Privacy Policy

Privacy Policy

Last updated: October 2026

1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Vayla Quintet GbR
Lietzenburger Straße 39
10789 Berlin
Germany

Email: info@vaylaquintet.com

2. General Information on Data Processing

We take the protection of your personal data seriously.

Personal data is any information relating to an identified or identifiable natural person. We process personal data only where this is necessary to provide and operate our website and services, to communicate with visitors, to protect our website from misuse, or where you have given your consent to a specific type of processing.

Depending on the purpose of the processing, the legal bases may include in particular:

  • Article 6(1)(a) GDPR – consent;
  • Article 6(1)(b) GDPR – performance of a contract or steps prior to entering into a contract;
  • Article 6(1)(c) GDPR – compliance with a legal obligation; and
  • Article 6(1)(f) GDPR – legitimate interests.

Where technologies store information on or access information from your device, the provisions of Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) may also apply.

3. Hosting by IONOS

This website is hosted by IONOS.

When you visit our website, technical information required to deliver the website securely and reliably may be processed. According to IONOS, this may include:

  • the requested website or file;
  • the previously visited website (referrer);
  • browser type and browser version;
  • operating system;
  • device type;
  • date and time of access; and
  • the IP address in anonymised form.

According to IONOS, this visitor data is generally stored for up to eight weeks.

The processing is carried out on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and technically reliable provision of our website.

Where IONOS processes personal data on our behalf, the processing is carried out on the basis of a data processing agreement pursuant to Article 28 GDPR.

4. IONOS WebAnalytics

Our hosting package may include IONOS WebAnalytics.

IONOS WebAnalytics is used to obtain statistical information about the use of our website and to optimise our website technically.

According to IONOS, WebAnalytics does not use cookies. The IP address transmitted when a page is requested is anonymised immediately and processed without personal reference.

The information collected may include:

  • referrer;
  • requested page or file;
  • browser type and version;
  • operating system;
  • device type;
  • time of access; and
  • anonymised IP address.

The processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in analysing the general use of our website and improving its technical performance and content.

5. Contact by Email

If you contact us by email, we process the information you provide in order to respond to your enquiry.

This may include in particular:

  • your name;
  • your email address;
  • the content of your message; and
  • any other information you voluntarily provide.

Where your enquiry relates to a contract or steps prior to entering into a contract, processing is based on Article 6(1)(b) GDPR.

For other enquiries, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is to respond to communications and enquiries addressed to us.

We retain correspondence only for as long as necessary for the relevant purpose, unless statutory retention obligations require longer storage.

6. Newsletter

You may subscribe to our newsletter in order to receive occasional information about Vayla Quintet, including upcoming concerts, projects and other news.

For this purpose, we process your email address as well as information relating to your subscription and consent.

The legal basis for sending the newsletter is your consent pursuant to Article 6(1)(a) GDPR.

Double Opt-In

We use a double opt-in procedure.

After submitting the newsletter subscription form, you will receive an email asking you to confirm your subscription.

Your email address will only be added to our active newsletter mailing list after you have confirmed your subscription.

The double opt-in procedure also enables us to document that consent to receiving the newsletter has been given.

Newsletter Service Provider: Brevo

We use Brevo to manage newsletter subscriptions and send our newsletters.

When you subscribe to our newsletter, the information entered into the subscription form is transmitted to and processed by Brevo.

According to Brevo, the servers on which its databases are processed and stored are located within the European Union. Brevo states that its primary hosting infrastructure is located in France and Germany and that data is also stored in Google Cloud infrastructure in Belgium.

Where Brevo processes personal data on our behalf, this processing is carried out on the basis of a data processing agreement pursuant to Article 28 GDPR.

Withdrawal and Unsubscription

You may withdraw your consent to receive our newsletter at any time with effect for the future.

You can unsubscribe using the unsubscribe link contained in every newsletter or by contacting us at:

info@vaylaquintet.com

Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

Following unsubscription, your email address will no longer be used for newsletter distribution. Information required to demonstrate that consent was previously given may be retained where necessary to establish, exercise or defend legal claims or to comply with legal obligations.

7. Google reCAPTCHA

We use Google reCAPTCHA in connection with our newsletter subscription form in order to protect our website and newsletter registration process from automated submissions, spam and misuse.

For users in the European Economic Area, the provider is generally:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google reCAPTCHA analyses technical information and user interactions in order to assess whether an interaction originates from a human visitor or an automated system.

Depending on the circumstances, the information processed may include:

  • IP address;
  • browser and device information;
  • operating system;
  • date and time of access;
  • interaction and usage information; and
  • technical information required for risk analysis.

Google states that reCAPTCHA sets a cookie called _GRECAPTCHA when the service is executed in order to provide its risk analysis.

Google reCAPTCHA is activated only where the required consent has been given.

The legal basis for the processing is your consent pursuant to Article 6(1)(a) GDPR. Where information is stored on or accessed from your device, Section 25(1) TDDDG also applies.

You may withdraw your consent at any time with effect for the future via the privacy or consent settings available on our website.

Data may also be processed by Google LLC and other Google companies in the United States.

Google LLC states that it is certified under the EU-U.S. Data Privacy Framework. Where applicable, Google may also rely on other legally recognised safeguards for international data transfers.

Further information on the processing of personal data by Google can be found in Google’s Privacy Policy.

8. Google Fonts

We use Google Fonts in order to provide a consistent and visually appropriate typography across our website.

Google Fonts are provided by Google.

When externally hosted Google Fonts are activated, your browser connects to Google servers in order to retrieve the required font files and stylesheets.

In this context, technical information may be transmitted to Google, including in particular:

  • your IP address;
  • browser and device information;
  • the requested font files; and
  • technical information necessary to deliver those files.

For users in the European Economic Area, the provider is generally:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Externally hosted Google Fonts are loaded only after the required consent has been given.

The processing is based on your consent pursuant to Article 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future via the privacy or consent settings available on our website.

Data may also be processed by Google LLC and other Google companies in the United States.

Google LLC states that it participates in the EU-U.S. Data Privacy Framework.

Further information can be found in Google’s Privacy Policy.

9. YouTube Videos

Our website contains videos provided through YouTube, a service offered by Google.

We use YouTube’s privacy-enhanced embedding mode through youtube-nocookie.com.

In addition, YouTube videos are implemented using a click-to-load solution.

When you first visit a page containing a YouTube video, no YouTube player is loaded. Instead, a locally hosted preview image or placeholder is displayed.

A connection to YouTube or Google servers is established only when you actively choose to play the video.

By activating the video, you consent to the transmission and processing of data by YouTube and Google.

The information processed may include:

  • your IP address;
  • browser and device information;
  • operating system;
  • information about the page visited;
  • date and time of access; and
  • information relating to playback and interaction with the video.

Depending on whether you are signed in to a Google account and on your individual Google settings, Google may associate this information with your Google account or other information held by Google.

The legal basis for the processing is your consent pursuant to Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG.

If you do not activate the video, no connection to YouTube is established through the embedded video.

For users in the European Economic Area, the provider is generally:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Data may also be processed by Google LLC and other Google companies in the United States.

Google LLC states that it participates in the EU-U.S. Data Privacy Framework.

Further information can be found in Google’s Privacy Policy and YouTube’s privacy information.

10. External Links and Instagram

Our website contains links to external websites and services, including our Instagram profile.

A connection to these external services is not established merely because a standard link is displayed on our website.

If you choose to follow such a link, you leave our website. The respective provider is responsible for any processing of personal data that takes place on the external website.

Please refer to the respective provider’s privacy information for further details.

11. Cookies and Consent Management

Our website may use cookies and similar technologies.

Technologies that are strictly necessary for the operation of the website may be used without consent where the statutory requirements are met.

Optional technologies and third-party services that require consent are activated only after you have given your consent.

This applies in particular to services such as:

  • Google reCAPTCHA;
  • externally hosted Google Fonts; and
  • other optional third-party services where applicable.

You can change or withdraw your consent at any time with effect for the future via the Privacy Settings available on our website.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

12. International Data Transfers

Some of the service providers used on our website are part of international groups of companies or may use service providers located outside the European Economic Area.

Where personal data is transferred to a country outside the European Economic Area, such transfers are carried out only where the requirements of Articles 44 et seq. GDPR are met.

Depending on the recipient and destination country, the relevant safeguards may include:

  • an adequacy decision of the European Commission pursuant to Article 45 GDPR;
  • participation in the EU-U.S. Data Privacy Framework; or
  • Standard Contractual Clauses approved by the European Commission pursuant to Article 46 GDPR.

13. Storage Periods

Unless a specific storage period is stated elsewhere in this Privacy Policy, we retain personal data only for as long as necessary for the purpose for which it was collected.

Where statutory retention obligations apply, personal data may be retained for the period required by law.

Where processing is based on consent, the data will generally be processed until you withdraw your consent, unless another legal basis permits or requires continued processing.

14. Your Rights

Subject to the statutory requirements, you have the following rights in relation to your personal data:

  • the right of access pursuant to Article 15 GDPR;
  • the right to rectification pursuant to Article 16 GDPR;
  • the right to erasure pursuant to Article 17 GDPR;
  • the right to restriction of processing pursuant to Article 18 GDPR;
  • the right to data portability pursuant to Article 20 GDPR;
  • the right to object pursuant to Article 21 GDPR; and
  • the right to withdraw consent at any time pursuant to Article 7(3) GDPR.

If processing is based on Article 6(1)(f) GDPR, you have the right to object to such processing on grounds relating to your particular situation.

To exercise your rights, please contact:

info@vaylaquintet.com

15. Right to Lodge a Complaint

You have the right pursuant to Article 77 GDPR to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.

The supervisory authority responsible for private organisations based in Berlin is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin
Germany

Email: mailbox@datenschutz-berlin.de
Telephone: +49 30 13889-0

You are also entitled to contact another competent data protection supervisory authority where permitted by law.

16. Changes to this Privacy Policy

We may update this Privacy Policy where necessary, for example if we introduce new services, change the technologies used on our website or if legal requirements change.

The current version of this Privacy Policy is always available on this website.