Privacy policy
This notice explains how personal data is processed when you visit this website or contact us. Updated: 27 October 2026.
Data controller
Juri Jemschanow · Wermuth ShowDrosselweg 36
33175 Bad Lippspringe, Deutschland
emshanov@gmail.com
Website hosting and security
This website is provided through OpenAI Sites using Cloudflare infrastructure. Delivering a page involves processing connection information, including IP address, time, requested page and browser and device information. This supports website delivery, availability and security. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in a reliable and secure website.
Enquiries are stored in a restricted-access database, with private backups for recovery. Hosting providers may process technical logs according to their own documented retention rules.
Contact and event enquiries
When you contact us by form or email, we process your name, email address, event type, location and date, or your indication that the date is undecided. Optional details can include phone number, guest count, budget, music project, schedule, message and technical event information. The form also records language, source page, request identifier, receipt time and processing and delivery status. Please do not send health information or other sensitive personal data.
We use this information to respond, check availability, prepare an offer and, where applicable, deliver an agreed service. The basis for contractual and pre-contractual requests is Article 6(1)(b) GDPR. Other correspondence is handled under Article 6(1)(f) GDPR, reflecting our interest in responding to your message. Statutory retention obligations fall under Article 6(1)(c) GDPR. Sending an enquiry does not confirm a booking.
Required fields are marked on the form. Without them we cannot process a form submission; you can contact us by email instead. The form does not subscribe you to a newsletter or marketing list.
Introductions from bands and artists
The artist form processes project name, contact person and email, country, city, music style and line-up, together with optional programme, travel and web details. An EPK can be submitted as a PDF or link. We use these materials to consider a possible business collaboration under Article 6(1)(b) GDPR for pre-contractual contact or Article 6(1)(f) for our legitimate interest in reviewing project introductions.
PDF files are held in private file storage; downloads require the operator’s protected access. The email notification contains form details and a reference to the file, not a PDF attachment. There is no automatic publication or listing in the catalogue. The hosting, Resend, international-transfer and retention information on this page also applies.
Email delivery through Resend
We use Resend, operated by Plus Five Five, Inc., USA, for form-enquiry notifications and your acknowledgement email. Resend processes sender and recipient addresses, subject, the content of each message and technical delivery information. The notification to the operator contains your enquiry details; your acknowledgement contains the enquiry reference. Replies to the acknowledgement go to the Gmail address above.
The purpose is to handle your enquiry reliably, using the legal bases described under “Contact and event enquiries”. These messages do not subscribe you to advertising.
Ireland is selected as the sending region for our sending domain. This does not guarantee that all processing takes place exclusively in the EU. Resend may process data in the USA; its Data Processing Addendum provides standard contractual clauses for relevant transfers. Message data and delivery logs are also processed under Resend’s applicable retention rules and account settings. See the Resend notices linked below for further information.
Protecting the enquiry form
To limit abusive submissions, the application creates a hash of the IP address using a secret additional value. The IP address itself is not stored as a field of the enquiry. Short-term counters stop affecting the limit after expiry and are cleaned up during subsequent submissions. The basis is Article 6(1)(f) GDPR, our interest in preventing spam and service overload. No external CAPTCHA is loaded.
Google Analytics with your consent
If you allow analytics, we load Google Analytics 4 (measurement ID G-BX9PTX3Q5S), a service provided by Google Ireland Limited. We measure page visits, traffic sources and campaigns, language, device information, approximate region and actions such as starting a form, saving an enquiry, clicking a contact link or choosing to load a video. Google processes technical connection information; pseudonymous browser identifiers can associate visits. We do not send names, email addresses, phone numbers or message text from the form to Analytics.
The Google tag is fully blocked until consent (Basic Consent Mode). Refusal does not affect the website or enquiry form. The legal bases are Article 6(1)(a) GDPR and section 25(1) TDDDG. Advertising personalisation and Google Signals are disabled in this integration.
We remember your choice locally under wermuth-privacy-v1, without a visitor identifier, for no more than 180 days under section 25(2) TDDDG. We ask again after expiry. Analytics cookies configured by us (prefix ws_ga) expire no later than 180 days after being set, without renewing on each visit. Retention and deletion within Google’s service also depend on the Analytics property owner’s settings and Google’s terms.
You can change your choice at any time through “Privacy settings” in the footer. Withdrawing consent stops further measurement by this integration and removes its accessible Analytics cookies on this domain. It does not automatically delete data already sent to Google; contact the controller above about such requests. Google may also process data in the USA. See Google’s privacy notice for more information.
Optional YouTube videos
Clicking a video preview first opens a local notice. Only choosing “Load YouTube video” embeds an external player from youtube-nocookie.com. Google Ireland Limited can then receive information including IP address, browser and device data, referring page and playback activity, and can store or access information on your device. Privacy-enhanced mode does not prevent all data transfers. Processing in the USA or other countries is possible.
Activation is voluntary and based on consent under Article 6(1)(a) GDPR and section 25(1) TDDDG. Choosing “Do not load” keeps the player blocked. Your choice applies only to that open player and is not persistently saved by our application. Closing the video window removes the player and stops further connections from that embedded player. It does not reverse processing that has already occurred; you can also manage data stored by Google through your browser or Google settings.
Recipients and external links
The website operator can access enquiries. OpenAI and Cloudflare provide the technical hosting, database and backup infrastructure used to run the website. The operator’s email address is hosted on Google’s Gmail; email contact involves processing sender, recipient and message content by the email service.
Event details necessary to assess or deliver a requested performance may be shared with participating artists or organisers where required for your specific enquiry or contract. Your enquiry is not published.
Links to Instagram, YouTube or artist directories lead to separate services. Following a link takes you away from this website, and the destination provider’s privacy notice applies there.
Processing outside the EEA
International providers used by this website may process data outside the European Economic Area, including in the USA. Whether an adequacy decision or safeguards such as standard contractual clauses apply depends on the service and its governing contractual terms. The providers’ privacy notices linked below describe recipients and international transfers. Using a service does not guarantee storage exclusively within Europe.
Retention
Enquiry and correspondence information is needed for handling your request, delivering any resulting contract or resolving related claims. Documents subject to statutory retention duties remain stored for the legally required period, with other uses restricted. Information no longer required must then be deleted, including exported or backed-up copies. Technical platform logs are subject to each provider’s retention rules. You can contact us at any time about deleting a specific enquiry.
Your rights and withdrawing consent
Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction and data portability. You can object to processing under Article 6(1)(f) GDPR on grounds relating to your particular situation. You can withdraw consent at any time for future processing; withdrawal does not affect the lawfulness of processing before it. Please use the email address above for requests.
You may also complain to a data protection supervisory authority, particularly where you live or work or where an alleged infringement occurred. In North Rhine-Westphalia this is the Landesbeauftragte für Datenschutz und Informationsfreiheit NRW. We do not make automated decisions, including profiling, within Article 22 GDPR.