PRIVACY POLICY
1. Introduction
Thank you for visiting our website. We take data protection very seriously and are committed to protecting your personal data as part of our website offering. By personal data we mean all data concerning the personal and factual circumstances of a natural person. Personal data collected on our website is used exclusively for our own purposes.
2. Responsible
MUSIC STORE professional GmbH
Istanbulstr. 22-26
51103 Cologne – GERMANY
Tel: +49 (0)221 88840
E-mail: datenschutz@musicstore.de
Legal representative: Michael Sauer
3. Data subject rights
Within the scope of our data processing, we process your personal data. You are entitled to the rights from the Third Chapter of the DS-GVO vis-à-vis our company.
Right to information
You have the right to request confirmation from us as to whether we are processing personal data relating to you. If this is the case, you have a right of access to this personal data and to the following information: (a) the purposes of processing; b) the categories of personal data processed; (c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organisations; (d) if possible, the envisaged duration for which the personal data will be stored or, if this is not possible, the criteria for determining that duration; (e) the existence of a right to obtain the rectification or erasure of personal data concerning you, or the restriction of processing by the controller, or a right to object to such processing; (f) the existence of a right of appeal to a supervisory authority; (g) if the personal data are not collected from the data subject, any available information on the origin of the data; (h) the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject. Where personal data are transferred to a third country or to an international organisation, you have the right to be informed about the appropriate safeguards pursuant to Article 46 of the GDPR in relation to the transfer. We will provide you with a copy of the personal data that is the subject of the processing. For any further copies you request, we may charge a reasonable fee based on administrative costs. If you make the request for information electronically, we must provide the information in a commonly used electronic format unless you specify otherwise. The right to receive a copy must not prejudice the rights and freedoms of other persons.
Right to rectification
You also have the right to request that inaccurate personal data relating to you be rectified without undue delay. Taking into account the purposes of the processing, you have the right to request that incomplete personal data be completed, including by means of a supplementary declaration.
Right to erasure
You also have the right to request that we erase personal data concerning you without undue delay and we are obliged to erase personal data without undue delay if one of the following reasons applies: (a) the personal data is no longer necessary for the purposes for which it was collected or otherwise processed. b) You withdraw your consent on which the processing was based pursuant to Article 6 I lit. a DS-GVO or Article 9(2)(a) and there is no other legal basis for the processing. c) You object to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2). (d) The personal data have been processed unlawfully. e) The erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which we are subject. (f) the personal data have been collected in relation to information society services offered in accordance with Article 8(1). Where we have made the personal data public and we are obliged to erase it pursuant to paragraph 1, we shall take reasonable steps, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers processing the personal data that you have requested the erasure of all links to, or copies or replications of, those personal data. This does not apply insofar as the processing is necessary a) for the exercise of the right to freedom of expression and information; b) for compliance with a legal obligation which requires processing under Union or Member State law to which we are subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us; (c) for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3); (d) for archiving, scientific or historical research purposes in the public interest or for statistical purposes pursuant to Article 89(1), where the right referred to in paragraph 1 is likely to make impossible or seriously prejudice the achievement of the purposes of such processing; or (e) for the establishment, exercise or defence of legal claims.
Right to restriction of processing
(1) You have the right to request us to restrict processing if a) the accuracy of the personal data is disputed by you, for a period of time which allows us to verify the accuracy of the personal data; b) the processing is unlawful and you object to the erasure of the personal data and request the restriction of the use of the personal data instead; (c) we no longer need the personal data for the purposes of processing, but you need it for the establishment, exercise or defence of legal claims; or (d) you have objected to the processing pursuant to Article 21(1) as long as it has not yet been determined whether our legitimate grounds override yours. Where processing has been restricted in accordance with paragraph 1, those personal data may be processed, apart from being stored, only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or of a Member State. 4.5.2016 L 119/44 Official Journal of the European Union EN A data subject who has obtained a restriction of processing pursuant to paragraph 1 shall be informed by the controller before the restriction is lifted.
Right to data portability
(1) You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and you have the right to transfer that data to another controller without hindrance from us to whom the personal data has been provided, provided that (a) the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b); and (b) the processing is carried out by automated means. (2) When exercising your right to data portability pursuant to paragraph 1, you have the right to have the personal data transferred directly from us to another controller, where technically feasible. 3. The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17. This right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. The right referred to in paragraph 2 shall not affect the rights and freedoms of other persons. You also have the right to consult our Data Protection Officer about the above rights and about any matter relating to the processing of your personal data.
Right to complain
You also have the right to lodge a complaint with the relevant supervisory authorities.
Right to object
YOU have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6 I e) or f; this also applies to profiling based on this provision. The controller will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of your person, or the processing serves the purpose of asserting, exercising or defending legal claims.You may also exercise your right to lodge a complaint with the competent supervisory authorities.
4. Log files
Within the scope of the use of our Internet offer, the connection information is stored in the server log files. This information includes: – IP address of the calling system – Browser information such as operating system used and screen resolution – Web page accessed – source website – Time of the call The web server logs are processed exclusively for security purposes. We use the log data only for statistical evaluations for the purpose of operation, security and optimisation of the offer. However, we reserve the right to check the log data retrospectively if there is a justified suspicion of unlawful use on the basis of concrete indications.
5. Cookies
This website uses cookies. Cookies are text files that are stored on your terminal device. Cookies can be read, transferred and changed by the website when you call up the website. We only use cookies with random, pseudonymous identification numbers. These identification numbers are used to evaluate your usage behaviour on our website. At no time is the usage profile assigned to the name of a natural person. If you use special functions (such as the shopping cart or “stay logged in”) of our website, cookies are additionally used for these functions. It is possible to object to the setting of cookies at any time by changing the setting in the internet browser accordingly. Cookies that have been set can be deleted. Please note that if you deactivate cookies, you may not be able to use all the functions of our website to their full extent.
6. Google Analytics
This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. In addition, you can prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link http://tools.google.com/dlpage/gaoptout?hl=de. You can prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de As an alternative to the browser plug-in, you can click this link to prevent Google Analytics from collecting data on this website in the future. This will place an opt-out cookie on your terminal device. If you delete your cookies, you must click the link again. We have concluded a commissioning agreement with Google Germany GmbH – GOOGLE ANALYTICS DEUTSCHLAND, which ensures that personal data is processed exclusively in accordance with our instructions, generally within Europe. IP anonymisation (IP mask method) is activated on our website, whereby the IP address is automatically anonymised. For more information on Google Analytics and data protection, please visit https://www.google.com/intl/de/analytics/privacyoverview.html.
7. Adform
In order to decide which ads to serve, such as ads about similar products that a visitor has seen before, Adform uses a cookie mechanism, but only on an anonymous basis. This means that Adform does not store any personal information such as email addresses, names or addresses in the cookie or cookie-based profile. A cookie is a small text file that can be stored on a computer when a user uses a browser to view advertisements or web pages of one of Adform’s customers. The cookie does not collect names, addresses, phone numbers, email addresses or other data that personally identifies the user. Instead, the cookie contains: a random identification number, ways to accept or reject it, or information about campaigns / advertising activities on an advertiser’s website. With random cookie identification numbers, Adform collects and stores anonymous information in cookie-based profiles such as: Operating system, browser version, geographical location, URLs on which Adform shows advertisements, or facts about interactions with advertisements (e.g. number of clicks or views). During web requests on Adform’s web servers, IP addresses of internet users are accessible to our system. Adform acts in full compliance with local data protection laws and anonymises data in accordance with local regulations. Adform does not share this data with third parties and uses the data solely for the purposes of analysis on behalf of the website owners. For more information, please visit http://site.adform.com/privacy-policy/de.
8. Adnexus
On this website, data is collected and stored by Adnexus, a web analytics service provided by AdNexusMedia LLC, from which usage profiles are created using pseudonyms. These usage profiles are used to analyse visitor behaviour and are evaluated in order to improve and tailor our offer. Cookies may be used for this purpose. These are small text files that are stored locally on the visitor’s computer and thus enable recognition when visiting our website again. The pseudonymised usage profiles are not combined with personal data about the bearer of the pseudonym without the express consent of the person concerned, which must be given separately. You can object to the collection and storage of data for the purpose of web analysis at any time with effect for the future. To do so, please go to [ http://www.appnexus.com/en/company/privacy-policy] and click on the “Opt Out” button offered there.
9. Econda
In order to design and optimise this website in line with requirements, anonymised data is collected and stored using solutions and technologies from econda GmbH http://www.econda.de/ and user profiles are created from this data using pseudonyms. Cookies may be used for this purpose, which enable the recognition of an Internet browser. However, usage profiles are not merged with data about the bearer of the pseudonym without the express consent of the visitor. In particular, IP addresses are made unrecognisable immediately after receipt, which means that it is not possible to assign usage profiles to IP addresses. Visitors to this website can object to this data collection and storage for the future at any time here.
10. Use of Facebook plugins
Our website uses so-called social plugins (“plugins”) of the social network Facebook, which is operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plugins are marked with a Facebook logo or the addition “Social Plug-in from Facebook” or “Facebook Social Plugin”. You can find an overview of the Facebook plugins and their appearance here: https://developers.facebook.com/docs/plugins When you call up a page of our website that contains such a plug-in, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has called up the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can directly assign your visit to our website to your Facebook profile. If you interact with the plugins, for example by clicking the “Like” button or posting a comment, this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and displayed to your Facebook friends. For the purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights in this regard and setting options for protecting your privacy, please refer to Facebook’s privacy policy: http://www.facebook.com/policy.php/ If you do not want Facebook to assign the data collected via our website directly to your Facebook profile, you must log out of Facebook before visiting our website. You can also completely prevent the loading of the Facebook plugins with add-ons for your browser, e.g. with the “Facebook Blocker” http://webgraph.com/resources/facebookblocker/
The tracking via the Facebook pixel on this website is activated. Click here to deactivate tracking
11. Use of Google+ plugins (e.g. “+1” button)
Our website uses so-called social plugins (“plugins”) of the social network Google+, which is operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). The plugins are recognisable, for example, by buttons with the sign “+1” on a white or coloured background. You can find an overview of the Google plugins and their appearance here: https://developers.google.com/+/plugins When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to Google’s servers. The content of the plugin is transmitted by Google directly to your browser and integrated into the page. Through the integration, Google receives the information that your browser has called up the corresponding page of our website, even if you do not have a profile on Google+ or are not currently logged in to Google+. This information (including your IP address) is transmitted by your browser directly to a Google server in the USA and stored there. If you are logged into Google+, Google can directly assign your visit to our website to your Google+ profile. If you interact with the plugins, for example by clicking the “+1” button, the corresponding information is also transmitted directly to a Google server and stored there. The information is also published on Google+ and displayed there to your contacts. The purpose and scope of the data collection and the further processing and use of the data by Google, as well as your rights in this regard and setting options for protecting your privacy, can be found in Google’s privacy policy: http://www.google.com/intl/de/+/policy/+1button.html If you do not want Google to assign the data collected via our website directly to your profile on Google+, you must log out of Google+ before visiting our website. You can also completely prevent the loading of Google plugins with add-ons for your browser, e.g. with the script blocker “NoScript”(http://noscript.net/).
12. Use of Twitter plugins (e.g. “Twitter” button)
Our website uses so-called social plugins (“plugins”) of the microblogging service Twitter, which is operated by Twitter Inc, 1355 Market St, Suite 900, San Francisco, CA 94103, USA (“Twitter”). The plugins are marked with a Twitter logo, for example in the form of a blue “Twitter bird”. You can find an overview of the Twitter plugins and their appearance here: https://twitter.com/about/resources/buttons When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the Twitter servers. The content of the plugin is transmitted by Twitter directly to your browser and integrated into the page. Through the integration, Twitter receives the information that your browser has called up the corresponding page of our website, even if you do not have a profile on Twitter or are not currently logged in to Twitter. This information (including your IP address) is transmitted by your browser directly to a Twitter server in the USA and stored there. If you are logged in to Twitter, Twitter can directly assign your visit to our website to your Twitter account. If you interact with the plugins, for example by clicking the “Tweet” button, the corresponding information is also transmitted directly to a Twitter server and stored there. The information is also published on your Twitter account and displayed there to your contacts. For the purpose and scope of the data collection and the further processing and use of the data by Twitter, as well as your rights in this regard and setting options for protecting your privacy, please refer to Twitter’s data protection information: https://twitter.com/privacy If you do not want Twitter to assign the data collected via our website directly to your Twitter account, you must log out of Twitter before visiting our website. You can also completely prevent the loading of Twitter plugins with add-ons for your browser, e.g. with the script blocker “NoScript”(http://noscript.net/).
13. Contact form
Within the framework of the contact form, you have the possibility to send us any data. The data will be forwarded by our web server to our company’s e-mail box. Please note that communication via the contact form is not encrypted. Please use a secure communication channel for confidential communication out of your own interest.
14. Order
The personal data you provide us with, e.g. when placing an order or by e-mail (e.g. your name and contact details), will only be processed for correspondence with you and only for the purpose for which you provided us with the data. We use the data you provide to fulfil and process your order. To fulfil the contract, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. For the processing of payments, we pass on the payment data required for this to the credit institution commissioned with the payment and, if applicable, to the payment service provider commissioned by us or to the payment service selected by you in the ordering process. We assure you that we will not pass on your personal data to third parties unless we are legally obliged to do so or you have expressly consented to this beforehand. Insofar as we use the services of third parties for the implementation and handling of processing procedures, the provisions of data protection law will be complied with. After the contract has been fully processed, your data will be blocked and deleted after the expiry of the tax and commercial regulations, unless you have expressly consented to any further use of your data.
15. Newsletter
We also use your e-mail address, if you have subscribed to our newsletter via double opt-in, to send you our newsletter and for information letters, which may contain interesting current information about our shop offers, special offers and promotions. If you do not wish to receive the newsletter (any longer), you can click on the “Unsubscribe Newsletter” link in the newsletter free of charge and at any time and you will not receive any further newsletters. If you do not wish to receive any further information letters, catalogues and flyers, you can unsubscribe free of charge and at any time at the e-mail address datenschutz@musicstore.de. You can revoke your consent to the use of your data mentioned here at any time with effect for the future.
16. Legal basis of processing
The legal basis for our data processing within the framework of the EU General Data Protection Regulation results from Art. 6 DS-GVO. In detail, depending on the situation in which we process your data, different legal bases may arise.
Consent
Insofar as your consent has been obtained for processing operations of personal data, Article 6 I a) DS-GVO is the legal basis for the data processing. Consent given can be revoked at any time with effect for the future.
Contract
When processing personal data collected for the performance of a contract to which you are a party, Article 6 I b) DS-GVO is the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Legal obligation
Insofar as processing of personal data is necessary to comply with a legal obligation to which our company is subject, Article 6 I c) DS-GVO serves as the legal basis.
Vital interests
In the event that vital interests of you or another natural person make processing of personal data necessary, Article 6 I d) DS-GVO is the legal basis.
Legitimate interest:
If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Article 6 I f) DS-GVO serves as the legal basis for the processing. The legitimate interest of our company lies in the performance of our business activities.
17. Data protection officer
Our data protection officer is provided by SICODA GmbH www.sicoda.de. You can contact the data protection officer at any time regarding data protection issues: SICODA GmbH Impekovener Str. 55 Tel: 0228 286 140 60 53347 Alfter E-mail: datenschutz@musicstore.de