Privacy statement

1. Preamble

This Privacy Policy explains how personal data are collected and processed when you use our website. Personal data means any information relating to an identified or identifiable natural person.

2. Name and contact data of the controller and company data protection officer

                This data protection information applies to data processed by:

                Controller:

Edel Music & Entertainment GmbH (hereinafter: Edel),
Neumühlen 17
22763 Hamburg
Germany
Tel.: +4940890850
E-mail: info@edel.com

The data protection officer appointed by Edel can be contacted at datenschutz@edel.com.

3. Collection and storage of personal data; type and purpose of use

a) On visiting the website:

It is possible to visit our website without being required to enter personal data.

When accessing the website, however, information will automatically be sent to our website’s server via the browser used on your end device. This information will be temporarily stored in a logfile. The following information will be collected in this context without any action on your part and will be stored until the next automatic deletion process:

• the IP address of the the computer sending the enquiry,
• date and time of the server enquiry,
• name and URL of the downloaded file,
• website from which our website was accessed (referrer URL),
• browser used and, if applicable, your computer’s operating system and the name of your access provider.

We will process the above data for the following purposes:

• ensuring smooth connection to the website,
• ensuring that the website is user-friendly,
• evaluating system security and stability,
• improving our offering.

The legal basis for data processing is Art. 6(1) sentence 1(f) GDPR. Our legitimate interest can be derived from the data processing purposes set out above. We will never use the collected data in order to draw conclusions relating to you personally.

We also use cookies and analytics services in connection with visits to our website. For more information, see section 6 of this Privacy Notice.

b) On contacting us via e-mail or the contact form

If you contact us by e-mail or via the contact form provided on our website, we will store the data you provide (your e-mail address, together with your name and telephone number, if applicable) in order to process your request or respond to your questions.

If using the contact form, you are required to give a valid e-mail address in order that we know who sent the enquiry and in order to be able to respond to it. All other information is provided on a voluntary basis.

The processing of data transmitted in the course of contacting us is carried out for the purpose of handling your request and is based on Art. 6(1)(b) GDPR, insofar as your request relates to the performance of a contract or pre-contractual measures, or on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.

We will delete any data collected in this context once storage is no longer necessary (if, for instance, your enquiry has been satisfied) or we limit processing if statutory retention periods apply.

The legal basis for data processing is Art. 6(1) sentence 1(a) and (f) GDPR.

4. Disclosure of data

For the purpose of the use described here, your data will be stored and processed by us. For this purpose, we forward the data to the relevant internal departments and to affiliated companies of Edel SE & Co. KG aA or carefully selected external service providers and contract processors who are obliged to treat your data confidentially and to observe our data protection standards in accordance with the legal provisions of Art. 28 GDPR.

If the data is transferred to a service provider based in another EU country, a so-called third country transfer will take place. In this case, we ensure that the service provider is certified in accordance with the EU-US Privacy Shield, thus guaranteeing that the transfer to a third country complies with the European data protection level. Further information on the EU-US Privacy Shield certificate can be found at: https://ec.europa.eu/commission/presscorner/detail/en/MEMO_16_434

Your personal data will not be transferred to third parties for purposes other than those listed here.

We only pass on your personal data to third parties if:

– you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,

– The disclosure pursuant to Art. 6 para. 1 sentence 1 letter f GDPR is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,

– In the event that there is a legal obligation for disclosure under Art. 6 para. 1 sentence 1 lit. c GDPR, and

– This is permitted by law and required for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.

5. Ninja Firewall

To protect our website against unauthorized access, malware, automated attacks (such as brute-force attacks), and other security-related threats, we use the NinjaFirewall security software.

The provider is NinTechNet Limited, Unit 1603, 16th Floor, The L. Plaza, 367–375 Queen’s Road Central, Sheung Wan, Hong Kong.

NinjaFirewall is operated exclusively on our own web server and is used solely to detect and prevent security threats. No personal data is transmitted to the provider or to any other third party.

For the purpose of detecting and preventing attacks, the following technical information may be processed:

• IP address
• Date and time of access
• Requested URL
• HTTP header information
• Referrer URL
• Information about the browser and operating system used

Where technically possible, IP addresses are stored only in truncated or anonymized form.

The processing is carried out on the basis of our legitimate interest in ensuring the security, integrity, and availability of our website pursuant to Article 6(1)(f) GDPR.

Further information on NinTechNet’s processing of personal data is available at:

https://nintechnet.com/privacy-policy/

6. Cookies

We use cookies and similar technologies on our website. Cookies are small text files that are automatically created by your browser and stored on your device (e.g. laptop, tablet or smartphone) when you visit our website. Cookies do not cause any damage to your device and do not contain viruses, trojans or other malicious software.

Information stored in cookies relates to the specific device used in each case. However, this does not mean that we obtain direct knowledge of your identity.

The use of cookies serves, on the one hand, to technically provide our website and to make the use of our services more user-friendly. For this purpose, we use so-called session cookies to recognize that you have already visited individual pages of our website. These cookies are automatically deleted after you leave our website.

In addition, we use temporary cookies that are stored on your device for a specified period of time. If you visit our website again, it may automatically be recognized that you have previously visited our website and which settings you selected in order to facilitate your use of our website.

Technically necessary cookies are used on the basis of Section 25 (2) TDDDG and Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in the technically error-free and optimized provision of our website.

Insofar as we use cookies for analytics, statistics or marketing purposes, this is done exclusively on the basis of your explicit consent pursuant to Section 25 (1) TDDDG and Art. 6 para. 1 sentence 1 lit. a GDPR. You may withdraw or amend your consent at any time with effect for the future via the cookie settings.

Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your device or so that a notice always appears before a new cookie is created. Please note that completely disabling cookies may result in certain functions of our website no longer being available or only being available to a limited extent.

In addition to technically necessary cookies, we may also use third-party cookies that help us analyze user behavior on our website, optimize our services and display content and advertising tailored to users’ interests.

Via our cookie banner, you have the option to consent to or reject the use of non-essential cookies. You may change or withdraw your selection at any time via the “Cookie Settings”.

Information on Data Transfers to Third Countries

If you consent to the use of certain cookies and services, personal data may also be transferred to recipients located in countries outside the European Union or the European Economic Area, in particular to the United States. In such countries, an adequate level of data protection comparable to that within the European Union may not exist.

In particular, there is a risk that government authorities may access the transferred data without you having effective legal remedies available against such access.

Any transfer of personal data to third countries is carried out exclusively on the basis of your explicit consent pursuant to Art. 49 para. 1 sentence 1 lit. a GDPR.

7. GA4 Google Analytics

Subject to your consent, our website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics 4 enables us to analyze the use of our website and optimize our online services.

Scope of processing

Google Analytics uses cookies and similar technologies that enable us to analyze your use of our website. The information collected through these technologies is generally transmitted to and processed on Google’s servers.

In Google Analytics 4, IP anonymization is enabled by default. As a result, your IP address is truncated by Google within Member States of the European Union or other contracting states of the European Economic Area before processing. Only in exceptional cases is the full IP address transferred to a Google server and shortened there. According to Google, the IP address transmitted by your browser within the scope of Google Analytics is not combined with other Google data.

During your visit to our website, the following information may be processed:

• Page views
• First visit to the website
• Session start
• Click paths and interactions with the website
• Scroll behavior
• Clicks on external links
• Internal search queries
• Video interactions
• File downloads
• Viewed or clicked advertisements
• Language settings

In addition, the following information may be processed:

• Approximate location (region)
• Truncated IP address
• Browser and device information (e.g. language settings or screen resolution)
• Internet service provider
• Referrer URL

Google Signals

Where Google Signals is enabled, cross-device reports may be created and information about user behavior across different devices may be analyzed. Google may use this information to generate cross-device models and provide aggregated statistics. We have no control over Google’s processing of data through Google Signals. You can disable cross-device analysis by disabling personalized advertising in your Google Account.

Purposes of processing

Google processes the collected information on our behalf to evaluate the pseudonymous use of our website, prepare reports on website activity, and analyze the performance and usability of our website.

Recipients

Recipients of the data may include:

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (processor)
• Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Third-country transfers

Where personal data is transferred to the United States, such transfer is based on the certification of Google LLC under the EU-US Data Privacy Framework. Where necessary, Google also relies on the Standard Contractual Clauses approved by the European Commission.

Storage period

The data transmitted by us to Google Analytics and linked to cookies is automatically deleted after two months. Data whose retention period has expired is deleted automatically once per month.

Legal basis

The processing is carried out exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR.

Withdrawal of consent

You may withdraw your consent at any time with future effect via our cookie settings. The lawfulness of the processing carried out before the withdrawal remains unaffected.

You can also prevent the storage of cookies through your browser settings. In addition, you may prevent Google from collecting and processing the data generated by Google Analytics by:

• refusing or withdrawing your consent, or
• installing the Google Analytics browser add-on: https://tools.google.com/dlpage/gaoptout

Further information is available at:

Google Privacy Policy: https://policies.google.com/privacy

Google Analytics: https://marketingplatform.google.com/about/analytics/

8. Your rights

a)            Information, rectification, erasure, restriction of processing, data transferability, revocation, complaints

You have the right:

• to receive, pursuant to Art. 15 GDPR, information on your personal data processed by us. You can, in particular, receive information on the purposes of processing, the categories of personal data, the categories of recipient to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request rectification, erasure, restriction of processing of personal data or the right to lodge a complaint, where the personal data are not collected from us, any available information as to their source, the existence of automated decision-making, including profiling, and meaningful information about the corresponding details, if applicable;
• to obtain, pursuant to Art. 16 GDPR, without undue delay the rectification of inaccurate or incomplete personal data stored by us;

• to obtain, pursuant to Art. 17 GDPR, the erasure of your personal data stored by us, provided processing is not required in order to exercise the right of freedom of expression and information, for compliance with a legal obligation, for the performance of a task carried out in the public interest or for the establishment, exercise or defence of legal claims;
• to obtain, pursuant to Art. 21 GDPR, restriction of processing, where you contest the accuracy of the personal data, the processing is unlawful, you oppose the erasure of the personal data and we no longer need the personal data, but they are required by you for the establishment, exercise or defence of legal claims pursuant to Art. 18 GDPR or you have exercised your right to object;
• to receive, pursuant to Art. 20 GDPR, the personal data concerning you, which you provided, in a structured, commonly used and machine-readable format and to demand transmission of those data to another controller;
• to withdraw your consent at any time pursuant to Art. 7(3) GDPR by making a corresponding statement to us.This means that we are not permitted to continue to process the data to which this consent applied in future; and
• to lodge a complaint with a supervisory authority, pursuant to Art. 77 GDPR.You can generally lodge such complaint with the supervisory authority in the place of your habitual residence, place of work or our branch, e.g. the competent supervisory authority for Edel. The competent data protection supervisory authority for Edel SE & Co. KGaA is:

  The Hamburg Commissioner for Data Protection and Freedom of Information
  Ludwig-Erhard-Str. 22
  20459 Hamburg
  Germany

  Phone: +49 40 42854-4040
  E-mail: mailbox@datenschutz.hamburg.de

  Further information is available at:

  https://datenschutz-hamburg.de

b) Right to object

If your personal data are processed on the basis of legitimate interests pursuant to Art. 6(1) sentence 1(f) GDPR, you have the right to object to the processing of your personal data, pursuant to Art. 21 GDPR, on grounds relating to your particular situation or the objection relates to direct marketing.  In the latter case, you have a general right to object which will be implemented by us without you having to specify grounds.

If you wish to make use of your right to object, an e-mail to the following address will suffice: datenschutz@edel.com.

9. Data security

We use SSL or TLS encryption during your visit to our website in order to ensure secure data transmission and protect confidential content. An encrypted connection can usually be identified by the lock symbol in your browser’s address bar and by the use of “https://” in the website address.

In addition, we implement appropriate technical and organizational security measures to protect your personal data against accidental or intentional manipulation, loss, destruction, or unauthorized access by third parties.

Our security measures are continuously reviewed and improved in line with technological developments.

10. Validity and amendments to this Privacy Notice

This Privacy Notice is up to date and is the valid version dated 28  July 2026.

We may be required to update this Privacy Notice as a result of developments to our website and services or due to amendments made to statutory or official requirements. The valid version of the Privacy Notice is available for inspection and printout at all times on our website at https://ear-music.net/privacy-protection-statement.