This Privacy Policy explains how Christopher Wieduwilt ("we", "us") collects, uses, and protects personal data when you visit aimusicpreneur.com ("the website"), subscribe to our newsletter, or otherwise interact with us. It is written to satisfy Article 13 of the EU General Data Protection Regulation (GDPR), the UK GDPR, and equivalent transparency duties under CCPA/CPRA, LGPD, and PIPEDA.
1. Controller
The controller responsible for processing personal data is:
Christopher Wieduwilt
Buchenweg 1
82343 Pöcking
Germany
Email: chris.wieduwilt@aimusicpreneur.com
VAT ID: DE367276007
2. Data we process
2.1 Server logs
The website is hosted on Cloudflare Workers. When you visit, Cloudflare automatically receives technical data (IP address, user-agent string, referrer, timestamp, requested URL) for the purposes of delivering the website, preventing abuse, and securing the service. The legal basis is our legitimate interest in operating a functional and secure website (Art. 6(1)(f) GDPR). Cloudflare retains this data in accordance with its own retention policy.
2.2 Analytics — Google Analytics 4
With your consent, we use Google Analytics 4 to understand how visitors use the website. The operator is
Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland. GA4 sets cookies (_ga,
_ga_*) and processes pseudonymous identifiers and pageview data. Personal data may be transferred
to Google LLC in the United States under the EU–US Data Privacy Framework.
Legal basis: your consent (Art. 6(1)(a) GDPR; § 25(1) TDDDG). You may withdraw consent at any time via the cookie preferences button without affecting the lawfulness of prior processing.
2.3 Newsletter — Beehiiv
If you subscribe, we collect your email address and the subscription timestamp. Subscriptions use double opt-in: you receive a confirmation email and must click the link to activate. The processor is Beehiiv Inc., 228 Park Ave S, PMB 72916, New York, NY 10003, USA. Data is transferred to the United States under appropriate safeguards. We use your email solely to send the newsletter and related operational messages.
Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in every email or by emailing us. Retention: until you unsubscribe, plus a short period for compliance records.
2.4 Embedded media — YouTube
Some articles embed YouTube videos. When the video loads, YouTube (Google Ireland Limited) sets cookies and may receive your IP address. We load YouTube embeds only after you have given consent via the cookie banner.
Legal basis: your consent (Art. 6(1)(a) GDPR; § 25(1) TDDDG).
2.5 Affiliate links
Some outbound links to third-party products are affiliate links. We may receive a commission if you make a purchase on the destination site. We do not set tracking cookies on aimusicpreneur.com for affiliate purposes; the destination site applies its own cookies and policies on its own domain.
3. Legal bases summary
- Art. 6(1)(a) — Consent: analytics, embedded YouTube, newsletter signup.
- Art. 6(1)(b) — Contract / pre-contract: processing strictly necessary to deliver a service you requested.
- Art. 6(1)(c) — Legal obligation: retention of records where required by tax, commercial, or other law.
- Art. 6(1)(f) — Legitimate interest: operating, securing, and maintaining the website (server logs, abuse prevention).
4. Recipients and third-country transfers
We use the following sub-processors. Personal data may be transferred to the United States under the EU–US Data Privacy Framework and/or Standard Contractual Clauses:
- Cloudflare, Inc. — hosting, CDN, DDoS protection (US, with EU edge nodes).
- Google Ireland Limited / Google LLC — Google Analytics 4, YouTube embeds.
- Beehiiv, Inc. — newsletter delivery (US).
5. Retention
We keep personal data only as long as necessary for the purposes described above or as required by law. Newsletter data is retained until you unsubscribe. Analytics data is retained according to GA4's default retention period. Server logs follow Cloudflare's retention schedule.
6. Your rights under GDPR / UK GDPR
You have the right to:
- Access the personal data we hold about you (Art. 15).
- Have inaccurate data rectified (Art. 16).
- Have your data erased (Art. 17).
- Restrict processing (Art. 18).
- Receive your data in a portable format (Art. 20).
- Object to processing based on legitimate interest (Art. 21).
- Withdraw consent at any time (Art. 7(3)).
- Lodge a complaint with a supervisory authority (Art. 77).
To exercise any of these rights, email chris.wieduwilt@aimusicpreneur.com.
7. Supervisory authority
The competent German supervisory authority for the controller is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
www.lda.bayern.de
UK residents may instead lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
8. Regional rights
8.1 California residents (CCPA / CPRA)
We do not sell your personal information for money. To the extent that GA4 and similar analytics constitute "sharing" for cross-context behavioral advertising under the CPRA, you can disable this by withdrawing analytics consent in the cookie preferences. California residents have the right to know, delete, correct, and opt out of sale or sharing under Cal. Civ. Code §§ 1798.100 et seq. Submit requests via chris.wieduwilt@aimusicpreneur.com.
8.2 Brazilian residents (LGPD)
Under Lei Geral de Proteção de Dados (Law No. 13.709/2018), you have rights of access, correction, deletion, portability, and revocation of consent. You may submit a complaint to the Autoridade Nacional de Proteção de Dados (ANPD) at gov.br/anpd.
8.3 Canadian residents (PIPEDA)
We comply with the ten Fair Information Principles in Schedule 1 of the Personal Information Protection and Electronic Documents Act. You may file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.
9. Security
The website is delivered over HTTPS. We apply reasonable technical and organisational measures to protect personal data. No method of transmission over the Internet is fully secure.
10. Children
The website is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us and we will delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the current version. Material changes will be announced on the website.
12. Contact
For any questions about this Privacy Policy or our handling of your data, email chris.wieduwilt@aimusicpreneur.com.