Privacy Policy

1. Controller

Federico Coderoni
Mühlenstraße 68
13187 Berlin, Germany
Email: hello@federico-coderoni.com

The controller within the meaning of the General Data Protection Regulation (GDPR) is the person named above.

2. Hosting and server log files

This website, and the mailbox that receives messages sent to me, are hosted by CCHosting, Inc. (trading as ChemiCloud), 1111B S Governors Ave #48212, Dover, DE 19904, USA, on servers in its data centre in Frankfurt am Main, Germany. ChemiCloud processes these data on my behalf under a data processing agreement pursuant to Art. 28 GDPR. Each time a page is called up, the server automatically records technical data that your browser transmits: IP address, date and time of the request, the page requested, the referring page, browser type and version, and operating system.

These data are needed to deliver the website securely and reliably and to detect abuse. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a secure, functioning website). The data are not combined with other sources and are deleted by the host after a short period. Because ChemiCloud is a US company, access to data from outside the European Union (for example by its support staff or sub-processors) cannot be ruled out; such transfers are based on the EU Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914).

3. Contact form and email

If you write to me through the contact form or by email, the details you provide (for example name, email address, project type, budget range and message) are processed to answer your enquiry. The form is processed on this website’s own server and forwarded to me by email; it is not stored on the server and no third-party form service is involved. Emails, including those sent through the form, are kept in my mailbox with the same host (see section 2). To limit repeated submissions, an anonymised fingerprint (a one-way hash) of your IP address is kept on the server for one hour and then discarded.

The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or to pre-contractual steps, and otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries). Your data are deleted once the enquiry has been dealt with, unless statutory retention periods apply.

4. Cookies and local storage

This website does not use tracking or advertising cookies. It stores a few technical values in your browser's local and session storage, for example whether you have already passed the opening screen and your choice of sound on or off, so that the site does not ask again. These values never leave your device and are not used to identify you.

This storage is strictly necessary for the service you request (§ 25 (2) no. 2 TDDDG). You can delete it at any time in your browser settings.

5. Fonts and sound

All fonts are served from this website itself; no connection to Google Fonts or other font services is made. The sound on the home page is generated in your browser; no microphone or other device access is requested.

6. YouTube and Vimeo videos

Some project pages include videos hosted on YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The video is loaded only after you click play, and then in YouTube's privacy-enhanced mode (youtube-nocookie.com). Only from that moment does your browser connect to YouTube's servers, which may process your IP address and set cookies; Google may also transfer data to the USA.

A few project pages include videos hosted on Vimeo, a service of Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, NY 10001, USA. These too load only after you click play, with Vimeo's “do not track” option enabled; from that moment your browser connects to Vimeo's servers, which may process your IP address and transfer data to the USA. The preview image is served from this website.

The legal basis is your consent by clicking play (Art. 6 (1) (a) GDPR; § 25 (1) TDDDG). Further information: policies.google.com/privacy and vimeo.com/privacy.

7. Links to other websites

This website links to external platforms such as Spotify, Instagram, SoundCloud, Resident Advisor, Bandcamp and press articles. These are plain links: no data are transmitted to those services until you follow a link. From then on the privacy policy of the respective provider applies.

8. Your rights

You have the right to access your personal data (Art. 15 GDPR), to have it rectified (Art. 16) or erased (Art. 17), to restrict its processing (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Where processing is based on consent, you can withdraw it at any time with effect for the future (Art. 7 (3)). To exercise these rights, write to the email address above.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible here is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin.

9. Encryption

This website uses SSL/TLS encryption, recognisable by “https://” and the lock symbol in the address bar, so that data you transmit cannot be read by third parties.

10. No automated decision-making

No automated decision-making or profiling takes place.