Privacy notice

Version of 11 November 2026

This notice explains which personal data this website processes, why, and what rights you have under the EU General Data Protection Regulation (GDPR).

1. Controller

2. Visiting this website

When you open a page, the web server automatically records technical data: your IP address, the date and time, the page requested, the page you came from, and your browser and operating system. This is needed to deliver the pages and to keep the server secure (legal basis: Art. 6(1)(f) GDPR, legitimate interest). The data is not combined with other data and is kept only as long as needed for these purposes.

The website is hosted by twosteps GmbH, Germany, which processes this data on my behalf (Art. 28 GDPR).

This website uses no analytics, advertising or tracking tools, and it sets no cookies for visitors.

3. Contact form and email

If you write to me through the contact form or by email, I process your name, email address and message in order to answer you (Art. 6(1)(b) and (f) GDPR). I keep the correspondence as long as needed for the matter and delete it afterwards, unless legal retention periods apply.

4. Buying scores

When you order a score, I process your name, email address, postal address, the items ordered, your comments and declarations, the payment received, and the IP address from which you ordered. For PDF purchases I also store your download code and the times and IP addresses of your downloads, to enforce the download limit.

• Purpose and legal basis: to conclude and fulfil the contract (Art. 6(1)(b) GDPR); to meet tax and accounting obligations (Art. 6(1)(c) GDPR); to prevent misuse of download codes and forms (Art. 6(1)(f) GDPR).
• Recipients: the host twosteps GmbH (storage and email delivery); for hard copies, the postal service that delivers the parcel receives your name and address. Your payment is handled by your bank and mine.
• Retention: bills and the data on them are kept for seven years, as required by § 132 of the Austrian Federal Fiscal Code (BAO). Other order data is kept as long as needed for the contract and possible warranty claims. IP addresses recorded to limit repeated form submissions are deleted after one hour.

5. Withdrawal from a contract

If you use the online withdrawal function, I store the data you enter, together with the date and time of receipt and your IP address, to process the withdrawal and to be able to prove it (Art. 6(1)(b) and (c) GDPR). It is kept with the order records.

6. Embedded videos

Some work pages offer videos from Vimeo (Vimeo.com, Inc., USA) and YouTube (Google Ireland Limited, Ireland; parent company Google LLC, USA). These videos are not loaded until you click their play button. Only then does your browser connect to the provider, which receives at least your IP address and may set cookies. Legal basis: your consent by clicking (Art. 6(1)(a) GDPR). Data may be transferred to the USA; both providers state that they participate in the EU-U.S. Data Privacy Framework. Privacy policies: Vimeo, Google.

7. Links to other websites

Links to other websites transfer no data until you click them. The operators of those websites are responsible for their own data processing.

8. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). A consent can be withdrawn at any time with effect for the future. To exercise these rights, please write to me.

You also have the right to lodge a complaint with a supervisory authority. In Austria this is the Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, www.dsb.gv.at.

9. Security

All pages and forms are transmitted encrypted (HTTPS). No automated decision-making or profiling takes place.