Data protection declaration
The person responsible within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
Ralf Zenker
Upright Songs GmbH
Robert-Bosch-Str. 6
40668 Meerbusch
Germany
Your rights as a data subject
You can exercise the following rights at any time using the contact details of our data protection officer:
Information about your data stored by us and its processing (Art. 15 GDPR),
Correction of incorrect personal data (Art. 16 GDPR),
Deletion of your data stored by us (Art. 17 GDPR),
Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
Objection to the processing of your data by us (Art. 21 GDPR) and
Data portability if you have consented to data processing or have concluded a contract with us (Art. 20 GDPR).
If you have given us your consent, you can revoke it at any time with effect for the future.
You can contact a supervisory authority with a complaint at any time, e.g. the competent supervisory authority in the federal state in which you live or the authority responsible for us as the responsible body.
A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Collection of general information when visiting our website
Type and purpose of processing:
When you access our website, i.e. if you do not register or otherwise provide information, information of a general nature is automatically collected. This information (server log files) includes the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and the like.
They are processed in particular for the following purposes:
Ensuring a problem-free connection to the website,
Ensuring smooth use of our website,
Evaluating system security and stability and
for other administrative purposes.
We do not use your data to draw conclusions about you. Information of this type may be statistically evaluated by us in order to optimize our website and the technology behind it.
Legal basis:
Processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.
Recipients:
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
Storage period:
The data is deleted as soon as it is no longer required for the purpose of collection. This is generally the case for the data used to provide the website when the respective session has ended.
Provision required or necessary:
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or restricted. For this reason, an objection is excluded.
Cookies
Type and purpose of processing:
Like many other websites, we also use so-called “cookies”. Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website.
This gives us certain data such as IP address, browser used and operating system.
Cookies cannot be used to start programs or transmit viruses to a computer. Using the information contained in cookies, we can make navigation easier for you and enable our websites to be displayed correctly.
Under no circumstances will the data we collect be passed on to third parties or linked to personal data without your consent.
Of course, you can also view our website without cookies. Internet browsers are usually set to accept cookies. In general, you can deactivate the use of cookies at any time via your browser settings. Please use the help functions of your Internet browser to find out how you can change these settings. Please note that individual functions of our website may not work if you have deactivated the use of cookies.
Storage period and cookies used:
If you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:
7 days
We will inform you about the cookies we use (also) to process your data.
You can delete individual cookies or the entire cookie list using your browser settings. You will also receive information and instructions on how to delete these cookies or block their storage in advance. Depending on the provider of your browser, you can find the necessary information under the following links:
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
Opera: http://www.opera.com/de/help
Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE
Registration on our website
Type and purpose of processing:
When registering to use our personalized services, some personal data is collected, such as name, address, contact and communication data (e.g. telephone number and email address). If you are registered with us, you can access content and services that we only offer to registered users. Registered users also have the option of changing or deleting the data provided during registration at any time if necessary. Of course, we will also provide you with information about the personal data we have stored about you at any time.
Legal basis:
The data entered during registration is processed on the basis of the user’s consent (Art. 6 Para. 1 lit. a GDPR).
If the registration serves to fulfill a contract to which the data subject is a party or to carry out pre-contractual measures, the additional legal basis for processing the data is Art. 6 Para. 1 lit. b GDPR.
Recipients:
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
Storage period:
Data will only be processed in this context as long as the corresponding consent has been given. After that, it will be deleted unless there are statutory retention periods to the contrary. To contact us in this context, please use the contact details provided at the end of this privacy policy.
Provision required or necessary:
The provision of your personal data is voluntary, based solely on your consent. Without the provision of your personal data, we cannot grant you access to the content and services we offer.
Provision of paid services
Type and purpose of processing:
In order to provide paid services, we request additional data, such as payment details, in order to be able to execute your order.
Legal basis:
The processing of the data required to conclude the contract is based on Art. 6 Para. 1 lit. b GDPR.
Recipient:
Recipients of the data may be contract processors.
Storage period:
We store this data in our systems until the statutory retention periods have expired. These are generally 6 or 10 years for reasons of proper accounting and tax requirements.
Provision required or necessary:
The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to the content and services we offer.
Comment function
Type and purpose of processing:
When users leave comments on our website, in addition to this information, the time of their creation and the user name previously chosen by the website visitor are stored. This is for our security, as we can be held liable for illegal content on our website, even if it was created by users.
Legal basis:
The processing of the data entered as a comment is based on a legitimate interest (Art. 6 Para. 1 lit. f GDPR).
By providing the comment function, we want to enable you to interact easily. The information you provide is stored for the purpose of processing the request and for possible follow-up questions.
Recipients:
Recipients of the data may be contract processors.
Storage period:
The data is deleted as soon as it is no longer required for the purpose of collection. This is generally the case when communication with the user has been completed and the company can determine from the circumstances that the matter in question has been conclusively clarified.
Provision required or necessary:
The provision of your personal data is voluntary. Without the provision of your personal
We cannot grant you access to our comment function based on the data collected.
Newsletter
Type and purpose of processing:
Your data will only be used to send you the subscribed newsletter by email. Your name is provided so that we can address you personally in the newsletter and, if necessary, identify you if you wish to exercise your rights as a data subject.
To receive the newsletter, it is sufficient to provide your email address. When registering to receive our newsletter, the data you provide will only be used for this purpose. Subscribers can also be informed by email about circumstances that are relevant to the service or registration (e.g. changes to the newsletter offer or technical conditions).
We require a valid email address for effective registration. In order to verify that registration is actually made by the owner of an email address, we use the “double opt-in” procedure. For this purpose, we log the order for the newsletter, the sending of a confirmation email and the receipt of the response requested here. No further data is collected. The data is used exclusively for sending the newsletter and is not passed on to third parties.
Legal basis:
On the basis of your express consent (Art. 6 Para. 1 lit. a GDPR), we regularly send you our newsletter or similar information by email to the email address you provided.
You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. There is a corresponding link in every newsletter. You can also unsubscribe directly on this website at any time or inform us of your revocation using the contact option provided at the end of this data protection notice.
Recipient:
Recipients of the data may be contract processors.
Storage period:
The data will only be processed in this context as long as the corresponding consent has been given. After that, it will be deleted.
Provision required or necessary:
The provision of your personal data is voluntary, solely on the basis of your consent. Unfortunately, we cannot send you our newsletter without existing consent.
Contact form
Type and purpose of processing:
The data you enter will be stored for the purpose of individual communication with you. For this purpose, you must provide a valid email address and your name. This is used to assign the request and then answer it. Providing further data is optional.
Legal basis:
The data entered in the contact form is processed on the basis of a legitimate interest (Art. 6 Para. 1 lit. f GDPR).
By providing the contact form, we want to make it easy for you to contact us. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions.
If you contact us to request an offer, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 Para. 1 lit. b GDPR).
Recipient:
Recipients of the data may be contract processors.
Storage period:
Data will be deleted no later than 6 months after the request has been processed.
If a contractual relationship is established, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and delete your data after these periods have expired.
Provision required or necessary:
The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, email address and the reason for the request.
Use of Google Analytics
Type and purpose of processing:
This website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: “Google”). Google Analytics uses so-called “cookies”, i.e. text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymization on these websites, your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will process this information
to evaluate your use of the website, to compile reports on website activities and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.
The purposes of data processing are to evaluate the use of the website and to compile reports on activities on the website. Further related services will then be provided on the basis of the use of the website and the internet.
Legal basis:
The data is processed on the basis of the user’s consent (Art. 6 Para. 1 lit. a GDPR).
Recipient:
The recipient of the data is Google as the processor. For this purpose, we have concluded the corresponding order processing contract with Google.
Storage period:
The data is deleted as soon as it is no longer required for our recording purposes.
Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Provision required or necessary:
The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.
Withdrawal of consent:
You can prevent cookies from being saved by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: Browser Add On to deactivate Google Analytics.
In addition to or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking on this link. An opt-out cookie is installed on your device. This prevents Google Analytics from collecting data for this website and for this browser in the future, as long as the cookie remains installed in your browser.
Profiling:
The Google Analytics tracking tool can be used to evaluate the behavior of website visitors and analyze their interests. For this purpose, we create a pseudonymous user profile.
Use of script libraries (Google Webfonts)
Type and purpose of processing:
In order to display our content correctly and in a graphically appealing manner across all browsers, we use “Google Web Fonts” from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”) on this website to display fonts.
The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/
Legal basis:
The legal basis for the integration of Google Webfonts and the associated data transfer to Google is your consent (Art. 6 Para. 1 lit. a GDPR).
Recipient:
Calling up script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible – although currently unclear whether and, if so, for what purposes – that the operator collects Google data in this case.
Storage period:
We do not collect any personal data by integrating Google Webfonts.
Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/.
Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Provision required or necessary:
The provision of personal data is neither legally nor contractually required. However, the correct display of the content may not be possible using standard fonts.
Revocation of consent:
The JavaScript programming language is regularly used to display the content. You can therefore object to data processing by deactivating the execution of JavaScript in your browser or by installing a JavaScript blocker. Please note that this may result in functional restrictions on the website.
Embedded YouTube videos
Type and purpose of processing:
We embed YouTube videos on some of our websites. The operator of the corresponding plug-ins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (according to
hhereinafter “YouTube”). When you visit a page with the YouTube plug-in, a connection is established to YouTube servers. YouTube is informed which pages you visit. If you are logged into your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand.
If a YouTube video is started, the provider uses cookies that collect information about user behavior.
You can find more information about the purpose and scope of data collection and processing by YouTube in the provider’s privacy policy. There you will also find more information about your rights in this regard and setting options to protect your privacy (https://policies.google.com/privacy). Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework
Legal basis:
The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6 Para. 1 lit. a GDPR).
Recipient:
Calling up YouTube automatically triggers a connection to Google.
Storage period and revocation of consent:
Anyone who has deactivated the storage of cookies for the Google Ad program will not have to expect such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the storage of cookies in your browser.
You can find more information on data protection at “YouTube” in the provider’s privacy policy at: https://www.google.de/intl/de/policies/privacy/
Transfer to third countries:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Provision required or necessary:
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.
Social Plugins
Type and purpose of processing:
We offer you the option of using so-called “social media buttons” on our website. To protect your data, we use the “Shariff” solution when implementing them. This means that these buttons are only integrated into the website as a graphic that contains a link to the corresponding website of the button provider. By clicking on the graphic, you are redirected to the services of the respective provider. Only then will your data be sent to the respective provider. If you do not click on the graphic, no exchange of information will take place between you and the providers of the social media buttons. Information about the collection and use of your data in the social networks can be found in the respective terms of use of the respective providers. You can find more information about the Shariff solution here: http://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html
We have integrated the social media buttons of the following companies on our website:
Facebook https://www.facebook.com, Twitter https://www.twitter.com, Youtube https://www.youtube.com, Tumblr https://www.tumblr.com, Instagram https://www.instagram.com, Bandcamp https://www.bandcamp.com, Spotify https://www.spotify.com, Soundcloud https://www.soundcloud.com
SSL encryption
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) over HTTPS.
Changes to our data protection regulations
We reserve the right to adapt this data protection declaration so that it always complies with current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection declaration will then apply to your next visit.
Questions for the data protection officer
If you have any questions about data protection, please send us an email or contact the person responsible for data protection in our organization directly:
datenschutz@hardfloor.de
The data protection declaration was created with the help of activeMind AG, the experts for external data protection officers (version #2019-04-10).