PRIVACY POLICY
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Thorben Plath
Potsdamer Straße 12
28832 Achim
Germany
Email: tp@neurodivacunt.eu
2. General information on data processing
We generally only process personal data of our users to the extent necessary to provide a functional website and our content and services. Personal data is regularly only processed with the user’s consent or where there is a legal basis for doing so (Art. 6 (1) GDPR). Personal data is deleted as soon as the purpose of storage no longer applies and no statutory retention obligations apply.
3. Provision of the website / server log files
This website is hosted by All-Inkl.com (ALL-INKL.COM – Neue Medien Münnich, Hansestraße 91, 02894 Vierkirchen, Germany). When you visit our website, the hosting provider automatically collects information in so-called server log files, which your browser automatically transmits. This includes: browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of the server request, and IP address.
This data is not merged with other data sources. The collection of this data is based on Art. 6 (1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website.
4. Cookies
This website does not use tracking or analytics cookies (e.g. Google Analytics) and no marketing cookies. Only technically necessary cookies are used, to the extent that WordPress or the booking form require them for basic functionality (e.g. form security). These cookies contain no personal data and are used on the basis of Art. 6 (1)(f) GDPR.
5. Contact by email
If you contact us by email, the data you provide (your email address, and where applicable your name and phone number) will be stored by us in order to answer your questions. We delete the data arising in this context once storage is no longer required, or restrict processing if statutory retention obligations apply. The legal basis is Art. 6 (1)(b) and (f) GDPR.
6. Booking form
On the Booking page we provide a form (technically implemented with the WordPress plugin “Fluent Forms”) through which you can submit a booking request. The data you enter (including name, email address, postal address, and event details) is processed and sent to us by email so that we can handle your request.
The legal basis is Art. 6 (1)(b) GDPR (steps prior to entering into a contract) or Art. 6 (1)(f) GDPR (legitimate interest in processing inquiries). The data is deleted as soon as it is no longer required to process your request, and at the latest upon expiry of statutory retention periods.
hCaptcha: To protect the booking form against automated input (spam) we use hCaptcha, provided by Intuition Machines, Inc., 350 Alabama St, San Francisco, CA 94110, USA. When the form is loaded or submitted, a connection to hCaptcha is established and technical data (including your IP address, browser and device information and your interaction behaviour) is transmitted to and processed by hCaptcha to distinguish human users from bots. The legal basis is our legitimate interest in preventing spam and abuse (Art. 6(1)(f) GDPR). Processing may take place in the USA, based on the EU Commission’s standard contractual clauses. Further information: hcaptcha.com/privacy and hcaptcha.com/terms.
7. Embedded third-party content
YouTube videos: We embed videos from the YouTube platform, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube’s “privacy-enhanced mode” (youtube-nocookie.com domain), under which, according to Google, YouTube only sets cookies or processes data once a video is played, not already when the page loads. However, when a video is played, a connection to Google’s servers may be established and your IP address transmitted. We have no influence over this data transfer. More information: policies.google.com/privacy.
Spotify player: On our Home and Music pages we embed players from the Spotify platform, operated by Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden. When the page loads, a connection to Spotify’s servers may already be established and your IP address transmitted, even without you actively using the player. More information: spotify.com/us/legal/privacy-policy.
The legal basis for embedding this content is Art. 6 (1)(f) GDPR (legitimate interest in an appealing presentation of our music).
8. Fonts
This website uses the fonts “Space Grotesk” and “Inter”. The font files are embedded locally on our own server (self-hosted) — no connection is made to Google’s or any other third-party servers, and no data is transmitted to third parties as a result.
9. Your rights as a data subject
You have the right at any time to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and to object to processing (Art. 21 GDPR) regarding your personal data stored by us. Please feel free to contact us at the email address given above.
10. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. The competent authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Niedersachsen (State Commissioner for Data Protection of Lower Saxony).
11. Currency and amendment of this privacy policy
This privacy policy is currently valid (as of June 2026). It may become necessary to amend this privacy policy due to the further development of our website or changes in legal requirements.