We at Art Directors Music are delighted that you are interested in our product range and have visited our websites. When you use our websites, various types of personal data are collected. Personal data as defined by the General Data Protection Regulation (“GDPR”) refers to all information that enables you to be personally identified.
1. Name and address of the data controller as defined by the GDPR
Volkartstraße 2a | 80634 München | Deutschland
Tel.: +49 (0)176 63470585
Please note that security loopholes may occur when transferring data over the Internet (e.g. when communicating by email). It is not possible to provide seamless protection of data from third-party access.
This page uses TLS encryption for security reasons and to protect the transfer of confidential content, such as orders or inquiries that you send to us as the operator of the page. You can identify an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and that your browser bar displays a padlock icon. When TLS encryption is activated, the data that you transmit to us cannot be intercepted by third parties.
3. Collection and processing of your personal data
3.1. Extent of processing of personal data
We only ever collect and use our users’ personal data to the extent necessary to provide both a functional website and our content and services. In many cases the collection and use of personal data is only performed with the user’s consent. An exception only applies in cases where consent cannot be obtained for practical reasons and the processing of the data is permitted by law.
You can use the Art Directors Music website without having to provide any personal data yourself or without personal data being collected for analytics purposes.
3.2. Legal basis for the processing of personal data
Art Directors Music will only collect and process personal data if you provide your consent (Art. 6 (1) (a) GDPR), for the performance of a contract or in order to take steps prior to entering into a contract (Art. 6 (1) (b) GDPR) or for the purposes of our legitimate interests (Art. 6 (1) (f) GDPR).
Where we obtain your consent for the processing of personal data, Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR) shall serve as the legal basis for the processing of personal data.
Where personal data needs to be processed for the purpose of performing a contract to which you are party, the legal basis shall be Art. 6 (1) (b) GDPR. This also applies to processing operations that are necessary in order to take steps prior to entering into a contract.
If personal data needs to be processed in order to fulfil a legal obligation to which our company is subject, the legal basis is Art. 6 (1) (c) GDPR.
Where the processing of personal data is necessary to protect your vital interests or those of another natural person, Art. 6 (1) (d) GDPR shall serve as the legal basis.
If the processing is necessary to protect a legitimate interest pursued by our company or a third party and this interest is not overridden by your interests or your fundamental rights and freedoms, Art. 6 (1) (f) GDPR shall serve as the legal basis for the processing.
3.3. Data erasure and storage duration
Your personal data will be deleted or made unavailable as soon as the purpose for which it was saved ceases to apply. Data may additionally be stored if so intended by European or domestic legislation in the form of EU regulations, statutes or other stipulations to which we are subject. Data will also be made unavailable or erased when a storage period prescribed by the specified regulations lapses unless there is a necessity for the continued storage of the data in order to enter into or fulfil a contract.
4. Data collection on our websites
4.1. Server log files
When you visit our websites, the provider of the pages automatically records information in “server log files” that your browser automatically transmits to us. This data contains for example:
- Browser type and browser version
- Operating system used
- Referrer URL (last page visited)
- Host name of the querying computer
- Access date and time of the server query
- IP address
This data will only be collected for the purpose of statistical analysis and on security grounds (e.g. to investigate acts of misuse or fraud), stored for the duration of seven days and then erased. If a longer retention period of the data is required for evidential purposes, this data shall be excluded from erasure until the incident has been conclusively investigated. This data will not be merged with any other data sources. The system needs to store the IP address temporarily to enable the website to be provided to the user’s computer. For this purpose, the user’s IP address must be stored for the duration of the session. This data is recorded and temporarily stored on the basis of Art. 6 (1) (f) GDPR. As a website operator we have a justified interest in the technically flawless presentation and optimisation of our website, and this requires the server log files to be recorded.
4.2 Query by contact form, email, phone or fax
If you contact us via contact form, email, phone or fax, we store and process your query including all personal data arising from it. The data is used exclusively for the purpose of handling the matter about which you made contact and will not be passed to third parties without your consent. The data transmitted contains your name and the content and time of your query.
This data is processed on the basis of Art. 6 (1) (b) GDPR, provided your query is connected with the performance of a contract or the taking of steps prior to entering into a contract. In all other cases the processing is based on your consent (Art. 6 (1) (a) GDPR) and/or our legitimate interests (Art. 6 (1) (f) GDPR) because we have a legitimate interest in the effective handling of the queries addressed to us.
You may revoke a consent at any time. To do so, send us an email (firstname.lastname@example.org), no specific form required. The data processing operations performed up to the point of revocation will be deemed lawful and shall not be affected by the revocation. We shall retain the data you send to us by way of contact requests until you ask us to erase it, revoke your consent to its storage or until the purpose for which the data is stored lapses (e.g. once your matter has been conclusively dealt with). Applicable statutory stipulations, in particular statutory retention periods, shall be unaffected by this.
4.3 Google reCaptcha
Our website uses Google reCAPTCHA to check and prevent automated servers ("bots") from accessing and interacting with our website. This is a service provided by Google Inc., Gordon House, Barrow Street, Dublin 4, Irland (hereinafter: Google).
Through certification according to the EU-US Privacy Shield
Google guarantees that it will follow the EU's data protection regulations when processing data in the United States.
This service allows Google to determine from which website your request has been sent and from which IP address the reCAPTCHA input box has been used. In addition to your IP address, Google may collect other information necessary to provide and guarantee this service.
The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the security of our website and in the prevention of unwanted, automated access in the form of spam or similar.
Google offers detailed information at
concerning the general handling of your user data.
5. Your rights
5.1. Analytics tools and tools from third-party providers
5.2. Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You may revoke a previously granted consent at any time. To do so simply send us an email (no form required). The data processing performed up to the point of revocation will be deemed lawful and shall not be affected by the revocation.
5.3. Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)
5.4. Right to lodge a complaint with the competent supervisory authority
In the event of breaches of GDPR, the data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state in which they are habitually resident, have their place of work or the location of the alleged breach. The right to lodge a complaint exists irrespective of any other administrative or judicial legal remedies.
5.5. Right to data portability
You have the right to receive, or have transmitted to a third party, the data that we have processed in an automated manner on the basis of your consent or in the performance of a contract in a commonly used, machine-readable format. If you request the direct transfer of the data to a different controller, this will only be done if it is technically feasible.
5.6. Information, making unavailable, erasure and rectification
Within the framework of the applicable legislation, you have the right to obtain at any time information free of charge about your stored personal data, its origin and recipients and the purpose of the data processing and, where relevant, a right to the rectification, making unavailable or erasure of this data. If you have any questions about this or any other matters relating to the subject of personal data, you can contact us at the address provided in the legal notice.
5.7. Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. You can contact us in this regard at any time at the address provided in the legal notice. The right to restriction of processing exists in the following cases: If you contest the accuracy of the personal data regarding you stored by us, we usually need time to verify this. You have the right to request the restriction of the processing of your personal data for the period required for the verification. If your personal data was or is being processed in an unlawful manner, you may request the restriction of the use of the data as opposed to its erasure. If we no longer need your personal data but you require it for the establishment, exercise or defence of legal claims, you have the right to request the restriction of the use of the personal data as opposed to its erasure. If you have lodged an objection pursuant to Art. 21 (1) GDPR, an assessment needs to be made of whether your rights override ours. Until it has been established whose rights prevail, you have the right to request the restriction of the processing of your personal data. Where you have restricted the processing of your personal data, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
5.8. Objection to marketing emails
We hereby object to the use of contact details published in the context of the obligation to provide a legal notice for the purpose of sending advertising and information materials that are not expressly requested. Art Directors Music expressly reserves the right to take legal steps in the event of the unsolicited sending of advertising materials, for example in the form of spam emails.
Last revised: June 2019