Privacy statement

1. Preamble

The following paragraphs provide information on which personal data are gathered when using our website and for what purposes. Personal data are all data relating to your identity, e.g. name, address, e-mail address.

2. Name and contact data of the controller and company data protection officer

                This data protection information applies to data processed by:

                Controller:

Edel Music & Entertainment GmbH (hereinafter: Edel),
Neumühlen 17
22763 Hamburg
Germany
Tel.: +4940890850
E-mail: info@edel.com

The data protection officer appointed by Edel can be contacted at datenschutz@edel.com.

3. Collection and storage of personal data; type and purpose of use

a) On visiting the website:

It is possible to visit our website without being required to enter personal data.

When accessing the website, however, information will automatically be sent to our website’s server via the browser used on your end device. This information will be temporarily stored in a logfile. The following information will be collected in this context without any action on your part and will be stored until the next automatic deletion process:

• the IP address of the the computer sending the enquiry,
• date and time of the server enquiry,
• name and URL of the downloaded file,
• website from which our website was accessed (referrer URL),
• browser used and, if applicable, your computer’s operating system and the name of your access provider.

We will process the above data for the following purposes:

• ensuring smooth connection to the website,
• ensuring that the website is user-friendly,
• evaluating system security and stability,
• improving our offering.

The legal basis for data processing is Art. 6(1) sentence 1(f) GDPR. Our legitimate interest can be derived from the data processing purposes set out above. We will never use the collected data in order to draw conclusions relating to you personally.

We also use cookies and analytics services in connection with visits to our website. For more information, see sections 5 and 10 of this Privacy Notice.

b) On contacting us via e-mail or the contact form

If you contact us by e-mail or via the contact form provided on our website, we will store the data you provide (your e-mail address, together with your name and telephone number, if applicable) in order to process your request or respond to your questions.

If using the contact form, you are required to give a valid e-mail address in order that we know who sent the enquiry and in order to be able to respond to it. All other information is provided on a voluntary basis.

Data relating to you contacting us is processed on the basis of voluntary consent in line with Art. 6(1) sentence 1(a) GDPR.

We will delete any data collected in this context once storage is no longer necessary (if, for instance, your enquiry has been satisfied) or we limit processing if statutory retention periods apply.

The legal basis for data processing is Art. 6(1) sentence 1(a) and (f) GDPR.

4. Disclosure of data

For the purpose of the use described here, your data will be stored and processed by us. For this purpose, we forward the data to the relevant internal departments and to affiliated companies of Edel SE & Co. KG aA or carefully selected external service providers and contract processors who are obliged to treat your data confidentially and to observe our data protection standards in accordance with the legal provisions of Art. 28 GDPR.

If the data is transferred to a service provider based in another EU country, a so-called third country transfer will take place. In this case, we ensure that the service provider is certified in accordance with the EU-US Privacy Shield, thus guaranteeing that the transfer to a third country complies with the European data protection level. Further information on the EU-US Privacy Shield certificate can be found at: https://ec.europa.eu/commission/presscorner/detail/en/MEMO_16_434

Your personal data will not be transferred to third parties for purposes other than those listed here.

We only pass on your personal data to third parties if:

– you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,

– The disclosure pursuant to Art. 6 para. 1 sentence 1 letter f GDPR is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,

– In the event that there is a legal obligation for disclosure under Art. 6 para. 1 sentence 1 lit. c GDPR, and

– This is permitted by law and required for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.

5. Ninja Firewall

A special security software is integrated on this website, which is provided by NinTechNet Limited, based in Hong Kong (Unit 1603, 16th Floor, The L. Plaza 367 – 375 Queen’s Road Central Sheung Wan).

This solution is used to protect our website from unauthorized access and potential cyber threats. Technical information such as the IP address, the content accessed, the referring page and the time of access are recorded. The security software runs directly on our own servers so that no personal data is forwarded to the provider or third parties.

To further improve data protection, we have activated an anonymization function that only stores IP addresses in abbreviated form.

This protective measure is used in accordance with Art. 6 para. 1 lit. f GDPR, as it is in the legitimate interest of the website operator to protect the website from potential attacks in the best possible way.

6. Cookies

We use cookies on our website. These are small text files which are automatically created by your browser and stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device, do not contain any viruses, Trojans or other malware.

Information relating to the specific end device used in each case is stored in the cookie. This does not mean, however, that we directly receive information relating to your identity.

The use of cookies serves on the one hand to make it easier for you to use our services. In this context, we use session cookies to identify whether you have already visited individual pages on our website. These are automatically deleted when you leave our website.

We also use temporary cookies in order to optimise our website’s user-friendliness; these are stored on your end device for a specific period. If you re-visit our website in order to take advantage of our services, the website automatically recognises that you are returning and will remember your data and settings in order to save you from entering these a second time.

The data processed using cookies are required for the stated purposes in order to protect our legitimate interests and those of third parties in line with Art. 6(1) sentence 1(f) GDPR.

Most browsers automatically accept cookies. You can, however, configure your browser such that cookies are not stored on your computer or a notice appears every time a new cookie is created. Full deactivation of cookies may, however, prevent you from being able to use all the functions on our website.

In addition to technically necessary cookies (essential cookies) that ensure the functionality of our website, we also use cookies on our website that enable us to track and analyze the usage behavior of our website visitors in order to optimize our online offering and display personalized advertising. In some cases, these are also cookies that are set by third-party providers (third-party cookies).
By clicking on the “I only accept essential cookies” button shown below, you have the option of rejecting the use of technically unnecessary cookies. You can view your selection of permitted cookies at any time under “Individual cookie settings” and revoke or change them with effect for the future.

Reference to data processing in the USA 

By clicking on the button “I accept all cookies”, you also agree according to Art. 49 para. 1 p. 1 lit. a DSGVO that your data will be transmitted to the USA and processed there. According to the assessment of the European Court of Justice, the USA does not guarantee a level of data protection that meets the European GDPR standards. In particular, it is easier and more extensive for US authorities to access personal data compared to authorities in the EU. There is thus a risk that your data collected in connection with your visit to our website may be processed by US authorities for control and monitoring purposes, possibly even without any legal remedy.

7. GA4 Google Analytics

Depending on your consent, Google Analytics 4, a web analysis service of Google LLC, is used on our website. The controller for visitors within EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

The service is implemented in “basic consent mode” – if you do not consent to the data processing, only aggregated data is collected and processed and no cookies are stored. Nevertheless, tags can communicate the consent status and user activity by sending the following types of pings or signals to the Google server:

1. pings for Google Ads and Floodlight tags: they communicate the default consent status as well as the updated status.
2. conversion pings: indicate that a conversion has taken place
3. google analytics pings: when loading and logging events.

In all cases, the pings may contain the following:

– Functional information (such as headers that are passively added by the browser):

– Timestamp

– User agent (web only)

– Referrer

– Aggregated/non-identifying information: An indication of whether or not the current page or a previous page in the user’s navigation on the website contained ad click information in the URL (e.g. GCLID / DCLID)

– Boolean information about the consent status

– Random number generated each time the page is loaded

– Information about the consent platform used by the website owner (e.g. developer ID)

Google compiles detailed information in an overview https://support.google.com/google-ads/answer/10000067?hl=en.

Scope of the processing

Google Analytics uses cookies that enable us to analyze your use of our website. The information collected by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.

In Google Analytics 4, the anonymization of IP addresses is activated by default. Due to IP anonymization, your IP address will be truncated by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

During your website visit, your user behavior is recorded in the form of “events”. Events can be:
– Page views
– First visit to the website
– Start of session
– Your “click path”, interaction with the website
– Scrolls (whenever a user scrolls to the bottom of the page (90%))
– clicks on external links
– internal search queries
– interaction with videos
– file downloads
– seen / clicked ads
– language settings

Also recorded:
– Your approximate location (region)
– your IP address (in shortened form)
– technical information about your browser and the end devices you use (e.g.
language setting, screen resolution)
– your internet service provider
– the referrer URL (via which website/advertising medium you came to this website)

Google Signals
Google Signals is used on this website as an extension to Google Analytics. You can find detailed information about Google Signals here https://support.google.com/analytics/answer/7532985?hl=de. The Google Signals extension is used to create cross-device reports and collect information. Google can thus analyze the behavior of website users across devices and create database models, including cross-device conversions. Google Analytics is used to generate statistics on user behavior, which can be viewed by the website operator. We have no influence on data processing by Google Signals. If you wish to stop the cross-device analysis, you can deactivate the “Personalized advertising” function in the settings of your Google account (https://support.google.com/ads/answer/2662922?hl=de)

Purposes of processing
On behalf of the operator of this website, Google will use this information for the purpose of evaluating your pseudonymous use of the website and compiling reports on website activity. The reports provided by Google Analytics serve to analyze the performance of our website as well as the possible playout of personalized advertisements by Google.

Recipients
Recipients of the data are/may be
– Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as a processor pursuant to Art. 28 DSGVO).
– Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
– Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
It cannot be ruled out that US authorities may access the data stored by Google.

Third country transfer
Insofar as data is processed outside the EU/EEA and there is no level of data protection corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider to establish an appropriate level of data protection. The parent company of Google Ireland, Google LLC, is based in California, USA. A transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out. The USA is currently considered a third country from a data protection perspective. You do not have the same rights there as within the EU/EEA. You may not be entitled to any legal remedies against access by authorities.

Storage period
The data sent by us and linked to cookies are automatically deleted after 2 months. Data whose retention period has been reached is automatically deleted once a month.

Legal basis
The legal basis for this data processing is your consent pursuant to Art.6 para.1 p.1 lit.a DSGVO.

Revocation
You can revoke your consent at any time with effect for the future by calling up the cookie settings and changing your selection there:

The lawfulness of the processing carried out on the basis of the consent until revocation remains unaffected.

You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may result in a restriction of functionalities on this and other websites. In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google, by
a. Not giving your consent to the setting of the cookie or
b. downloading the browser add-on to disable Google Analytics (install at https://tools.google.com/dlpage/gaoptout?hl=de . For more information on Google Analytics terms of use and Google’s privacy policy, please visit https://marketingplatform.google.com/about/analytics/terms/de/ and https://policies.google.com/?hl=en.

Reference to data processing in the USA by Google

By clicking on the button “I accept all cookies”, you also agree according to Art. 49 para. 1 p. 1 lit. a DSGVO that your data will be transmitted to the USA and processed there. According to the assessment of the European Court of Justice, the USA does not guarantee a level of data protection that meets the European GDPR standards. In particular, it is easier and more extensive for US authorities to access personal data compared to authorities in the EU. There is thus a risk that your data collected in connection with your visit to our website may be processed by US authorities for control and monitoring purposes, possibly even without any legal remedy.

8. Your rights

a)            Information, rectification, erasure, restriction of processing, data transferability, revocation, complaints

You have the right:

• to receive, pursuant to Art. 15 GDPR, information on your personal data processed by us. You can, in particular, receive information on the purposes of processing, the categories of personal data, the categories of recipient to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request rectification, erasure, restriction of processing of personal data or the right to lodge a complaint, where the personal data are not collected from us, any available information as to their source, the existence of automated decision-making, including profiling, and meaningful information about the corresponding details, if applicable;
• to obtain, pursuant to Art. 16 GDPR, without undue delay the rectification of inaccurate or incomplete personal data stored by us;

• to obtain, pursuant to Art. 17 GDPR, the erasure of your personal data stored by us, provided processing is not required in order to exercise the right of freedom of expression and information, for compliance with a legal obligation, for the performance of a task carried out in the public interest or for the establishment, exercise or defence of legal claims;
• to obtain, pursuant to Art. 21 GDPR, restriction of processing, where you contest the accuracy of the personal data, the processing is unlawful, you oppose the erasure of the personal data and we no longer need the personal data, but they are required by you for the establishment, exercise or defence of legal claims pursuant to Art. 18 GDPR or you have exercised your right to object;
• to receive, pursuant to Art. 20 GDPR, the personal data concerning you, which you provided, in a structured, commonly used and machine-readable format and to demand transmission of those data to another controller;
• to withdraw your consent at any time pursuant to Art. 7(3) GDPR by making a corresponding statement to us.This means that we are not permitted to continue to process the data to which this consent applied in future; and
• to lodge a complaint with a supervisory authority, pursuant to Art. 77 GDPR.You can generally lodge such complaint with the supervisory authority in the place of your habitual residence, place of work or our branch.

b) Right to object

If your personal data are processed on the basis of justified interests pursuant to Art. 6(1) sentence 1(f) GDPR, you have the right to object to the processing of your personal data, pursuant to Art. 21 GDPR, on grounds relating to your particular situation or the objection relates to direct marketing.  In the latter case, you have a general right to object which will be implemented by us without you having to specify grounds.

If you wish to make use of your right to object, an e-mail to the following address will suffice: datenschutz@edel.com.

9. Data security

We use the popular SSL (secure sockets layer) technology in conjunction with the highest level of encryption supported by your browser when you access our website. This is generally 256‑bit encryption. If your browser does not support 256-bit encryption, we will use 128-bit v2 technology instead. You can identify whether or not an individual page on our website is transmitted in encrypted form by the closed key/padlock symbol in the lower status bar on your browser.

Online applications are transferred in encrypted form according to the latest technological standards.

We also use suitable technical and organisational security measures in order to protect your data against accidental or deliberate manipulation, partial or total loss, destruction or unauthorised access by third parties. Our security measures are continually improved in line with technological developments.

10. Validity and amendments to this Privacy Notice

This Privacy Notice is up to date and is the valid version dated 27  February 2025.

We may be required to update this Privacy Notice as a result of developments to our website and services or due to amendments made to statutory or official requirements. The valid version of the Privacy Notice is available for inspection and printout at all times on our website at https://ear-music.net/privacy-protection-statement.