Privacy Policy

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This only applies as long as no other information is provided in the subsequent processing procedures. “Personal data” refers to all information relating to an identified or identifiable natural person.

Server Log Files You can visit our websites without providing personal information. Whenever you access our website, usage data is transmitted to us or our web host/IT service provider by your internet browser and stored in log data (so-called server log files). These stored data include, for example, the name of the accessed page, the date and time of access, the IP address, the amount of data transferred, and the requesting provider. Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our overriding legitimate interest in ensuring the trouble-free operation of our website as well as improving our services.

Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. The EU Commission has issued an adequacy decision for Canada. For the USA, an adequacy decision by the EU Commission exists under the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the EU Commission’s standard contractual clauses.

Contact Responsible Party

If you wish, you can contact us. The responsible party for data processing is: Gregor Hünting, Johannisstraße 7, 10117 Berlin, Germany, +49 30 92271877,
info [a] music-lovers.org

Customer-Initiated Contact via Email

If you initiate business contact with us via email, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves to process and respond to your contact request.

If the contact is for the performance of pre-contractual measures (e.g., consultation for purchase interest, offer preparation) or relates to an existing contract, this data processing is based on Art. 6(1)(b) GDPR.

If contact is made for other reasons, data processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time to the processing of your personal data for reasons arising from your particular situation.

Your email address will only be used to process your request. Your data will be deleted afterward in compliance with statutory retention periods, unless you have agreed to further processing and use.

Data Collection and Processing

When Using the Contact Form When using the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of establishing contact.

Your email address will only be used to process your request. Your data will be deleted afterward in compliance with statutory retention periods, unless you have agreed to further processing and use.

Use of Address Validation by Endereco

We use the address validation service from Endereco UG (Balthasar-Neumann-Str. 4b, 97236 Randersacker, Germany; “Endereco”).

Data processing serves the purpose of checking your entries in our address forms in real time for input and spelling errors and supplementing missing data if necessary. If incorrect data is entered, alternative correction suggestions will be displayed.

The following information may be transmitted to Endereco and processed there: postal addresses (country, city, postal code, street, house number), email address, phone number.

Processing of your personal data is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring a correct data basis to fulfill our contractual obligations. You have the right to object to this processing at any time for reasons arising from your particular situation.

Use of Google Maps API for Address Validation

We use Google Maps API (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland; “Google”) for address validation on our website.

Data processing serves the purpose of checking your address input in real time for input and spelling errors and supplementing missing data. Incorrect data entries will be displayed with alternative correction suggestions.

Your data may be transferred to the USA. An adequacy decision by the EU Commission exists for the USA under the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has thus committed to complying with European data protection principles.

Use of Calendly

We use the appointment booking feature “Calendly” from Calendly LLC (BB&T Tower, 271 17th St NW, Atlanta, GA 30363, USA).

When using this feature, we collect and process your personal data (first and last name, email address, phone number, message text) only to the extent provided by you. The data processing serves the purpose of scheduling appointments and improving user convenience.

Your data may be transferred to the USA. An adequacy decision by the EU Commission exists for the USA under the Trans-Atlantic Data Privacy Framework (TADPF). Calendly is certified under the TADPF and has thus committed to complying with European data protection principles.

Use of HubSpot for Appointment Booking

We use the appointment booking feature of HubSpot, Inc. (25 First Street, Cambridge, MA 02141, USA; “HubSpot”).

Your data may be transferred to the USA. An adequacy decision by the EU Commission exists for the USA under the Trans-Atlantic Data Privacy Framework (TADPF). HubSpot is certified under the TADPF and has thus committed to complying with European data protection principles.

Customer Account and Orders When creating a customer account, we collect your personal data to the extent specified there. Data processing serves the purpose of improving your shopping experience and facilitating order processing. Processing is based on Art. 6(1)(a) GDPR with your consent. You may revoke your consent at any time by notifying us, without affecting the legality of processing carried out based on consent before revocation. Your customer account will then be deleted.

Collection, Processing, and Disclosure of Personal Data for Orders

When placing an order, we collect and process your personal data only to the extent necessary to fulfill and process your order as well as to handle your inquiries. The provision of data is required for the conclusion of the contract. Failure to provide the data means that no contract can be concluded. Processing is carried out based on Art. 6(1)(b) GDPR and is necessary for the fulfillment of a contract with you.

Your data may be disclosed, for example, to the shipping company you selected, dropshipping providers, payment service providers, order processing service providers, and IT service providers. In all cases, we strictly adhere to legal requirements. The extent of data transmission is kept to a minimum.

Your data may be transferred to third countries outside the EU, particularly to Canada and the USA, where they will be processed. The EU Commission has issued an adequacy decision for Canada. For the USA, an adequacy decision under the Trans-Atlantic Data Privacy Framework (TADPF) exists. Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the EU Commission’s standard contractual clauses.

Advertising

Use of Email Address for Newsletter Distribution

We use your email address independently of contract processing solely for our own advertising purposes to send newsletters, provided that you have explicitly consented to this. Processing is carried out based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time without affecting the legality of processing carried out based on consent before revocation. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list.

Use of Email Address for Direct Advertising

We use your email address, which we obtained during the sale of goods or services, for the electronic transmission of advertisements for our own goods or services similar to those you have already purchased from us, provided you have not objected to this use. The provision of the email address is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. Processing is carried out based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. Contact details for exercising the objection can be found in the legal notice. You can also use the designated link in the advertising email. This does not incur any costs other than transmission costs according to basic tariffs.

Use of Brevo (formerly Sendinblue)

We use the newsletter service provided by Sendinblue GmbH (Köpenicker Straße 126, 10179 Berlin; “Brevo”) as a data processor.

The information you provide during newsletter registration (email address, possibly first and last name) is transmitted to Brevo. Data processing serves the purpose of sending newsletters and performing statistical analysis.

To evaluate newsletter campaigns, our sent email newsletters contain a 1×1 pixel graphic (tracking pixel) and/or a tracking link. This allows us to determine whether you have opened the newsletter and whether you have clicked on integrated links. In this context, personal data such as your IP address, browser type and device, and the time of opening may also be collected. Pseudonymous user profiles may be created from these data. These collected data are not used to identify you personally. The collected data are used solely for statistical analysis to improve newsletter campaigns.

Processing of your personal data is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in a targeted, effective, and user-friendly newsletter system. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.

For more information and Brevo’s privacy policy, please visit: https://www.brevo.com/de/legal/privacypolicy/.

Use of Mobile Number for SMS Advertising

We use your mobile number independently of contract processing solely for our own advertising purposes to send SMS advertisements, provided you have explicitly consented.

Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the legality of processing carried out based on consent before revocation. Your mobile number will then be removed from the distribution list.

Your mobile number may be transmitted to a service provider for SMS dispatch as part of order processing.

Payment Service Providers and Credit Assessment

Use of PayPal

We use the PayPal payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”) on our website. Data processing serves the purpose of providing you with payment options via PayPal. When you select and use PayPal, the data necessary for payment processing is transmitted to PayPal to fulfill the contract with you using your selected payment method. Processing is based on Art. 6(1)(b) GDPR.

All PayPal transactions are subject to PayPal’s privacy policy, available at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of PayPal Plus

We use the PayPal Plus payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. on our website. Data processing serves the purpose of providing you with payment options via PayPal, including credit card payments via PayPal and direct debit via PayPal. Processing is based on Art. 6(1)(b) GDPR.

For some payment methods such as credit card via PayPal or direct debit via PayPal, PayPal reserves the right to conduct a credit check. PayPal transmits the necessary personal data to a credit agency and uses the received information on the statistical probability of a payment default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship. Your legitimate interests are considered in accordance with legal requirements.

Data processing serves the purpose of credit assessment for contract initiation. Processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in preventing payment default when PayPal advances payments.

You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation by notifying PayPal. The provision of data is necessary for the conclusion of the contract with your chosen payment method. Failure to provide it means that no contract can be concluded using the selected payment method.

For more information on PayPal’s data processing, visit: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is revisited.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them. You can also prevent the storage of cookies and transmission of the contained data. Already stored cookies can be deleted at any time. However, we would like to point out that, in this case, you may not be able to use all the functions of this website to their full extent.

You can find information on managing cookies for major browsers (including deactivation) at the following links:

Chrome: https://support.google.com/accounts/answer/61416?hl=en
Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Safari: https://support.apple.com/en-us/HT201265

Technically Necessary Cookies

Unless otherwise specified in this privacy policy, we only use technically necessary cookies to make our services more user-friendly, effective, and secure. Additionally, cookies allow our systems to recognize your browser even after a page change and provide services accordingly. Some features of our website cannot be offered without the use of cookies. For these features, it is necessary for the browser to be recognized even after a page change.

The use of cookies or similar technologies is based on § 25(2) TDDDG. The processing of your personal data is based on Art. 6(1)(f) GDPR, as we have an overriding legitimate interest in ensuring the optimal functionality of the website as well as in a user-friendly and efficient service design.

You have the right to object at any time to the processing of your personal data based on reasons arising from your particular situation.

Analytics & Advertising Tracking

Use of Google Analytics 4

We use Google Analytics, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).

The data processing serves the purpose of analyzing this websiteCookies and its visitors for marketing and advertising purposes. Google will use this information on behalf of the website operator to evaluate your use of the website, compile reports on website activity, and provide other services related to website usage and internet usage to the website operator.

The following information may be collected: IP address, date and time of access, click path, browser information, device type, pages visited, referrer URL, location data, and purchase activities. Your data may be linked with other Google data, such as your search history, personal accounts, and device usage data.

Your IP address is anonymized before being processed by Google. Google only receives pseudonymized data.

Google uses technologies such as cookies, browser storage, and tracking pixels to enable website usage analysis. The use of cookies or similar technologies is based on your consent per § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. You can revoke your consent at any time.

Google Signals is also used for cross-device tracking. Data may be analyzed across devices if personalized advertising is enabled in your Google account settings. This allows tracking of searches on one device and subsequent purchases on another.

For more information on Google Signals and how to disable personalized advertising, visit: https://support.google.com/ads/answer/2662922.

More details on data processing by Google Analytics can be found at: https://support.google.com/analytics/answer/7532985 and https://policies.google.com/privacy.

Use of Shopify Statistics

We use the statistics and analytics functions provided by Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, Ireland; “Shopify”). Shopify is affiliated with Shopify Inc. (151 O’Connor Street, Ottawa, Ontario, K2P 2L8, Canada).

This data processing serves the purpose of analyzing the website and its visitors for marketing and optimization purposes. Data such as browser information, IP address, time zone, cookies, pages visited, referrer URL, and interactions with the website are collected.

Your data may be transferred to third countries outside the EU, particularly Canada and the USA. The EU Commission has issued an adequacy decision for Canada, and an adequacy decision exists for the USA under the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under TADPF. Data transfers occur based on contractual obligations comparable to the EU Commission’s standard contractual clauses.

The use of cookies or similar technologies is based on your consent per § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. You can revoke your consent at any time.

For more details, visit Shopify’s privacy policy: https://www.shopify.com/legal/privacy.

Use of Meta Pixel

We use the Meta Pixel from Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland; “Meta”).

This service allows us to target website visitors with interest-based advertising on Facebook and Instagram. A direct connection to Meta’s servers is established when visiting our website, informing Meta of the pages visited. Meta associates this information with your Facebook and/or Instagram account to display personalized ads.

Your data may be transferred to the USA under the Trans-Atlantic Data Privacy Framework (TADPF). Meta is certified under TADPF.

The processing of your personal data is based on Art. 6(1)(a) GDPR with your consent, which can be revoked at any time.

For more details, visit: https://www.facebook.com/about/privacy/.

Use of Google Ads Conversion Tracking

We use Google Ads and its conversion tracking function provided by Google Ireland Limited. A cookie is set when clicking on a Google ad, allowing tracking of conversions. Conversion statistics help us measure the effectiveness of our ads.

Your data may be transferred to Google servers in the USA under the Trans-Atlantic Data Privacy Framework (TADPF).

For more details, visit: https://www.google.com/policies/technologies/ads/.

Use of TikTok Pixel

We use the TikTok Pixel by TikTok Technology Limited (Ireland) and TikTok Information Technologies UK Limited for targeted advertising and performance tracking. Data such as visit times, device information, and IP address are collected and associated with your TikTok account.

For more details, visit: https://www.tiktok.com/legal/privacy-policy.

Use of Google Maps

We use Google Maps for interactive map display. Data, including IP addresses and location information, may be transferred to Google servers in the USA under the Trans-Atlantic Data Privacy Framework (TADPF).

For more details, visit: https://www.google.com/privacy/.

Rights of Data Subjects and Storage Duration

Your rights under GDPR include access, rectification, erasure, restriction of processing, and data portability. You also have the right to object to processing under Art. 6(1)(f) GDPR.

For complaints, you can contact the data protection authority at: poststelle@ldi.nrw.de.

Last updated: 25.07.2024.