Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither required by law or contract nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide the data will have no consequences. This applies only insofar as no other provision is made in the following processing operations.

“Personal data” means any information relating to an identified or identifiable natural person.

Server Log Files

You can visit our websites without providing any personal information.

Each time our website is accessed, usage data is transmitted to us or to our web host / IT service provider by your Internet browser and stored in log data (so-called server log files). The stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider.

The processing is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and in improving our services.

Your data may be transferred to third countries outside the European Union, in particular to Canada and the USA, and processed there. An adequacy decision by the European Commission exists for Canada. For the USA, there is an adequacy decision by the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is carried out on the basis of contractual obligations comparable to those provided for by the European Commission’s Standard Contractual Clauses.

Contact, Data Controller

You may contact us at any time. The data controller responsible for data processing is:

Petra Brunhilde Körber
Mittelbach 37
91522 Ansbach
Germany
015117860447
office@musikworlds.com

Customer-Initiated Contact by E-Mail

If you initiate contact with us by e-mail in the course of a business relationship, we collect your personal data (name, e-mail address, message content) only to the extent provided by you. The processing of the data serves to process and respond to your contact request.

If the contact is made for the purpose of carrying out pre-contractual measures (e.g. consultation in the event of an interest in purchasing, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Article 6(1)(b) GDPR.

If the contact is made for other reasons, this data processing is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in processing and responding to your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you that is based on Article 6(1)(f) GDPR.

We use your e-mail address only to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Customer Account – Orders

Customer Account

When opening a customer account, we collect your personal data to the extent specified there. The processing of the data serves the purpose of improving your shopping experience and simplifying the processing of orders. The processing is carried out on the basis of Article 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of your consent up to the point of withdrawal. Your customer account will then be deleted.

Collection, Processing and Disclosure of Personal Data When Placing Orders

When placing an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to process your inquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded. The processing is carried out on the basis of Article 6(1)(b) GDPR and is necessary for the performance of a contract with you.

Your data may, for example, be disclosed to shipping companies, dropshipping and/or fulfillment providers, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly comply with the applicable legal requirements. The scope of the data transfer is limited to the absolute minimum.

Your data may be transferred to third countries outside the European Union, in particular to Canada and the USA, and processed there. An adequacy decision by the European Commission exists for Canada. For the USA, there is an adequacy decision by the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is carried out on the basis of contractual obligations comparable to those provided for by the European Commission’s Standard Contractual Clauses.

Rights of Data Subjects and Storage Period

Storage Period

After the contract has been fully performed, the data is initially stored for the duration of the warranty period and thereafter, taking into account statutory retention periods, in particular those under tax and commercial law, and is then deleted after the expiry of these periods, unless you have consented to further processing and use.

Rights of the Data Subject

Provided that the statutory requirements are met, you have the following rights under Articles 15 to 20 GDPR: the right of access, the right to rectification, the right to erasure, the right to restriction of processing, and the right to data portability.

In addition, pursuant to Article 21(1) GDPR, you have the right to object to processing based on Article 6(1)(f) GDPR, as well as to processing for the purposes of direct marketing.

Right to Lodge a Complaint with the Supervisory Authority

Pursuant to Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is not carried out lawfully.

Among others, you may lodge a complaint with the supervisory authority responsible for us, which can be contacted using the following contact details:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

Promenade 18

91522 Ansbach

Tel.: +49 981 1800930

Fax: +49 981 180093800

E-mail: poststelle@lda.bayern.de

Right to Object

If the personal data processing operations listed here are based on our legitimate interest pursuant to Article 6(1)(f) GDPR, you have the right, for reasons arising from your particular situation, to object to such processing at any time with effect for the future.

Following an objection, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims.