Privacy Policy

The person responsible for data processing is:

Musikhaus Hermann OHG
Gymnasiumstrasse 2
88400 Biberach

Email: info @musikhaus-hermann.de

Phone: 07351-9789

We are pleased that you are interested in our online shop. Protecting your privacy is very important to us. Below we inform you in detail about the handling of your data.

1. Access data and hosting

You can visit our website without providing any personal information. Each time a website is called up, the web server automatically saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, date and time of the call, amount of data transferred and contains the requesting provider (access data) and documents the retrieval. This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offer. This serves to safeguard our within the framework of a Weighing of interests overriding legitimate interests in a correct presentation of our offer in accordance with Article 6 Paragraph 1 Sentence 1 lit. f GDPR. All access data will be deleted no later than seven days after the end of your visit to the site.

hosting

The services for hosting and displaying the website are partially provided by our service providers as part of processing on our behalf. Unless otherwise explained in the context of this data protection declaration, all access data and all data contained in provided forms on this website are processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this data protection declaration.

Our service providers may transfer your personal data to countries outside the EU and EEA. There is no adequacy decision by the European Commission for these countries. Our cooperation with them is based on standard data protection clauses European Commission and binding internal data protection regulations.

2. Data processing for contract processing and contact

2.1 Data processing for contract execution

For the purpose of contract processing (including inquiries about and processing of any existing warranty and non-performance claims as well as any statutory update obligations) in accordance with Article 6 Paragraph 1 Sentence 1 lit. b GDPR, we collect personal data if you provide it to us in the voluntarily as part of your order. Mandatory fields are marked as such, since in these cases we need the data to process the contract and we cannot send the order without providing it. Which data is collected is from the respective input forms.

Further information on the processing of your data, in particular on the transfer to our service providers for the purpose of order, payment and shipping processing, can be found in the following sections of this data protection declaration. After the contract has been fully processed, your data will be restricted for further processing and deleted after expiry of the retention periods under tax and commercial law in accordance with Article 6 Paragraph 1 Sentence 1 lit. c GDPR, unless you expressly consent to further use of your data in accordance with Article 6 Paragraph 1 Sentence 1 lit. a GDPR have consented or we reserve the right to use data beyond this, which is permitted by law and about which we will inform you in this declaration.

Merchandise management system

We use merchandise management systems from external service providers to process orders and contracts. Our service providers work for us within the framework of order processing. If you have any questions about our service providers and the basis of our cooperation with them, please contact the in this Contact option described in data protection declaration.

2.2 Customer Account

If you have given your consent to this in accordance with Article 6 Paragraph 1 Sentence 1 lit future orders our website. The deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described in this data protection declaration or using a function in the customer account provided for this purpose. After deleting your customer account Your data will be deleted unless you have expressly consented to further use of your data in accordance with Article 6 Paragraph 1 Sentence 1 lit this statement inform.

2.3 Contact

As part of customer communication, we collect personal data to process your inquiries in accordance with Article 6 Paragraph 1 Sentence 1 lit. b GDPR if you voluntarily provide us with this when contacting us (e.g. via contact form or e-mail). . Mandatory fields are marked as such in these cases we need the data to process your contact. Which data is collected can be seen from the respective input forms. After your request has been fully processed, your data will be deleted unless you expressly request another have consented to the use of your data in accordance with Article 6 Paragraph 1 S. 1 lit

3. Data processing for the purpose of shipping processing

In order to fulfill the contract in accordance with Article 6 Paragraph 1 Sentence 1 lit. b GDPR, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of the goods ordered.

Data transfer to shipping service providers for the purpose of shipping notification

If you have given us your express consent to this during or after your order, we will pass on your e-mail address and telephone number to the selected shipping service provider on the basis of this in accordance with Article 6 (1) sentence 1 lit. so that this before delivery to Can contact you for the purpose of delivery notification or coordination.
You can give your consent at any time by sending a message to the contact option described in this data protection declaration or directly to the shipping service provider at the address listed below contact address can be revoked. After revocation, we will delete the data you have provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data that goes beyond this, which is permitted by law and about which we inform you in this statement.

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany
(all items (for exceptions see below) are shipped via DHL Paket GmbH)

Schenker Deutschland AG
Uhlfelderstr. 1-3
60314 Frankfurt
Germany
(articles marked "Forwarding Agency" are shipped via Schenker Deutschland AG)

MS Piano-Express GmbH
Attilastr. 52-58
12105 Berlin
GermanyGermany
(premium deliveries of digital pianos are shipped via M+S Piano Express GmbH)

4. Data processing for payment processing

When processing payments in our online shop, we work together with these partners: technical service providers, banks, payment service providers.

4.1 Data processing for transaction processing

Depending on the selected payment method, we pass on the data necessary for processing the payment transaction to our technical service providers who work for us within the framework of order processing, or to the commissioned credit institutions or to the selected one payment service provider, insofar as this is necessary to process the payment. This serves to fulfill the contract in accordance with Article 6 (1) sentence 1 lit. b GDPR. In some cases, the payment service providers collect the data required to process the payment themselves, e.g. on their own website or via a technical integration in the ordering process. The data protection declaration of the respective payment service provider applies in this respect.
If you have any questions about our partners for payment processing and the basis of our cooperation with them, please contact the in this Contact option described in data protection declaration.

4.2 Data processing for the purpose of fraud prevention and optimizing our payment processes

If necessary, we give our service providers additional data, which they, together with the data necessary for processing the payment, as our processors for the purpose of fraud prevention and the optimization of our payment processes (e.g. invoicing, processing disputed payments, accounting support). In accordance with Article 6 Paragraph 1 Sentence 1 Letter f GDPR, this serves to safeguard our legitimate interests in our protection against fraud and in efficient payment management, which are overriding in the context of a weighing of interests.

4.3 Hire Purchase

If you choose the payment method “Installment” as well as granting the required data protection consent in accordance with Article 6 Paragraph 1 Clause 1 Letter a GDPR, personal data (first name, last name, address, email, telephone number, date of birth, IP address, gender) are data required for transaction processing (article, invoice amount, due dates, total amount, invoice number, taxes, currency, order date and time of order) for the purpose of processing this payment method to our partner BNP Paribas S.A. Branch Germany, Schwanthalerstr. 31, 80336 Munich, Germany. To check the customer's identity and creditworthiness, our partner carries out queries and information on publicly accessible databases and credit agencies. The providers where information and creditworthiness information may be obtained on the basis of mathematical-statistical processes, as well as further details on the processing of your data after transmission to our partner BNP Paribas S.A. For the German branch, please refer to its data protection declaration, which you can find here find: http://www.bnpparibas.de/de/legals/
Our partner BNP Paribas S.A. uses the information received about the statistical probability of a payment default. Branch Germany for a balanced decision on the establishment, implementation or termination of the contractual relationship. You have the option of contacting our partner BNP Paribas S.A. German branch to present its point of view and to challenge the decision. The consent to data transfer given in the ordering process can be revoked at any time, also be revoked to us with effect for the future without giving reasons.

5. Advertising by email

5.1 E-mail newsletter with registration, newsletter tracking with separate consent

If you register for our newsletter, we use the data required for this or separately provided by you in order to regularly send you our e-mail newsletter based on your consent in accordance with Article 6 (1) sentence 1 lit . Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your e-mail address from the recipient list, unless you have expressly entered one have consented to further use of your data in accordance with Article 6 Paragraph 1 Sentence 1 lit

If you have also given us your consent in accordance with Article 6 Paragraph 1 Sentence 1 lit Click rates for the purpose of designing future ones Newsletter campaigns („Newsletter Tracking”).

For this evaluation, the e-mails sent contain one-pixel technologies (e.g. so-called web beacons, tracking pixels), which are stored on our website. For the evaluations, we link in particular the following “Newsletter data”

• the page from which the page was requested (so-called referrer URL),
• the date and time of the call,
• the description of the type of web browser used,
• the IP address of the requesting computer,
• the email address,
• the date and time of registration and confirmation

and the One-Pixel Technologies with your email address or your IP address and possibly a unique ID. Links contained in the newsletter can also contain this ID.

Unsubscribing from newsletter tracking is possible at any time and can be done either by sending a message to the contact option described or via a link provided for this purpose in the newsletter.

The information will be stored for as long as you have subscribed to the newsletter.

5.2 Newsletter delivery

The newsletter and the newsletter tracking shown above may also be sent by our service providers as part of processing on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please contact the in this data protection declaration described contact option.

5.3 Sending review requests by email

If you have given us your express consent to this during or after your order in accordance with Article 6 Paragraph 1 Sentence 1 lit the rating system we use. This Consent can be revoked at any time by sending a message to the contact option described in this data protection declaration or via a link provided for this purpose in the review request.

The review requests may also be sent by our service providers as part of processing on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this data protection declaration.

6. Cookies and other technologies

General Information

In order to make visiting our website attractive and to enable the use of certain functions, we use technologies including so-called cookies on various pages. Cookies are small text files that are automatically saved on your end device. Some of the The cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser on your next visit (persistent cookies).

Protection of privacy with end devices
When using our online offer, we use technologies that are absolutely necessary in order to be able to provide the expressly requested telemedia service. The storage of information in your end device or access to information that is already stored on your device does not require consent.

In the case of functions that are not absolutely necessary, the storage of information on your device or the access to information that is already stored on your device requires your consent. We would like to point out that if you do not give your consent, parts of the website may not be available can be used without restriction. Any consent you may have given will remain in place until you adjust or reset the respective settings in your device.

Possible downstream data processing by cookies and other technologies
We use technologies that are absolutely necessary for the use of certain functions of our website (e.g. shopping cart function). Through these technologies, IP address, time of Visit, device and browser information as well as information about your use of our website (e.g. information about the contents of the shopping cart) are collected and processed. Within the framework of a balancing of interests, this serves overriding legitimate interests in an optimized presentation of our website Offer in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR.

We also use technologies to fulfill the legal obligations to which we are subject (e.g. to be able to prove consent to the processing of your personal data) as well as for web analysis and online marketing. More information on this, including the respective The legal basis for data processing can be found in the following sections of this data protection declaration.

The cookie settings for your browser can be found under the following links:
Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

If you have consented to the use of the technologies in accordance with Article 6 (1) sentence 1 lit. a GDPR, you can revoke your consent at any time by sending a message to the contact option described in the data protection declaration.

7. Use of cookies and other technologies

If you have given your consent to this in accordance with Article 6 Paragraph 1 Sentence 1 lit. a GDPR, we use the following cookies and other third-party technologies on our website. After the end of the use of the respective technology by us, the data collected in this context will become obsolete data deleted. You can revoke your consent at any time with effect for the future. You can find more information about your revocation options in the "Cookies and other technologies" section. More information including the basis of our cooperation with the individual providers can be found under the individual technologies. If you have any questions about the providers and the basis of our cooperation with them, please use the contact option described in this data protection declaration.

Use of Google services

We use the following technologies from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google technologies about your use of our website is usually sent to a server of Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA and stored there. The European Commission has not issued an adequacy decision for the USA. Our cooperation with them is based on standard data protection clauses of the European Commission. Unless your IP address is collected via Google technologies, it is shortened before it is stored on Google's servers by activating IP anonymization. Only in exceptional cases will the full IP address be sent to a Google server and shortened there. So much for the individual Technologies are not specified otherwise, the data processing takes place on the basis of an agreement concluded for the respective technology between jointly responsible persons in accordance with Art. 26 DSGVO. Further information about data processing by Google can be found in the Google Privacy Policy.

Google Analytics

For the purpose of website analysis, data (IP address, time of visit, device and browser information as well as information on your use of our website) is automatically collected and stored with Google Analytics, from which user profiles are created using pseudonyms. Can do this Cookies are used. In principle, your IP address will not be merged with other Google data. The data is processed on the basis of an agreement on order processing by Google.

For the purpose of optimizing the marketing of our website, we have activated the data sharing settings for "Google products and services" . This allows Google to access the data collected and processed by Google Analytics and then to improve Google services use. Data release to Google as part of these data release settings is based on an additional agreement between those responsible. We have no influence on the subsequent data processing by Google.

Google Ads

For advertising purposes in the Google search results and on the websites of third parties, the so-called Google Remarketing cookie is set when you visit our website, which is automatically generated by collecting and processing data (IP address, time of the Visit, device and browser information as well Information about your use of our website) and by means of a pseudonymous cookie ID and on the basis of the pages you visit enables interest-based advertising. Any further data processing will only take place if you have selected the setting “Personalized advertising” activated in your Google account. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing.

For website analysis and event tracking, we use Google Ads Conversion Tracking to measure your subsequent usage behavior if you came to our website via a Google Ads advertisement. Cookies can be used for this and data (IP address, time of Visit, device and browser information as well as information about your use of our website based on events specified by us, such as visiting a website or subscribing to a newsletter), from which user profiles are created using pseudonyms.

YouTube Video Plugin

In order to integrate third-party content, data (IP address, time of visit, device and browser information) is collected via the YouTube video plugin in the extended data protection mode we use, transmitted to Google and then processed by Google, only if you one Play video.

8. Integration of the Trusted Shops Trustbadge/ other widgets

If you have given your consent to this in accordance with Article 6 Paragraph 1 Clause 1 Letter a GDPR, Trusted Shops widgets are available on this website to display Trusted Shops services (e.g. seal of approval, collected reviews) as well as on the offer of Trusted Shops products for buyers after an order embedded.

The Trustbadge and the services advertised with it are an offer from Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne ("Trusted Shops"), with whom we are jointly responsible under Art. 26 GDPR. In the context of this data protection notice, we will inform you about the essential contract content according to Art. 26 Para. 2 DSGVO.

As part of the joint responsibility between us and Trusted Shops AG, please contact us if you have questions about data protection and Please assert your rights preferably to the Trusted Shops using the in the Privacy Information specified contact options. Irrespective of this, you can always contact the responsible person of your choice. If necessary, your request will then be forwarded to the other person responsible for an answer.

8.1 Data processing when integrating the Trustbadge/other widgets

The Trustbadge is provided by a US CDN (Content Delivery Network) provider. An appropriate level of data protection is ensured by standard data protection clauses and other contractual measures.

When the Trustbadge is called up, the web server automatically saves a so-called server log file, which also contains your IP address, date and time of the call, amount of data transferred and the requesting provider (access data) and documents the call. The IP address will be sent immediately after collection anonymized so that the stored data cannot be assigned to you personally. The anonymized data is used in particular for statistical purposes and for error analysis.

8.2 Data processing after completing the order

If you have given your consent, the Trustbadge accesses the order information stored in your end device (order total, order number, product purchased if applicable) and e-mail address after completing the order, and your e-mail address is hashed using a one-way cryptographic function. The hash value is then sent to Trusted Shops with the order information in accordance with Article 6 Paragraph 1 Clause 1 Letter a GDPR.
This is used to check whether you are already registered for Trusted Shops services. If this is the case, further processing takes place in accordance with between you and Trusted Shops contractual agreement. If you are not yet registered for the services or do not give your consent to automatic recognition via the Trustbadge, you will then be given the opportunity to register manually for the use of the services or to be protected within the framework to conclude your existing license agreement.

For this purpose, after completing your order, the Trustbadge accesses the following information that is stored in the end device you are using: order total, order number and e-mail address. This is necessary so that we can offer you buyer protection. A transmission The data will only be sent to Trusted Shops if you actively decide to take out buyer protection by clicking on the corresponding button in the so-called Trustcard. If you decide to use the services, further processing is based on the contractual agreement with Trusted Shops in accordance with Art. 6 Para. 1 lit. b GDPR in order to be able to complete your registration for buyer protection and secure the order and, if necessary, to be able to subsequently send you evaluation invitations by e-mail.

Trusted Shops uses service providers in the areas of hosting, monitoring and logging. The legal basis is Article 6 Paragraph 1 Letter f GDPR for the purpose of ensuring trouble-free operation. Processing can take place in third countries (USA and Israel). An adequate level of data protection is ensured in the case of the USA by standard data protection clauses and other contractual measures and in the case of Israel by an adequacy decision. Contact us for more information here.

9. Integration of the eKomi partner logo

To display our eKomi rating seal and the collected ratings, the eKomi rating seal is included on this website.

This serves to protect our overriding legitimate interests in optimal marketing of our offer in accordance with Article 6 Paragraph 1 Sentence 1 lit. f GDPR. The eKomi seal and the services advertised with it are an offer from eKomi Ltd. ,Markgrafenstrasse 11, 10969 Berlin.
When the eKomi rating seal is called up, the web server automatically saves a so-called server log file, which contains e.g. your IP address, date and time of the call, amount of data transferred and the requesting provider (access data) and the documented retrieval. This Access data is not evaluated and automatically overwritten no later than seven days after the end of your visit to the site.

10. Integration of the Idealo partner logo

The logo of our partner idealo (idealo internet GmbH, Ritterstraße 11, 10969 Berlin) is integrated on our website. When you visit our website, the browser used on your end device automatically sends information to the idealo server. This information are temporarily stored in a so-called server log file for 7 days. The following information is recorded without your intervention and stored until it is automatically deleted:
• IP address of the requesting computer
• Date and time of Access
• Name and URL of retrieved file
• Website accessed from (referrer URL)
• Browser used and, if applicable, the operating system of your computer and the name of your access provider
The temporary Storage of the IP address by the system is necessary to enable delivery of the website. To do this, the IP address must be stored for the duration of the session. Storage in log files takes place to ensure the functionality of the website. Also serve the data to optimize the website and to ensure the security of the information technology systems. This data is not stored together with other personal data. The legal basis for data processing is Article 6 Paragraph 1 Clause 1 Letter f GDPR.

11. social media

Our online presence on Facebook (by Meta), Instagram (by Meta), Youtube

If you have given your consent to the respective social media operator in accordance with Article 6 Paragraph 1 Sentence 1 lit Automatically collected for advertising purposes and stored, from which user profiles are created using pseudonyms. These can be used, for example, to place advertisements inside and outside the platforms that presumably correspond to your interests. Cookies are usually used for this. The Detailed information on the processing and use of the data by the respective social media operator as well as a contact option and your rights in this regard and setting options for protecting your privacy can be found in the data protection notices linked below the provider. If you still need help in this regard, you can contact us.

Facebook(by Meta) is an offer from Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland about your use of our Online presence on Facebook (by Meta) is usually transferred to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA and stored there. The European Commission has not issued an adequacy decision for the USA. Our cooperation with them supports based on standard data protection clauses of the European Commission. Data processing when visiting a Facebook (by Meta) fan page is based on an agreement between joint controllers in accordance with Art. 26 GDPR. For more information (information on Insights data) can be found here.

Instagram (by Meta) is an offer from Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Meta Platforms Ireland”) The automatically collected by Meta Platforms Ireland information about Your use of our online presence on Instagram is usually transferred to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA and stored there. The European Commission has not issued an adequacy decision for the USA. Our teamwork with them is based on standard data protection clauses of the European Commission. Data processing when visiting an Instagram (by Meta) fan page is based on an agreement between joint controllers in accordance with Art. 26 GDPR. Further information (Information on Insights data) can be found here.

YouTube is an offer from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Those collected automatically by Google Information about your use of our online presence on YouTube is usually transferred to a server of Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA and stored there. The European Commission has not issued an adequacy decision for the USA. Our cooperation with them is based on standard data protection clauses of the European Commission.

12. Shopware Analytics

13. Contact options and your rights

13.1 Your Rights

As a data subject, you have the following rights:

• according to Art. 15 GDPR, you have the right to request information about your personal data processed by us to the extent specified there;
• according to Art. 16 GDPR, you have the right to immediately request the correction of incorrect or incomplete personal data stored by us;
• according to Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless further processing is required
  • to exercise the right to freedom of expression and information;
  • to comply with a legal obligation;
  • for reasons of public interest or
  • is required to assert, exercise or defend legal claims;
• according to Art. 18 GDPR the right to demand the restriction of the processing of your personal data, insofar as
  • the accuracy of the data is contested by you;
  • the processing is unlawful but you oppose its erasure;
  • we no longer need the data, but you need them to assert, exercise or defend legal claims or
  • You have objected to the processing pursuant to Art. 21 GDPR;
• according to Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another person responsible;
• according to Art. 77 GDPR the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or work or at our company headquarters.
  
  

13.2 Contact options

If you have any questions about the collection, processing or use of your personal data, information, correction, restriction or deletion of data and revocation of consent given or objection to a specific use of data, please contact us directly via the Contact details in our imprint.