Last updated: October 2026
We take the protection of your data seriously. This website uses no analytics or advertising services and sets no tracking cookies. Below we explain which data is processed when you visit danafolk.com, for what purpose and on which legal basis.
1. Controller
The controller responsible for data processing on this website is:
Maria Elsigan (Dána)
[add postal address]
Email: contact@danafolk.com
Phone: +43 699 11 13 23 72
2. Hosting and server log files
This website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany, with whom we have a data processing agreement (Art. 28 GDPR).
With every request the server automatically stores information in log files: IP address, date and time, the page requested, the referring page, browser and operating system. We need this data to run the website securely and reliably. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). The log files are deleted automatically by the host after a short period and are not combined with other data.
3. Website security (Wordfence)
To protect the website against attacks we use the security plugin Wordfence by Defiant, Inc. (800 5th Ave Ste 4100, Seattle, WA 98104, USA). It checks requests for known attack patterns and processes the IP address, time, requested address and browser identifier for this. The check runs on our server; IP addresses are compared with Defiant’s block lists to recognise known attackers. Wordfence may set a technically necessary cookie for this. The legal basis is our legitimate interest in a secure website (Art. 6(1)(f) GDPR).
4. Storage in your browser
We set no tracking or advertising cookies. Your choice in the cookie banner is stored in your browser’s local storage (localStorage, entry “dana-consent”) so we do not have to ask on every visit. This storage is strictly necessary (§ 165(3) Austrian Telecommunications Act 2021) and you will be asked again after 12 months. You can delete the entry at any time in your browser settings.
5. External media: YouTube and Vimeo
On the “Music” page we show videos from YouTube and Vimeo. They are only loaded once you agree – in the cookie banner or directly at the video via “Allow external media”. Before that, no connection to these providers is made.
- YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use the privacy-enhanced mode (youtube-nocookie.com). Google’s privacy policy
- Vimeo: Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, NY 10001, USA. Vimeo’s privacy policy
Once you agree, loading the videos transmits in particular your IP address, browser data and the page requested to the respective provider; the providers may set cookies and transfer data to the USA as well. For transfers to the USA the providers rely on the EU-US Data Privacy Framework or on the European Commission’s standard contractual clauses. The legal basis is your consent (Art. 6(1)(a) GDPR, § 165(3) Austrian Telecommunications Act 2021). You can withdraw your consent at any time via “Cookie settings” at the bottom of the page.
6. Links to social networks and music services
We link to Instagram, Spotify, Apple Music and YouTube with plain links only. No plugins of these services are loaded and no data is transmitted unless you click a link. After the click, the provider’s privacy policy applies.
7. Contact by email or phone
If you contact us by email or phone, for example to book us, we process the details you provide (e.g. name, contact details, content of your request) to answer your request and, where applicable, arrange a performance. The legal basis is taking steps prior to or performing a contract (Art. 6(1)(b) GDPR), otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We delete the data once it is no longer needed, unless statutory retention obligations apply (e.g. seven years for accounting records under § 132 Austrian Federal Fiscal Code).
8. Your rights
You have the right to access, rectification, erasure and restriction of processing of your data, to data portability and to object to processing based on legitimate interests. You can withdraw any consent at any time with effect for the future. Please contact contact@danafolk.com.
If you believe that the processing of your data violates data protection law, you can lodge a complaint with the supervisory authority. In Austria this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, www.dsb.gv.at.
9. Changes
We update this privacy policy when the website or the services used change. The version published here applies.