PRIVACY POLICY

1. Privacy Notice

This Privacy Policy explains how personal data are collected and processed when you use our website. Personal data means any information relating to an identified or identifiable natural person.

2. Name and contact data of the controller and company data protection officer

This data protection information applies to data processed by:

Controller:

Neue Meister, a label of Edel Music & Entertainment GmbH,
Neumühlen 17
22763 Hamburg
Germany
Tel.: +4940890850
E-mail: info@neue-meister-music.com

The data protection officer appointed by Edel can be contacted at datenschutz@edel.com.

3. Collection and storage of personal data; type and purpose of use

a) On visiting the website:

It is possible to visit our website without being required to enter personal data.

When accessing the website, however, information will automatically be sent to our website’s server via the browser used on your end device. This information will be temporarily stored in a logfile. The following information will be collected in this context without any action on your part and will be stored until the next automatic deletion process:

• the IP address of the computer sending the enquiry
• date and time of the server enquiry,
• name and URL of the downloaded file,
• website from which our website was accessed (referrer URL),
• browser used and, if applicable, your computer’s operating system and the name of your access provider.

We will process the above data for the following purposes:

• ensuring smooth connection to the website,
• ensuring that the website is user-friendly,
• evaluating system security and stability,
• improving our offering.

The legal basis for data processing is Art. 6(1) sentence 1(f) GDPR. Our legitimate interest can be derived from the data processing purposes set out above. We will never use the collected data in order to draw conclusions relating to you personally.

We also use cookies and analytics services in connection with visits to our website. For more information, see section 6 of this Privacy Notice.

b) On contacting us via e-mail or the contact form

If you contact us by e-mail or via the contact form provided on our website, we will store the data you provide (your e-mail address, together with your name and telephone number, if applicable) in order to process your request or respond to your questions.

If using the contact form, you are required to give a valid e-mail address in order that we know who sent the enquiry and in order to be able to respond to it. All other information is provided on a voluntary basis.

The processing of data transmitted in the course of contacting us is carried out for the purpose of handling your request and is based on Art. 6(1)(b) GDPR, insofar as your request relates to the performance of a contract or pre-contractual measures, or on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.

We will delete any data collected in this context once storage is no longer necessary (if, for instance, your enquiry has been satisfied) or we limit processing if statutory retention periods apply.

c) On registering for our newsletter

Our website offers you the opportunity to subscribe to our newsletter. We use Brevo as our newsletter service provider. The provider is Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

To subscribe to the newsletter, we require your email address as well as your first and last name in order to address you personally. Registration is carried out using the double opt-in procedure. After registering, you will receive an email asking you to confirm your subscription. Brevo logs the registration, the double opt-in confirmation, the corresponding timestamps, and the IP address in order to document the subscription process.

Brevo also enables us to analyze the performance of our newsletter campaigns. In particular, we can determine whether a newsletter has been opened, which links have been clicked, and how often. Furthermore, newsletter recipients may be segmented according to specific criteria in order to send more relevant content.

The following categories of personal data may be processed:

• First and last name
• Email address
• IP address
• Registration and confirmation timestamps (double opt-in)
• Information regarding the delivery and receipt of newsletters
• Open and click rates
• Browser and device information

The data is processed on servers operated by Brevo within the European Union. Where personal data is processed outside the European Union or the European Economic Area, such processing is carried out in compliance with the applicable data protection requirements and appropriate safeguards pursuant to Article 44 et seq. GDPR.

The processing of your personal data for the purpose of sending newsletters is based on your consent pursuant to Article 6(1)(a) GDPR. The logging of the subscription process is based on our legitimate interest pursuant to Article 6(1)(f) GDPR to demonstrate that valid consent has been obtained.

Your personal data will be stored until you unsubscribe from the newsletter and will then be deleted unless statutory retention obligations apply. If you do not confirm your subscription within two weeks, your registration will be blocked and automatically deleted after one month.

You may withdraw your consent at any time with future effect by using the unsubscribe link included in every newsletter or by contacting us directly.

Further information is available at:

Privacy Policy: https://www.brevo.com/legal/privacypolicy/

d) Terms and conditions for participation in the competition

In order to participate in a competition organised by us, certain personal data must be processed for the purpose of any notification and transmission of winnings and for your identification.

The personal data which we require for your participation in a competition organised on our website are marked as mandatory fields on the participation form provided on our website. You may voluntarily provide additional data.

When you enter a sweepstake that we host through our Facebook page or Instagram page, we store your public Facebook/Instagram profile information including your username and your Facebook/Instagram comment (text and image) submitted to participate in the sweepstake to document your sweepstake in the event of your drawing.

We need your address data only after the prize determination and only in the event that you have been determined as the winner, in order to be able to send you the prize. We request your address information by emailing you either to the email address you provided on the entry form or, if you are participating in a Facebook/Instagram competition, to your Facebook/Instagram profile. You are under no obligation to provide us with your address information. However, if you do not provide us with your address information, we may not be able to deliver the prize to you.

Your personal data will be processed by us for the purpose of conducting the competition on the basis of Art. 6 Para. 1 S. 1 lit. b DSGVO. In the case of sweepstakes which we conduct together with cooperation partners, your data will be forwarded to the cooperation partner who is responsible for redeeming the prize. You will be informed of this cooperation partner as part of your address enquiry. Our cooperation partner(s) will be named in the respective competition. Your personal data will only be passed on to third parties or used for advertising purposes (e.g. to send newsletters) if this is necessary to run the competition or if you have given your express consent beforehand.

If you have been identified as a winner of a competition and you have given us your consent, we will post your first and last name in connection with the prize on our website and/or Facebook page/Instagram page.

With your consent, our cooperation partners may contact you directly by email or postal mail with promotional offers.

The processing of your data, for which you have given us your consent, takes place on the basis of Art. 6 Para. 1 S. 1 lit. a DSGVO.

Your personal data will be deleted automatically after the lottery has ended, unless you have given us permission to process your data beyond the purpose of the lottery, or if legal regulations prevent the deletion.

You can revoke your consent given to us within the scope of your participation in a competition at any time with effect for the future by notifying us of your revocation in writing or by contacting us by e-mail at info@neue-meister-music.com or by contacting our corresponding cooperation partner. After revocation of your consent, your personal data, to which your revocation refers, will be deleted immediately, unless there are legal provisions to the contrary.

If you subscribe to a newsletter from one of our cooperation partners as part of the raffle, the data protection provisions specified by this partner apply.

4. Disclosure of data

Your personal data will not be disclosed to third parties for any purposes other than those set out below.

We will only disclose your personal data to third parties if:

• you granted your express consent pursuant to Art. 6 (1) sentence 1(a) GDPR;
• disclosure is required pursuant to Art. 6(1) sentence 1(f) GDPR in connection with the establishment, exercise or defence of legal claims and there is no reason to believe that you have an overriding legitimate interest in your data not being disclosed;
• we are subject to a statutory obligation to such disclosure pursuant to Art. 6(1) sentence 1(c) and
• this is permitted by law and necessary in connection with implementing contractual relations with you pursuant to Art. 6(1) sentence 1(b) GDPR.

5. Ninja Firewall

A special security software is integrated on this website, which is provided by NinTechNet Limited, based in Hong Kong (Unit 1603, 16th Floor, The L. Plaza 367 – 375 Queen’s Road Central Sheung Wan).

This solution is used to protect our website from unauthorized access and potential cyber threats. Technical information such as the IP address, the content accessed, the referring page and the time of access are recorded. The security software runs directly on our own servers so that no personal data is forwarded to the provider or third parties.

To further improve data protection, we have activated an anonymization function that only stores IP addresses in abbreviated form.

This protective measure is used in accordance with Art. 6 para. 1 lit. f GDPR, as it is in the legitimate interest of the website operator to protect the website from potential attacks in the best possible way.

6. Cookies

We use cookies and similar technologies on our website. Cookies are small text files that are automatically created by your browser and stored on your device (e.g. laptop, tablet or smartphone) when you visit our website. Cookies do not cause any damage to your device and do not contain viruses, trojans or other malicious software.

Information stored in cookies relates to the specific device used in each case. However, this does not mean that we obtain direct knowledge of your identity.

The use of cookies serves, on the one hand, to technically provide our website and to make the use of our services more user-friendly. For this purpose, we use so-called session cookies to recognize that you have already visited individual pages of our website. These cookies are automatically deleted after you leave our website.

In addition, we use temporary cookies that are stored on your device for a specified period of time. If you visit our website again, it may automatically be recognized that you have previously visited our website and which settings you selected in order to facilitate your use of our website.

Technically necessary cookies are used on the basis of Section 25 (2) TTDSG and Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in the technically error-free and optimized provision of our website.

Insofar as we use cookies for analytics, statistics or marketing purposes, this is done exclusively on the basis of your explicit consent pursuant to Section 25 (1) TTDSG and Art. 6 para. 1 sentence 1 lit. a GDPR. You may withdraw or amend your consent at any time with effect for the future via the cookie settings.

Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your device or so that a notice always appears before a new cookie is created. Please note that completely disabling cookies may result in certain functions of our website no longer being available or only being available to a limited extent.

In addition to technically necessary cookies, we may also use third-party cookies that help us analyze user behavior on our website, optimize our services and display content and advertising tailored to users’ interests.

Via our cookie banner, you have the option to consent to or reject the use of non-essential cookies. You may change or withdraw your selection at any time via the “Cookie Settings”.

Information on Data Transfers to Third Countries

If you consent to the use of certain cookies and services, personal data may also be transferred to recipients located in countries outside the European Union or the European Economic Area, in particular to the United States. In such countries, an adequate level of data protection comparable to that within the European Union may not exist.

In particular, there is a risk that government authorities may access the transferred data without you having effective legal remedies available against such access.

Any transfer of personal data to third countries is carried out exclusively on the basis of your explicit consent pursuant to Art. 49 para. 1 sentence 1 lit. a GDPR.

7. GA4 Google Analytics

Subject to your consent, our website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics 4 enables us to analyze the use of our website and optimize our online services.

Scope of processing

Google Analytics uses cookies and similar technologies that enable us to analyze your use of our website. The information collected through these technologies is generally transmitted to and processed on Google’s servers.

In Google Analytics 4, IP anonymization is enabled by default. As a result, your IP address is truncated by Google within Member States of the European Union or other contracting states of the European Economic Area before processing. Only in exceptional cases is the full IP address transferred to a Google server and shortened there. According to Google, the IP address transmitted by your browser within the scope of Google Analytics is not combined with other Google data.

During your visit to our website, the following information may be processed:

• Page views
• First visit to the website
• Session start
• Click paths and interactions with the website
• Scroll behavior
• Clicks on external links
• Internal search queries
• Video interactions
• File downloads
• Viewed or clicked advertisements
• Language settings

In addition, the following information may be processed:

• Approximate location (region)
• Truncated IP address
• Browser and device information (e.g. language settings or screen resolution)
• Internet service provider
• Referrer URL

Google Signals

Where Google Signals is enabled, cross-device reports may be created and information about user behavior across different devices may be analyzed. Google may use this information to generate cross-device models and provide aggregated statistics. We have no control over Google’s processing of data through Google Signals. You can disable cross-device analysis by disabling personalized advertising in your Google Account.

Purposes of processing

Google processes the collected information on our behalf to evaluate the pseudonymous use of our website, prepare reports on website activity, and analyze the performance and usability of our website.

Recipients

Recipients of the data may include:

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (processor)
• Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Third-country transfers

Where personal data is transferred to the United States, such transfer is based on the certification of Google LLC under the EU-US Data Privacy Framework. Where necessary, Google also relies on the Standard Contractual Clauses approved by the European Commission.

Storage period

The data transmitted by us to Google Analytics and linked to cookies is automatically deleted after two months. Data whose retention period has expired is deleted automatically once per month.

Legal basis

The processing is carried out exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR.

Withdrawal of consent

You may withdraw your consent at any time with future effect via our cookie settings. The lawfulness of the processing carried out before the withdrawal remains unaffected.

You can also prevent the storage of cookies through your browser settings. In addition, you may prevent Google from collecting and processing the data generated by Google Analytics by:

• refusing or withdrawing your consent, or
• installing the Google Analytics browser add-on: https://tools.google.com/dlpage/gaoptout

Further information is available at:

Google Privacy Policy: https://policies.google.com/privacy

Google Analytics: https://marketingplatform.google.com/about/analytics/

8. Google Ads

Our website uses Google Ads. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to display advertisements in Google Search and across the Google advertising network in order to promote our products and services to potential customers.

The following categories of personal data may be processed:

• IP address
• Browser and device information
• Cookie information and similar identifiers
• Visited pages and content
• Referrer URL
• Date and time of the visit
• Interactions with our advertisements

Where personal data is transferred to the United States, such transfer is based on the certification of Google LLC under the EU-US Data Privacy Framework.

The processing is carried out exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR. Google Ads is only activated after you have provided your consent through our consent management tool. You may withdraw your consent at any time with future effect via the cookie settings.

Further information is available at:

Google Privacy Policy:

https://policies.google.com/privacy

Google Ads:

https://support.google.com/google-ads

Google Ads Conversion Tracking

Our website uses Google Ads Conversion Tracking and, where applicable, Google Enhanced Conversions. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads Conversion Tracking enables us to measure the effectiveness of our advertising campaigns and understand which actions users perform on our website after clicking on a Google advertisement. Where Enhanced Conversions are used, identifiers provided by you (such as your email address) may be transmitted to Google in hashed form in order to improve conversion attribution.

The following categories of personal data may be processed:

• IP address
• Browser and device information
• Cookie information and similar identifiers
• Visited pages and content
• Referrer URL
• Date and time of the visit
• Conversion data (e.g. form submissions, registrations or purchases)
• Hashed identifiers (e.g. email address), where Enhanced Conversions are used

Where personal data is transferred to the United States, such transfer is based on the certification of Google LLC under the EU-US Data Privacy Framework.

The processing is carried out exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR. Google Ads Conversion Tracking is only activated after you have provided your consent through our consent management tool. You may withdraw your consent at any time with future effect via the cookie settings.

Further information is available at:

Google Privacy Policy:

https://policies.google.com/privacy

Google Ads Conversion Tracking:

https://support.google.com/google-ads/answer/1722022

9. Google Remarketing

Our website uses Google Remarketing. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Remarketing enables us to recognize visitors to our website based on their browsing behavior and display interest-based advertisements to them on other websites within the Google advertising network. It also enables us to analyze and optimize the effectiveness of our advertising campaigns.

The following categories of personal data may be processed:

• IP address
• Browser and device information
• Cookie information and similar identifiers
• Visited pages and content
• Interactions with our website
• Referrer URL
• Date and time of the visit
• Information regarding the display of and interaction with advertisements

The processing is generally carried out using pseudonymized data. We do not directly identify you through this processing.

Where personal data is transferred to the United States, such transfer is based on the certification of Google LLC under the EU-US Data Privacy Framework.

The processing is carried out exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR. Google Remarketing is only activated after you have provided your consent through our consent management tool. You may withdraw your consent at any time with future effect via the cookie settings.

Further information is available at:

Google Privacy Policy:

https://policies.google.com/privacy

Google Remarketing:

https://support.google.com/google-ads

10. TikTok Pixel

Our website uses the TikTok Pixel. The providers are TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, and TikTok Information Technologies UK Limited, WeWork, 125 Kingsway, London, WC2B 6NH, United Kingdom (collectively referred to as “TikTok”).

The TikTok Pixel enables us to understand how visitors interact with our website after they have reached it via a TikTok advertisement or interacted with our content. This allows us to measure the effectiveness of our advertising campaigns, create target audiences, and optimize our marketing activities.

The following categories of personal data may be processed:

• IP address
• Browser and device information
• Cookie information and similar identifiers
• Visited pages and content
• Referrer URL
• Date and time of the visit
• Event data (e.g. page views, product views, shopping cart activities, or purchases)

Where personal data is processed outside the European Union or the European Economic Area and no adequacy decision of the European Commission exists, the transfer is based on the Standard Contractual Clauses approved by the European Commission.

With regard to the collection and transmission of personal data, TikTok and we act as joint controllers pursuant to Article 26 GDPR. A Joint Controller Agreement has been concluded for this purpose. TikTok is solely responsible for any subsequent processing of your personal data.

The processing is carried out exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with future effect via the cookie settings.

Further information is available at:

TikTok Privacy Policy:

https://www.tiktok.com/legal/privacy-policy

Joint Controller Terms:

https://ads.tiktok.com/i18n/official/policy/jurisdiction-specific-terms

TikTok Support:

https://support.tiktok.com/

11. Meta Pixel, Meta Conversions API and Meta Custom Audiences

With your consent, we use the Meta Pixel, the Meta Conversions API, and Meta Custom Audiences provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”) on our website. Meta operates the social networks Facebook and Instagram as well as other online services.

These services enable us to understand how users interact with our website after visiting it or after viewing or clicking on an advertisement on Facebook or Instagram. This allows us to measure the effectiveness of our advertising, perform statistical analyses, and optimize our marketing activities.

The information available to us is aggregated and statistical in nature. We do not receive personal data that directly identifies individual users. However, Meta processes the collected information and may link it to your Meta account and use it for its own purposes in accordance with its privacy policy.

Categories of Data Processed

When using the Meta Pixel and the Meta Conversions API, the following categories of data may be processed:

• IP address
• HTTP header information (e.g. browser type, user agent, language settings)
• Date and time of access
• URL of the visited page and referrer URL
• Pixel ID and cookie information
• Event data (e.g. page views, product views, shopping cart activities or purchases)
• Product information, shopping cart value and currency
• Additional standard or custom event data

Where available, existing Meta identifiers (e.g. contained in Meta cookies) may be processed in hashed form in order to match the transmitted data with a Meta user account.

Custom Events

We process the following custom events:

• Searched products
• Viewed products at product level

Meta Conversions API

The Meta Conversions API complements the Meta Pixel by transmitting certain website events directly from our server to Meta. This improves the reliability of event measurement and helps optimize advertising campaigns on Meta platforms.

A complete overview of the supported event parameters is available at:

https://developers.facebook.com/docs/marketing-api/conversions-api/parameters

Meta Custom Audiences (Remarketing)

We also use the Meta Pixel and the Meta Conversions API for remarketing purposes (“Meta Custom Audiences”). This enables us to display interest-based advertising to you on Meta platforms for up to 180 days after your visit to our website.

For this purpose, information about your visit, your interactions with our website and, where applicable, information about viewed products or shopping cart contents may be processed.

Joint Controllership

With regard to the collection and transmission of personal data to Meta, Meta and we act as joint controllers pursuant to Article 26 GDPR. We have concluded a Joint Controller Agreement with Meta for this purpose.

We have no influence over the subsequent processing of your data by Meta.

International Data Transfers

Where personal data is transferred to Meta in the United States, such transfers are based on the certification of Meta Platforms, Inc. under the EU-US Data Privacy Framework.

Storage Period

Cookies set by Meta are stored for up to 180 days, depending on the respective cookie.

Legal Basis

The processing of your personal data is based exclusively on your consent pursuant to Article 6(1)(a) GDPR.

You may withdraw your consent at any time with future effect via our cookie settings.

Further information about Meta’s processing of personal data is available at:

https://www.facebook.com/privacy/policy/

12. PixelYourSite

We use the WordPress plugin PixelYourSite, provided by Minimal Work SRL, Bujoreni, Vâlcea, Romania, to technically implement the Meta Pixel and other tracking technologies on our website.

The plugin serves solely as a technical integration tool for the tracking and analytics services used on our website. Any processing of personal data takes place exclusively in connection with the respective tracking services and only on the basis of your consent pursuant to Article 6(1)(a) GDPR.

Further information is available at:

https://www.pixelyoursite.com/privacy-policy

13. Google Tag Manager

Our website uses Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tag management system that enables us to centrally manage and deploy website tags. The service itself processes personal data only for technically necessary purposes and is used to load and manage other services on our website. Google Tag Manager does not create user profiles, does not store cookies for analytics or advertising purposes, and does not independently evaluate personal data.

The following categories of personal data may be processed:

• IP address
• Browser and device information
• Technical information required to execute tags
• Date and time of the page request

Where personal data is transferred to the United States in connection with Google Tag Manager, such transfer is based on the certification of Google LLC under the EU-US Data Privacy Framework.

The processing is carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR. Our legitimate interest lies in the efficient management and technical deployment of the services used on our website.

Further information is available at:

Google Privacy Policy:

https://policies.google.com/privacy

Google Tag Manager:

https://support.google.com/tagmanager

14. YouTube (Enhanced Privacy Mode)

Our website embeds videos provided by YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in Enhanced Privacy Mode. According to YouTube, personal data is generally processed only when you actively start a video. However, once a video is played, a connection to YouTube’s servers is established. In this process, your IP address, browser and device information, the page you visited, and other technical information may be transmitted to Google.

If you are logged into your Google or YouTube account, Google may associate your visit to our website with your user account. You can prevent this by logging out of your Google or YouTube account before playing a video.

Furthermore, YouTube may use cookies and similar technologies after a video has been started to process information about your use of the service, compile video statistics, improve user experience, and prevent misuse. We have no control over Google’s subsequent processing of your data.

Where personal data is transferred to the United States, such transfer is based on the certification of Google LLC under the EU-US Data Privacy Framework.

The processing is carried out exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with future effect via the cookie settings.

Further information about Google’s processing of personal data is available at: https://policies.google.com/privacy

15. Spotify

Functions offered by the music services provider Spotify are embedded on our website. These are provided by Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden. The Spotify plug-ins can be identified by the green logo on our website. An overview of the Spotify plug-ins is available at https://developer.spotify.com.

If you access pages on our website containing Spotify plug-ins, a direct link is created between your browser and Spotify’s servers. Spotify will thus receive the information that you accessed the corresponding page on our website from your IP address.

If you have a Spotify account, these data could be linked to your account. If you do not wish these data to be linked to your Spotify account, you must log out of Spotify before visiting our website. Interactions will also be forwarded to Spotify.

For more information, please see Spotify’s Privacy Policy: https://www.spotify.com/uk/legal/privacy-policy/

The legal basis is Art. 6(1) sentence 1(f) GDPR.

16. Social media sites and links

The responsible party operates several social media presences. On Neue Meister those are:

Facebook: https://www.facebook.com/MeisterNeue/
Instagram: https://www.instagram.com/neuemeistermusic/

You will find links to these social media presences on our websites. The links establish a connection to our online presence of the respective social network exclusively on request – therefore only after the user has clicked on a link. After a click on the link, the IP address and the general header information of the user’s browser are transmitted to the respective social network. The respective social network may collect further personal data as soon as you use its offers. If you are logged into your respective account, Facebook can, for example, assign the visit to your account there.

By the ruling of the European Court of Justice of 05 June 2018, a joint responsibility of Facebook and the respective fan page or profile operator for the operation of a fan page was assumed. Despite this possible joint responsibility of us and the social media portal operator, we unfortunately have little control or influence over the processing of personal data by the respective social media portals. This refers both to the data entered by you on the social media platforms, such as comments, videos, images, likes, public messages, etc., as well as any web tracking, marketing and analysis tools used by the portal. We would like to point out that it cannot be ruled out that the provider of the social media platform may use your profile and behavioral data, for example to evaluate your habits, personal relationships, preferences, etc. Your personal data will also be processed by the respective operator outside the European Union or the European Economic Area. As a result, risks may arise for you, in particular the enforcement of rights may become more difficult.You can find more detailed information on data processing by the provider of the social media platform and further objection options in the privacy statements of the respective providers:

Facebook: https://www.facebook.com/privacy/explanation

Instagram: https://help.instagram.com/519522125107875

The data you enter on our social media pages, such as comments, videos, images, likes, public messages, etc., will not be used or processed by us for any other purpose at any time. We only reserve the right to delete content if this should be necessary. At the points where we can exert influence, we work within the scope of the possibilities available to us to ensure that the operator of the social media platform handles the content in a manner that complies with data protection laws. The legal basis is Art. 6 para. 1 p. 1 lit. f) DSGVO. The data processing is carried out in the interest of our public relations and communication.

17. Amazon partner program (Amazon Affiliate)

We participate in the Amazon Europe Core S.à r.l. affiliate program. The provider is Amazon Europe Core S.à r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg.

The Amazon affiliate program is designed to provide a means for websites to earn advertising reimbursement through the placement of advertisements and links to Amazon offers. Amazon uses this program in order to track the origin of orders.

If you click on an Amazon link or a corresponding advertisement on our website, Amazon may use cookies and similar technologies. In this context, personal data may be processed, in particular IP addresses, information about your user behavior, technical information about your device, referrer data and, where applicable, cookie IDs.

If you are logged into your Amazon account, Amazon may associate the collected information with your account. If you do not wish this to happen, you must log out of Amazon before visiting our website.

The processing is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25 para. 1 TTDSG. You may withdraw or amend your consent at any time with effect for the future via the cookie settings.

Amazon is certified under the EU-US Data Privacy Framework (DPF). Insofar as personal data are transferred to the United States, such transfer is based on the adequacy decision of the European Commission pursuant to Art. 45 GDPR.

Further information on Amazon’s processing of personal data can be found at: https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010

18. Linkfire

Our website uses Linkfire. The provider is Linkfire ApS, Artillerivej 86, 3., 2300 Copenhagen S, Denmark.

Linkfire enables us to provide links to various music streaming services and online stores through a single link. It also allows us to analyze how users interact with these links in order to improve our content and optimize our online services.

The following categories of personal data may be processed:

• IP address
• Browser and device information
• Cookie information and similar identifiers
• Visited pages and content
• Referrer URL
• Date and time of the visit
• Interactions with Linkfire links (e.g. clicks and redirects)

Where we receive analytics, these are generally provided in aggregated form. We have no control over Linkfire’s subsequent processing of personal data.

The processing is carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR. Our legitimate interest lies in providing users with convenient access to music and streaming platforms and in analyzing and optimizing our online services.

Further information about Linkfire’s processing of personal data is available at: https://linkfire.com/privacy

19. Your rights

a) Information, rectification, erasure, restriction of processing, data transferability, revocation, complaints

You have the right:

• to receive, pursuant to Art. 15 GDPR, information on your personal data processed by us. You can, in particular, receive information on the purposes of processing, the categories of personal data, the categories of recipient to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request rectification, erasure, restriction of processing of personal data or the right to lodge a complaint, where the personal data are not collected from us, any available information as to their source, the existence of automated decision-making, including profiling, and meaningful information about the corresponding details, if applicable;
• to obtain, pursuant to Art. 16 GDPR, without undue delay the rectification of inaccurate or incomplete personal data stored by us;
• to obtain, pursuant to Art. 17 GDPR, the erasure of your personal data stored by us, provided processing is not required in order to exercise the right of freedom of expression and information, for compliance with a legal obligation, for the performance of a task carried out in the public interest or for the establishment, exercise or defence of legal claims;
• to obtain, pursuant to Art. 21 GDPR, restriction of processing, where you contest the accuracy of the personal data, the processing is unlawful, you oppose the erasure of the personal data and we no longer need the personal data, but they are required by you for the establishment, exercise or defence of legal claims pursuant to Art. 18 GDPR or you have exercised your right to object;
• to receive, pursuant to Art. 20 GDPR, the personal data concerning you, which you provided, in a structured, commonly used and machine-readable format and to demand transmission of those data to another controller;
• to withdraw your consent at any time pursuant to Art. 7(3) GDPR by making a corresponding statement to us. This means that we are not permitted to continue to process the data to which this consent applied in future; and
• to lodge a complaint with a supervisory authority, pursuant to Art. 77 GDPR. You can generally lodge such complaint with the supervisory authority in the place of your habitual residence, place of work or our branch.

b) Right to object

If your personal data are processed on the basis of justified interests pursuant to Art. 6(1) sentence 1(f) GDPR, you have the right to object to the processing of your personal data, pursuant to Art. 21 GDPR, on grounds relating to your particular situation or the objection relates to direct marketing. In the latter case, you have a general right to object which will be implemented by us without you having to specify grounds.

If you wish to make use of your right to object, an e-mail to the following address will suffice:

datenschutz@edel.com.

20. Data security

We use the popular SSL (secure sockets layer) technology in conjunction with the highest level of encryption supported by your browser when you access our website. This is generally 256‑bit encryption. If your browser does not support 256-bit encryption, we will use 128-bit v2 technology instead. You can identify whether or not an individual page on our website is transmitted in encrypted form by the closed key/padlock symbol in the lower status bar on your browser.

Online applications are transferred in encrypted form according to the latest technological standards.

We also use suitable technical and organisational security measures in order to protect your data against accidental or deliberate manipulation, partial or total loss, destruction or unauthorised access by third parties. Our security measures are continually improved in line with technological developments.

21. Validity and amendments to this Privacy Notice

This Privacy Notice is up to date and is the valid version dated 21 July 2025.

We may be required to update this Privacy Notice as a result of developments to our website and services or due to amendments made to statutory or official requirements. The valid version of the Privacy Notice is available for inspection and printout at all times on our website at https://www.edel.com/en/privacy-policy-2/.