Privacy policy

Last updated: October 2026

1. Controller

Controller pursuant to the GDPR:
Raphael Tschernuth
c/o GAM
Pappelallee 64
10437 Berlin
Germany
Email: contact@tschernuth.com

2. The short version

This site does not use analytics, advertising, tracking or social media plugins. It sets no cookies that are not technically necessary. If you use the contact form or write an email, I receive what you send me. Fonts and audio files are hosted on this server, so they are not loaded from third parties. Videos from YouTube, Vimeo, Gumlet and The New York Times only load after you click to play them.

3. Hosting and server log files

This site is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. When you visit the site, the server automatically records technical information your browser sends: IP address, date and time, the page requested, the referring page, and browser and operating system.

This is needed to deliver the site and keep it secure. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in a secure, working website). Log files are deleted after 7 days unless they are needed to investigate a security incident. A data processing agreement with the host is in place.

4. Contact form and email

If you use the contact form, it sends me your name, your email address and your message by email. The form is not stored on the website. If you write to me by email, I receive your email address and your message. In both cases I use this information only to reply and to handle your enquiry. Legal basis: Art. 6 (1)(b) GDPR where your enquiry concerns a possible project, otherwise Art. 6 (1)(f) GDPR. I delete the correspondence when it is no longer needed, unless statutory retention periods apply.

On the Father of Legends page, you can also allow me to publish your comment with your name. I only do so if you tick that box, and you can ask me to remove it at any time.

5. Videos (YouTube, Vimeo, Gumlet and The New York Times)

Some pages show films hosted by YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), Vimeo (Vimeo.com, Inc., 330 West 34th Street, New York, NY 10001, USA), Gumlet (Gumlet Pte. Ltd., Singapore) or The New York Times (The New York Times Company, 620 Eighth Avenue, New York, NY 10018, USA). Until you click play, only a still image hosted on this server is shown, and no connection to these providers is made. Each video is activated individually, and the play button tells you that the video will load from the provider.

When you click play, the video loads from the provider’s servers. The provider then receives at least your IP address and information about your browser, and may set cookies or similar technologies. YouTube videos are embedded in privacy-enhanced mode (youtube-nocookie.com). Data may be transferred to the USA or other countries outside the EU/EEA.

Legal basis: your consent, given by clicking play (Art. 6 (1)(a) GDPR and § 25 (1) TDDDG). You can prevent further processing by not activating additional videos. Cookies or similar technologies already stored can be deleted through your browser settings.

For details, see the providers’ privacy policies: policies.google.com/privacy, vimeo.com/privacy, nytimes.com/privacy and gumlet.com/privacy.

6. Links to other websites

This site links to other websites, such as Discogs, LinkedIn and the websites of newspapers and theaters. No data is sent to them until you click a link. After that, the privacy policy of the site you visit applies.

7. Encryption

This site uses TLS encryption (recognizable by “https” in the address bar).

8. Your rights

You have the right to access, rectification, erasure and restriction of processing of your personal data (Art. 15–18 GDPR), the right to data portability (Art. 20 GDPR), and the right to object to processing based on Art. 6 (1)(f) GDPR (Art. 21 GDPR). To exercise them, email contact@tschernuth.com.

Where processing is based on consent, you have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

You also have the right to complain to a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin.