Preamble
In the following, we inform you which personal data is collected in connection with the use of our website and for what purpose. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses.
2. Name and contact details of the data controller and the company data protection officer
This data protection information applies to data processing by:
Controller:
Edel Music & Entertainment GmbH (hereinafter: Edel),
Neumühlen 17
22673 Hamburg
Germany
Tel.: +4940890850
Mail: info@edel.com
Edel’s company data protection officer can be reached at datenschutz@edel.com.
3. Collection and storage of personal data as well as type and purpose of their use
a) When visiting the website:
Visiting our website is generally possible without providing personal data.
However, when you call up our website, the browser used on your end device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion:
- IP address of the requested computer,
- Date and time of the server request,
- Name and URL of the accessed file,
- Website from which the access is made (referrer URL),
- Browser used and, if applicable,
- the operating system of your computer as well as the name of your access provider.
The aforementioned data is processed by us for the following purposes:
- Ensuring a smooth connection setup of the website,
- Ensuring a comfortable use of the website,
- Evaluation of system security and stability,
- improvement of our offer.
The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest follows from the purposes for data processing listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.
In addition, we use cookies and analysis services when you visit our website. You can find more detailed explanations of this under points 5 and 10 of this data protection declaration.
b) When subscribing for our newsletter
On our website you have the possibility to register for a newsletter. For the registration we need your e-mail address, as well as first and last name to be able to address you personally in the newsletter. We use the so-called double opt-in procedure, i.e. after your registration we send you an e-mail in which we ask you to confirm that you agree to receive the newsletter and that you have entered your e-mail address in the registration form yourself.
For the dispatch of our newsletters we use the service “Brevo”, a newsletter dispatch service of SendinBlue GmbH, Köpenicker Straße 126, 10179 Berlin. Brevo is a European provider that we have selected in particular also from the point of view of the DSGVO compliance of the newsletter dispatch.
Brevo makes it possible for us to analyze the user response to our newsletter mailings, e.g. by showing whether a newsletter message was opened and which links, if any, were clicked and how often. Brevo also allows us to subdivide newsletter recipients based on different categories and better tailor them to specific target groups.
The provider “Brevo” logs the registrations and double opt-in confirmations during newsletter registration in order to document the registration process. This includes the storage of the registration and confirmation time, as well as the IP address. In addition, the provider collects data via a cookie when our website is accessed in order to ensure the technical functionality of the newsletter registration. The collected data is stored on Brevo’s servers in Germany. Brevo uses this information to send and evaluate the newsletter on our behalf. The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of Brevo after you unsubscribe from the newsletter. Likewise, any changes to your data stored by Brevo will be logged. If you do not confirm your subscription within 2 weeks, your information will be blocked and automatically deleted after one month.
The processing of your information entered in the form is based on your consent (Art. 6 para. 1 lit. a DSGVO) exclusively for the purpose of sending the requested newsletter. The technically necessary processing of the information retrieved via the cookie is based on our legitimate interest (Art. 6 para. 1 lit. f DSGVO) to ensure a functional dispatch of our newsletter.
You can revoke your consent at any time for the future. To do so, use the “Unsubscribe” link provided in our newsletters or contact us directly, e.g. via the mail address datenschutz@edel.com. The legality of the data processing operations already carried out remains unaffected by the revocation.
For more information about the provider, please see Brevo’s privacy policy at https://www.brevo.com/de/legal/privacypolicy/
Passing on of data
Your personal data will not be transferred to third parties for purposes other than those listed below.
We will only share your personal data with third parties if:
- You have given your express consent in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO,
- The disclosure according to Art. 6 para. 1 p. 1 lit. f DSGVO is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
- In the event that there is a legal obligation for the disclosure pursuant to Art. 6 (1) p. 1 lit. c DSGVO, and
- This is legally permissible and necessary according to Art. 6 para. 1 p. 1 lit. b DSGVO for the processing of contractual relationships with you.
Cookies
We use cookies on our site. These are small text files that are automatically created by your browser and stored on your end device (laptop. tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malware.
In the cookie, information is stored that arises in each case in connection with the specific end device used. However, this does not mean that we gain direct knowledge of your identity.
The use of cookies serves on the one hand to make the use of our offer more pleasant for you. We use so-called “session cookies” to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our website.
In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your end device for a certain fixed period of time. If you visit our website again to use our services, it is automatically recognized that you have already been with us and which entries and settings you have made so that you do not have to enter them again.
The data processed by cookies is necessary for the aforementioned purposes to protect our legitimate interests as well as those of third parties pursuant to Art. 6 (1) p. 1 lit. f DSGVO.
Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a notice always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of our website.
In addition to technically necessary cookies (essential cookies) that ensure the functionality of our website, we also use cookies on our website that enable us to track and analyze the usage behavior of our website visitors in order to optimize our online offering and display personalized advertising. These are partly also cookies that are set by third-party providers (third-party cookies).
By clicking on the “I only accept essential cookies” button displayed below, you have the option of rejecting the use of technically unnecessary cookies. You can view your selection of permitted cookies at any time under “Individual cookie settings” and revoke or change them with effect for the future.
Reference to data processing in the USA by Google and Facebook.
By clicking on the button “I accept all cookies”, you also consent in accordance with Art. 49 (1) p. 1 lit. a DSGVO that your data is transmitted to the USA and processed there. According to the assessment of the European Court of Justice, the USA does not guarantee a level of data protection that meets the European GDPR standards. In particular, it is easier and more extensive for US authorities to access personal data compared to authorities in the EU. There is thus a risk that your data collected in connection with your visit to our website may be processed by U.S. authorities for control and monitoring purposes, possibly without any legal remedy.
If you wish to refuse the transfer of your data to the USA, only allow the use of essential cookies by clicking the corresponding button “I only accept essential cookies”.
6. Facebook visitor action pixel
With your consent, we use the “visitor action pixel” of Facebook Inc. (“Facebook”) within our website. With its help, we can track the actions of users after they have accessed our website or seen or clicked on a Facebook ad.
This allows us to track the effectiveness of our website and Facebook ads for statistical and market research purposes. The data collected in this way is anonymous for us, which means that we do not see the personal data of individual users. We only receive statistical information via the Facebook pixel.
However, this data is stored and processed by Facebook, about which we inform you according to our state of knowledge. In particular, Facebook may link this data to your Facebook account and also use it for its own advertising purposes, in accordance with Facebook’s privacy policy https://www.facebook.com/about/privacy/.
By using the Facebook Pixel, the following data is sent to Facebook:
- HTTP header information (including IP address, web browser information, page location, document, web page URL and web browser user agent, and day and time of use),
- pixel-specific data; this includes the pixel ID and Facebook cookie data, including your Facebook ID (this data is used to link events to a specific Facebook advertising account and associate them with a Facebook user),
- additional information about the visit and about standard and custom data events.
Edel uses the following custom data events:
– Searched and viewed content at the product level.
By means of the hashed user-specific Facebook ID (contained in the Facebook cookie), Facebook automatically checks whether the data transmitted by the Facebook pixel can be assigned to a Facebook user. If no Facebook cookies are stored in your browser, no classification into a user group called “Custom Audience” is made.
You may allow Facebook and its partners to serve ads on and off Facebook. Furthermore, a cookie may be stored on your computer for these purposes.
This consent may only be given by users who are older than 13 years old. If you are younger, please ask your parent or guardian for guidance.
Please click here if you wish to withdraw your consent.
7. Linkfire
We use on our website the music distribution analysis tool “Linkfire” of Linkfire ApS, Artillerivej 86, 3rd, 2300 Copenhagen S, Denmark.
With its help, we can clearly display various online vendors of a product in just one link. In addition, we can track users’ actions after they have clicked on such a Linkfire link. The data collected in this way is anonymous for us, which means that we do not see the personal data of individual users. However, this data is stored on Linkfire’s servers in Denmark. We have no influence on the scope and further use of the data by Linkfire.
For the purpose and scope of the data collection and the further processing and use of the data by Linkfire, as well as your rights in this regard and setting options for protecting your privacy, please refer to the data protection information (https://linkfire.com/privacy) of Linkfire.
This measure is carried out by us on the basis of Art. 6 para. 1 p. 1 lit. f DSGVO.
8. YouTube with enhanced privacy
This website embeds videos from YouTube. The operator of the pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in the extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the disclosure of data to YouTube partners is not necessarily excluded by the extended data protection mode. Thus, YouTube – regardless of whether you watch a video – establishes a connection to the Google DoubleClick network.
As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.
Furthermore, YouTube can save various cookies on your end device after starting a video. With the help of these cookies, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve the user experience and prevent fraud attempts. Cookies remain on your terminal device until you delete them.
If necessary, further data processing operations may be triggered after the start of a YouTube video, over which we have no control.
YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. If a corresponding consent has been requested, the processing is based exclusively on Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.
For more information about data protection at YouTube, please see their privacy policy at: https://policies.google.com/privacy?hl=de.
9. Google Analytics GA4
Insofar as you have given your consent, our website uses Google Analytics 4, a web analytics service provided by Google LLC. The responsible party for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Scope of processing
Google Analytics uses cookies that enable an analysis of your use of our websites. The information collected by means of the cookies about your use of this website is generally transferred to a Google server in the USA and stored there.
In Google Analytics 4, the anonymization of IP addresses is activated by default. Due to IP anonymization, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
During your website visit, your user behavior is recorded in the form of “events”. Events can be:
- Page views
- First visit to the website
- Start of session
- Your “click path”,
- interaction with the website
- Scrolls (whenever a user scrolls to the bottom of the page (90%))
- clicks on external links
- internal search queries
- interaction with videos
- file downloads
- seen / clicked ads
- language setting
Also recorded:
- Your approximate location (region)
- Your IP address (in shortened form)
- technical information about your browser and the terminal devices you use (e.g.
language setting, screen resolution)
- your internet service provider
- the referrer URL (via which website/advertising medium you came to this website)
Purposes of processing
On behalf of the operator of this website, Google will use this information for the purpose of evaluating your pseudonymous use of the website and compiling reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website
Recipient
Recipients of the data are/could be
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor according to Art. 28 DSGVO)
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
It cannot be ruled out that US authorities access the data stored by Google.
Third country transfer
Insofar as data is processed outside the EU/EEA and there is no level of data protection corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider to establish an appropriate level of data protection. The parent company of Google Ireland, Google LLC, is based in California, USA. A transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out. The USA is currently considered a third country from a data protection perspective. You do not have the same rights there as within the EU/EEA. You may not be entitled to any legal remedies against access by authorities.
Storage period
The data sent by us and linked to cookies are automatically deleted after 2 months. The deletion of data whose retention period has been reached takes place automatically once a month.
Legal basis
The legal basis for this data processing is your consent pursuant to Art.6 para.1 p.1 lit.a DSGVO.
Revocation
You can revoke your consent at any time with effect for the future by calling up the cookie settings and changing your selection there.
The legality of the processing carried out on the basis of the consent until revocation remains unaffected.
You can also prevent the storage of cookies from the outset by configuring your browser software accordingly. However, if you configure your browser to reject all cookies, this may result in a restriction of functionalities on this and other websites. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google, by selecting
- not give your consent to the setting of the cookie or
download the browser add-on to disable Google Analytics (install at https://tools.google.com/dlpage/gaoptout?hl=de. - For more information on Google Analytics’ terms of use and Google’s privacy policy, please visit https://marketingplatform.google.com/about/analytics/terms/de/ and https://policies.google.com/?hl=de.
10. Google Tag Manager
This website uses the “Google Tag Manager” service. Google Tag Manager is a solution that allows website tags to be managed via an interface. The tool itself processes personal data only for technically necessary purposes. The Google Tag Manager takes care of loading other components, which in turn may collect data. The Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.
11. Your rights
a) Information, correction, deletion, restriction of processing, data portability, revocation, complaint.
You have the right:
According to Art. 15 DSGVO, to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data, if it was not collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details;
demand the correction of inaccurate or incomplete personal data stored by us without undue delay in accordance with Art. 16 DSGVO;
pursuant to Art. 17 DSGVO, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims;
in accordance with Art. 18 DSGVO to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO;
pursuant to Art. 20 DSGVO, to receive your personal data that you have provided in a structured, common and machine-readable format or to request that it be transferred to another controller;
in accordance with Art. 7 (3) DSGVO, to revoke your consent once given to us at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future; and
complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our branch office for this purpose.
b) Right of objection
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation.
If you wish to exercise your right to object, simply send an e-mail to:
12. Data security
Within the website visit, we use the widespread SSL procedure (Secure Socket Layer) in connection with the highest encryption level supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.
We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
13. Up-to-dateness and change of this privacy policy
This data protection declaration is currently valid and has the status of 25.08.2023.
Due to the further development of our website and offers on it or due to changed legal or regulatory requirements, it may become necessary to change this privacy policy. You can access and print out the current data protection declaration at any time on the website at https://www.edel.com/datenschutz.