Privacy Policy
Last updated: 11 October 2026
1. Introduction
This Privacy Policy explains how personal information is collected, processed, and protected when you visit www.goncalo-fernandes.com or contact me regarding performances, artistic collaborations, music education, events, and other professional services.
I am committed to protecting personal data and respecting your privacy in accordance with the European Union General Data Protection Regulation (GDPR) and applicable German data protection legislation.
2. Data Controller
The person responsible for the processing of personal data through this website is:
Gonçalo Fernandes
86150 Augsburg
Germany
Email: goncalo-fernandes@hotmail.com
Website: https://www.goncalo-fernandes.com
3. Personal Information Collected
Depending on how you interact with this website, I may process the following categories of personal information:
Name and contact information
Email address and telephone number, where voluntarily provided
Information submitted through contact forms or email correspondence
Event dates, locations, and booking requirements
Information relating to music lessons, workshops, or artistic collaborations
Billing and payment information relating to contracted services
Technical information associated with website access, including IP addresses, browser type, device information, and access times
Cookie preferences and analytics information, where applicable
I only collect information necessary for legitimate professional, contractual, or technical purposes.
4. Purposes and Legal Bases for Processing
Personal information may be processed for the following purposes:
Professional enquiries and bookings
To respond to enquiries, prepare quotations, organise performances, and fulfil contractual obligations.
Legal basis: Article 6(1)(b) GDPR.
Professional communication
To communicate with artistic partners, venues, event organisers, educational institutions, and other professional contacts.
Legal basis: Article 6(1)(b) or 6(1)(f) GDPR, depending on the circumstances.
Accounting and legal obligations
To issue invoices, maintain financial records, and comply with applicable legal obligations.
Legal basis: Article 6(1)(c) GDPR.
Website operation and security
To provide a technically functioning website, prevent misuse, and maintain security.
Legal basis: Article 6(1)(f) GDPR.
Optional analytics and tracking
Where applicable, to analyse website performance or visitor interactions after obtaining any required consent.
Legal basis: Article 6(1)(a) GDPR.
5. Website Hosting — Squarespace
This website is developed and hosted using Squarespace.
When you access the website, Squarespace may process technical information such as:
IP address
Browser type and operating system
Device information
Date and time of access
Pages requested
Referring URLs
Technical and security information
This processing supports website delivery, technical functionality, and security.
Where Squarespace processes personal data on my behalf, the relevant processor arrangements apply. Squarespace may also independently process certain data for its own purposes.
For further information, please consult:
https://www.squarespace.com/privacy
6. Contact Forms and Email Communication
If you contact me through the website or by email, I process the personal information you provide to respond to your enquiry.
This may include your name, email address, telephone number, event information, artistic proposal, or other relevant details.
Such information is used exclusively for the relevant professional communication, contractual relationship, or applicable legal obligations.
Information is not sold to third parties.
7. Event Bookings and Professional Services
When you enquire about or book a performance, music lesson, workshop, or audiovisual service, I may process information necessary to organise and deliver the agreed service.
This may include event dates, venue details, correspondence, contractual arrangements, and billing information.
Where a project involves other performers or production collaborators, relevant logistical information may be shared with those individuals when necessary to fulfil the agreed service.
The legal basis is Article 6(1)(b) GDPR or, where appropriate, Article 6(1)(f) GDPR.
8. Cookies and Website Analytics
This website may use cookies and similar technologies to provide essential functionality, remember visitor preferences, and measure website performance.
Technically necessary technologies may be used without consent where permitted under § 25(2) TDDDG.
Optional cookies and technologies requiring consent will only be activated after valid consent has been obtained.
Where enabled, Squarespace Analytics may process information about visitor activity, traffic sources, and website interactions.
You can manage your preferences and withdraw consent through the website's cookie settings.
Further details are provided in the Cookie Policy.
9. Embedded Media and External Platforms
This website may feature audiovisual content and links to third-party platforms, including music-streaming services, video-hosting platforms, and social media websites.
Depending on the technical integration, external providers may receive information such as your IP address or browser details.
Where prior consent is legally required for embedded third-party content, that content should only load after consent has been obtained.
External providers operate according to their respective privacy policies.
10. International Data Transfers
Some service providers used in operating this website may process personal data outside the European Economic Area.
Where applicable, such transfers must be protected by an appropriate mechanism under Chapter V GDPR, including an applicable adequacy decision or appropriate contractual safeguards.
Information about international processing is available from the relevant service providers.
11. Data Retention
Personal information is retained only for as long as reasonably necessary for the purposes for which it was collected.
Professional enquiries and correspondence may be retained while needed for communication, contractual matters, or legitimate legal purposes.
Accounting and contractual records are retained according to applicable German legal retention requirements.
Personal data will be deleted or anonymised when it is no longer required and no legal basis for continued processing exists.
12. Your Rights
Under the GDPR, you may have the following rights:
Access to your personal data
Correction of inaccurate information
Erasure of personal data
Restriction of processing
Data portability
Objection to processing based on legitimate interests
Withdrawal of consent at any time
Submission of a complaint to a competent supervisory authority
To exercise your rights, please contact:
13. Supervisory Authority
For private-sector data protection matters in Bavaria, the competent supervisory authority is generally:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
Website: https://www.lda.bayern.de
14. Data Security
Appropriate technical and organisational measures are used to protect personal data against unauthorised access, loss, alteration, or disclosure.
However, no method of online transmission or electronic storage can guarantee absolute security.
15. Changes to This Privacy Policy
This Privacy Policy may be revised to reflect changes in website functionality, service providers, or legal requirements.
Any updated version will be published on this page with a revised date.