The data controller responsible for the processing of personal data on this website is:
Josip Jovic
Hovermannstraße 4
46242 Bottrop
Germany
Email: music@josipjovic.de
This website is operated as a personal artist website for Josip Jovic. It provides information about solo piano music, links and embedded content from third-party music and video platforms, and a contact option. It also offers digital sheet music for purchase.
When you visit this website, your browser automatically transmits certain information to our hosting provider's servers. This may include:
- Your IP address
- Date and time of access
- The page or file requested
- The amount of data transferred
- Confirmation of successful retrieval
- Browser type and operating system
- The website you came from (referrer URL)
This data is processed to technically deliver the website, ensure system security and stability, and is not merged with other data sources. The legal basis is Article 6(1)(f) GDPR (legitimate interest in the secure and reliable operation of the website). Log data is stored only for as long as necessary for this purpose and is then deleted, unless a longer retention period is required by law.
If you contact us by email or via a linked social media channel such as Instagram, we process the personal data you provide (for example, your name, email address, and the content of your message) solely to respond to your inquiry.
The legal basis is Article 6(1)(b) GDPR, where the inquiry relates to pre-contractual measures, and otherwise Article 6(1)(f) GDPR (legitimate interest in responding to inquiries directed to us).
Your data will be deleted once your inquiry has been fully resolved, unless statutory retention obligations require longer storage.
We use Google Analytics 4, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). The parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Purpose: analysis of how visitors use our website, reach measurement, performance monitoring and the continuous improvement of our content.
Technologies used: cookies and similar technologies (e.g. device identifiers). GA4 works with event-based measurement. IP addresses are processed only in a shortened (anonymised) form; according to Google, GA4 does not store full IP addresses.
Data categories: pages viewed, clicks and scrolls, referrer URL, approximate location (based on IP, anonymised), technical information about browser and device, language settings, and a randomly generated user identifier. If you consented to cross-device analysis (e.g. via Google Signals), Google may associate your visits across devices when you are logged into your Google account; we only use such features if they are activated in our settings.
Legal basis: the setting and reading of non-essential cookies/identifiers for analytics is based on your consent (§ 25(1) TTDSG). The subsequent processing of personal data is based on your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future via the cookie settings (if available) or by deleting cookies in your browser.
Retention: GA4 cookies can be stored for up to 2 years (e.g. "_ga", "_ga_*"); user and event data in GA4 are retained for a period configured by us (currently between 2 and 14 months).
International transfers: data may be transmitted to Google LLC in the USA. Google relies, among other safeguards, on the EU-US Data Privacy Framework and the European Commission's Standard Contractual Clauses. Further information: https://business.safety.google/adsprocessorterms/ and https://policies.google.com/privacy.
Opt-out options: you can change your consent at any time (see cookie settings on this website, if available). In addition, you can install Google's browser add-on to deactivate Analytics: https://tools.google.com/dlpage/gaoptout.
Contract processing: we have concluded the required data processing terms with Google for the use of Google Analytics.
This website embeds a music player provided by Spotify AB. When the embedded player is loaded, a connection is established to Spotify's servers, and technical data such as your IP address may be transmitted to Spotify.
This embed is only loaded after you have given your consent via the consent management tool used on this website. The legal basis is Article 6(1)(a) GDPR. If you do not consent, the player will not load, and a direct link to the relevant Spotify profile will be shown instead.
Spotify AB acts as an independent data controller for its own processing. For further information, please refer to Spotify's own privacy policy at:
https://www.spotify.com/legal/privacy-policy/
This website embeds video content using YouTube's privacy-enhanced mode ("youtube-nocookie.com"), provided by Google Ireland Limited. When a video is loaded, a connection may be established to YouTube's servers, and technical data such as your IP address may be transmitted, even in privacy-enhanced mode.
This embed is only loaded after you have given your consent via the consent management tool used on this website. The legal basis is Article 6(1)(a) GDPR.
Google acts as an independent data controller for its own processing. For further information, please refer to Google's privacy policy at:
https://policies.google.com/privacy
This website contains links to external platforms, including Instagram, Apple Music, Tidal, and YouTube Music. Clicking on these links will take you to third-party websites over which we have no control. The respective provider's privacy policy applies to any data processing on these external platforms.
If you purchase digital sheet music through this website, the shop functionality is provided by Host-On. Host-On processes the personal data necessary to display products, manage your order, and deliver purchased files, acting as a processor on our behalf under Article 28 GDPR. Payments are processed by Stripe. When you make a payment, your payment details (such as card information or other payment method data) are transmitted directly to Stripe and processed on its systems. We do not store your full payment details ourselves. Depending on the specific Stripe service used, Stripe may act as a processor on our behalf or as an independent controller for certain aspects of payment processing, fraud prevention, and regulatory compliance. Stripe Payments Europe, Limited, an Irish company, has principal responsibility for Stripe's payment services in Europe.
The data processed for a purchase may include:
- Your name
- Your email address
- Your billing information
- Your payment details (processed directly by Stripe)
- Order and transaction details
The legal basis for this processing is Article 6(1)(b) GDPR (performance of a contract). Transaction-related data may be retained beyond the purchase itself where required by German commercial and tax law (Sections 257 HGB, 147 AO), typically for six to ten years.
For more information on how Stripe processes personal data, please refer to Stripe's own privacy documentation at: https://stripe.com/privacy
Personal data is only shared with third parties where:
- You have given your explicit consent (Article 6(1)(a) GDPR)
- It is necessary to fulfil a contract with you (Article 6(1)(b) GDPR)
- We are legally obliged to do so (Article 6(1)(c) GDPR)
- It is necessary to safeguard our legitimate interests (Article 6(1)(f) GDPR)
This may include our hosting provider and, if applicable, a payment service provider or shop platform used to operate the sheet music shop.
Some third-party providers embedded on this website, such as Spotify and YouTube/Google, may process data outside the European Economic Area, including in the United States. Where this occurs, such providers generally rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, to ensure an adequate level of data protection.
Personal data is retained only for as long as necessary for the purposes described in this privacy policy, or as required by applicable statutory retention obligations.
Under the GDPR, you have the right to:
- Request access to the personal data we hold about you (Article 15 GDPR)
- Request rectification of inaccurate data (Article 16 GDPR)
- Request erasure of your data (Article 17 GDPR)
- Request restriction of processing (Article 18 GDPR)
- Receive your data in a portable format (Article 20 GDPR)
- Object to processing based on legitimate interests (Article 21 GDPR)
- Withdraw any consent you have given, with effect for the future, at any time (Article 7(3) GDPR)
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority for North Rhine-Westphalia is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
Postal address: Postfach 20 04 44, 40102 Düsseldorf, Germany
Phone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
Website: https://www.ldi.nrw.de
We may update this privacy policy from time to time to reflect changes to this website or to legal requirements. The current version is always available on this page.
Last updated: August 2026
We use Google Analytics 4, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). The parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Purpose: analysis of how visitors use our website, reach measurement, performance monitoring and the continuous improvement of our content.
Technologies used: cookies and similar technologies (for example device identifiers). GA4 works with event-based measurement. IP addresses are processed only in a shortened (anonymised) form; according to Google, GA4 does not store full IP addresses.
Data categories: pages viewed, clicks and scrolls, referrer URL, approximate location (based on IP, anonymised), technical information about browser and device, language settings, and a randomly generated user identifier.
Enhanced measurement features in use:
- Page views: on page load and when the browser history state changes (single-page navigation).
- Scrolls: when a visitor reaches the bottom of a page.
- Outbound clicks: when a link leads away from our domain; links to domains configured for cross-domain measurement do not trigger outbound events.
- Site search: when a page loads with a recognised search query parameter in the URL (configurable).
- Form interactions: when visitors interact with a form.
- Video engagement: play, progress and complete events for embedded YouTube videos with JS API support enabled.
- File downloads: when links to common document, archive, application, video or audio files are clicked.
Features such as Google Signals (cross-device reports) and Google Ads linking are only used if explicitly activated in our settings.
Legal basis: the setting and reading of non-essential cookies/identifiers for analytics is based on your consent (Sec. 25(1) TTDSG). The subsequent processing of personal data is based on your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future via the cookie settings (if available) or by deleting cookies in your browser.
Retention: GA4 cookies can be stored for up to 2 years (for example "_ga", "_ga_*"); user and event data in GA4 are retained for a period configured by us (currently between 2 and 14 months).
International transfers: data may be transmitted to Google LLC in the USA. Google relies, among other safeguards, on the EU–US Data Privacy Framework and the European Commission's Standard Contractual Clauses. Further information: https://business.safety.google/adsprocessorterms/ and https://policies.google.com/privacy.
Opt-out options: you can change your consent at any time (see cookie settings on this website, if available). In addition, you can install Google's browser add-on to deactivate Analytics: https://tools.google.com/dlpage/gaoptout.
Contract processing: we have concluded the required data processing terms with Google for the use of Google Analytics.