This policy explains which personal data is processed when you use this website, why it is processed, who receives it, how long it is kept, and which rights you have under the General Data Protection Regulation (GDPR).
The website does not use advertising analytics or profiling. Optional external services remain blocked until you consent.
Marco Blaauw
Represented for website inquiries by:
Doreen Lutz Artists, Doreen Lutz, M.A.
Andreas-Hofer-Str. 33
6020 Innsbruck, Austria
Email: info@marcoblaauw.com
When you request a page, the hosting provider processes the IP address, date and time, requested file, referrer, browser and operating-system information, response status, and transferred data volume. This is necessary to deliver the website, maintain availability, and investigate abuse or security incidents.
Legal basis: Article 6(1)(f) GDPR. The legitimate interests are reliable, secure website operation and protection against misuse.
Recipient: the contracted website-hosting provider in the European Union.
Retention: routine access logs are intended to be deleted after 14 days. Information required to investigate a specific security incident may be retained until the incident and any resulting claims are resolved.
The website stores your selected privacy categories and the time of your decision in your browser's local storage under marcoblaauw.privacyConsent.v2. This information stays on your device and is not sent to our server. It is necessary to remember your selection and expires after six months.
You can change or withdraw optional consent at any time using the “Privacy settings” button. Withdrawal does not affect processing that occurred lawfully before withdrawal.
Vimeo videos, Vimeo preview images, and the SoundCloud player are blocked by default. They load only after you consent to “External media.” When loaded, the provider receives technical connection data such as your IP address, browser information, referrer, and the time of access. The provider may also store or read cookies or similar identifiers.
Purpose: displaying video and audio content. Legal basis: your consent under Article 6(1)(a) GDPR and, where applicable, the relevant national rule governing storage on or access to your device.
These providers may process data outside the European Economic Area. Depending on the provider and service, transfers may rely on an adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses. We do not load these services if you reject or withdraw consent.
The public event calendar is retrieved from Google Sheets only after you consent to “Event feed.” Google receives technical connection data, including your IP address, when the feed is requested.
Purpose: displaying current concert and project dates. Legal basis: your consent under Article 6(1)(a) GDPR. Recipient: Google Ireland Limited and affiliated Google companies. Google may process data outside the EEA under an adequacy decision or appropriate safeguards.
See the Google privacy policy. Withdrawing consent prevents future requests and removes the feed from the page until consent is granted again.
When you use the contact form, we process your name, email address, message, submission time, and technical connection data. The form is delivered through Web3Forms, operated by Web3Creative, which processes the submission on our behalf and forwards it to the intended mailbox. Its infrastructure and anti-spam subprocessors may also process the submission.
Purposes: receiving, reviewing, and responding to inquiries; preventing abuse and spam. Legal bases: Article 6(1)(b) GDPR where the inquiry concerns a contract or pre-contractual steps, and otherwise Article 6(1)(f) GDPR. The legitimate interests are responding to requested communications and protecting the form from abuse.
Recipients: Web3Creative/Web3Forms, its contracted infrastructure and anti-spam subprocessors, the hosting/email providers involved in delivery, and authorized recipients of the mailbox.
International transfers: Web3Forms operates from India and uses infrastructure that may process data in several regions, including the United States. According to Web3Forms, transfers from the EEA are governed by appropriate safeguards including Standard Contractual Clauses. See the Web3Forms privacy policy.
Retention: we delete ordinary correspondence when it is no longer required for the inquiry, normally no later than six months after the conversation ends, unless contractual, accounting, limitation-period, or other legal requirements justify longer retention. Web3Forms states that its service retention depends on the account configuration and may be up to three years.
You are not legally required to provide contact-form data, but we cannot respond without a usable contact method and the information needed to understand your request. Please do not submit special-category or otherwise sensitive personal data through the form.
Service providers acting on our behalf may receive data only as necessary to provide hosting, form processing, email delivery, security, or technical support. They must be bound by data-processing terms where Article 28 GDPR applies. We may also disclose data when legally required or when necessary to establish, exercise, or defend legal claims.
Subject to the applicable conditions, you may request access to, correction or deletion of your data, restriction of processing, data portability, or object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time for the future.
To exercise these rights, contact info@marcoblaauw.com. We may request information necessary to verify your identity. You also have the right to complain to a supervisory authority, in particular the authority for your habitual residence, place of work, or the alleged infringement.
The Austrian supervisory authority is the Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, Austria, email: dsb@dsb.gv.at.
We do not use personal data collected through this website for automated decision-making or profiling within the meaning of Article 22 GDPR.
We update this policy when the website, service providers, or legal requirements change. The version published here is the current version.
Last updated: 2 November 2026