Information under the GDPR
Privacy policy
This policy transparently explains which personal data is processed when the website, forms and associated online services are used.
Information under the GDPR
Privacy policy
Last updated: 21 August 2026
This English version provides access to the privacy information in English. The German version remains the legally authoritative version in the event of any discrepancy.
The English and Spanish versions are clear-language summaries of the German privacy policy and may condense individual technical details. The complete German text should therefore also be consulted for a full assessment.
1. Controller
The controller for the processing described in this privacy policy is the operator named in the legal notice:
Ramona Scheichl
Questions concerning privacy, access, objections or deletion may be sent to:
2. Scope
This policy covers the Ramona_Lucia channels on Twitch and Kick, including panels, extensions, bots and moderation, community and automation services, as well as the Discord server Ramona’s DC Hood.
It also covers Ramona Lucia’s public profiles and content on Facebook, Instagram, Threads, TikTok, LinkedIn and YouTube, her music releases on Spotify and other music platforms, the official artist website and its legal pages at www.ramona-lucia.com, Linktree, TipeeeStream and communications with viewers, community members, supporters and professional contacts.
Those external platforms are operated by their respective providers. They process personal data under their own privacy terms. Ramona Scheichl generally does not receive raw technical data such as complete IP addresses, cookies or device identifiers from those providers, but may see public profile data, messages, interactions and aggregated statistics.
3. Twitch and Kick
Twitch and Kick may process account, device, usage, chat, follow, subscription and support information when their services are visited or used.
The channels are used to:
- broadcast live streams
- communicate with the community
- moderate chats
- display channel goals and community activity
- analyse and improve the streaming offer.
Where Ramona Scheichl selects or configures public displays such as follower counts, goals or supporter rankings, the legal basis is the legitimate interest under Art. 6(1)(f) GDPR in operating and developing an interactive streaming community.
Twitch: https://www.twitch.tv/p/de-de/legal/privacy-notice/ Kick: https://kick.com/privacy-policy
4. StreamElements leaderboards
StreamElements leaderboards may publicly display Twitch usernames, chat activity, loyalty points, rankings and aggregated information about frequently used emotes. They recognise active community members and encourage interaction.
All-time rankings may remain available while the account and relevant functions are active and until they are reset, anonymised or deleted. Viewers may object to the public display of their Twitch username by contacting contact@ramona-lucia.com. Technical removal or anonymisation will then be assessed.
StreamElements: https://streamelements.com/privacy
5. Audience statistics and streaming tools
The “Your Community at inStreamly” extension may provide aggregated statistics such as country distribution, audience development, unique users and, where available, aggregated demographics. These statistics are used for scheduling, content planning, reach measurement, media data and the assessment of possible partnerships. They do not normally identify which individual belongs to a specific country or demographic group.
WizeBot may process usernames, user IDs, messages, commands, moderation events, follows, raids, rewards and other public Twitch information to provide moderation, safety and interactive stream functions.
Streamer.bot runs locally and may process usernames, commands, stream events and internally assigned values for automations. Data is stored only as long as necessary for the configured automations or community functions and is deleted, reset or anonymised where technically possible.
The legal basis is the legitimate interest under Art. 6(1)(f) GDPR in securely and reliably operating interactive live streams.
inStreamly: https://instreamly.com/de/privacy-policy/ WizeBot: https://support.wizebot.tv/support/terms
6. Discord and MEE6
When the Discord server is used, usernames, display names, user IDs, profile pictures, roles, messages, reactions, shared content, voluntary poll answers and moderation information may be visible or processed. Roles may be assigned automatically following a voluntary emoji reaction.
Discord and bots such as MEE6 may log security and moderation events. Access to non-public moderation information is limited to Ramona Scheichl and authorised moderators. Processing serves server organisation, rule enforcement, protection against spam, harassment, fraud and ban evasion, and the documentation of serious incidents.
Ordinary voice and video conversations are not independently recorded by Ramona Scheichl.
Discord: https://support.discord.com/hc/de/sections/24453668939799-Datenschutz MEE6: https://mee6.xyz/privacy.html
7. Voluntary webcam participation
Community members may voluntarily appear by webcam in a live stream. Depending on the chosen setup, their image, voice, display name and voluntarily shared surroundings may be transmitted and become visible to viewers. Participation is optional and may be ended at any time.
Participants should not show sensitive documents, third-party data or private surroundings. Minors may participate only where the applicable legal requirements, including any necessary consent by a legal guardian, are satisfied.
Publications already made may continue to exist in clips, recordings or third-party shares where immediate removal is not technically possible. Requests for removal can be sent to the contact address above.
8. VODs, clips and visible community content
Live streams may be saved or published as VODs and clips. Visible usernames, chat messages, reactions, images or voice contributions may therefore appear in recordings. The legal basis depends on the context and may be consent, performance of an agreement or a legitimate interest in documenting and promoting streams.
Requests to review or remove identifiable community content may be sent to the privacy contact address. Removal is assessed against technical feasibility, contractual duties, documentation interests and legal claims.
9. TipeeeStream and voluntary support
TipeeeStream and its payment providers process payment and transaction data under their own terms. Ramona Scheichl may receive the username, amount, message and information required for accounting, fraud prevention and legal retention duties. Depending on the supporter’s settings, the username, amount and message may be shown publicly in the stream.
The applicable legal bases may include Art. 6(1)(b), (c), (f) GDPR and consent under Art. 6(1)(a) GDPR for a voluntary public display.
TipeeeStream: https://www.tipeeestream.com/privacy
10. Social media, video and music platforms
On Facebook, Instagram, Threads, TikTok, LinkedIn and YouTube, public usernames, profile information, comments, reactions, messages, poll answers and other interactions may be processed for communication, community management and moderation.
The providers may supply aggregated insights about views, reach, watch time, follower development, countries, age groups or gender distribution. These statistics are used for content planning, reach measurement and improvement of the music and video offer.
Music released as Ramona Lucia is distributed through Spotify, YouTube and other streaming, music and download platforms. Aggregated artist, streaming, sales and remuneration statistics may be used for evaluation, marketing, development and settlement. They do not normally reveal which person listened to or purchased a specific track.
Meta: https://privacycenter.instagram.com/policy?locale=de_de TikTok: https://www.tiktok.com/legal/page/eea/privacy-policy/de LinkedIn: https://de.linkedin.com/legal/privacy-policy YouTube/Google: https://policies.google.com/privacy?hl=en Spotify: https://www.spotify.com/de/legal/privacy-policy/
Linktree
Linktree may process technical and usage data, including IP address, browser and device information, clicked links, cookies or similar technologies. Aggregated profile-view and click statistics may be used to measure reach and improve links. The legal basis for using those statistics is the legitimate interest under Art. 6(1)(f) GDPR.
Linktree: https://linktr.ee/s/privacy
11. Communications and enquiries
When an enquiry is made by email, through the contact form or on a platform, the submitted name or username, contact details, message, time and any voluntarily supplied files are processed to handle the enquiry.
Depending on the subject, the legal basis is Art. 6(1)(b) GDPR for contractual or pre-contractual enquiries, Art. 6(1)(f) GDPR for general enquiries and community communication, or Art. 6(1)(c) GDPR for legal obligations.
The data is deleted once the matter has been completed unless retention duties, legal claims or other legitimate reasons require longer storage.
Contact form on the artist website
The contact form on www.ramona-lucia.com sends the first name, last name, email address, subject, message, selected language and time of the enquiry in encrypted form to the website’s own server. These details are used solely to review and answer professional or formal enquiries. Required fields and input lengths are limited; an invisible field and a short-term pseudonymous rate limit protect the form against automated abuse. The form data is not permanently stored in a separate website database.
After successful transmission, a randomly generated reference is displayed and assigned to the delivered enquiry. It contains no elements derived from the form details and is used solely to identify and trace the enquiry unambiguously.
Brevo, operated by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, is used to deliver the enquiry to the controller by email. Brevo may process sender and recipient addresses, name, subject, message content, technical delivery data and delivery status. Depending on the enquiry, the legal basis is Art. 6(1)(b) GDPR for contractual or pre-contractual matters or Art. 6(1)(f) GDPR for other professional or formal communications. The legitimate interest is the secure and reliable receipt and handling of the enquiry.
Retention of Brevo's technical transactional logs is managed separately from retention of the delivered enquiry. Contact and feedback transmissions use a dedicated form sender, whose logs are limited to the shortest period configured for that sender; full email previews are not stored for those transmissions. Newsletter and double-opt-in evidence is kept separate from this short form-retention period. The delivered copy in the recipient mailbox is deleted after the enquiry has been finally handled unless an ongoing matter, a statutory retention obligation, or the establishment, exercise or defence of legal claims requires longer retention.
Brevo: https://www.brevo.com/legal/privacypolicy/
Community feedback on the artist website
The voluntary feedback form on www.ramona-lucia.com can be used for praise, ideas, suggestions for improvement, criticism and problem reports. The selected feedback type, voluntarily selected categories, optional free text, selected language and technically necessary delivery information are processed. A name is optional. An email address is requested only where a reply is expressly requested and is not added to the mailing list. Without a name and email address, the feedback is delivered without a directly identifying detail; technically necessary connection data may nevertheless arise temporarily during transmission.
After successful transmission, a randomly generated reference is displayed and assigned to the delivered feedback. It contains no elements derived from the submitted details and does not provide public access to the content.
Feedback is generally handled confidentially, is not automatically forwarded to moderators or community members and is not stored in a separate website database. It is delivered through Brevo solely to the controller address configured for this purpose. Brevo acts as a processor on the basis of a data processing agreement under Art. 28 GDPR. An invisible form field and a short-term rate limit, pseudonymised with a secret key and held in server memory, protect the form against spam and automated abuse. Feedback content is not written to server logs. Public use takes place only where separate voluntary consent has been given for it.
Processing serves the confidential evaluation of community feedback, improvement of content and services, and review of criticism or reported problems. The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is the development and safe, respectful operation of the service and the handling of voluntarily submitted concerns. The balancing assessment takes particular account of the voluntary use of the form, the reasonable expectation of confidential handling, the small number of required fields, the optional name and reply address, the restricted group of recipients and the deletion rules. Where feedback relates to entering into or performing a contract, or is required to establish, exercise or defend legal claims, Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR may additionally apply.
Feedback is deleted after it has been evaluated or the reported matter has been concluded, generally no later than 90 days afterwards. The period does not begin merely upon receipt while the matter is still being reviewed or handled. Feedback is retained for longer only where open follow-up questions or ongoing matters, statutory retention obligations, or the establishment, exercise or defence of legal claims require this. Separate optional consent may be given for the feedback to be stored for future review for an unlimited period after closure until consent is withdrawn. Even where consent has been given, the controller may delete the feedback earlier and no right to continued storage is created. The legal basis for this optional storage is Art. 6(1)(a) GDPR.
Separately, consent may be given for excerpts from the feedback to be published on the official artist website and official social and streaming channels. The person chooses between anonymised publication without a name and publication with the name or display name provided for that purpose. The text may be shortened or edited provided that its meaning is not changed. Information about third parties, unnecessary personal data and sensitive information are not covered by this consent and are removed or redacted before use. The legal basis for processing personal data in connection with publication is Art. 6(1)(a) GDPR.
Both consents are voluntary, separate from each other and from submitting feedback, and are not required in order to send the form. They may be withdrawn at any time with future effect by emailing contact@ramona-lucia.com and quoting the reference displayed after submission. Processing carried out before withdrawal remains lawful. After withdrawal, no new use will be made and controllable online publications will be removed within a reasonable period unless another legal basis applies. The reference, time, consent version and the choices made are stored as evidence for as long as the relevant consent is relied upon.
Only information necessary for the feedback should be submitted. In particular, health data, political or religious views, information about sexual orientation, identity documents, bank details or passwords should not be entered. Personal data about another person should be mentioned only where a specific incident could not otherwise be understood and must be limited to what is necessary. Unnecessary sensitive information and third-party data is deleted or redacted once identified. The required privacy checkbox merely records that the privacy notice has been read; it is not consent used as the legal basis for confidentially handling feedback. The two fields expressly marked as optional for longer storage and public use are separate consents.
Mailing list and double opt-in
For the mailing list, Brevo processes the submitted email address, consent and confirmation status, time, selected language and technically necessary sending and delivery data. Registration uses double opt-in: a confirmation email is sent first, and the address is added to the mailing list only after the confirmation link is opened. This documents consent and helps prevent unauthorised third-party registrations.
The legal basis is consent under Art. 6(1)(a) GDPR. Consent may be withdrawn at any time with future effect via the unsubscribe link in every mailing-list email or by contacting the address stated under “Controller”. Processing carried out before withdrawal remains lawful. After withdrawal or unsubscription, the address is removed from the active list. Limited consent evidence or suppression-list information may be retained under Art. 6(1)(c) and (f) GDPR where necessary to meet legal proof obligations and prevent further mailings.
Double-opt-in events and related sending evidence are handled separately from the short-lived logs of the contact and feedback forms. They are retained only for as long as necessary to demonstrate consent, prevent further mailings after an unsubscribe request, or establish, exercise or defend legal claims. Unconfirmed sign-up attempts are reviewed regularly and deleted when no longer necessary.
A data processing agreement under Art. 28 GDPR is concluded with Brevo. Further details about processing and possible subprocessors are contained in Brevo’s privacy and contractual documentation.
Brevo: https://www.brevo.com/legal/privacypolicy/
12. Giveaways and voluntarily submitted personal data
Giveaways may require a platform username, name, contact details, winner’s shipping address, telephone number for delivery, entry or voluntarily supplied content. The data is used to administer the promotion, determine and notify winners, deliver the prize, answer questions, prevent abuse and comply with legal obligations.
Shipping data may be shared with a postal or delivery provider. Winners’ names or usernames are made public only if this is clearly stated in the conditions or the person has consented. Non-public contact data is not published.
Data is deleted after the promotion and delivery are complete unless retention duties, open questions or legal claims require longer storage. Sensitive or unnecessary information such as identity documents, health data, bank details, passwords or information about third parties should not be submitted.
13. Website hosting, view counter and external media
The official artist website and Legal Page are hosted on a virtual private server managed by Ramona Scheichl at:
IONOS SE Elgendorfer Straße 57 56410 Montabaur Germany
Technically necessary connection, error and security information, including IP address, time, requested page, browser information and status data, may be processed at infrastructure level to provide and protect the websites. No regular access logs of page visits are stored by the configured web server. Any infrastructure logs kept by IONOS are governed by IONOS’s terms.
Simple view counter
The artist website and the Legal Page each display their own aggregate count of valid page views. The two counters are kept separate. To avoid counting every reload of either page, the server generates a non-reversible cryptographic value from the IP address, browser identifier, language setting and calendar day. Raw source data is not stored in the counter. Daily values are deleted after a few days, while only the respective aggregate total remains. No user profiles are created and visits are not linked across days. No cookies are used.
External media and local settings
Spotify, YouTube and Instagram content loads only after the visitor expressly permits it or activates the specific content. The provider may then receive the IP address, browser and device information and the page visited and may use cookies or similar technologies.
Consent, language and appearance settings are stored locally in the browser only to restore those choices. The Legal Page itself loads no external media and uses local storage only for language and appearance preferences. No first-party analytics, advertising or marketing cookies are set.
IONOS: https://www.ionos.de/datenschutzerklaerung
14. Recipients and international transfers
Depending on the function used, recipients may include Twitch, Kick, Discord, MEE6, StreamElements, inStreamly, WizeBot, TipeeeStream, Meta, TikTok, LinkedIn, YouTube/Google, Linktree, Spotify, IONOS, Brevo, shipping providers, professional advisers, authorities and courts.
Some providers may process data outside the European Economic Area. According to their current privacy information, transfers may rely on an adequacy decision, the EU-US Data Privacy Framework, standard contractual clauses or other recognised safeguards under Arts. 44 et seq. GDPR.
15. Retention
Personal data is retained only for as long as necessary for the relevant purpose or statutory duty. Criteria include completion of enquiries, proof and withdrawal of consent, implementation of objections, community safety, documentation of serious incidents, accounting requirements, active leaderboards and the availability of published clips or VODs.
Where a platform controls storage, its own retention and deletion terms also apply.
16. Data subject rights
Subject to the legal requirements, individuals may have rights of access, rectification, erasure, restriction, portability, withdrawal of consent, objection to processing based on legitimate interests and complaint to a supervisory authority.
Requests may be sent to contact@ramona-lucia.com. A reasonable identity check may be required to prevent unauthorised disclosure. Rights relating to processing controlled solely by a platform may also need to be exercised directly with that provider.
Where processing is based on Art. 6(1)(f) GDPR, an objection may be made on grounds relating to the person’s particular situation. Processing will then cease unless compelling legitimate grounds or legal claims justify continuation.
17. Right to complain in Spain
Under Art. 77 GDPR, individuals may lodge a complaint with a data protection supervisory authority. The competent authority in Spain is:
Agencia Española de Protección de Datos – AEPD
AEPD: https://www.aepd.es