PRIVACY POLICY
1. Controller
Krisztian Weinzierl
Höfener Steige 2, 71364 Winnenden, Germany
Email: krisz@kriszrocks.com · Phone: +49 151 59189036
2. Overview
Protecting your personal data matters to me. This website uses no advertising cookies and only loads third-party content (e.g. YouTube videos) after you actively agree to it. Fonts and images are loaded from this server; there is no connection to Google Fonts.
3. Hosting
This website runs on the Base44 platform (Base44 is a company of Wix.com Ltd., Namal Tel Aviv St. 40, Tel Aviv 6350671, Israel). When you visit the website, technically necessary data is processed, such as your IP address, date and time of access, the page visited, browser type and operating system. This is required to deliver the website, to keep it stable and secure, and to evaluate its use statistically in anonymised form.
The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in providing the website securely and reliably). The EU Commission has issued an adequacy decision for Israel. Where data is processed by sub-processors in third countries (e.g. the USA), this is based on the EU-US Data Privacy Framework or EU Standard Contractual Clauses. More information: base44.com/privacy-policy.
4. Contact by email
If you send me an email (e.g. via the “Book me” button), I process your details solely to handle your request. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual steps) or Art. 6 (1) (f) GDPR (legitimate interest in replying). Your data is deleted once it is no longer needed and no statutory retention periods apply.
5. YouTube videos
This website embeds videos from YouTube (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The videos only load when you click “Play” (two-click solution). Only then is a connection to YouTube established and data such as your IP address transferred to Google. I use YouTube's privacy-enhanced mode (youtube-nocookie.com).
The legal basis is your consent given by clicking, Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Google is certified under the EU-US Data Privacy Framework. More information: policies.google.com/privacy.
6. Links to external websites
This website contains links to other providers (e.g. ticket shops, Instagram, Facebook, YouTube, Buy Me a Coffee). Simply visiting this website does not transfer any data to these providers. Their privacy policies only apply once you click a link.
7. User account & downloads (tabs & lessons)
You can create a user account to download the free tabs and lessons. For this I process your email address, a password (stored encrypted) and your name if provided; you receive a confirmation code by email. If you sign in with Google, Google shares your name and email address with me. I also store which files you downloaded and when, so I can see which content is popular.
The legal basis is Art. 6 (1) (b) GDPR (providing the account you requested). The data is stored on the Base44 platform (see section 3). You can have your account deleted at any time by sending an email to krisz@kriszrocks.com.
8. Email updates (newsletter)
The free member area (tabs and lessons) is offered in exchange for subscribing to my email updates. When you sign up, you agree by ticking the checkbox that I may inform you by email about new tabs, lessons, videos and shows. The legal basis is your consent (Art. 6 (1) (a) GDPR); the time of your consent is recorded.
You can withdraw your consent at any time with effect for the future, via the unsubscribe link in every email, in the members area or by email to krisz@kriszrocks.com. Please note that access to the free member area requires the subscription; your account itself is kept until you ask me to delete it. The free blank sheets at kriszrocks.com/blank-sheets remain available without any sign-up.
9. Your rights
You have the right at any time to access your data (Art. 15 GDPR), to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), to object (Art. 21 GDPR) and to withdraw any consent with effect for the future (Art. 7 (3) GDPR). A short email to krisz@kriszrocks.com is enough.
10. Right to lodge a complaint
You can lodge a complaint with a data protection supervisory authority. The authority responsible for me is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW), Lautenschlagerstraße 20, 70173 Stuttgart, Germany, baden-wuerttemberg.datenschutz.de.
11. SSL/TLS encryption
For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser's address bar.
Last updated: October 2026