Privacy policy

The responsible person within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

Ralf Hefter
Schweinheimer Str. 58 a
63743 Aschaffenburg

Phone: +49 6021 9017026

Email: datenschutz@ralfheftermusic.de

Your data subject rights
You can exercise the following rights at any time using the contact details provided by our data protection officer:

Information about your data stored by us and its processing (Article 15 GDPR),
Correction of incorrect personal data (Article 16 GDPR),
Deletion of your data stored by us (Article 17 GDPR),
Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
Objection to the processing of your data by us (Art. 21 GDPR) and
Data portability, provided you have consented to data processing or have concluded a contract with us (Article 20 GDPR).

If you have given us your consent, you can revoke it at any time with future effect.

You can contact the supervisory authority responsible for you at any time with a complaint (Art. 77 GDPR in conjunction with Section 19 BDSG). Your responsible supervisory authority depends on the state in which you live, where you work, or where the alleged violation occurs. A list of the supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschrift_links-node.html. https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Collection of general information when you visit our website

Type and purpose of processing:
When you access our website, i.e. if you do not register or otherwise submit information, information of a general nature is automatically collected. This information (server log files) includes the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and similar. This is exclusively information that does not allow any conclusions to be drawn about you personally.

They are processed in particular for the following purposes:

Ensuring problem-free connection to the website,
Ensuring smooth use of our website,
Evaluation of system security and stability as well
for further administrative purposes.

We do not use your data to draw conclusions about you personally. We may evaluate this type of information statistically in order to optimize our website and the technology behind it.

Legal basis:
Processing is carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR based on our legitimate interest in improving the stability and functionality of our website.

Recipient:
The only recipients of the data are the responsible body and, if applicable, technical service providers who act as processors for the operation and maintenance of our website.

Storage period:
The data will be deleted as soon as it is no longer required for the purpose of collection. This is generally the case for the data used to provide the website when the respective session has ended.

Provision required or required:
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may be unavailable or restricted. For this reason, an objection is excluded.

Provision of paid services

Type and purpose of processing:
Type and purpose of processing: In order to provide paid services, we request additional data, such as payment details, in order to be able to carry out your order.

Legal basis:
The processing of the data required to conclude the contract is based on Article 6 Paragraph 1 Letter b GDPR.

Recipient:
The only recipients of the data are the responsible body and, if necessary, the processor

Storage period:
We store this data in our systems until the statutory retention periods have expired. These are generally 6 or 10 years for reasons of proper accounting and tax requirements.

Provision required or required:
The provision of your personal data is voluntary. Without providing your personal data, we cannot grant you access to the content and services we offer.

Comment function

Type and purpose of processing:
When users leave comments on our website, the time at which they were created and the user name previously chosen by the website visitor are stored in addition to this information. This is for our security, as we can be prosecuted for illegal content on our website, even if it was created by users.

Legal basis:
The data is processed based on the user’s consent (Art. 6 Para. 1 lit. a GDPR).

Recipient:
The only recipients of the data are the responsible body and, if necessary, the processor

Storage period:
The data will be deleted as soon as it is no longer required for the purpose of collection. This is generally the case when communication with the user has been completed and the company can see from the circumstances that the matter in question has been finally clarified.

Provision required or required:
The provision of your personal data is voluntary. Without providing your personal data, we cannot give you access to our comment function.

Newsletter

Type and purpose of processing:
Your data will only be used to send you the newsletter you subscribed to by email. Your name is provided so that we can address you personally in the newsletter and, if necessary, identify you if you want to exercise your rights as a data subject.

To receive the newsletter, it is sufficient to provide your email address. When you register to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers can also be informed by email about circumstances that are relevant to the service or registration (e.g. changes to the newsletter offer or technical circumstances).

For effective registration we need a valid email address. In order to check that registration is actually made by the owner of an email address, we use the “double opt-in” procedure. For this purpose, we record the ordering of the newsletter, the sending of a confirmation email and the receipt of the requested response. Further data is not collected. The data is used exclusively for sending newsletters and is not passed on to third parties.

Legal basis::
Based on your express consent (Art. 6 Para. 1 lit. a GDPR), we will regularly send you our newsletter or comparable information by email to the email address you provided.

You can revoke your consent to the storage of your personal data and its use for sending newsletters at any time with effect for the future. There is a corresponding link in every newsletter. You can also unsubscribe directly on this website at any time or inform us of your revocation using the contact option provided at the end of this data protection notice.

Recipient:
The only recipients of the data are the responsible body and, if necessary, the processor

Storage period:
The data will only be processed in this context as long as the relevant consent is given. They will then be deleted.

Provision required or required:
The provision of your personal data is voluntary, solely based on your consent. Unfortunately, we cannot send you our newsletter without your consent.

Use of Google Analytics

Type and purpose of processing:
This website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA (hereinafter: “Google”). Google Analytics uses so-called “cookies”, i.e. text files that are stored on your computer and which enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymization on these websites, your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data.

The purposes of data processing are to evaluate the use of the website and to compile reports on activities on the website. Further related services will then be provided based on the use of the website and the Internet.

Legal basis:
The data is processed based on the user’s consent (Art. 6 Para. 1 lit. a GDPR).

Recipient:
The recipients of the data are the responsible body and Google as the processor. For this purpose, we have concluded the corresponding order processing agreement with Google.

Storage period:
The data will be deleted as soon as it is no longer required for our recording purposes.

Third country transfer:
Google processes your data in the USA and is subject to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework. We have also concluded standard data protection clauses with Google for the use of Google Analytics.

Provision required or required:
The provision of your personal data is voluntary, solely based on your consent. If you prevent access, this may result in functional restrictions on the website.

Revocation of consent:
You can prevent the storage of cookies by setting your browser software accordingly; However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: Browser add-on to deactivate Google Analytics.

In addition to or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking on this link. An opt-out cookie is installed on your device. This will prevent Google Analytics from collecting data for this website and this browser in the future as long as the cookie remains installed in your browser.

Profiling:
With the help of the tracking tool Google Analytics, the behavior of website visitors can be evaluated and their interests can be analyzed. For this purpose, we create a pseudonymous user profile.

Use of script libraries (Google Webfonts)

Type and purpose of processing:
In order to display our content correctly and in a graphically appealing way across browsers, we use “Google Web Fonts” from Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; hereinafter “Google”) to display fonts on this website.

The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/

Legal basis:
The legal basis for the integration of Google Webfonts and the associated data transfer to Google is your consent (Art. 6 Para. 1 lit. a GDPR).

Recipient:
Calling script libraries or font libraries automatically triggers a connection to the library operator. It is theoretically possible - although it is currently unclear whether and, if so, for what purposes - that the operator collects Google data in this case.

Storage period:
We do not collect any personal data through the integration of Google Webfonts.

Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.

Third country transfer:
Google processes your data in the USA and is subject to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Provision required or required:
The provision of personal data is neither legally nor contractually required. However, this cannot be achieved without the correct representation of the contents of standard fonts.

Revocation of consent:
The JavaScript programming language is regularly used to display the content. You can therefore object to data processing by deactivating the execution of JavaScript in your browser or installing a JavaScript blocker. Please note that this may lead to functional restrictions on the website.

Embedded YouTube videos

Type and purpose of processing:
We embed YouTube videos on some of our websites. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter “YouTube”). When you visit a page with the YouTube plugin, a connection to YouTube servers is established. This tells YouTube which pages you visit. If you are logged into your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand.

If a YouTube video is started, the provider uses cookies that collect information about user behavior.

Further information on the purpose and scope of data collection and processing by YouTube can be found in the provider's data protection declarations. There you will also find further information on your relevant rights and setting options to protect your privacy (https://policies.google.com/privacy). Google processes your data in the USA and is subject to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Legal basis:
The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6 Para. 1 lit. a GDPR)

Recipient:
Accessing YouTube automatically triggers a connection to Google.

Storage period and revocation of consent:
Anyone who has deactivated the storage of cookies for the Google Ad program will not have to expect such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the storage of cookies in the browser.

Further information on data protection at “YouTube” can be found in the provider’s data protection declaration at: https://www.google.de/intl/de/policies/privacy/

Third country transfer:
Google processes your data in the USA and is subject to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Provision required or required:
The provision of your personal data is voluntary, solely based on your consent. If you prevent access, this may result in functional restrictions on the website.

Social Plugins

Type and purpose of processing:
We offer you the option of using so-called “social media buttons” on our website. To protect your data, we rely on the “Shariff” solution for implementation. As a result, these buttons are only integrated on the website as a graphic that contains a link to the corresponding website of the button provider. By clicking on the graphic you will be redirected to the services of the respective provider. Only then will your data be sent to the respective providers. Unless you click on the graphic, there will be no exchange between you and the providers of the social media buttons. Information about the collection and use of your data on social networks can be found in the respective terms of use of the relevant providers. You can find more information about the Shariff solution here: https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html

We have integrated the social media buttons of the following companies on our website:

Google AdWords

Type and purpose of processing:
Our website uses Google Conversion Tracking. The operating company for the Google AdWords services is Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. If you have reached our website via an ad placed by Google, Google Adwords will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google.

If the user visits certain pages on our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be tracked via the websites of AdWords customers. The information collected using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, you will not receive any information that can be used to personally identify users.

Legal basis:
The legal basis for the integration of Google AdWords and the associated data transfer to Google is your consent (Art. 6 Para. 1 lit. a GDPR).

Recipient:
Every time you visit our website, personal data, including your IP address, is transmitted to Google in the USA. This personal data is stored by Google. Google may pass on the personal data collected via the technical process to third parties.

Our company does not contain any information from Google that could be used to identify the data subject.

Storage period:
These cookies expire after 30 days and are not used for personal identification.

Third country transfer:
Google processes your data in the USA and is subject to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Revocation of consent:
If you do not want to take part in tracking, you can refuse the necessary setting of a cookie - for example by using a browser setting that generally deactivates the automatic setting of cookies or setting your browser so that cookies from the domain “googleleadservices.com” are blocked.

Please note that you are not allowed to delete the opt-out cookies as long as you do not want measurement data to be recorded. If you have deleted all of your cookies in your browser, you must set the respective opt-out cookie again.

Provision required or required:
The provision of your personal data is voluntary, solely based on your consent. If you prevent access, this may result in functional restrictions on the website.

Use of Google Remarketing

Type and purpose of processing:
This website uses the remarketing function of Google Inc. The operating company of the Google Remarketing services is Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter “Google”).

The function is used to present interest-based advertisements to website visitors within the Google advertising network. A so-called “cookie” is stored in the website visitor’s browser, which makes it possible to recognize the visitor when they visit websites that belong to the Google advertising network. On these pages, the visitor can be presented with advertisements that relate to content that the visitor has previously accessed on websites that use Google's remarketing function.

Legal basis:
The legal basis for the integration of Google Remarketing and the associated data transfer to Google is your consent (Art. 6 Para. 1 lit. a GDPR).

Our company does not contain any information from Google that could be used to identify the data subject.

Revocation of consent:
According to Google, it does not collect any personal data during this process. If you still do not want Google's remarketing function, you can deactivate it by making the appropriate settings at https://support.google.com/adwordspolicy/answer/143465 .

Alternatively, you can opt out of the use of cookies for interest-based advertising through the Advertising Network Initiative by following the instructions at https://www.networkadvertising.org/managing/opt_out.asp .

Provision required or required:
The provision of your personal data is voluntary, solely based on your consent. If you prevent access, this may result in functional restrictions on the website.

SSL encryption
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

Processors used
The following organizations, companies and individuals have been commissioned by the operator of this website to process data:

1blu AG for web hosting. 1blu AG, Stromstrasse 1-5, 10555 Berlin, Germany.
GetResponse for sending newsletters. GetResponse Arkońska 6/A3, 80-387 Gdańsk, Poland.
Google for the use of Google Analytics, Google AdSence and Google Webfonts. Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

Changes to our privacy policy
We reserve the right to adapt this data protection declaration so that it always complies with current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection declaration will then apply to your next visit.

Questions for the data protection officer
If you have any questions about data protection, please write us an email or contact the person responsible for data protection in our organization directly:

Ralf Hefter
Email: datenschutz@ralfheftermusic.de

The data protection declaration was created using the data protection declaration generator from activeMind AG (version 2018-06-15).

This page was translated into English using Google Translator