Privacy policy
stereoguide.com
We are pleased that you are visiting our website and thank you for your interest in our company and our services. About the processing of your personal data and about your rights as a data subject in the context of using the website
www.stereoguide.com (hereinafter also “website“)
we,
Stereo Guide©
Stefan Schickedanz
c/o Vogel & Partner Rechtsanwälte mbB
Rechtsanwalt Benjamin Janowitz
Königstr. 26
70173 Stuttgart
Phone: +49 0711 3417626
E-Mail: info@stereoguide.de
(hereinafter also “we” or “Stereo Guide“)
as the responsible party and at the same time service provider, would like to inform you in the following.
Your personal data is processed exclusively within the framework of the statutory provisions of the data protection law of the European Union, in particular the EU General Data Protection Regulation (hereinafter “GDPR“) and, in addition, the Federal Data Protection Act (hereinafter “BDSG“) as well as other statutory provisions on data protection (together hereinafter “data protection laws“).
This privacy policy only applies to the website accessible under the domain www.stereoguide.de including all subdomains.
The terms used, such as “personal data” or their “processing” correspond to the definitions in Art. 4 GDPR. If you would like to take a look at the GDPR yourself, you can find it on the internet at: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679 resp. https://www.gesetze-im-internet.de/bdsg_2018.
Overwiew
1. Subject of data protection and legal basis 1
2. Server log data 2
3. Communication by e-mail 2
4. Cookies 3
5. Recipients of personal data 3
6. Google Analytics 4
7. Integration of YouTube videos 4
8. Affiliate programmes and affiliate links 5
9. Data processing in third countries 5
10. Storage period 6
11. Your rights 6
12. Security 7
13. Changes 7
The subject of data protection is personal data. Personal data is any information relating to an identified or identifiable natural person (so-called data subject). Your personal data therefore includes all data that allows your person to be identified, such as your name, your address, your telephone number or your e-mail address. Personal data also includes information that necessarily arises through the use of our website, such as the beginning, end and extent of use or your IP address.
We will only process your data if an applicable legal provision allows us to do so. We will base the processing of your data on the following legal bases, among others:
- Consent (Art. 6 (1) (a) GDPR): We will only process certain data on the basis of your previously explicit and voluntary given consent. You have the right to revoke your consent with effect for the future at any time.
- Fulfilment of a contract or implementation of pre-contractual measures (Art. 6 (1) (b) GDPR): In particular, we require certain data from you to initiate or implement your contractual relationship with us.
- Fulfilment of a legal obligation (Art. 6 (1) (c) GDPR): In addition, we process your personal data for the fulfilment of legal obligations such as regulatory requirements or commercial and tax retention obligations.
- Safeguarding legitimate interests (Art. 6 (1) (f) GDPR): Stereo Guide will process certain data to safeguard its interests or the interests of third parties. However, this only applies if your interests are not outweighed in the individual case.
Please note that this is not a complete or exhaustive list of the possible legal bases, but merely examples intended to make the legal bases under data protection law more transparent. For more detailed information on the legal basis of the individual data processing on our website, please refer to the explanations in the following sections.
You can visit the public part of our website, which is accessible without prior registration, without providing any personal information. By visiting our website, the following information about the access can be stored:
- IP address
- Data volume transmitted in each case
- Previously visited page
- Operating system
We process this data on the basis of Art. 6 (1) (f) GDPR to provide the website, to ensure the technical operation and the security of our information technology systems. In doing so, we pursue the interest of enabling and permanently maintaining the use of our website and its technical functionality. This data is automatically processed when you access our website. Without this provision, you cannot use our website. We do not use this data for the purpose of drawing conclusions about your identity.
The automatically collected data is usually deleted after 7 days at the latest, unless we exceptionally need it longer for the above-mentioned purposes. In such a case, we delete the data immediately after the purpose ceases to apply.
You cannot object to the collection and storage of your server log data, as this data is absolutely necessary for the smooth operation of the website.
If you communicate with us by e-mail, the collection, processing and use of your voluntarily provided contact data (e.g. name, e-mail address) is only for the purpose of receiving and, if necessary, answering your enquiry(s) and for technical administration.
The processing of data transmitted in the context of communication by e-mail is based on Art. 6 (1) (b) GDPR, if the purpose is to initiate a contractual relationship, or on Art. 6 (1) (f) GDPR. In the latter case, we have a legitimate interest in processing contact requests voluntarily addressed to us.
We will delete the data you have provided as soon as the purpose for which it was collected ceases to exist, subject to compliance with any continuing legal obligations to retain such data.
If your data is processed on the basis of legitimate interests, you can object to the storage of your personal data at any time. Please refer to section 11 for details.
The website uses cookies and similar technologies to optimally design the website. This enables, among other things, easier navigation and a high degree of user-friendliness.
Cookies are small identification characters that our web server sends to your browser and that your terminal device saves with the corresponding default setting. Cookies are small identification characters that our web server sends to your browser and that your end device saves with the corresponding standard setting. They can be used to determine whether your end device has already communicated with us. In this way, they serve the purpose of making the use more comfortable for you and optimising our offer. We differentiate according to whether the cookie is technically mandatory, whether it was set by our website itself or by third parties. For detailed information on the type, function, purposes, legal basis and revocation options of data processing for cookies, please refer to the following provisions:
Insofar as you give us your consent to the use and storage of cookies that are not absolutely necessary (see section 4 (b) below), you can revoke this at any time with effect for the future via our Consent Manager. Incidentally, you can technically prevent the storage of even absolutely necessary cookies at any time by selecting “do not accept cookies” in your browser settings. Please refer to the help function of your browser for the procedures for managing and deleting cookies in your browser settings. In addition, you can also block all cookies using free browser add-ons, such as “Adblock Plus” (adblockplus.org/de) in combination with the “EasyPrivacy” list (easylist.to), deactivate them. However, if you do not accept cookies, this may lead to functional restrictions of the website.
a) absolutely necessary cookies
We use the following cookies on our website, which are absolutely necessary for the functioning of our website and in which we have a legitimate interest of storing, as we would otherwise not be able to offer our website with certain basic functionalities (e.g. you would have to log in again each time you change pages). The easiest way to find out details about the cookies we use that are absolutely necessary is via our Consent Manager.
Data processing is carried out to protect our legitimate interests on the basis of Art. 6 (1) (f) GDPR. Our legitimate interest in this respect results from the purposes of use described.
You can deactivate cookies that are absolutely necessary technically only via your browser settings or browser add-ons. For further details, please refer to the passage above. This may lead to functional restrictions of the website.
b) Additional own cookies
Additional cookies of our own that are not absolutely necessary to be able to use the website (e.g. functional cookies, collectively also called “first party cookies”) fulfil important tasks. They enable comfortable surfing on our website. Furthermore, they enable us to respond to you with individually adapted offers. The easiest way to find out details about the additional cookies we use is via our Consent Manager.
The storage and use of additional own cookies, insofar as you have given us your consent to this, takes place on the basis of Art. 6 (1) (a) GDPR. For further details, please refer to the passages above under section 4. You can revoke this consent at any time with effect for the future via our Consent Manager.
We will only pass on your personal data to external recipients if this is necessary for the processing or handling of your request, if we have your consent for this or if there is another legal permission.
External recipients can be in particular:
- Processors: These are service providers that we use to provide services, for example in the areas of technical infrastructure and maintenance of our website. Such processors are carefully selected and regularly reviewed by us to ensure that your privacy is protected. These service providers may only use the data for the purposes specified by us and in accordance with our instructions. We are authorised to use such processors subject to the legal requirements of Art. 28 GDPR.
- Public bodies: These are authorities, state institutions and other bodies under public law, e.g. supervisory authorities, courts, public prosecutors’ offices or tax authorities. Personal data will only be transferred to such public bodies for legally compelling reasons. The legal basis for such a transfer may be Art. 6 (1) (c) and/or (f) GDPR.
- Non-public bodies: Service providers and auxiliary persons to whom data is transferred on the basis of a legal obligation or to safeguard legitimate interests, for example tax advisors or auditors. The transfer is then made on the basis of Art. 6 (1) (b), (c) and/or (f) GDPR.
This website uses Google Analytics, a web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The purpose of our use of the tool is to enable the analysis of your user interactions on websites and in apps and to improve our offer through the statistics and reports obtained and to make it more interesting for you as a user.
We primarily record the interactions between you as a user of the website and our website using cookies, device/browser data, IP addresses and website or app activities. Google Analytics also collects your IP addresses to ensure the security of the service and to provide us, as the website operator, with information about which country, region or location the respective user comes from (so-called “IP location determination”). For your protection, however, we naturally use the anonymisation function (“IP masking”), i.e. Google truncates the IP addresses by the last octet within the EU/EEA.
Google acts as an processor and we have concluded a corresponding contract with Google. The information generated by the cookie and the (usually shortened) IP addresses about your use of this website are usually transferred to a Google server in the USA and processed there. For these cases, Google has, according to its own statements, imposed a standard on itself that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws in the international transfer of data. We have also agreed so-called standard contractual clauses with Google, the purpose of which is to ensure compliance with an appropriate level of data protection in the third country.
The legal basis for the collection and further processing of the information (which takes place for a maximum of 14 months) is your consent (Art. 6 (1) (a) GDPR). Revocation of your consent is possible at any time without affecting the permissibility of the processing until revocation. In apps, you can reset the advertising ID under the Android or iOS settings. The easiest way to revoke your consent is to use our Consent Manager or to install the Google browser add-on, which can be accessed via the following link: tools.google.com/dlpage/gaoptout?hl=en/.
Further information on the scope of services provided by Google Analytics is available at marketingplatform.google.com/about/analytics/terms/en. Google provides information on data processing when using Google Analytics at the following link: support.google.com/analytics/answer/6004245?hl=en/. General information on data processing, which according to Google should also apply to Google Analytics, can be found in Google’s data protection declaration at www.google.de/intl/de/policies/privacy/.
We have integrated YouTube videos into our online offer, which are stored on YouTube.com and that can be played directly from our website. These are all integrated in “extended data protection mode”, i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned below be transmitted. We have no influence on this data transmission. The legal basis for the display of the videos is Art. 6 (1) (a) GDPR, i.e. the integration only takes place after your consent.
By visiting the website, YouTube receives the information that you have accessed the corresponding sub-page of our website. In addition, the above-mentioned basic data such as IP address and time stamp are transmitted. This takes place regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or designing its website in line with requirements. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
The information collected is stored on Google servers, including in the USA. For these cases, the provider has, according to its own information, imposed a standard on itself that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws in the international transfer of data. We have also agreed so-called standard data protection clauses with Google, the purpose of which is to ensure compliance with an appropriate level of data protection in the third country.
For more information on the purpose and scope of data collection and processing by YouTube, please see the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: www.google.de/intl/de/policies/privacy.
We include so-called affiliate links or other references (which may include, for example, search masks, widgets or discount codes) to the offers and services of third-party providers in our online offer (collectively referred to as “affiliate links”). If you follow the Affiliate Links or subsequently take advantage of the offers, we may receive a commission or other benefits from those third parties (collectively, “Commission”).
In order to be able to track whether you have taken advantage of the offers of an affiliate link used by us, it is necessary that the respective third-party providers learn that you have followed an affiliate link used within our website. The assignment of the affiliate links to the respective business transactions or to other actions (e.g. purchases) serves the sole purpose of commission accounting and is removed as soon as it is no longer necessary for the purpose.
For the purposes of the aforementioned assignment of the affiliate links, the affiliate links can be supplemented by certain values that are a component of the link or can be stored otherwise, e.g. in a cookie. The values may include, in particular, the source website (referrer), the time, an online identifier of the operator of the website on which the affiliate link was located, an online identifier of the respective offer, the type of link used, the type of offer and an online identifier of the user.
If we ask you for your consent to the use of the third-party providers, the legal basis for the processing of data is consent (Art. 6 (1) (a) GDPR). Furthermore, their use may be a component of our (pre-)contractual services, provided that the use of the third-party providers was agreed in this context (Art. 6 (1) (b) GDPR). Otherwise, your data will be processed on the basis of our legitimate interests (i.e. interest in efficient, economical and recipient-friendly services) (Art. 6 (1) (f) GDPR). In this context, we would also like to refer you to the information on the use of cookies in this privacy policy.
As a rule, we process your data in Germany or other countries of the European Union (EU) or the European Economic Area (EEA). If we do transfer your data to third countries outside the EU or the EEA in individual cases (e.g. to process an enquiry involving a third country), we ensure before the transfer that either a legally permitted exceptional case exists, an appropriate level of data protection exists at the recipient or that you give your consent to the data transfer. An adequate level of data protection is guaranteed, for example, by the conclusion of EU standard contractual clauses or the existence of binding internal company data protection regulations, so-called Binding Corporate Rules (BCR).
We only store your personal data as long as this is necessary for the fulfilment of the purposes or – in the case of consent – as long as you do not revoke your consent. In the event of an objection, we will no longer process your personal data unless its further processing is permitted or even mandatory under the relevant statutory provisions (e.g. within the scope of commercial and tax retention obligations). We will also delete your personal data if we are obliged to do so for legal reasons.
For further details on the storage period of your personal data, please refer to the respective explanations in the sections listed above.
As a person affected by data processing, you have numerous rights. In detail, these are:
Right of access (Art. 15 GDPR, § 34 BDSG): You have the right to receive information about the data we have stored about you.
Right to rectification and erasure (Art. 16 and Art. 17 GDPR, § 35 BDSG): You can demand that we correct incorrect data and – insofar as the legal requirements are met – delete your data.
Right to restriction of processing (Art. 18 GDPR): You can demand that we restrict the processing of your data – provided the legal requirements are met.
Right to data portability (Art. 20 GDPR): If you have provided us with data on the basis of a contract or consent, you may, if the legal requirements are met, request that you receive the data you have provided in a structured and common format or that we transfer it to another controller.
Right to object to data processing based on legitimate interests (Art. 21 GDPR): You have the right to object to data processing by us at any time for reasons arising from your particular situation, insofar as this is based on legitimate interests within the meaning of Art. 6 (1) (f) GDPR. If you exercise your right to object, we will stop processing your data unless we can demonstrate compelling legitimate grounds for further processing that override your rights, or the processing is for the assertion, exercise or defence of legal claims.
Revocation of consent (Art. 7 GDPR): If you have given us consent to process your data, you can revoke this consent at any time with effect for the future. The lawfulness of the processing of your data until the revocation remains unaffected.
Right to lodge a complaint with the supervisory authority (Art. 77 GDPR): You can also lodge a complaint with the competent supervisory authority if you believe that the processing of your data violates applicable law. In particular, you can contact the data protection authority that is competent for your place of residence, your place of work or the place of the alleged infringement. The supervisory authority for data protection responsible for us is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Königstraße 10a, 70173 Stuttgart, Germany, Phone: +49 711 615541-0, Fax: +49 711 615541-15, E-Mail: poststelle@lfdi.bwl.de, Internet: www.baden-wuerttemberg.datenschutz.de.
If you have any questions regarding the processing of your personal data, your rights as a data subject and any consent you may have given, please do not hesitate to contact us via the communication channels mentioned under point 1 or at info@stereoguide.de will be happy to answer your questions. Please also contact us directly to exercise your data subject rights.
We take technical and organisational security measures to protect your personal data against accidental or intentional manipulation, loss, destruction or against access by unauthorised persons. These security measures are adapted in each case taking into account the current state of the art.
Your personal data transmitted in the course of using our website is transferred securely by us using encryption. We use the encryption protocol Transport Layer Security (TLS), more commonly known by its predecessor name Secure Sockets Layer (SSL).
From time to time, it may become necessary to adapt the content of this data protection notice. We therefore reserve the right to change it at any time. If your consent is required for a change, we will obtain this from you. We will also publish the amended version of the data protection information here. When you visit our website again, you should therefore read the privacy policy again.
