Privacy policy

Privacy Policy

The protection of your personal data when visiting our website is an important concern for us. We protect your privacy and your private data.

We collect, process and use your personal data in accordance with the contents of this privacy policy as well as the applicable data protection rules, in particular the General Data Protection Regulation, the Federal Data Protection Act and the Telemedia Act.

These privacy provisions govern which personal data we collect, process and use about you. We therefore ask you to read the following carefully.

Name and address of the controller
Contact details of the data protection officer
General information on data processing
Rights of the data subject
Provision of the website and creation of log files
Use of cookies
Registration
Webshop
Payment options
Shipping service providers
Newsletter
Email contact
Job application by email
Company presences
Use of company presences on career-oriented networks
Partner programs
Content Delivery Networks
Plugins used

1. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States as well as other data protection regulations is:

IC Music and Apparel GmbH
Karl-Heine-Straße 92
04229 Leipzig
Germany

sam.de@liveyourmusic.com

2. Contact details of the data protection officer

The data protection officer of the controller is:

DataCo GmbH
Sandstraße 33
80335 Munich, Germany

+49 89 452459 900
www.dataguard.de

3. General information on data processing

a. Scope of processing of personal data

We process personal data of our users only insofar as this is necessary to provide a functional website as well as our content and services. The processing of personal data of our users only takes place after the user's consent. An exception applies in such cases where prior consent cannot be obtained for actual reasons and the processing of the data is required by legal provisions.

b. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing operations of personal data, Art. 6 (1) sentence 1 lit. a GDPR serves as the legal basis.

In the processing of personal data which is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) sentence 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

Insofar as the processing of personal data is required to fulfill a legal obligation to which our company is subject, Art. 6 (1) sentence 1 lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) sentence 1 lit. d GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6 (1) sentence 1 lit. f GDPR serves as the legal basis for the processing.

c. Data erasure and storage duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage no longer applies. Storage may also take place if this has been provided for by European or national legislators in Union regulations, laws or other provisions to which the controller is subject. Blocking or deletion of the data also takes place when a storage period prescribed by the above-mentioned standards expires, unless there is a need for further storage of the data for a contract conclusion or contract performance.

4. Rights of the data subject

If personal data is processed by you, you are a data subject within the meaning of the GDPR and you have the following rights with respect to the controller:

a. The right to information (Art. 15 GDPR)

You have the right to request confirmation from us as to whether personal data concerning you is being processed.
If this is the case, you have a right to information about this data and to the following information:

Processing purposes
Categories of personal data
Recipients or categories of recipients
Planned storage duration or the criteria for determining this duration
the existence of rights to rectification, erasure or restriction or objection
Right to complain to the competent supervisory authority
Where applicable, the origin of the data (if collected from a third party)
Where applicable, the existence of automated decision-making, including profiling, with meaningful information on the logic involved, the scope and the expected effects
Where applicable, transfer of personal data to a third country or international organization

b. Right to rectification (Art. 16 GDPR)

If your personal data is inaccurate or incomplete, you have the right to request immediate correction or completion of the personal data.

c. Right to restriction of processing (Art. 18 GDPR)

If one of the following conditions is met, you have the right to demand a restriction of the processing of your personal data:

You contest the accuracy of your personal data for a period that enables us to verify the accuracy of the personal data.
In the context of unlawful processing, you refuse the deletion of the personal data and instead demand the restriction of the use of the personal data.
We no longer need your personal data for the purposes of processing, but you need your personal data to assert, exercise or defend your legal claims, or
after you have lodged an objection against the processing, for the duration of the examination of whether our legitimate grounds prevail over your grounds.

d. Right to erasure ("right to be forgotten") (Art. 17 GDPR)

If one of the following reasons applies, you have the right to demand the immediate deletion of your personal data:

Your data is no longer necessary for the processing purposes for which it was originally collected.
You revoke your consent and there is no other legal basis for the processing.
You object to the processing and there are no overriding legitimate grounds for the processing, or you object pursuant to Art. 21 (2) GDPR.
Your personal data is being processed unlawfully.
The deletion is necessary to fulfill a legal obligation under Union law or the law of the Member State to which we are subject.
The personal data was collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.

Please note that the above-mentioned reasons do not apply insofar as the processing is necessary:

To exercise the right to freedom of expression and information;
To fulfill a legal obligation or to perform a task carried out in the public interest to which we are subject.
For reasons of public interest in the area of public health.
For archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes.
to assert, exercise or defend legal claims.

e. Right to data portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, common and machine-readable format or to demand its transmission to another controller.

f. Right to object to certain data processing (Art. 21 GDPR)

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you, which is based on Art. 6 (1) sentence 1 lit. e or f GDPR. This also applies to profiling based on these provisions.

If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing.

g. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of personal data concerning you violates the GDPR. The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and the results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR. A list of the supervisory authorities locally responsible in Germany can be found on the website of the Federal Commissioner for Data Protection at the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, Phone: +43 1 52 152-0, Email: dsb@dsb.gv.at.

5. Provision of the website and creation of log files

a. Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:

Information about the browser type and the version used
The user's operating system
Date and time of access
Websites from which the user's system accesses our website

This data is stored in the log files of our system. This does not include the IP addresses of the user or other data that enables the data to be assigned to a user. This data is not stored together with other personal data of the user.

b. Purpose of data processing

Storage in log files takes place to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

In these purposes also lies our legitimate interest in data processing pursuant to Art. 6 (1) sentence 1 lit. f GDPR.

c. Legal basis for data processing

The legal basis for the temporary storage of the data is Art. 6 (1) sentence 1 lit. f GDPR.

d. Duration of storage

The data is deleted as soon as it is no longer needed to achieve the purpose of its collection. In the case of the collection of data for the provision of the website, this is the case when the respective session is ended.

e. Possibility of objection

The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. The user can object to this. Whether the objection is successful must be determined in the context of a balancing of interests.

6. Use of cookies

a. Description and scope of data processing

When you visit our website, we use technical aids for various functions, in particular cookies, which can be stored on your end device. When you access our website and at any time later, you have the choice of whether you generally allow the setting of cookies or which individual additional functions you want to select. You can make changes in your browser settings or via our consent manager. Cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you are using, so that certain information can flow to the party that sets the cookie. Below we describe what type of cookies we use:

Language settings
Items in the shopping cart
Log-in information
Entered search terms

We use cookies on our website that are not technically necessary. Technically unnecessary cookies are considered to be text files that do not solely serve the functionality of the website, but also collect other data.

By setting technically unnecessary cookies, the following data is processed:

b. Purpose of data processing

Shopping cart
Adoption of language settings
Remembering search terms

The use of technically unnecessary cookies takes place for the purpose of improving the quality of our website, its content and thus our reach and economic viability. By setting these cookies, we learn how the website is used and can thus continuously optimize our offering. In particular, these cookies serve us for the following purposes:
Google Analytics

c. Legal basis for data processing

The provisions of the Telecommunications Digital Services Data Protection Act (TDDDG) are relevant for the storage of information in the end user's end device and/or access to information already stored in the end user's end device. If the setting and reading of cookies is technically necessary, this is done to ensure the functionality of our website. In this case, the storage and access to cookies on your end device is based on § 25 (2) No. 2 TDDDG. This storage and access to the information on your end device serves to make it easier for you to use our website and to be able to offer you our services as you wish. Some functions of our website also do not work without the use of these cookies and could therefore not be offered. The cookies are generally deleted after the end of the session (e.g. logging out or closing the browser) or after the expiry of a predetermined duration. Information on differing storage periods for cookies can be found in the following sections of this privacy policy.

Insofar as cookies are used that are not technically necessary, this is done on the basis of your explicit consent, which you can give via the cookie banner. The basis for the storage and access to information is in this case § 25 (1) TDDDG in conjunction with Art. 6 (1) lit. a), Art. 7 GDPR. You can revoke your consent at any time with effect for the future or
subsequently grant it again by configuring your cookie settings accordingly. Alternatively, you can prevent the storage of cookies by making the appropriate settings in your browser software. Please note that the browser settings made always only apply to the browser used. If personal data is processed following the storage and access to the information on your end device, the provisions of the GDPR are relevant. Information on this can be found in the following sections of this privacy policy.

7. Registration

a. Description and scope of data processing

On our website we offer users the opportunity to register by providing personal data. The data is entered into an input mask and transmitted to us and stored. The data is not passed on to third parties. The following data is collected as part of the registration process:

Email address
Last name
First name
Address
Phone / mobile phone number
Date and time of registration

In the context of the registration process, the user's consent to the processing of this data is obtained.

b. Purpose of data processing

A registration of the user is necessary for the fulfillment of a contract with the user, for the implementation of pre-contractual measures and for the delivery of the ordered items.

c. Legal basis for data processing

The legal basis for processing the data, if the user has given his consent, is Art. 6 (1) sentence 1 lit. a GDPR.
If the registration serves the fulfillment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for processing the data is Art. 6 (1) sentence 1 lit. b GDPR.

d. Duration of storage

The data will be deleted as soon as it is no longer required to achieve the purpose of its collection.
This is the case for the data collected during the registration process for the fulfillment of a contract or the implementation of pre-contractual measures if the data is no longer required for the performance of the contract. Even after the conclusion of the contract, there may be a need to store personal data of the contracting party in order to comply with contractual or legal obligations.

e. Possibility of revocation

As a user, you have the option to cancel the registration at any time. You can have the data stored about you changed at any time by sending an email to sam.de@liveyourmusic.com.

If the data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, premature deletion of the data is only possible insofar as no contractual or legal obligations prevent deletion.

8. Webshop

We offer a webshop on our website. For this we use the Software as a Service (SaaS) rental shop system of a service provider commissioned by us. The name of our rental shop system as well as the name and address of the service provider is:

Shopify of the provider Shopify International Limited, 1-2 Haddington Road, D04 XN32, Dublin, Ireland (hereinafter referred to as Shopify).

For more information, please see the provider's privacy policy:
https://www.shopify.de/legal/datenschutz

The servers collect and automatically store information in so-called server log files, which your browser automatically transmits when visiting the website. The stored information includes:

Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Date and time of the server request
IP address

A merging of this data with other data sources is not carried out. The collection of this data takes place on the basis of Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and the optimization of his website - for this the server log files must be collected.

We have concluded a data processing agreement with the relevant service provider, in which we oblige the relevant service provider to protect user data and not to pass it on to third parties.

The location of the website server is geographically in Germany.

9. Payment options

a. Description and scope of data processing

We offer our customers various payment options to process your orders. For this, we forward customers, depending on the payment option, to the platform of the respective payment service provider. After the completion of the payment process, we receive the payment data of the customers from the payment service providers or our house bank and process this in our systems for the purpose of invoicing and accounting.

Payment via Amazon Pay

There is the possibility to process the payment transaction with the payment service provider AmazonPay. AmazonPay enables online payments to be made to third parties by accessing the payment and shipping information stored in your Amazon account.
The European operating company of AmazonPay is Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg. If you already have an Amazon.de customer account, you can pay immediately with the payment method stored there - either by direct debit or by credit card. This requires you to log in to your Amazon account.

Further information and your order overview for paying via AmazonPay can be found at https://pays.amazon.de. When paying via Amazon Pay, all personal data that is communicated to Amazon Pay or collected by Amazon Pay is processed primarily by Amazon Pays s.c.a. and secondarily by Amazon EU SARL, Amazon Services Europe SARL and Amazon Media EU SARL, all three based at 5, Rue Plaetis L 2338, Luxembourg.

Further information on the processing of your data by Amazon in the context of AmazonPay can be found in the privacy policy of Amazon Pay at:
https://pay.amazon.com/de/help/201751600

Payment via Klarna

There is the possibility to process the payment transaction with the payment service provider Klarna. Klarna is a payment service provider that enables purchase on account or installment payment. The European operating company of Klarna is Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. If you select "purchase on account" or "installment purchase" as a payment option in the context of the transaction via Klarna, your personal data will be automatically transmitted to Klarna.

The personal data transmitted to Klarna includes in particular:

First name
Last name
Address
Date of birth
Gender
Email address
IP address
Phone / mobile phone number
Bank details
Credit card number including expiration date and CVC code
Number of items
Item number
Data on goods and/or services
Transaction amount and tax charges

The transmission of the data is intended in particular for identity verification, payment administration and fraud prevention. The personal data exchanged between Klarna and us may be transmitted by Klarna to credit reporting agencies.
This transmission is intended for identity and creditworthiness checks. Klarna may also pass on personal data to affiliated companies (Klarna Group) and service providers or subcontractors, insofar as this is necessary for the fulfillment of contractual obligations or the data is to be processed on behalf of Klarna.

Further information on the processing of your data by Klarna can be found in the privacy policy of Klarna at:
https://www.klarna.com/de/datenschutz/.

Payment via credit card

There is the possibility to complete the payment transaction by credit card.
If you have chosen payment by credit card, payment data will be passed on to payment service providers for payment processing. All payment service providers comply with the requirements of the "Payment Card Industry (PCI) Data Security Standards" and have been certified by an independent PCI Qualified Security Assessor.

In the context of payment by credit card, the following data is regularly transmitted:

Purchase amount
Date and time of purchase
First name and last name
Address
Email address
Credit card number
Validity period of the credit card
Security code (CVC)
IP address
Phone number / mobile phone number

Payment data is passed on to the following payment service providers:

Concardis GmbH, Helfmann-Park 7, 65760 Eschborn, Germany

Further information on data protection guidelines as well as revocation and removal options vis-à-vis the payment service providers can be found here:
Concardis:
https://www.concardis.com/datenschutzerklaerung/#c14519

Payment via PayPal

There is the possibility to process the payment transaction with the payment service provider PayPal. In addition to a direct payment method, PayPal also offers purchase on account, by direct debit, by credit card and installment payment.

The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg.
If you choose PayPal as the payment method, your data required for the payment process will be automatically transmitted to PayPal.
This includes in particular the following data:

Name
Address
Email address
Phone / mobile phone number
IP address
Bank details
Card number
Expiration date and CVC code
Number of items
Item number
Data on goods and services
Transaction amount and tax charges
Information on previous purchasing behavior

The data transmitted to PayPal may be transmitted by PayPal to credit reporting agencies. This transmission is intended for identity and creditworthiness checks.

PayPal may also pass on your data to third parties, insofar as this is necessary for the fulfillment of contractual obligations or the data is to be processed on behalf of PayPal. When transmitting your personal data within companies affiliated with PayPal, the Binding Corporate Rules apply, which have been approved by the competent supervisory authorities. You can find them here:
https://www.paypal.com/de/webapps/mpp/ua/bcr

Other data transfers may be based on contractual protection provisions. For further information, please contact PayPal.

All PayPal transactions are subject to PayPal's privacy policy. You can find it at:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full/

Payment via Sofortüberweisung

There is the possibility of payment via Sofortüberweisung. In this case, the data is collected by Sofort GmbH, Theresienhöhe 12, 80339 Munich. The controller does not collect and store the data itself.

By issuing a Sofortüberweisung, you instruct Sofort GmbH to automatically check whether your account covers the amount to be transferred (account cover check), and whether any Sofortüberweisungen from the last 30 days have been successfully carried out from your account, and after a positive check, to transmit the transfer order released by you in electronic form to your bank, as well as to inform us, as the payee selected by you (online provider), about the successful initiation of the transfer. For this, Sofort GmbH requires the IBAN as well as the PIN and TAN of your online banking account. In the course of the ordering process, you will be automatically forwarded to the secure payment form of Sofort GmbH. Immediately afterwards you will receive the confirmation of the transaction. We then receive the transfer credit directly.

Sofortüberweisung as a payment method can be used by anyone who has an activated online banking account with a PIN/TAN procedure.
Please note that a few banks do not yet support payment via Sofortüberweisung. You can obtain more information at the following link:
https://www.klarna.com/sofort/

Further information on the stored data can be found at https://www.klarna.com/sofort/#cq-0.

Payment via advance payment

If you have chosen payment by advance payment, no data is processed by us except the data transmitted by your bank. This is only used to check the receipt of payment.

Other payment options

We also offer payment with the following options:
Cash on delivery

b. Purpose of data processing

The transmission of payment data to payment service providers serves the processing of the payment, e.g. when you purchase a product and/or use a service.

c. Legal basis for data processing

The legal basis for data processing is Art. 6 (1) sentence 1 lit. b GDPR, since the processing of the data is necessary for the processing of the concluded purchase contract.

d. Duration of storage

All payment data as well as data on any chargebacks that may occur are stored only as long as they are required for payment processing and possible processing of returned debits and debt collection as well as for combating abuse.

Furthermore, payment data may be stored beyond this if and as long as this is necessary to comply with statutory retention periods or to pursue a specific case of abuse.

Your personal data will be deleted upon expiry of the legal retention obligations, i.e. after a maximum of 10 years.

e. Lapse of the legal basis

The payment service provider used remains entitled to process your payment data insofar and as long as this is necessary for contractual payment processing. There may also be legal retention periods beyond this.

10. Shipping service providers

a. Description and scope of data processing

If you order products or services on our website for the delivery of which a shipping service provider is used, you will receive your order and shipping confirmation via your email address as well as, depending on the respective shipping service provider, the notification that your shipment has arrived and/or the notification of the parcel announcement as well as possible delivery options.
The data is transmitted to the following service providers:

DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany
General Logistics Systems Germany GmbH & Co. OHG, GLS-Germany-Str. 1-7, 36286 Neuenstein, Germany
Hermes Germany GmbH, Essener Straße 89, 22419 Hamburg, Germany
UPS Europa SA, Ave Ariane 5, Brussels, B-1200, Belgium
FedEx Express Deutschland GmbH, Haberstraße 2, 53842 Troisdorf, Germany
SPRING GDS Headquarters, Groendahlscher Weg 87, 46446 Emmerich

The transmitted data regularly includes:

Name
Address
Email address

b. Purpose of data processing

The purpose of the processing of personal data is to give shipping service providers the opportunity to inform recipients about the shipment progress by email and thus to increase the likelihood of successful delivery.

c. Legal basis for data processing

The legal basis for the transmission of the email address to the respective shipping service provider as well as its use is your consent pursuant to Art. 6 (1) lit. a GDPR. The legal basis for the transmission of your address data (first name, last name, address) to the respective shipping service provider is Art. 6 (1) sentence 1 lit. b GDPR, since the processing of the data is necessary for the processing of the concluded purchase contract.

d. Duration of storage

The transmitted data is deleted at the respective shipping service provider when the parcel could be delivered.

e. Possibility of objection

The notification service by the shipping service provider can be terminated by the affected user at any time. For this purpose, a corresponding opt-out link can be found in every email.

11. Newsletter

a. Description and scope of data processing

There is the possibility to subscribe to a free newsletter. When registering for the newsletter, the following data from the input mask or the ordering process is processed by us:

Email address

The data is used exclusively for sending the newsletter and for statistical analysis. We use a shipping service provider for sending the newsletters (see "Klaviyo").

Insofar as the consent also covers consent in favor of individual artists, we process this data as a data processor for the respective artist.

b. Purpose of data processing

The collection of the user's email address serves to deliver the newsletter.

c. Legal basis for data processing

The legal basis for the processing of the data after registration for the newsletter by the user is, in the presence of consent of the user, Art. 6 (1) sentence 1 lit. a GDPR.

d. Duration of storage

The data will be deleted as soon as it is no longer needed to achieve the purpose of its collection. The user's email address and the documentation of consent are therefore stored as long as the newsletter subscription is active.
The other personal data collected during the registration process is generally deleted after a period of seven days.

e. Possibility of revocation

The subscription to the newsletter can be canceled by the affected user at any time. For this purpose, a corresponding link can be found in every newsletter.

This also enables a revocation of the consent to the processing of the storage of the personal data collected during the registration process for the purpose of newsletter delivery and evaluation.

12. Email contact

a. Description and scope of data processing

On our website, contact is possible via the email address provided. In this case, the personal data of the user transmitted with the email is stored. The data is used exclusively for processing the conversation.

b. Purpose of data processing

In the case of contact via email, this is also the required legitimate interest in the processing of the data.

c. Legal basis for data processing

The legal basis for the processing of the data transmitted in the course of sending an email is Art. 6 (1) lit. f GDPR. Our legitimate interest is to answer your inquiry, which you send by email, optimally. If the email contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR.

d. Duration of storage

The data will be deleted as soon as it is no longer needed to achieve the purpose of its collection. For the personal data sent by email, this is the case when the respective conversation with the user is ended. The conversation is ended when it can be inferred from the circumstances that the relevant matter has been conclusively clarified.
The personal data additionally collected during the sending process is deleted at the latest after a period of seven days.

e. Possibility of objection

If the user contacts us by email, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
Email to sam.de@liveyourmusic.com

All personal data that was stored in the course of the contact will be deleted in this case.
Email to sam.de@liveyourmusic.com

13. Job application by email

a. Scope of processing of personal data

You can send us your application by email. We collect your email address and the data communicated by you in the email.

Email address

Your data will not be passed on to third parties. The data is used exclusively for processing your application.

b. Purpose of data processing

The processing of personal data from your application email serves us solely for processing your application.

c. Legal basis for data processing

The legal basis for the processing of your data is the contract initiation, which takes place at the request of the data subject, Art. 6 (1) sentence 1 lit. b alt. 1 GDPR and § 26 (1) sentence 1 BDSG.

d. Duration of storage

After the conclusion of the application process, the data will be stored for up to six months. At the latest after the expiry of the six months, your data will be deleted. In the case of a legal obligation, the data will be stored within the framework of the applicable provisions.

14. Company presences

Use of company presences on social networks

Instagram, Part of Meta Platforms Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2 Ireland

On our company page, we provide information and offer Instagram users the opportunity for communication. If you carry out an action on our Instagram company presence (e.g. comments, posts, likes etc.), it may be that you make personal data (e.g. real name or photo of your user profile) public. However, since we generally or to a large extent have no influence on the processing of your personal data by Instagram, the companies jointly responsible for the IC Music and Apparel GmbH company presence, we cannot make any binding statements about the purpose and scope of the processing of your data.

Our company presence on social networks is used for communication and information exchange with (potential) customers. In particular, we use the company presence for:
General information

The publications via the company presence may contain the following content:

Information about products
Information about services

Every user is free to publish personal data through activities. Insofar as we process your personal data to evaluate your online behavior, to offer you competitions or to carry out lead campaigns, this is done on the basis of your express declaration of consent, Art. 6 (1) sentence 1 lit. a, Art. 7 GDPR. The legal basis for the processing of personal data for the purpose of communication with customers and prospective customers is Art. 6 (1) sentence 1 lit. f GDPR. Our legitimate interest is to answer your inquiry optimally or to be able to provide the requested information. If the contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR.

The data generated through the company presence is not stored in our own systems.
For the processing of your personal data in third countries, we have provided suitable guarantees in the form of standard data protection clauses pursuant to Art. 46 (2) lit. c GDPR. A copy of the standard data protection clauses can be requested from us.

You can object to the processing of your personal data that we collect in the context of your use of our Instagram company presence at any time and assert your rights as a data subject mentioned under IV. of this privacy policy. To do so, send us an informal email to sam.de@liveyourmusic.com. For the processing of your personal data by Instagram and the corresponding objection options, you can find further information here:
Instagram: https://help.instagram.com/519522125107875

X (formerly Twitter) International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland

On our company page, we provide information and offer X users the opportunity for communication. If you carry out an action on our X company presence (e.g. comments, posts, likes etc.), it may be that you make personal data (e.g. real name or photo of your user profile) public. However, since we generally or to a large extent have no influence on the processing of your personal data by X, the companies jointly responsible for the IC Music and Apparel GmbH company presence, we cannot make any binding statements about the purpose and scope of the processing of your data.

Our company presence on social networks is used for communication and information exchange with (potential) customers. In particular, we use the company presence for:

General information

The publications via the company presence may contain the following content:

Information about products
Information about services

You can object to the processing of your personal data that we collect in the context of your use of our X company presence at any time and assert your rights as a data subject mentioned under IV. of this privacy policy. To do so, send us an informal email to sam.de@liveyourmusic.com. For the processing of your personal data by X and the corresponding objection options, you can find further information here:
X: https://x.com/en/privacy

YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States

On our company page, we provide information and offer YouTube users the opportunity for communication. If you carry out an action on our YouTube company presence (e.g. comments, posts, likes etc.), it may be that you make personal data (e.g. real name or photo of your user profile) public. However, since we generally or to a large extent have no influence on the processing of your personal data by YouTube, the companies jointly responsible for the IC Music and Apparel GmbH company presence, we cannot make any binding statements about the purpose and scope of the processing of your data.
Our company presence on social networks is used for communication and information exchange with (potential) customers. In particular, we use the company presence for:
General information

The publications via the company presence may contain the following content:

Information about products
Information about services

Every user is free to publish personal data through activities.
Insofar as we process your personal data to evaluate your online behavior, to offer you competitions or to carry out lead campaigns, this is done on the basis of your express declaration of consent, Art. 6 (1) sentence 1 lit. a, Art. 7 GDPR. The legal basis for the processing of personal data for the purpose of communication with customers and prospective customers is Art. 6 (1) sentence 1 lit. f GDPR. Our legitimate interest is to answer your inquiry optimally or to be able to provide the requested information. If the contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR.

The data generated through the company presence is not stored in our own systems. For the processing of your personal data in third countries, we have provided suitable guarantees in the form of standard data protection clauses pursuant to Art. 46 (2) lit. c GDPR. A copy of the standard data protection clauses can be requested from us.

You can object to the processing of your personal data that we collect in the context of your use of our YouTube company presence at any time and assert your rights as a data subject mentioned under IV. of this privacy policy. To do so, send us an informal email to sam.de@liveyourmusic.com. For the processing of your personal data by YouTube and the corresponding objection options, you can find further information here:
YouTube: https://policies.google.com/privacy?gl=DE&hl=de

TikTok: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland

On our company page, we provide information and offer TikTok users the opportunity for communication. If you carry out an action on our TikTok company presence (e.g. comments, posts, likes etc.), it may be that you make personal data (e.g. real name or photo of your user profile) public. However, since we generally or largely have no influence on the processing of your personal data by TikTok, we cannot make binding statements about the purpose and scope of the processing of your data. We use our company presence on social networks for communication and information exchange with (potential) customers.

The publications via the company presence may contain the following content:

Information about products
Information about services
Advertising

If the contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR.

The data generated through the company presence is not stored in our own systems. You can object to the processing of your personal data that we collect in the context of your use of our company presence at any time and assert your rights as a data subject, as set out in the section "Rights of users" in this privacy policy. To do so, send us an informal email to sam.de@liveyourmusic.com.

For the processing of your personal data by TikTok and the corresponding objection options, you can find further information here: https://www.tiktok.com/legal/page/eea/privacy-policy/de

Spotify: Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden

Plugins of the music service Spotify (Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden) may be integrated on our page. You can recognize these plugins by the Spotify logo. A connection to the Spotify servers is only established when you click on this symbol.

As soon as the plugin is activated, a direct connection is established between your browser and the Spotify server. Spotify thereby receives the information that you have visited our page with your IP address. If you are logged into your Spotify account during the visit and click on the "Like" or "Share" button, you can link or share content of our pages with your Spotify profile. In this case, Spotify can assign the visit of our page to your user account.

We would like to point out that we, as the provider of the page, have no knowledge of the content of the transmitted data or its use by Spotify. Further information can be found in Spotify's privacy policy at: https://www.spotify.com/de/legal/privacy-policy/

If you do not want Spotify to link the visit of our page to your user account, please log out before using the Spotify plugin or do not click on the corresponding symbol.

15. Use of company presences on career-oriented networks

a. Scope of data processing

We use the possibility of company presences on career-oriented networks. We maintain a company presence on the following career-oriented networks:

LinkedIn, Unlimited Company, Wilton Place, Dublin 2, Ireland

On our page, we provide information and offer users the opportunity for communication. The company presence is used for applications, information/PR and active sourcing. We have no information on the processing of your personal data by the companies jointly responsible for the company presence.

You can find more information on this in LinkedIn's privacy policy:
https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

If you carry out an action on our company presence (e.g. comments, posts, likes etc.), it may be that you make personal data (e.g. real name or photo of your user profile) public.

b. Legal basis for data processing

The legal basis for the processing of personal data for the purpose of communication with customers and prospective customers is Art. 6 (1) sentence 1 lit. f GDPR. Our legitimate interest is to answer your inquiry optimally or to be able to provide the requested information. If the contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR.

c. Purpose of data processing

Our company presence serves us to inform users about our services. Every user is free to publish personal data through activities.

d. Duration of storage

We store your activities and personal data published via our company presence until the revocation of consent. In addition, we observe the legal retention periods.

e. Possibility of objection

You can object to the processing of your personal data that we collect in the context of your use of our company presence at any time and assert your rights as a data subject mentioned under IV. of this privacy policy. To do so, send us an informal email to the email address mentioned in this privacy policy.

Further information on objection and removal options can be found here:
https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

16. Partner programs

Use of AWIN

a. Description and scope of data processing

Our website uses functions of the advertising platform AWIN of AWIN AG, Otto-Ostrowski-Straße 1A, 10249 Berlin (hereinafter referred to as AWIN). AWIN measures which website forwards a user to another website so that the second website can gain more website traffic. When you visit our page, a cookie from AWIN is stored on your computer. As a result, personal data can be stored and evaluated, especially the activity of the user (in particular which pages have been visited and which elements have been clicked on), device and browser information (in particular the IP address and the operating system), data about the displayed advertisements (in particular which advertisements were displayed and whether the user clicked on them) and also data from advertising partners (in particular pseudonymized user IDs). Further information on the collection and storage of data by AWIN can be found here:
https://www.awin.com/de/datenschutzerklarung

b. Purpose of data processing

The use of AWIN serves to track the number of calls to partner links. We use this plug-in in order to be able to receive an advertising cost refund (so-called affiliate system).

c. Legal basis for data processing

The legal basis for data processing is Art. 6 (1) lit. a GDPR.

d. Duration of storage

Your personal information will be stored for as long as is necessary to fulfill the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.

e. Possibility of revocation

You can prevent the collection and processing of your personal data by AWIN by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (www.noscript.net) or Ghostery (www.ghostery.com) in your browser. Further information on exercising your rights vis-à-vis AWIN can be found at:
https://www.awin.com/de/datenschutzerklarung

17. Content Delivery Networks

Use of CloudFlare

a. Description and scope of data processing

On our website, we use functions of the Content Delivery Network CloudFlare of CloudFlare Germany GmbH, Rosental 7, 80331 Munich, Germany (hereinafter referred to as CloudFlare).

A Content Delivery Network (CDN) is a network of regionally distributed servers connected via the Internet, with which content - in particular large media files such as videos - is delivered. CloudFlare offers web optimization and security services that we use to improve the loading times of our website and to protect it from abusive use. When you visit our website, a connection is established to the servers of CloudFlare in order to, for example, retrieve content. As a result, personal data can be stored and evaluated in server log files, especially the activity of the user (in particular which pages have been visited) and device and browser information (in particular the IP address and the operating system).

Further information on the collection and storage of data by CloudFlare can be found here:
https://www.cloudflare.com/de-de/privacypolicy/

b. Purpose of data processing

The use of the functions of CloudFlare serves the delivery and acceleration of online applications and content.

c. Legal basis for data processing

The collection of this data takes place on the basis of Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and the optimization of his website - for this the server log files must be collected.

d. Duration of storage

Your personal information will be stored for as long as is necessary to fulfill the purposes described in this privacy policy or as required by law.

e. Possibility of revocation

Information on exercising your rights vis-à-vis CloudFlare can be found at:
https://www.cloudflare.com/de-de/privacypolicy/

18. Plugins used

We use plugins for various purposes. The plugins used are listed below:

The service providers marked with an * below have a certification pursuant to the EU-U.S. Privacy Framework, so that an adequate level of data protection is ensured for data processing and the conclusion of standard contractual clauses is not required.

Use of Facebook Comments(*)

a. Description and scope of data processing

The comment function of Facebook is integrated on our website. The provider of the service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

When you comment on a post or interact with it, personal data is processed. This may include in particular: your Facebook profile name, profile picture, the content of your comment, timestamps as well as technical usage data (e.g. IP address, device and browser information). The data is transmitted to Meta Platforms Ireland Limited and may also be processed by Meta for its own purposes. Further information on data processing by Meta can be found in Facebook's privacy policy:

b. Purpose of data processing

The processing is carried out to give users the opportunity to comment on content on our website, interact with it and enable a public exchange. In addition, Meta uses the data for its own purposes, in particular for the provision and improvement of Facebook services as well as for analysis and security purposes.

c. Legal basis for data processing

The integration of Facebook Comments and the associated processing of personal data takes place on the basis of your consent pursuant to Art. 6 (1) lit. a GDPR. Insofar as Meta processes the data for its own purposes, this is done according to the legal bases established by Meta, which are explained in more detail in Meta's privacy policy.

d. Exercise of your rights

To exercise your rights regarding the data processed by Facebook, please contact Meta Platforms Ireland Limited directly. Further information on this can be found in Meta's privacy policy: https://www.facebook.com/privacy/policy/?locale=de_DE

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

You can prevent the collection and processing of your personal data by Facebook by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

Further information on objection and removal options vis-à-vis Facebook can be found at:
https://de-de.facebook.com/policy.php

Use of the Meta Graph API(*)

a. Scope of processing of personal data

We use functionalities of the Meta Graph API on our website, a service of Meta Platforms Inc. 1601 Willow Road, Menlo Park, CA, 94025, USA. If you have your place of residence in the EU, the EEA or Switzerland, these services are provided by Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland. The Meta Graph API enables us to access certain data and functions of the social network Facebook.

b. Purpose of data processing

The use of the Meta Graph API enables improved integration with the social network and can be used to allow the user to log in to our shop with their Facebook account, or for example to retrieve information from a Facebook profile to personalize the user experience on our website, or to post content, photos and videos on a Facebook page.

c. Legal basis for the processing of personal data

The legal basis for the processing of personal data is the consent given by the user pursuant to Art. 6 (1) (1) (a) GDPR.

d. Duration of storage

We store the data collected via the Meta Graph API only for as long as is necessary for the respective purpose for which it was collected, or until the user revokes their consent.

e. Objection and deletion options

Users can revoke their consent at any time if the data processing is based on consent pursuant to Article 6 (1) (1) (a) GDPR.

Use of the Meta Graph API(* Tracking)

a. Description and scope of data processing

We use the Meta Graph API of Meta Platforms Ireland Limited to technically implement tracking and analysis functions in connection with Meta services (e.g. Facebook, Instagram). The following personal data may be processed in particular:
• Usage and interaction data (e.g. page views, events, click behavior)
• Device and browser information (e.g. IP address, operating system, language settings)
• Online identifiers (e.g. cookie IDs, pixel IDs, app IDs)
The processing is generally carried out in pseudonymized form. Meta may link the collected data to existing Meta accounts if the data subject is logged in to a Meta service. The body responsible for the processing within the EU is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Further information on data processing by Meta is described in Meta's privacy policy: https://www.facebook.com/privacy/policy/?locale=de_DE

b. Purpose of data processing

The use of the Meta Graph API is carried out for the following purposes:
• Analysis and evaluation of user behavior
• Measurement of the effectiveness of marketing and communication activities
• Technical optimization of content, campaigns and target group communication
• Reporting and statistical evaluations

c. Legal basis for data processing

The processing of personal data in the context of tracking via the Meta Graph API takes place on the basis of Art. 6 (1) lit. a GDPR (consent), insofar as tracking or marketing cookies are used. Insofar as consent is required, this is obtained before the start of processing and can be revoked at any time with effect for the future.

d. Exercise of your rights

To exercise your rights regarding the data processing by Meta, you can contact Meta Platforms Ireland Limited directly. Further information on this can be found in Meta's privacy policy: https://www.meta.com/ie/legal/privacy-policy/

Users can revoke their consent at any time if the data processing is based on consent pursuant to Article 6 (1) (1) (a) GDPR.

Use of Google AdWords(*)

a. Scope of processing of personal data

We use Google AdWords of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and the representative in the Union Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as Google).

With this service we display advertising. Google sets a cookie on your computer. As a result, personal data can be stored and evaluated, especially the activity of the user (in particular which pages have been visited and which elements have been clicked on), device and browser information (in particular the IP address and the operating system), data about the displayed advertisements (in particular which advertisements were displayed and whether the user clicked on them) and also data from advertising partners (in particular pseudonymized user IDs).

Further information on the processing of data by Google can be found here:
https://policies.google.com/privacy?gl=DE&hl=de

b. Purpose of data processing

We only receive information about the total number of users who have responded to our ad. No information is passed on that could identify you. The use is not for tracing.

c. Legal basis for the processing of personal data

The legal basis for the processing of users' personal data is generally the user's consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR.

d. Duration of storage

Your personal information will be stored for as long as is necessary to fulfill the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.

e. Revocation and removal option

You can prevent the collection and processing of your personal data by Google by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

With the following link you can deactivate the use of your personal data by Google:
https://adssettings.google.de

Further information on objection and removal options vis-à-vis Google can be found at:
https://policies.google.com/privacy?gl=DE&hl=de

Use of Google Analytics(*)

a. Scope of processing of personal data

We use Google Analytics, a web analytics service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and the representative in the Union Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as Google).

Google Analytics examines, among other things, the origin of visitors, their time spent on individual pages as well as the use of search engines and thus allows a better success control of advertising campaigns. Google sets a cookie on your computer. As a result, personal data can be stored and evaluated, especially the activity of the user (in particular which pages have been visited and which elements have been clicked on), device and browser information (in particular the IP address and the operating system), data about the displayed advertisements (in particular which advertisements were displayed and whether the user clicked on them) and also data from advertising partners (in particular pseudonymized user IDs).

We use Google Analytics (Universal Analytics) to evaluate your use of our online presence, to compile reports on your activities and to use other services of Google in connection with the use of our online presence and the use of the internet. We have required the anonymization of IP addresses, whereby Google shortens your IP address as promptly as technically possible. However, it cannot be ruled out that your data will be transmitted to the servers of Google LLC based in the USA.

On behalf of the operator of this online presence, Google will use this information to evaluate your use of the online presence, to compile reports on the activities of the online presence and to provide further services to the operator of the online presence in connection with the use of the online presence and the use of the internet.

Further information on the processing of data by Google can be found here:
https://policies.google.com/privacy?gl=DE&hl=de

b. Purpose of data processing

The use of Google Analytics (Universal Analytics) serves us for the evaluation of the use of our online presence as well as the targeted display of advertising to persons who have already expressed an initial interest through their page visit.

c. Legal basis for the processing of personal data

The legal basis for the processing of users' personal data is generally the user's consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR.

d. Duration of storage

Your personal information will be stored for as long as is necessary to fulfill the purposes described in this privacy policy or until you exercise your right of revocation.

e. Possibility of revocation

In addition, you can prevent the collection of the data generated by the cookie and related to your use of the online presence (including your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=de

With the following link you can deactivate the use of your personal data by Google:
https://adssettings.google.de

Further information on objection and removal options vis-à-vis Google can be found at:
https://policies.google.com/privacy?gl=DE&hl=de

Use of MailChimp(*)

a. Scope of processing of personal data

For sending our newsletters, we use the service provider MailChimp of The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA (hereinafter referred to as MailChimp).

MailChimp is a provider of email marketing and enables us to communicate directly with potential customers via email newsletters. If you register for the newsletter, the data you enter when registering for the newsletter is transmitted to MailChimp and stored there. As a result, further personal data can be stored and evaluated, especially the activity of the user (in particular which pages have been visited and which elements have been clicked on) and device and browser information (in particular the IP address and the operating system).

For this purpose, your data is also stored by MailChimp. Your data will not be passed on to third parties for the purpose of receiving the newsletter and MailChimp also does not acquire any right to pass on your data. After registration, MailChimp sends you an email to confirm your registration. Furthermore, MailChimp offers various analysis options on how the sent newsletters are opened and used, e.g. how many users an email was sent to, whether emails were rejected and whether users unsubscribed from the list after receiving an email.

Further information on the processing of data by MailChimp can be found here:
https://MailChimp.com/legal/privacy/

b. Purpose of data processing

The personal data collected as part of registration for the newsletter is used exclusively for sending our newsletter, possibly for invitations to events and, if you are already our customer, for our customer mail. Furthermore, subscribers to the newsletter could be informed by email if this is necessary for the operation of the newsletter service or a registration in this regard, as could be the case in the case of changes to the newsletter offer or in the case of changes to the technical conditions.

c. Legal basis for the processing of personal data

The legal basis for the processing of users' personal data is generally the user's consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR.

d. Duration of storage

Your personal information will be stored for as long as is necessary to fulfill the purposes described in this privacy policy or as required by law. In addition, you can contact MailChimp and request the deletion of your data.

e. Revocation and removal option

You can revoke your consent to the storage of the data as well as its use for sending the newsletter by MailChimp at any time. You can exercise your revocation at any time by email to MailChimp or by clicking on the link provided in each newsletter.

Further information on objection and removal options vis-à-vis MailChimp can be found at:
https://MailChimp.com/legal/privacy/

Use of Font Awesome

a. Scope of processing of personal data

We use fonts from Font Awesome, a service of Fonticons, Inc., 6 Porter Road, Apartment 3R, Cambridge, MA 02140, USA (hereinafter referred to as Font Awesome).

The fonts are transferred to the browser cache when the page is called up in order to be able to use them for the visually improved display of various information. As a result, personal data can be stored, transmitted and evaluated, especially device and browser information (in particular the IP address and the operating system). If the browser does not support Font Awesome or prevents access, the text is displayed in a standard font. No cookies are set on the visitor when the page is called up.

Further information on the processing of data by Font Awesome can be found here:
https://origin.fontawesome.com/privacy

b. Purpose of data processing

The use of Google Webfonts serves an appealing presentation of our texts.

c. Legal basis for the processing of personal data

The legal basis for the processing of users' personal data is generally the user's consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR.

d. Duration of storage

Your personal information will be stored for as long as is necessary to fulfill the purposes described in this privacy policy or as required by law.

e. Revocation and removal option

You can prevent the collection and processing of your personal data by Font Awesome by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

Further information on objection and removal options vis-à-vis Font Awesome can be found at:
https://origin.fontawesome.com/privacy

Use of Google Tag Manager(*)

a. Scope of processing of personal data

We use Google Tag Manager (https://www.google.com/intl/de/tagmanager/) of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and the representative in the Union Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as Google).

With Google Tag Manager, tags of services from Google and third-party providers can be managed and embedded in a bundled manner on an online presence. Tags are small code elements on an online presence that serve, among other things, to measure visitor numbers and behavior, to record the impact of online advertising and social channels, to use remarketing and target group targeting, and to test and optimize online presences. When a user visits the online presence, the current tag configuration is sent to the user's browser. It contains instructions on which tags should be triggered. Google Tag Manager triggers other tags, which in turn may collect data. Information on this can be found in the passages on the use of the corresponding services in this privacy policy. Google Tag Manager does not access this data.

Further information on Google Tag Manager can be found at
https://www.google.com/intl/de/tagmanager/faq.html and in Google's privacy policy: https://policies.google.com/privacy?hl=de

b. Purpose of data processing

The purpose of processing personal data lies in the collected and clear management as well as efficient integration of services from third-party providers.

c. Legal basis for the processing of personal data

The legal basis for the processing of users' personal data is generally the user's consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR.

d. Duration of storage

Your personal information will be stored for as long as is necessary to fulfill the purposes described in this privacy policy or as required by law. Advertising data in server protocols is anonymized by Google, according to its own information, by deleting parts of the IP address and cookie information after 9 or 18 months.

e. Revocation and removal option

With the following link you can deactivate the use of your personal data by Google:
https://adssettings.google.de

Further information on objection and removal options vis-à-vis Google can be found at:
https://policies.google.com/privacy?gl=DE&hl=de

Use of Channable

a. Scope of processing of personal data

We use Channable for our website from the provider, ProductImpulse B.V., Kromme Nieuwegracht 66, 3512 HL Utrecht. This is a provider of e-commerce solutions for feed management and SEA automation. Channable is a feed management system with which complex product data can be quickly and easily structured, analyzed and optimized for various shopping and marketing channels and made available.

Further information on the processing of data by Channable can be found here:
https://www.channable.com/privacy-policy

b. Purpose of data processing

The purpose of processing personal data lies in the structuring and analysis of product data in order to make it available in an optimized way.

c. Legal basis for the processing of personal data

The legal basis for the processing of users' personal data is generally the user's consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR.

d. Duration of storage

Your personal information will be stored for as long as is necessary to fulfill the purposes described in this privacy policy or as required by law. In addition, you can contact Channable and request the deletion of your data.

e. Revocation and removal option

You can prevent the collection and processing of your personal data by Channable by preventing the storage of third-party cookies on your computer, using the ""Do Not Track""-function of a supporting browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

Further information on your rights vis-à-vis Channable can be found at:
https://www.channable.com/privacy-policy

Use of Klaviyo(*)

a. Scope of processing of personal data

We use Klaviyo, a marketing automation platform, provided by Klaviyo Inc., 125 Summer Street, Floor 6, Boston, MA 02110, USA. Klaviyo is used to create and send email marketing campaigns as well as to analyze user behavior and deliver targeted content.

b. Purpose of data processing

The processing of personal data takes place to provide personalized marketing content, to improve interaction with our customers and to increase the effectiveness of our marketing activities.

c. Legal basis for the processing of personal data

The processing of personal data by Klaviyo is based on your consent pursuant to Art. 6 (1) lit. a GDPR. Insofar as the data processing takes place within the framework of a contractual relationship, it is based on Art. 6 (1) lit. b GDPR.

d. Duration of storage

The personal data collected by Klaviyo is only stored for as long as is necessary for the purpose of data collection. As soon as the purpose is fulfilled or the consent is revoked, the data is securely deleted or anonymized, unless legal retention obligations prevent this.

e. Exercise of your rights

You can prevent the collection and processing of your personal data by Klaviyo by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

Further information on your rights and how Klaviyo processes personal data can be found in Klaviyo's privacy policy: https://www.klaviyo.com/legal/privacy/privacy-notice

Use of Reviews.io

a. Scope of processing of personal data

We use Reviews.io, a review platform for companies, provided by REVIEWS.io Ltd., 29-35 Forresters Building, St Nicholas Place, Leicester, LE1 4LD, United Kingdom. The platform is used to collect and evaluate customer reviews as well as to improve our services.

b. Purpose of data processing

The processing of personal data by Reviews.io takes place for the purpose of collecting and evaluating customer opinions in order to optimize our offer and increase customer satisfaction.

c. Legal basis for the processing of personal data

The processing of personal data by Reviews.io is based on your consent pursuant to Art. 6 (1) lit. a GDPR. This consent is given by actively submitting a review or participating in a corresponding survey.

d. Duration of storage

The personal data collected by Reviews.io is only stored for as long as is required for the above-mentioned purposes. As soon as the purpose of data collection is fulfilled or the consent is revoked, the data is securely deleted or anonymized, unless legal retention obligations exist.

e. Exercise of your rights

You can prevent the collection and processing of your personal data by Reviews.io by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

Further information on your rights and how Reviews.io processes personal data can be found in Reviews.io's privacy policy:
https://www.reviews.io/legal/user-privacy-policy

Use of Funnel.io

a. Scope of processing of personal data

We use Funnel.io, a platform for data integration and reporting, provided by Funnel AB, Vasagatan 16, 111 20 Stockholm, Sweden. The platform is used to automatically collect data from various marketing channels and create reports.

b. Purpose of data processing

The processing of personal data by Funnel.io takes place for the purpose of consolidating marketing data in order to improve our data analysis and optimize our marketing strategies.

c. Legal basis for the processing of personal data

The processing of personal data by Funnel.io is based on our legitimate interest pursuant to Art. 6 (1) lit. f GDPR. This legitimate interest lies in the efficient and effective management of our marketing data as well as in the improvement of decision-making through comprehensive insights.

d. Duration of storage

The personal data collected by Funnel.io is only stored for as long as is required for the above-mentioned purposes and as long as our legitimate interest in retaining the data exists. As soon as the purpose of the data collection is fulfilled or the legitimate interest no longer exists, the data is securely deleted or anonymized, unless legal retention obligations exist.

e. Exercise of your rights

You can prevent the collection and processing of your personal data by Funnel.io by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

Further information on your rights and how Funnel.io processes personal data can be found in Funnel.io's privacy policy: https://funnel.io/privacy

Amendment of the privacy policy

We reserve the right to amend the privacy policy in order to adapt it to any changes in the legal situation or in the event of changes to the service as well as the data processing.

This privacy policy was created with the support of DataGuard.

Country/region

Language

Privacy policy

Privacy Policy

Table of Contents

1. Name and address of the controller

2. Contact details of the data protection officer

3. General information on data processing

a. Scope of processing of personal data

b. Legal basis for the processing of personal data

c. Data erasure and storage duration

4. Rights of the data subject

a. The right to information (Art. 15 GDPR)

b. Right to rectification (Art. 16 GDPR)

c. Right to restriction of processing (Art. 18 GDPR)

d. Right to erasure ("right to be forgotten") (Art. 17 GDPR)

e. Right to data portability (Art. 20 GDPR)

f. Right to object to certain data processing (Art. 21 GDPR)

g. Right to complain to a supervisory authority

5. Provision of the website and creation of log files

a. Description and scope of data processing

b. Purpose of data processing

c. Legal basis for data processing

d. Duration of storage

e. Possibility of objection

6. Use of cookies

a. Description and scope of data processing

b. Purpose of data processing

c. Legal basis for data processing

7. Registration

a. Description and scope of data processing

b. Purpose of data processing

c. Legal basis for data processing

d. Duration of storage

e. Possibility of revocation

8. Webshop

9. Payment options

a. Description and scope of data processing

Payment via Amazon Pay

Payment via Klarna

Payment via credit card

Payment via PayPal

Payment via Sofortüberweisung

Payment via advance payment

Other payment options

b. Purpose of data processing

c. Legal basis for data processing

d. Duration of storage

e. Lapse of the legal basis

10. Shipping service providers

a. Description and scope of data processing

b. Purpose of data processing

c. Legal basis for data processing

d. Duration of storage

e. Possibility of objection

11. Newsletter

a. Description and scope of data processing

b. Purpose of data processing

c. Legal basis for data processing

d. Duration of storage

e. Possibility of revocation

12. Email contact

a. Description and scope of data processing

b. Purpose of data processing

c. Legal basis for data processing

d. Duration of storage

e. Possibility of objection

13. Job application by email

a. Scope of processing of personal data

b. Purpose of data processing

c. Legal basis for data processing

d. Duration of storage

14. Company presences

15. Use of company presences on career-oriented networks

a. Scope of data processing

b. Legal basis for data processing

c. Purpose of data processing

d. Duration of storage

e. Possibility of objection

16. Partner programs