PRIVACY POLICY
Last updated: September 15, 2026
CONTROLLER
The controller responsible for processing personal data on this website is:
Richard Eberlein
Artist name: Rio Wolfhart
Kirchheimerstraße 52
97271 Kleinrinderfeld
Germany
Email: rio.wolfhart@googlemail.com
GENERAL INFORMATION
I process personal data only to the extent necessary to provide this website, respond to inquiries, arrange trial lessons and conduct online lessons.
Personal data includes any information relating to an identified or identifiable person, such as a name, email address, IP address or appointment details.
WEBSITE HOSTING AND SQUARESPACE
This website is hosted and operated using Squarespace. The service provider is Squarespace Ireland Limited and its affiliated companies, including Squarespace, Inc. in the United States.
When you visit this website, Squarespace may process technical information such as:
• IP address
• Browser type and version
• Device and operating-system information
• Date and time of access
• Requested pages and files
• Referring website
• Technical log and security information
This processing is necessary to display the website securely and reliably, prevent misuse and ensure its technical operation. The legal basis is Article 6(1)(f) GDPR. My legitimate interest lies in providing a secure and functional website.
Squarespace may process data outside the European Economic Area, particularly in the United States. Squarespace states that it uses recognized transfer mechanisms, including the EU–US Data Privacy Framework and the European Commission’s Standard Contractual Clauses.
Further information can be found in Squarespace’s privacy policy:
https://www.squarespace.com/privacy
COOKIES AND SIMILAR TECHNOLOGIES
This website uses cookies and similar technologies. Some cookies are technically necessary for the website and its booking functions to operate. These may be used without consent where permitted by law.
Optional analytics, performance or marketing cookies are used only after you have given your consent through the cookie banner. The legal basis for processing personal data through such optional technologies is Article 6(1)(a) GDPR. You can withdraw or change your consent at any time through the cookie settings on the website.
The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Further information about the cookies used by Squarespace is available at:
https://support.squarespace.com/hc/en-us/articles/360001264507
CONTACT FORM AND EMAIL CONTACT
If you contact me through the contact form or by email, I process the information you provide, particularly your name, email address and message, in order to respond to your inquiry.
The legal basis is Article 6(1)(b) GDPR where the communication relates to lessons, an appointment or another prospective contractual relationship. In other cases, processing is based on my legitimate interest in responding to inquiries pursuant to Article 6(1)(f) GDPR.
The information will be deleted when it is no longer required for handling the inquiry, unless legal retention obligations apply or the information is required for an ongoing contractual relationship.
Messages sent through the Squarespace contact form may be processed and stored by Squarespace and forwarded to my email account.
EMAIL SERVICE
I use an email service provided by Google to receive and respond to messages and booking notifications. The provider in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google may also process data in the United States. Google uses recognized safeguards for international data transfers where required.
Google’s privacy policy is available at:
https://policies.google.com/privacy
ONLINE APPOINTMENT BOOKING WITH ACUITY SCHEDULING
You can book a free trial lesson through Acuity Scheduling, a Squarespace service.
When you make a booking, Acuity may process information including:
• Your name
• Your email address
• The selected appointment and time
• Your time-zone information
• Information entered into booking or intake forms
• Technical connection and device information
This information is processed to provide available appointments, manage your booking, send confirmations and reminders and prepare for the trial lesson.
The legal basis is Article 6(1)(b) GDPR, as the processing is necessary to take steps at your request before entering into a contract and to manage the requested appointment.
Acuity may use technically necessary cookies or local-storage technologies to provide its booking functions. Data may also be processed in the United States subject to the safeguards described by Squarespace, including the EU–US Data Privacy Framework and Standard Contractual Clauses.
Booking information is retained only for as long as necessary to administer the appointment and any subsequent teaching relationship, unless statutory retention obligations require longer storage.
Further information is available in the Squarespace privacy policy:
https://www.squarespace.com/privacy
INSTAGRAM AND YOUTUBE LINKS
This website contains links to my profiles on Instagram and YouTube. These are currently simple external links and not embedded social-media feeds.
No data is transferred to these platforms merely because the links are displayed. If you click a link, you leave this website and the respective platform may process personal data according to its own privacy policy.
Instagram is operated by Meta Platforms Ireland Limited. Its privacy information is available at:
https://privacycenter.instagram.com/policy/
YouTube is operated by Google Ireland Limited. Google’s privacy information is available at:
https://policies.google.com/privacy
LEGAL RETENTION OBLIGATIONS
Where personal data forms part of business or tax-relevant records, it may be stored for the periods required by German commercial and tax law. After the applicable retention period expires, the information will be deleted unless it is still required for legal claims or contractual obligations.
YOUR RIGHTS
Subject to the applicable legal requirements, you have the right to:
• Request access to your personal data
• Request correction of inaccurate personal data
• Request deletion of your personal data
• Request restriction of processing
• Receive personal data you have provided in a portable format
• Object to processing based on legitimate interests
• Withdraw consent at any time with effect for the future
• Lodge a complaint with a data-protection supervisory authority
To exercise your rights, contact:
RIGHT TO OBJECT
If personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to the processing on grounds relating to your particular situation.
If your personal data is processed for direct-marketing purposes, you may object to such processing at any time.
RIGHT TO LODGE A COMPLAINT
You have the right to lodge a complaint with a data-protection supervisory authority.
The supervisory authority responsible for private businesses in Bavaria is:
Bavarian State Office for Data Protection Supervision
Promenade 18
91522 Ansbach
Germany
Website: https://www.lda.bayern.de/
DATA SECURITY
This website uses encrypted transmission via HTTPS/SSL. Appropriate technical and organizational measures are used to protect personal data against loss, misuse, unauthorized access and unauthorized disclosure.
However, complete security during transmission over the internet cannot be guaranteed.
CHANGES TO THIS PRIVACY POLICY
This privacy policy may be updated if the website, its functions, service providers or applicable legal requirements change. The version published on this website is the current version.