§ 1
The responsible person in the sense of the Data Protection Basic Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is
Releasy UG (haftungsbeschränkt)
Bistritzer Strasse 67
50858 Cologne
(hereinafter referred to as "releasy")
mail: info@music-releasy.com
§ 2
Every time our website is accessed, we automatically save access data in so-called server log files. This includes the date and time of access, the amount of data transferred and, if applicable, the name of the requested file, the browser used and its version, the operating system used, IP address and referrer URL (URL that you visited immediately before).
Temporary storage of the IP address by the system is necessary to enable delivery of the website to your end device. For this purpose, your IP address must remain stored for the duration of the session.
The legal basis for the temporary storage of your data and the log files described is Art. 6 1 lit. f GDPR.
This data is evaluated exclusively to ensure the permanent and trouble-free operation of the website and to improve the content of our website and to transmit it to law enforcement authorities in the event of a cyber attack and to ensure the security of our information technology systems. An evaluation of your data for marketing purposes does not take place in this context. These purposes also include our legitimate interest in data processing in accordance with Art. 6 1 lit. f GDPR.
The collection of data for the provision of the website and the storage of the data in log files is necessary for the operation of our website. There is therefore no possibility of objection.
§ 3
To make visiting our website attractive and to enable the use of certain functions, we use so-called "cookies" on our website. These are small text files which are stored and saved on your end device via a browser.
Many cookies contain a so-called cookie ID. It consists of a character string by which websites and servers can be assigned to a specific browser in which the respective cookie was stored. After the browser session ends, most of the cookies we use are deleted again ("session cookies"). The permanent cookies ("persistent cookies"), on the other hand, remain on your end device.
The following data is stored and transmitted in the cookies: Language settings, search terms entered, frequency of page views, use of website functions, origin of the user, operating system used, terminal device used, browser used, screen resolution of the terminal device.
Your data collected on our website is pseudonymised by technical precautions. It is therefore no longer possible to assign the data to you. The data will not be stored together with other personal data.
The legal basis for the processing of personal data using cookies is Art. 6 1 lit. f GDPR.
The purpose of using technically necessary cookies is to simplify the use of our platform for you (e.g. your settings are saved). Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that your browser is recognized even after a page change, e.g. for the tracks placed in the shopping basket. If cookies are not accepted or deactivated, the functionality of our website may be limited.
In addition, we use cookies on our website which enable an analysis of your surfing behavior. In this way the following data can be transmitted: Website usage data, newslit. registration and visitor sources.
Your data collected in this way is pseudonymized by technical precautions. It is therefore no longer possible to assign the data to you. The data is not stored together with your other personal data.
Analysis cookies are used for the purpose of improving the quality of our website and its contents. The analysis cookies enable us to find out how the website is used by you and thus to constantly optimize our offer. The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 1 lit. a GDPR, if you have given your consent to this.
Some third-party services integrated by us may use cookies. Please refer to the websites of the respective providers for information on how they work and how they process data. The services used by us can be found in this privacy policy.
Cookies are stored on your end device and transmitted to our website. You therefore have control over the use of cookies. You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general or set it so that the setting of cookies is prevented and you can thus permanently object to the setting of cookies. In addition, you can delete already set cookies at any time via your browser. A comprehensive objection to online marketing cookies can also be declared at http://www.youronlinechoices.com. The transmission of flash cookies cannot be prevented by the settings of your browser, but by changing the settings of the flash player. This also applies to all third-party cookies listed below.
§ 4
We use Google Analytics on our website, a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google Analytics"). The information generated about your use of this website is usually transferred to a Google server in the USA and stored there. The USA is an unsafe third country.
The legal basis for the processing of personal data is Art. 6 1 lit. a GDPR.
Google Analytics uses methods that enable an analysis of your use of the website, in particular from which internet page you came to our website (so-called referrers), which subpage you access or how often and for how long you view a subpage. Google Analytics uses cookies for this purpose. Every time you call up a page of our website on which Google Analytics has been integrated, your browser on your end device is automatically prompted to transmit data to Google Analytics for analysis.
We have concluded a contract with Google for order processing in accordance with the EU standard contract clauses pursuant to Art. 28 GDPR in order to guarantee the security of this data processing. We also fully implement the strict requirements of the German data protection authorities when using Google Analytics.
By activating IP anonymization on our website, the IP address is shortened before transmission within the member states of the European Union or in other states that are party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. The anonymised IP address transmitted by your browser within the framework of Google Analytics is not merged with other Google data.
Google will use this information on our behalf to evaluate the use of our website by users, to compile reports on the activities within this website and to provide us with further services associated with the use of this website and the use of the Internet.
Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. In doing so, pseudonymous user profiles of the users can be created from the processed data.
You can prevent the collection of the data generated by the cookie and related to your use of our website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser add-on available at this link http://tools.google.com/dlpage/gaoptout?hl=de. The installation of the browser add-on will be regarded by Google as an objection.
The data generated by the cookie is stored for 180 days according to our cookie configuration and then automatically deleted.
As an alternative to the browser plug-in or within browsers on mobile devices, please click this link to object to the collection and use of your data by Google Analytics with effect for the future. An opt-out cookie will be stored on your end device. If you delete your cookies, you must click the link again.
The terms of use and privacy policy of Google and Google Analytics can be found https://www.google.de/intl/de/policies/privacy here and here https://www.google.com/analytics/terms/de.html.
§ 5
Due to legal regulations, we provide information on our website under "Contact" that enables quick electronic contact with us and direct communication with us by e-mail. As far as you contact us by e-mail, the personal data transmitted by you will be stored automatically.
The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 1 lit. b GDPR. We use the personal data you provide exclusively for the processing of your specific inquiry. The data provided will always be treated confidentially.
The data will be deleted as soon as they are no longer required for the purpose of their collection. For personal data sent by e-mail, this is the case when the respective conversation with you has ended. The conversation is finished when it can be concluded from the circumstances that the matter in question has been finally clarified.
If you contact us, you can object to the storage of your personal data at any time. In such a case the conversation cannot be continued.
§ 6
We secure our website and other systems by numerous technical and organizational measures against loss, destruction, access, modification, or distribution of your data by unauthorized persons. Despite regular checks, however, complete protection against all risks is not possible and cannot be guaranteed by us. For this reason, you are free at any time to transmit your personal data to us by other means.
§ 7
In order to process your purchases, we pass on the transaction data such as name, address, e-mail address, IBAN, invoice amount, currency and transaction number to the payment service provider you have chosen (e.g. Paypal, credit card company, etc.) on the basis of Art. 6 1 lit. b) GDPR. The transfer is necessary for cashless payment processing. The data will be used exclusively for the execution and realization of the payment processing and will be transmitted securely using the "SSL" encryption method. The service providers offered by us are certified according to PCI DSS. They transfer, process and store personal data outside the EU if necessary. For more detailed information, please check the data protection regulations of the service provider you have chosen.
§ 8
Your personal data will be deleted or blocked as soon as the purpose of storage ceases to apply or you revoke your consent, unless otherwise specified in this data protection declaration. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU ordinances, laws or other regulations to which the person responsible is subject. If the purpose of storage ceases to apply, if you revoke your consent or if a storage period prescribed by the European Directive and Regulation Giver or any other competent legislator expires, the personal data will be blocked or deleted as a matter of routine and in accordance with the statutory provisions, unless it is necessary to continue storing the data in order to conclude or fulfil a contract.
§ 9
In addition, you have the right to receive free information from us at any time about the personal data stored about you and a copy of this information. You also have a right to information regarding the following information:
You also have a right of information as to whether personal data have been transferred to a third country or to an international organisation. If this is the case, you also have the right to be informed of the appropriate guarantees relating to the transfer.
§ 10
You have the right to request the immediate correction and/or completion of incorrect or incomplete personal data concerning you. We will execute the correction without delay.
§ 11
You have the right to demand that we restrict processing if one of the following conditions is met:
If the processing of personal data relating to you has been restricted, such data - apart from being stored - may be processed only with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.
§ 12
You have the right to demand that the personal data relating to you be deleted immediately if one of the following reasons applies and insofar as the processing is not necessary
If the personal data have been made public by us and if we, as data controller, are obliged to delete the personal data in accordance with Art. 17 para. 1 GDPR, we shall take reasonable measures, including technical measures, taking into account the available technology and the implementation costs, to inform other data controllers who process the published personal data that the data subject has requested these other data controllers to delete all links to these personal data or copies or replications of these personal data, unless the processing is necessary.
The right of erasure shall not apply insofar as the processing is necessary:
§ 13
If you have asserted the right to rectification, erasure or limitation of processing against us, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification, erasure or limitation of processing, unless this proves impossible or involves a disproportionate effort.
You have the right to be informed of these recipients.
§ 14
You have the right to receive the personal data concerning you which you have provided us with in a structured, common and machine-readable format. You also have the right to have this data communicated to another controller without hindrance from us, provided that the processing is based on the consent pursuant to Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR or on a contract pursuant to Art. 6 (1) lit. b GDPR and that the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority that has been assigned to us.
Furthermore, when exercising your right to data transfer in accordance with Art. 20 (1) GDPR, you have the right to request that the personal data be transferred directly from us to another responsible party, insofar as this is technically feasible and provided that this does not affect the rights and freedoms of other persons.
The right to data transferability does not apply to the processing of personal data which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
§ 15
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you that is carried out on the basis of Art. 6 (1) lit. e or f GDPR. This also applies to profiling based on these provisions.
In the event of an objection, we will no longer process the personal data unless we can demonstrate compelling reasons for processing which are worthy of protection and which outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.
If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing. This also applies to profiling, insofar as it is related to such direct marketing. If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes.
You also have the right to object, for reasons arising from your particular situation, to the processing of your personal data that concerns you and that is carried out by us for the purposes of scientific or historical research or for statistical purposes in accordance with Art. 89 (1), GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.
To exercise the right to object, you can contact us at any time. You are also free to exercise your right of objection in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures involving technical specifications.
§ 16
You have the right to revoke your consent to the processing of personal data at any time. Revocation of your consent does not affect the lawfulness of the processing that has taken place based on your consent until revocation.
§ 17
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you in a similar way, provided that the decision
we shall take reasonable measures to safeguard your rights and freedoms and your legitimate interests, which shall include at least the right to obtain the intervention of any person on our part to express his or her point of view and to challenge the decision.
§ 18
We do not carry out automatic decision making or profiling.
§ 19
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State in which you are resident, your place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you is in breach of GDPR.
The supervisory authority to which the complaint has been submitted will inform the complainant of the status and the results of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR. The supervisory authority responsible for us is the State Commissioner for Data Protection and the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, post box 20 04 44, 40102 Düsseldorf.
§ 20
We would like to inform you that the provision of personal data is partly required by law (e.g. tax regulations) or can also result from contractual regulations (e.g. information on the contractual partner). Sometimes it may be necessary to provide us with personal data in order to conclude a contract, which must subsequently be processed by us. For example, you are obliged to provide us with your personal data if you conclude a contract with us. Failure to provide your personal data would mean that the contract could not be concluded with you.