Jasmine Fan — Privacy

Updated Oct 01, 2026

This page explains what happens to your data when you visit jasminefan.de. The short version: the site sets no cookies and shows no ads. I count visits with a small analytics tool that does not store your IP address.

This page also covers producer.jasminefan.de and curator.jasminefan.de while they show a holding page. choreographer.jasminefan.de has its own privacy page.

Who is responsible

Yi Chun Fan (Jasmine Fan)
Dittmern 3, 29614 Soltau, Germany
Phone: +49 176 31620022
Email: mail@jasminefan.de

Hosting and server logs

netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany, hosts this site on servers in Germany. When you open a page, your browser sends some data along, and netcup’s web server writes it to a log file:

netcup needs this to deliver the site and to defend it against attacks. The log files are deleted after 14 days at most. Legal basis: Art. 6 (1) (f) GDPR. My legitimate interest is a site that works and stays secure. I have a data processing agreement with netcup.

Your browser and this site talk over an encrypted connection (HTTPS).

Visitor statistics (Rybbit)

I want to know how many people visit and which pages they read. I don’t want Google, Meta or companies like them to see your visit, so this site has no Google Analytics, no Meta Pixel and no similar tools. Instead I use Rybbit, an open-source analytics tool. It runs on a rented server, not at an analytics company. The web developer Archit Dharod (dharod.de) runs it for me under a data processing agreement.

For each page view, Rybbit records:

The visitor ID is a code made from your IP address and browser, mixed with a secret key that changes every day. That lets me see that two page views on the same day came from the same visitor. It does not let me follow you from one day to the next. Rybbit does not store your IP address.

Rybbit sets no cookies and stores nothing on your device. Its script reads your screen size and language from your browser, and checks your browser storage for a setting that turns it off. I do not combine the statistics with other data, and I do not use them to identify you.

The statistics are deleted after 1 year. Legal basis: Art. 6 (1) (f) GDPR. My legitimate interest is to learn how the site is used and to make it better.

The server is rented from Akamai Technologies (Linode) and stands in a data centre in Zurich, Switzerland. The European Commission has decided that Switzerland protects personal data to the EU standard (an adequacy decision). Akamai’s parent company is in the USA and is certified under the EU-US Data Privacy Framework.

Requests to Rybbit pass through a small forwarding program on the same server (Pangolin). It keeps a log of your IP address, the time and the address requested for 7 days, to protect the server against misuse. Legal basis: Art. 6 (1) (f) GDPR.

If you use a content blocker such as uBlock Origin, the Rybbit script will not load. The site works the same without it.

Email and phone

If you write to me or call me, I use what you tell me and your contact details to answer you and for any follow-up questions. netcup stores emails on its mail servers in Germany. Legal basis: Art. 6 (1) (b) GDPR if you contact me about working together, otherwise Art. 6 (1) (f) GDPR. I delete messages when I no longer need them. Some messages, such as business letters, I must keep for as long as tax law requires. Legal basis for that: Art. 6 (1) (c) GDPR.

Links to Instagram, YouTube, Vimeo and my other sites are plain links. Your browser loads nothing from those sites until you click. Once you do, their own privacy policies apply.

My profiles on Instagram, YouTube and Vimeo

I show my work on Instagram, YouTube and Vimeo. When you visit one of my profiles there, the platform processes your data under its own rules. It may also send your data to the USA. I have no say in what the platforms collect.

The platforms show me statistics about my profiles, for example how many people saw a post and which countries they came from. I only see totals and never learn who you are from them. For the statistics on my Instagram profile, Meta and I may be joint controllers (Art. 26 GDPR). If you want to use your rights, it is easiest to ask the platform directly.

Legal basis: Art. 6 (1) (f) GDPR. My legitimate interest is to show my work and stay in touch with people who follow it.

What this site does not do

This site sets no cookies. It has no forms, no newsletter, no advertising and no social media plugins. It loads no fonts, videos or scripts from other companies. I make no automated decisions about you and build no profiles.

You do not have to give me any data. You can read the whole site without sending anything beyond what your browser sends with every page request.

Your rights

Under the GDPR you have the right to:

To use any of these rights, email mail@jasminefan.de. I answer within one month, and it costs you nothing.

Right to object (Art. 21 GDPR)

Where I process your data based on my legitimate interest (Art. 6 (1) (f) GDPR), you can object at any time, for reasons that come from your particular situation. I will then stop, unless I can show compelling legitimate grounds that override your interests, or I need the data to establish, exercise or defend legal claims.

Right to complain (Art. 77 GDPR)

You can complain to a data protection authority in any EU country, for example the one where you live or work, or where you think the breach happened. The authority responsible for me is:

Der Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5, 30159 Hannover, Germany
lfd.niedersachsen.de