Legal
Privacy Policy
1. Controller
Jacqueline Reichenbach, trading under the name Lyra Noorc/o Förster · Gartenstraße 39b · 12557 Berlin · Germany
Email: lyra.noor.official@gmail.com
The controller is the natural or legal person who decides, alone or jointly with others, on the purposes and means of processing personal data.
2. In brief
This website collects very little. There is no contact form, no newsletter, no user account, no shop and no web analytics. Fonts and images are served from our own server. The music players are not loaded until you actively ask for them.
3. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future; the lawfulness of processing carried out before withdrawal remains unaffected.
An informal message to the address above is sufficient.
You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin.
4. Hosting and server log files
This website is hosted by an external service provider. When you visit the site, the provider’s servers automatically record information that your browser transmits: browser type and version, operating system, referrer URL, host name of the accessing device, time of the request and IP address.
This data is not merged with other data sources and is processed on the basis of our legitimate interest in the secure and reliable operation of this website (Art. 6 (1) (f) GDPR). A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.
5. Cookies and consent management
We use a consent tool that runs locally on our own server as a WordPress plugin. It does not connect to any external service and transmits no data to third parties.
The tool stores a single cookie recording your consent decision, so that you are not asked again on every page and so that the decision can be evidenced. Legal basis: our legal obligation to demonstrate consent and our legitimate interest in lawful consent management (Art. 6 (1) (c) and (f) GDPR, Art. 7 (1) GDPR). This cookie is technically necessary within the meaning of § 25 (2) TDDDG.
You can change your decision at any time using the consent icon on this website.
6. Music players — loaded only on request
The /music/ page embeds two music players: one from Spotify and one from Apple Music. Neither is loaded when the page opens. Nothing is requested from either provider until you click the button provided for that purpose.
Only when you click does your browser establish a connection to that provider’s servers. The provider then receives your IP address and technical information about your device and browser, and may set cookies. This can also involve a transfer of data to servers outside the European Union.
Because the connection is established solely upon your explicit request, the legal basis is your consent (Art. 6 (1) (a) GDPR); for any transfer to a third country, your explicit consent under Art. 49 (1) (a) GDPR applies. You can avoid this entirely by not clicking — the rest of the site works without either player.
Spotify. What Spotify does with the data is outside our control and is governed by Spotify’s own privacy policy: https://www.spotify.com/legal/privacy-policy/
Apple Music. The player is served by Apple, which means Apple can record where it is embedded and how it is used. According to Apple’s own description, this includes the domain of the embedding page, information about your browser or device, and a general geographic location. If you are signed in to Apple Music in your browser, Apple additionally uses an identifier unique to the web player in your browser, consistent across all embedding pages; by Apple’s account this identifier resets after one day and is not linked to your Apple ID.
Apple’s description of this specific case: https://www.apple.com/legal/privacy/data/en/apple-music-web
Apple’s general privacy policy: https://www.apple.com/legal/privacy/
Any links to YouTube or other platforms elsewhere on this site are plain links, not embeds. Nothing is transmitted until you follow them, and from that point the respective provider’s privacy policy applies.
7. Contact by email
If you contact us by email, the details you provide — your email address, your name if given, and the content of your message — are stored in order to process your enquiry.
Legal basis is our legitimate interest in responding to enquiries (Art. 6 (1) (f) GDPR) and, where the enquiry concerns a contract or pre-contractual steps, Art. 6 (1) (b) GDPR. We delete this data once it is no longer required, unless statutory retention periods apply.
Please note that our email address is a Gmail address, operated by Google Ireland Limited. Email is transmitted in an inherently insecure manner; if you wish to send us confidential information, please ask us for a different channel first.
8. Fonts
All fonts used on this website are stored on our own server. No connection is made to Google Fonts, Adobe Fonts or any other external font provider, and no data is transmitted to one.
9. What does not happen on this website
For the avoidance of doubt: this website uses no web analytics or tracking service, sets no advertising or profiling cookies, operates no newsletter, has no contact form, and offers no purchase or booking function. Apart from the two click-to-load music players described in section 6, it embeds no maps, videos or social media plugins. Should any of this change, this policy will be amended beforehand.
10. Encryption
This site uses SSL/TLS encryption. You can recognise an encrypted connection by the https:// prefix in your browser’s address bar and the padlock symbol.
Version 1.1 · 13 September 2026