The data controller responsible for the processing of personal data on this website is:
Josip Jovic
Hovermannstraße 4
46242 Bottrop
Germany
Email: music@josipjovic.de
This website is operated as a personal artist website for Josip Jovic. It provides information about solo piano music, links and embedded content from third-party music and video platforms, and a contact option. It also offers digital sheet music for purchase.
When you visit this website, your browser automatically transmits certain information to our hosting provider's servers. This may include:
- Your IP address
- Date and time of access
- The page or file requested
- The amount of data transferred
- Confirmation of successful retrieval
- Browser type and operating system
- The website you came from (referrer URL)
This data is processed to technically deliver the website, ensure system security and stability, and is not merged with other data sources. The legal basis is Article 6(1)(f) GDPR (legitimate interest in the secure and reliable operation of the website). Log data is stored only for as long as necessary for this purpose and is then deleted, unless a longer retention period is required by law.
If you contact us by email or via a linked social media channel such as Instagram, we process the personal data you provide (for example, your name, email address, and the content of your message) solely to respond to your inquiry.
The legal basis is Article 6(1)(b) GDPR, where the inquiry relates to pre-contractual measures, and otherwise Article 6(1)(f) GDPR (legitimate interest in responding to inquiries directed to us).
Your data will be deleted once your inquiry has been fully resolved, unless statutory retention obligations require longer storage.
This website embeds a music player provided by Spotify AB. When the embedded player is loaded, a connection is established to Spotify's servers, and technical data such as your IP address may be transmitted to Spotify.
This embed is only loaded after you have given your consent via the consent management tool used on this website. The legal basis is Article 6(1)(a) GDPR. If you do not consent, the player will not load, and a direct link to the relevant Spotify profile will be shown instead.
Spotify AB acts as an independent data controller for its own processing. For further information, please refer to Spotify's own privacy policy at:
https://www.spotify.com/legal/privacy-policy/
This website embeds video content using YouTube's privacy-enhanced mode ("youtube-nocookie.com"), provided by Google Ireland Limited. When a video is loaded, a connection may be established to YouTube's servers, and technical data such as your IP address may be transmitted, even in privacy-enhanced mode.
This embed is only loaded after you have given your consent via the consent management tool used on this website. The legal basis is Article 6(1)(a) GDPR.
Google acts as an independent data controller for its own processing. For further information, please refer to Google's privacy policy at:
https://policies.google.com/privacy
This website contains links to external platforms, including Instagram, Apple Music, Tidal, and YouTube Music. Clicking on these links will take you to third-party websites over which we have no control. The respective provider's privacy policy applies to any data processing on these external platforms.
If you purchase digital sheet music through this website, the shop functionality is provided by Host-On. Host-On processes the personal data necessary to display products, manage your order, and deliver purchased files, acting as a processor on our behalf under Article 28 GDPR. Payments are processed by Stripe. When you make a payment, your payment details (such as card information or other payment method data) are transmitted directly to Stripe and processed on its systems. We do not store your full payment details ourselves. Depending on the specific Stripe service used, Stripe may act as a processor on our behalf or as an independent controller for certain aspects of payment processing, fraud prevention, and regulatory compliance. Stripe Payments Europe, Limited, an Irish company, has principal responsibility for Stripe's payment services in Europe.
The data processed for a purchase may include:
- Your name
- Your email address
- Your billing information
- Your payment details (processed directly by Stripe)
- Order and transaction details
The legal basis for this processing is Article 6(1)(b) GDPR (performance of a contract). Transaction-related data may be retained beyond the purchase itself where required by German commercial and tax law (Sections 257 HGB, 147 AO), typically for six to ten years.
For more information on how Stripe processes personal data, please refer to Stripe's own privacy documentation at: https://stripe.com/privacy
Personal data is only shared with third parties where:
- You have given your explicit consent (Article 6(1)(a) GDPR)
- It is necessary to fulfil a contract with you (Article 6(1)(b) GDPR)
- We are legally obliged to do so (Article 6(1)(c) GDPR)
- It is necessary to safeguard our legitimate interests (Article 6(1)(f) GDPR)
This may include our hosting provider and, if applicable, a payment service provider or shop platform used to operate the sheet music shop.
Some third-party providers embedded on this website, such as Spotify and YouTube/Google, may process data outside the European Economic Area, including in the United States. Where this occurs, such providers generally rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, to ensure an adequate level of data protection.
Personal data is retained only for as long as necessary for the purposes described in this privacy policy, or as required by applicable statutory retention obligations.
Under the GDPR, you have the right to:
- Request access to the personal data we hold about you (Article 15 GDPR)
- Request rectification of inaccurate data (Article 16 GDPR)
- Request erasure of your data (Article 17 GDPR)
- Request restriction of processing (Article 18 GDPR)
- Receive your data in a portable format (Article 20 GDPR)
- Object to processing based on legitimate interests (Article 21 GDPR)
- Withdraw any consent you have given, with effect for the future, at any time (Article 7(3) GDPR)
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority for North Rhine-Westphalia is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
Postal address: Postfach 20 04 44, 40102 Düsseldorf, Germany
Phone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
Website: https://www.ldi.nrw.de
We may update this privacy policy from time to time to reflect changes to this website or to legal requirements. The current version is always available on this page.
Last updated: August 2026