UPDATED 2026-10-07

Privacy

This page explains what happens to your data when you visit choreographer.jasminefan.de. The short version: the site sets no cookies and shows no ads. Project pages show videos from Vimeo. Visits are counted with a small analytics tool that does not store your IP address.

Who is responsible

Yi Chun Fan (Jasmine Fan)
Dittmern 3, 29614 Soltau, Germany
Phone: +49 176 31620022
Email: jasmine@jasminefan.de

Hosting and server logs

netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany, hosts this site on servers in Germany. When you open a page, your browser sends some data along, and netcup’s web server writes it to a log file:

netcup needs this to deliver the site and to defend it against attacks. The log files are deleted after 14 days at most. Legal basis: Art. 6 (1) (f) GDPR. The legitimate interest is a site that works and stays secure. Jasmine Fan has a data processing agreement with netcup.

Your browser and this site talk over an encrypted connection (HTTPS).

Videos (Vimeo)

The project pages show trailers and films through the Vimeo player. Vimeo is run by Vimeo.com, Inc., New York, USA. At first, each project page shows only a still picture from the video, stored on this site. Nothing loads from Vimeo until you click play. Then your browser loads the player from Vimeo’s servers, and Vimeo receives your IP address, the page you are on, and technical data about your browser and device.

The player is loaded with Vimeo’s “do not track” setting. With it, Vimeo sets no cookies and does not record statistics about your viewing session. Vimeo still needs your IP address to send you the video.

Legal basis: Art. 6 (1) (f) GDPR. The legitimate interest is to show the work as moving images, which photos alone cannot do. Vimeo.com, Inc. is certified under the EU-US Data Privacy Framework, so the European Commission’s adequacy decision covers the transfer to the USA. More in Vimeo’s privacy policy (opens in new tab).

Visitor statistics (Rybbit)

Jasmine Fan wants to know how many people visit and which pages they read, without Google, Meta or companies like them seeing your visit. So this site has no Google Analytics, no Meta Pixel and no similar tools. Instead it uses Rybbit, an open-source analytics tool. It runs on a rented server, not at an analytics company. The web developer Archit Dharod (dharod.de (opens in new tab)) runs it for her under a data processing agreement.

For each page view, Rybbit records:

The visitor ID is a code made from your IP address and browser, mixed with a secret key that changes every day. That shows that two page views on the same day came from the same visitor. It does not allow anyone to follow you from one day to the next. Rybbit does not store your IP address.

Rybbit sets no cookies and stores nothing on your device. Its script reads your screen size and language from your browser, and checks your browser storage for a setting that turns it off. The statistics are not combined with other data and are not used to identify you.

The statistics are deleted after 1 year. Legal basis: Art. 6 (1) (f) GDPR. The legitimate interest is to learn how the site is used and to make it better.

Rybbit runs on a server rented from Akamai Technologies (Linode) in a data centre in Zurich, Switzerland. The European Commission has decided that Switzerland protects personal data to the EU standard (an adequacy decision). Akamai’s parent company is in the USA and is certified under the EU-US Data Privacy Framework.

Requests to Rybbit first reach a second server at the same provider and data centre, where a small forwarding program (Pangolin) passes them on. It keeps a log of your IP address, the time and the address requested for 7 days, to protect the server against misuse. Legal basis: Art. 6 (1) (f) GDPR.

If you use a content blocker such as uBlock Origin, the Rybbit script will not load. The site works the same without it.

Email and phone

If you write or call, Jasmine Fan uses what you tell her and your contact details to answer you and for any follow-up questions. netcup stores emails on its mail servers in Germany. Legal basis: Art. 6 (1) (b) GDPR if you contact her about working together, otherwise Art. 6 (1) (f) GDPR. She deletes messages when she no longer needs them. Some messages, such as business letters, must be kept for as long as tax law requires. Legal basis for that: Art. 6 (1) (c) GDPR.

Apart from the video players, links to other websites are plain links. Your browser loads nothing from those sites until you click. Once you do, their own privacy policies apply.

Profiles on Instagram, YouTube and Vimeo

Jasmine Fan shows her work on Instagram, YouTube and Vimeo. When you visit one of her profiles there, the platform processes your data under its own rules. It may also send your data to the USA. She has no say in what the platforms collect.

The platforms show her statistics about her profiles, for example how many people saw a post and which countries they came from. She only sees totals and never learns who you are from them. For the statistics on her Instagram profile, Meta and Jasmine Fan may be joint controllers (Art. 26 GDPR). If you want to use your rights, it is easiest to ask the platform directly.

Legal basis: Art. 6 (1) (f) GDPR. The legitimate interest is to show her work and stay in touch with people who follow it.

What this site does not do

This site sets no cookies. It has no forms, no newsletter, no advertising and no social media plugins. It loads no fonts or scripts from other companies, except the Vimeo player on project pages. No automated decisions are made about you and no profiles are built.

You do not have to give any data. You can read the whole site without sending anything beyond what your browser sends with every page request and to Vimeo for the videos.

Your rights

Under the GDPR you have the right to:

To use any of these rights, email jasmine@jasminefan.de. You get an answer within one month, and it costs you nothing.

Right to object (Art. 21 GDPR)

Where your data is processed on the basis of a legitimate interest (Art. 6 (1) (f) GDPR), you can object at any time, for reasons that come from your particular situation. The processing then stops, unless Jasmine Fan can show compelling legitimate grounds that override your interests, or needs the data to establish, exercise or defend legal claims.

Right to complain (Art. 77 GDPR)

You can complain to a data protection authority in any EU country, for example the one where you live or work, or where you think the breach happened. The authority responsible for Jasmine Fan is:

Der Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5, 30159 Hannover, Germany
lfd.niedersachsen.de (opens in new tab)