Last updated: 11 October 2026
Privacy policy
1. Controller
Ciro Bonetti, DJ CiroB
Reutlingerstr. 74, 72555 Metzingen, Germany
Email: kontakt@djcirob.com
Phone: +49 1525 8170701
2. Hosting and server logs
The website is hosted on Aruba Hosting Basic Linux with PHP 8.3; kontakt@djcirob.com is also an Aruba mailbox. When the site is accessed, technically necessary server log data such as IP address, date and time, requested file, referrer, browser and operating system may be processed. The purposes are secure delivery, error analysis and abuse prevention under Art. 6(1)(f) GDPR. The exact Aruba contracting entity, server locations, subprocessors and server-log retention periods still have to be confirmed from the contractual documents.
3. Contact form and email
When you send an enquiry, we process your name, email address, optional phone number, event type, date, location, guest count and message solely to handle the enquiry and pre-contractual communication. The legal basis is Article 6(1)(b) GDPR; for general enquiries it is Article 6(1)(f) GDPR. Required fields are necessary to answer your request. The form does not create a binding booking.
4. Form security
To prevent spam and abuse, the site uses a strictly necessary PHP session cookie, CSRF tokens, a honeypot, timing checks, server-side validation, rate limiting and duplicate detection. The cookie is HTTP-only, SameSite=Strict and expires with the session. For rate limiting, the IP address is processed only as a SHA-256 hash in a temporary server file. Eligible attempts are counted up to five per hour, while duplicate-request hashes are considered for 15 minutes. Entries not updated for more than 24 hours are removed on the next token request or form attempt. The legal basis is Art. 6(1)(f) GDPR.
5. Language preference
The selected language is stored exclusively in the browser’s local storage under the key “djcirob-language”. It remains there until overwritten by a new language selection or removed with the browser data. This storage is necessary for the language function requested by the user under § 25(2)(2) TDDDG and contains no personal identifier.
6. Local media, fonts and external links
Images, videos, CSS, JavaScript and system fonts are served locally. There are no Google Maps, YouTube, analytics or social-media embeds. If you voluntarily open an external link such as Instagram or a partner website, that provider’s privacy terms apply.
7. Recipients and international transfers
Recipients are Ciro Bonetti and, where technically necessary, Aruba as the hosting and email provider. The exact Aruba contracting entity, any subprocessors and possible international transfers still have to be confirmed from the contractual documents. The website itself does not embed analytics, advertising, maps, video platforms or social-media services.
8. Retention
Enquiries are deleted when they are no longer necessary for handling and pre-contractual communication, unless legal obligations or legitimate retention reasons apply. The technical abuse-prevention periods are described in section 4. The retention period for Aruba server logs and the specific retention period in the email mailbox still have to be confirmed; no unverified fixed period is stated.
9. Your rights
Subject to the GDPR, you have rights of access, rectification, erasure, restriction, data portability and objection. You may also lodge a complaint with a data protection supervisory authority.
10. Supervisory authority
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Heilbronner Straße 35, 70191 Stuttgart. Information and complaints: baden-wuerttemberg.datenschutz.de.
11. Cookies and consent
No analytics, marketing or profiling cookies are used. The session cookie used only on the contact page and the saved language support security and language functions requested by the user. No consent banner is currently deployed. This assessment must be repeated before activating any future non-essential service.