Privacy policy
1. Controller
Jakob Kloz
Ottmar-Walter-Straße 4
67663 Kaiserslautern
Germany
E-mail: booking@djkob.com
The controller responsible for data processing on this website is:
2. Hosting and server log files
This website is delivered via Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you visit the site, Cloudflare processes technically necessary data such as IP address, date and time, requested URL, browser and device information in order to deliver the site and protect it against attacks.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable delivery). Cloudflare is certified under the EU-US Data Privacy Framework; standard contractual clauses also apply. More information: https://www.cloudflare.com/privacypolicy/
3. Contact form and e-mail
If you use the booking form, the data you enter (name, e-mail address, optionally club/event, date, city and your message) is processed solely to handle your inquiry. It is sent by e-mail via Cloudflare Email Routing to booking@djkob.com and forwarded from there to a mailbox at Google Gmail (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The same applies if you write to booking@djkob.com directly.
The data is not stored in a database of this website. It remains in the mailbox until the inquiry has been fully handled, unless statutory retention obligations apply.
The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract, e.g. a booking) or Art. 6(1)(f) GDPR (answering other inquiries).
4. Spam protection with Cloudflare Turnstile
Cloudflare Turnstile protects the form against abuse. It is loaded when the booking section is displayed and processes, among other things, your IP address and technical browser information to detect automated requests. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in preventing spam). Information: https://www.cloudflare.com/turnstile-privacy-policy/
5. SoundCloud and YouTube (only after a click)
The SoundCloud player and the YouTube video are only loaded when you click the respective button. Before that, no data is sent to these providers. After the click, data (including your IP address) is transferred to SoundCloud (SoundCloud Global Limited & Co. KG, Rheinsberger Str. 76/77, 10115 Berlin, Germany) or YouTube/Google (Google Ireland Limited, Dublin); YouTube is embedded in privacy-enhanced mode (youtube-nocookie.com).
The legal basis is your consent given by clicking (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it at any time for the future by reloading the page and not activating the player again.
6. Links to social networks
Links to Instagram, SoundCloud and YouTube are plain links. Data is only transferred when you click a link and open the provider's site.
7. Anonymous usage statistics
To see how the website is used, it counts a few things – without cookies and without storing anything on your device: page views, starting, fully watching or skipping the intro, clicks to SoundCloud, Instagram and YouTube, and submitted booking inquiries (without their content). If you loaded the SoundCloud player or the YouTube video, it also counts which set was played or whether the video was played, for how long in total and whether to the end. On the first page of a visit it also records the source (only the domain of the previous website, grouped as Instagram, Google, direct, etc.), the device type (phone, tablet, desktop) and the country that Cloudflare derives from the IP address.
Only daily totals are stored, e.g. “12 clicks to SoundCloud”. To roughly count the visitors of a day, a shortened hash is formed from IP address, browser identifier and a random value that changes every day. The IP address itself is not stored; the hashes and the daily value are deleted the next day once the daily report has been created, so visitors cannot be recognised across days. No profiles are created and no data is passed on to third parties for analytics.
The daily totals are kept in a Cloudflare database (Cloudflare D1) located in the European Union, deleted after about 13 months, and sent once a day as a summary report by e-mail to booking@djkob.com.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in privacy-friendly audience measurement for this artist portfolio). If your browser signals “Do Not Track” or “Global Privacy Control”, nothing is counted. You can also object at any time (Art. 21 GDPR), e.g. by an informal e-mail to booking@djkob.com.
8. Cookies, local storage and fonts
This website does not set cookies and uses no third-party analytics or advertising services. To show the intro only once per visit, the entry “djkob-intro-seen” is stored in your browser's session storage; it is deleted automatically when you close the tab and is never sent to a server (§ 25(2) TDDDG).
Fonts are served by this website itself; there is no connection to Google Fonts.
9. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You can withdraw consent at any time with effect for the future. An informal e-mail to booking@djkob.com is sufficient.
You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate, Postfach 30 40, 55020 Mainz, Germany.
Last updated
September 2026