Data policy

We at Art Directors Music are delighted that you are interested in our product range and have visited our websites. When you use our websites, various types of personal data are collected. Personal data as defined by the General Data Protection Regulation (“GDPR”) refers to all information that enables you to be personally identified.

We take the protection of your personal data very seriously. We treat your personal data in confidence and in accordance with the statutory data protection rules and this privacy policy. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this is done.

Our privacy policy for the use of our websites does not apply to your activities on the websites of social media networks or other providers that you can contact via the links on our websites. When using these providers’ websites, ensure you inform yourself about their privacy policies.

1. Name and address of the data controller as defined by the GDPR

Andreas Beck
Volkartstraße 2a | 80634 München | Deutschland
Tel.: +49 (0)176 63470585
Email: info@artdirectorsmusic.com
Internet: www.artdirectorsmusic.com
 

2. Security

Please note that security loopholes may occur when transferring data over the Internet (e.g. when communicating by email). It is not possible to provide seamless protection of data from third-party access.

This page uses TLS encryption for security reasons and to protect the transfer of confidential content, such as orders or inquiries that you send to us as the operator of the page. You can identify an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and that your browser bar displays a padlock icon. When TLS encryption is activated, the data that you transmit to us cannot be intercepted by third parties.

3. Collection and processing of your personal data

3.1. Extent of processing of personal data

We only ever collect and use our users’ personal data to the extent necessary to provide both a functional website and our content and services. In many cases the collection and use of personal data is only performed with the user’s consent. An exception only applies in cases where consent cannot be obtained for practical reasons and the processing of the data is permitted by law.

One way that your data is collected is when you communicate it to us. This may comprise data that is entered into a contact form, for example. Other data is recorded automatically by our IT systems when you visit our website. This mainly comprises technical data that is required to ensure that we can make our website available with no issues. This data is collected automatically as soon as you access our website. Other data may be used to analyse your browsing behaviour, provided you give the requisite consent. This data is collated in a pseudonymised form and cannot be traced back to your identity. When you access our websites we notify you about the use of cookies for analytics purposes and ask you click the “Accept cookies” button to give your consent to such use. We use this data to identify your usage interests and use this information to make the use of our online offer more user-friendly and more effective as a whole.

You can use the Art Directors Music website without having to provide any personal data yourself or without personal data being collected for analytics purposes. 
 

3.2. Legal basis for the processing of personal data

Art Directors Music will only collect and process personal data if you provide your consent (Art. 6 (1) (a) GDPR), for the performance of a contract or in order to take steps prior to entering into a contract (Art. 6 (1) (b) GDPR) or for the purposes of our legitimate interests (Art. 6 (1) (f) GDPR).

Where we obtain your consent for the processing of personal data, Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR) shall serve as the legal basis for the processing of personal data.

Where personal data needs to be processed for the purpose of performing a contract to which you are party, the legal basis shall be Art. 6 (1) (b) GDPR. This also applies to processing operations that are necessary in order to take steps prior to entering into a contract.

If personal data needs to be processed in order to fulfil a legal obligation to which our company is subject, the legal basis is Art. 6 (1) (c) GDPR.

Where the processing of personal data is necessary to protect your vital interests or those of another natural person, Art. 6 (1) (d) GDPR shall serve as the legal basis.

If the processing is necessary to protect a legitimate interest pursued by our company or a third party and this interest is not overridden by your interests or your fundamental rights and freedoms, Art. 6 (1) (f) GDPR shall serve as the legal basis for the processing.
 

3.3. Data erasure and storage duration

Your personal data will be deleted or made unavailable as soon as the purpose for which it was saved ceases to apply. Data may additionally be stored if so intended by European or domestic legislation in the form of EU regulations, statutes or other stipulations to which we are subject. Data will also be made unavailable or erased when a storage period prescribed by the specified regulations lapses unless there is a necessity for the continued storage of the data in order to enter into or fulfil a contract.

 

4. Data collection on our websites

4.1. Server log files

When you visit our websites, the provider of the pages automatically records information in “server log files” that your browser automatically transmits to us. This data contains for example:

  • Browser type and browser version
  • Operating system used
  • Referrer URL (last page visited)
  • Host name of the querying computer
  • Access date and time of the server query
  • IP address

This data will only be collected for the purpose of statistical analysis and on security grounds (e.g. to investigate acts of misuse or fraud), stored for the duration of seven days and then erased. If a longer retention period of the data is required for evidential purposes, this data shall be excluded from erasure until the incident has been conclusively investigated. This data will not be merged with any other data sources. The system needs to store the IP address temporarily to enable the website to be provided to the user’s computer. For this purpose, the user’s IP address must be stored for the duration of the session. This data is recorded and temporarily stored on the basis of Art. 6 (1) (f) GDPR. As a website operator we have a justified interest in the technically flawless presentation and optimisation of our website, and this requires the server log files to be recorded.

4.2 Query by contact form, email, phone or fax

If you contact us via contact form, email, phone or fax, we store and process your query including all personal data arising from it. The data is used exclusively for the purpose of handling the matter about which you made contact and will not be passed to third parties without your consent. The data transmitted contains your name and the content and time of your query.

This data is processed on the basis of Art. 6 (1) (b) GDPR, provided your query is connected with the performance of a contract or the taking of steps prior to entering into a contract. In all other cases the processing is based on your consent (Art. 6 (1) (a) GDPR) and/or our legitimate interests (Art. 6 (1) (f) GDPR) because we have a legitimate interest in the effective handling of the queries addressed to us.

You may revoke a consent at any time. To do so, send us an email (info@artdirectorsmusic.com), no specific form required. The data processing operations performed up to the point of revocation will be deemed lawful and shall not be affected by the revocation. We shall retain the data you send to us by way of contact requests until you ask us to erase it, revoke your consent to its storage or until the purpose for which the data is stored lapses (e.g. once your matter has been conclusively dealt with). Applicable statutory stipulations, in particular statutory retention periods, shall be unaffected by this.

4.3 Google reCaptcha

Our website uses Google reCAPTCHA to check and prevent automated servers ("bots") from accessing and interacting with our website. This is a service provided by Google Inc., Gordon House, Barrow Street, Dublin 4, Irland (hereinafter: Google).

Through certification according to the EU-US Privacy Shield

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that it will follow the EU's data protection regulations when processing data in the United States.

This service allows Google to determine from which website your request has been sent and from which IP address the reCAPTCHA input box has been used. In addition to your IP address, Google may collect other information necessary to provide and guarantee this service.   

The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the security of our website and in the prevention of unwanted, automated access in the form of spam or similar.

Google offers detailed information at

https://policies.google.com/privacy

concerning the general handling of your user data.

5. Your rights

You have the right at any time to receive information free of charge about the origin, recipient and purpose of your personal data stored by us. You also have the right to request the rectification, making unavailable or erasure of this data. If you have any questions about this or any other matters relating to the subject of data protection, you can contact us at the address provided in the legal notice. Additionally, you have a right to lodge a complaint with the competent supervisory authority (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Königstraße 10a, 70173 Stuttgart, Germany). You also have the right to request the restriction of the processing of your personal data under certain circumstances. For further details, see section “6.7. Right to restrict processing” of the privacy policy.

5.1. Analytics tools and tools from third-party providers

When you visit our website, your browsing behaviour may be statistically evaluated. This is done above all by using cookies and what are termed analytics programs. Your browsing behaviour is analysed in a pseudonymised manner and cannot be traced back to you. You may lodge an objection to this analysis or prevent it by not using certain tools. You can find detailed information about these tools and your options for objection in this Privacy Policy.

5.2. Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You may revoke a previously granted consent at any time. To do so simply send us an email (no form required). The data processing performed up to the point of revocation will be deemed lawful and shall not be affected by the revocation.

5.3. Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)

If the data processing is being performed on the basis of Art. 6 (1) (e) or (f) GDPR, you have the right to object at any time to the processing of your personal data for reasons arising from your specific situation. This also applies to any profiling based on these provisions. The specific legal basis on which a processing operation is based can be found in this privacy policy. If you raise an objection, we will no longer process the personal data in question unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or the processing is for the purpose of establishing, exercising or defending legal claims (objection pursuant to Art, 21 (1) GDPR). Where your personal data is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing. This also includes profiling to the extent that it is related to such direct marketing. If you raise an objection, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Art. 21 (2) GDPR).

5.4. Right to lodge a complaint with the competent supervisory authority

In the event of breaches of GDPR, the data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state in which they are habitually resident, have their place of work or the location of the alleged breach. The right to lodge a complaint exists irrespective of any other administrative or judicial legal remedies.

5.5. Right to data portability

You have the right to receive, or have transmitted to a third party, the data that we have processed in an automated manner on the basis of your consent or in the performance of a contract in a commonly used, machine-readable format. If you request the direct transfer of the data to a different controller, this will only be done if it is technically feasible.

5.6. Information, making unavailable, erasure and rectification

Within the framework of the applicable legislation, you have the right to obtain at any time information free of charge about your stored personal data, its origin and recipients and the purpose of the data processing and, where relevant, a right to the rectification, making unavailable or erasure of this data. If you have any questions about this or any other matters relating to the subject of personal data, you can contact us at the address provided in the legal notice.

5.7. Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact us in this regard at any time at the address provided in the legal notice. The right to restriction of processing exists in the following cases: If you contest the accuracy of the personal data regarding you stored by us, we usually need time to verify this. You have the right to request the restriction of the processing of your personal data for the period required for the verification. If your personal data was or is being processed in an unlawful manner, you may request the restriction of the use of the data as opposed to its erasure. If we no longer need your personal data but you require it for the establishment, exercise or defence of legal claims, you have the right to request the restriction of the use of the personal data as opposed to its erasure. If you have lodged an objection pursuant to Art. 21 (1) GDPR, an assessment needs to be made of whether your rights override ours. Until it has been established whose rights prevail, you have the right to request the restriction of the processing of your personal data. Where you have restricted the processing of your personal data, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

5.8. Objection to marketing emails

We hereby object to the use of contact details published in the context of the obligation to provide a legal notice for the purpose of sending advertising and information materials that are not expressly requested. Art Directors Music expressly reserves the right to take legal steps in the event of the unsolicited sending of advertising materials, for example in the form of spam emails.

6. Updates to our privacy policy

Our privacy policy is valid in its current form; however, we reserve the right to make amendments in future. If any changes occur to our handling of your personal data or the statutory position, we shall amend our privacy policy and publish the latest valid version online here. It is your responsibility to inform yourself of any changes to our privacy policy. We therefore recommend that you review it from time to time.

Last revised: June 2019