not appointed a data protection officer, as there is no legal obligation to do so.

2. Overview

3. Hosting, delivery and protection of the website (Cloudflare)

The website runs on Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare delivers the pages through a worldwide server network and protects them against attacks.

Data processed: IP address, date and time of access, requested address, referrer (the page you came from), browser, operating system and device type.

Purpose: delivering the website, stability and security, in particular protection against overload and abuse. For this purpose, requests to the forms are counted per IP address and briefly blocked if there are too many within a short time (10-second window).

Access statistics: From this data Cloudflare creates aggregated statistics (e.g. number of visits, countries, browsers), which I view in my Cloudflare account. They do not allow conclusions about individual visitors; no cookies are set and no additional scripts are loaded for this.

Legal basis: Art. 6(1)(f) GDPR. My legitimate interest is a secure, fast and reliable website.

Retention: I do not store access logs myself and have no access to them. Cloudflare processes the data according to its own rules to provide and secure the service. Details: cloudflare.com/privacypolicy

Data processing agreement: Cloudflare processes the data on my behalf. The Cloudflare Data Processing Addendum is part of the terms of service (Self-Serve Subscription Agreement).

Third country: Processing in the USA is possible. The legal basis is the European Commission's adequacy decision for the EU-US Data Privacy Framework, supplemented by the Standard Contractual Clauses included in the Cloudflare DPA.

4. Contact form

When you use the contact form, I process your name, your email address, your message, the optional category, the language of the page and the page from which you sent the form.

How it works: The data are sent to a function on the website's server (Cloudflare, section 3) and checked there. They are then sent as an email via the email service Brevo to my address hallo@frithjof-dyck.de and forwarded from there to my mailbox (section 5). Your data are not saved as a contact at Brevo or added to any list. You do not receive an automatic email.

Provider Brevo: Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany. Brevo processes the data on my behalf. The data processing agreement is Annex 3 of the Brevo terms of use.

Purpose: handling and answering your enquiry.

Legal basis: Art. 6(1)(b) GDPR if your enquiry concerns a project or its preparation. In all other cases Art. 6(1)(f) GDPR. My legitimate interest is answering enquiries.

Retention: I delete your enquiry once it has been dealt with. If it leads to a project, I keep the correspondence as long as statutory retention periods require (up to 6 or 10 years under Section 147 of the German Fiscal Code).
Brevo keeps a sending log of the email (including sender, recipient, subject, time and delivery status) for 12 months. Brevo does not store a preview with the content of the email.

Security check: The form is protected by Cloudflare Turnstile (section 10).

Provision of data: Providing the data is voluntary. Without your name, email address and message, however, I cannot handle your enquiry.

5. Contact by email

You can also write to me directly at hallo@frithjof-dyck.de. Emails to addresses at the domain frithjof-dyck.de (hallo@, kontakt@, contact@) are forwarded via the Cloudflare Email Routing service (Cloudflare, Inc., section 3) to my mailbox at Google (Gmail). The same applies to emails from the contact form.

Data processed: your email address, your name (if provided), content, attachments and technical data of the email (e.g. time, sending server).

Mailbox: The mailbox provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may also process data in the USA. The legal basis is the EU-US Data Privacy Framework.

Purpose, legal basis, retention: as for the contact form (section 4).

6. RealPan beta (sign-up closed)

Until RealPan 1.3.1 was released, you could sign up for the beta version of the plugin on the RealPan page. The sign-up has been closed since 26 October 2026; you can now try RealPan through the demo program (section 8). The existing beta list is kept until it is deleted (see retention).

Data processed: email address, first name (optional), language of the page, time of sign-up.

How it works: The data were checked by a function on the website's server (Cloudflare, section 3) and stored at Brevo (section 4) as a contact in a beta list. After signing up, the page showed you a link to a Google Drive folder with installers, manual and video.

Purpose: providing beta access. Also contacting you about beta topics, for example new test builds.

Legal basis: Art. 6(1)(b) GDPR (providing the service you requested).

Retention: I delete the beta list no later than 6 months after RealPan is released. You can ask for deletion by email at any time before that.

7. Release info (sign-up closed)

When signing up for the beta, you could also tick the "Release info" box to receive one single email as soon as RealPan is released. This sign-up has closed together with the beta sign-up; the existing release list is kept until the release email has been sent. News about RealPan will be sent via the newsletter from now on (section 9).

How it works (double opt-in): After signing up, Brevo sent you an email with a confirmation link. Only when you clicked this link was your address added to the release list. This ensures that the sign-up really came from you. The sign-up and the confirmation are logged with their time and, where applicable, technical data such as the IP address, so that your consent can be proven.

Analysis: For these emails, Brevo measures in aggregated form how often they are opened and how often links in them are clicked. The figures are not linked to your email address. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is seeing whether the emails arrive. If your email program does not load images automatically, no open measurement takes place.

Legal basis: your consent, Art. 6(1)(a) GDPR.

Withdrawal: You can withdraw your consent at any time with effect for the future, via the unsubscribe link in the email or by writing to hallo@frithjof-dyck.de. Your beta access is not affected.

Retention: I delete the release list once the release email has been sent. If you withdraw your consent, I remove your address from the list immediately. Before deleting, I save the proof of your consent (email address and time of confirmation) and keep it for 3 years from the end of the year in which the list is deleted, so that I can demonstrate consent if necessary. The legal basis for this is Art. 6(1)(f) GDPR in conjunction with Art. 7(1) GDPR (obligation to demonstrate consent).

Provider: Brevo (section 4).

8. RealPan demo program (14 days)

On the RealPan page you can join the demo program: you receive a demo license of the plugin valid for 14 days, an email asking for your feedback after 7 days, and on the day before it expires a notice that the demo is ending and how to get the full version. This expiry notice contains only the expiry date, a note on the full version and my contact address, no advertising.

Data processed: name, email address, optionally your DAW and operating system, the language of the page, a source tag if you came via a link with such a tag (for example from a newsletter or a video), the times of sign-up, confirmation, issue and sending of the emails, the version of the form texts and the license ID.

Process: Your details are checked by a function on the website's server (Cloudflare, section 3) and stored in a database at Cloudflare (located in Western Europe). Brevo (section 4) sends you an email with a confirmation link. Only after you click this link do I create the license and send you an email with a link to download the license file. The license file contains your name and email address. I issue one demo per email address.

Abuse protection: To limit the number of requests from one connection (at most 5 per hour), I form a check value from your IP address using a secret key and count the requests with it. The check value is only stored in this counter, not with your sign-up; I do not store the IP address itself. The form is also protected by Cloudflare Turnstile (section 10).

Performance measurement: For all emails of the demo program and the newsletter, Brevo records how often they are opened and how often links in them are clicked, only as anonymised statistics per email. The values are not linked to your email address. I use them to see whether the emails arrive and which content is of interest.

Purpose and legal basis:

Opting out: If you no longer want the two emails of the demo program, reply to one of them or write to hallo@frithjof-dyck.de. Your demo license is not affected.

Retention: I delete unconfirmed sign-ups automatically after 7 days. I keep issued demos for 12 months from the date of issue, so that only one demo is issued per address, and then delete them automatically. The abuse-protection counter is deleted after 2 days at the latest. If you confirmed the newsletter, only the proof of your consent remains after these 12 months (section 9). Brevo keeps the sending logs of the emails (recipient, time, delivery) for 12 months; previews of the email content are not stored. On request to hallo@frithjof-dyck.de I delete your data earlier at any time.

Provision: Name and email address are required for the demo program; DAW and operating system are optional. The newsletter is independent of it (section 9).

Cookies: The form does not set cookies or store anything in your browser. The exception is the security check (section 10).

9. RealPan newsletter

In the demo form you can additionally and voluntarily tick that you want to receive news about RealPan by email. The box is not pre-ticked; without it you get the demo just the same.

Data processed: email address, name, language of the page, source tag (if any), time of consent, version of the consent text and time of confirmation.

Process (double opt-in): If you ticked the box, the confirmation email names both purposes: the demo program and the newsletter. Only when you click the confirmation link do I add your address to the "RealPan Newsletter" list at Brevo. Consent and confirmation are stored with their times so that I can demonstrate your consent.

Demo already issued: If a demo has already been issued for your address, I send you a notice about it instead of the confirmation email (at most once a day). If you ticked the newsletter box, this notice contains a "Confirm newsletter" button; in that case too, I only add you to the list after you click it.

Legal basis: your consent, Art. 6(1)(a) GDPR.

Withdrawal: You can withdraw your consent at any time with effect for the future, via the unsubscribe link in every newsletter email or by writing to hallo@frithjof-dyck.de (I will then remove you at Brevo). An hourly comparison with the newsletter list at Brevo also records the withdrawal in my database. Your demo license and the demo program are not affected.

Performance measurement: as for the demo program (section 8), only as anonymised open and click statistics per email, not linked to your email address.

Provider: Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany, as processor (section 4).

Retention: Your address stays on the newsletter list until you withdraw your consent. As proof of consent I keep: email address, times of consent, confirmation and withdrawal, version of the consent text and source tag – for as long as the consent exists and for 3 years after the withdrawal, so that I can demonstrate consent if necessary. The legal basis for this is Art. 6(1)(f) GDPR in conjunction with Art. 7(1) GDPR. The other details from the demo program (name, DAW, operating system, license) are deleted after 12 months regardless (section 8). According to Brevo, the anonymised events of newsletter sends (opens, clicks) are kept without a time limit as long as the account stays below 10 million events; they cannot be attributed to any person.

Provision: voluntary.

10. Security check (Cloudflare Turnstile)

The forms (contact and RealPan demo) are protected against automated submissions by Cloudflare Turnstile. The provider is Cloudflare, Inc. (section 3).

When: The Turnstile code is only loaded when you click into a form or start typing. There is no connection when you merely visit the page.

Data processed: IP address, browser and device information, interaction data. Cloudflare evaluates them to tell humans from programs. The result is verified on the server when you submit the form.

Legal basis: Art. 6(1)(f) GDPR and Section 25(2) No. 2 of the German TDDDG. My legitimate interest is protection against spam and abuse.

Third country: as in section 3.

11. Videos (YouTube)

Some pages include videos from YouTube. When the page loads, only a preview image from my own server is shown. There is no connection to YouTube.

Only when you click "Play" is the video loaded via www.youtube-nocookie.com. Data are then transferred to YouTube: IP address, browser and device information, the page on which the video is embedded and playback data. YouTube may store or read information in your browser.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may also process data in the USA. The legal basis is the EU-US Data Privacy Framework.

The preview image carries the note: "By clicking play, you agree to data transfer to YouTube."

Legal basis: your consent by clicking "Play", Art. 6(1)(a) GDPR and Section 25(1) of the German TDDDG.

Withdrawal: Reload the page. There is then no connection until you click "Play" again.

Retention: Processing by YouTube is Google's responsibility, see policies.google.com/privacy.

12. Links to other services

The website contains links to Spotify, LinkedIn and Instagram. No data are transferred to these providers when you merely visit my website. Only when you click a link do you leave my website. The respective provider is responsible for processing there.

13. Fonts, audio and media

Fonts, images and audio files are loaded from the website's server (section 3); installers and documents for RealPan (for example the manual) from downloads.frithjof-dyck.de, a storage service at Cloudflare (Cloudflare R2, also section 3). There is no connection to external font or media services.

14. Recipients at a glance

15. Your rights

You have the right to:

An informal message to hallo@frithjof-dyck.de is sufficient.

Right to object (Art. 21 GDPR)

Where I process data on the basis of Art. 6(1)(f) GDPR (legitimate interest), you may object at any time on grounds relating to your particular situation. I will then no longer process the data unless I can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.

Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority. The authority responsible for me is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (Hessian Commissioner for Data Protection and Freedom of Information)
Wilhelmstraße 7, 65185 Wiesbaden, Germany
https://datenschutz.hessen.de

16. Obligation to provide data

You are under no legal or contractual obligation to provide personal data. Without the information required in the forms, however, I cannot answer your enquiry or provide a demo.

17. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

18. Changes

I update this policy when the website or the services used change. The version published on this page applies.

Start a Project →