a) When you visit our website
When you visit our website www.celemony.com, the browser on your device automatically sends information to the server on our website. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted after 14 days:
The above-mentioned data will be processed by us for the following purposes:
The legal basis for the data processing is Art. 6(1)(f) GDPR. Our legitimate interest follows from the purposes listed above for data collection. We do not use the data collected to draw any conclusions about you personally. Furthermore, this data is never merged with other data. We reserve the right, however, to examine the log files subsequently, should we become aware of any concrete indications of illegal use.
b) When purchasing from our webshop
When you order from our webshop, it is necessary for the performance of the contract that you enter such “personal data” (within the meaning of the GDPR) as is required by us for the processing of your order e.g. your name, your address, your payment details and your e-mail address (to confirm that the contract has been concluded). Items of information that are essential to the execution of the contract are marked as such; the entering by you of any further information is voluntary. We process the data you enter so that we can fulfill your order. For this purpose, we may pass on your payment data to our house bank.
In the case of payment by credit card, the data (card number, cardholder, expiry date, card security code) provided by you during the payment process on the Internet will be forwarded directly to the respective payment service provider via the iPayment payment processing system (a service of 1&1 Internet SE) integrated by our webshop . We do not ourselves store this data. Your data (e.g. your name, address, account or credit card number, passwords, TANs etc.) are then processed to the extent required for the payment to be made. The payment details entered, however, are only processed and stored by the payment service provider or payment processor. This means that we do not receive any account or credit card related information, but only information regarding confirmation or refusal of payment. As part of a possible identity and credit check, the payment service providers may also pass on data to credit agencies. For more detailed information, please refer to the general terms and conditions and data protection provisions of the payment service provider concerned, which can be accessed from its website or application within the framework of the transactions.
The legal basis for the above-mentioned data processing, in so far as the data are required for the fulfillment of your order, is Art. 6(1)(b) GDPR, or in the case of additional information you have provided freely, Art. 6(1)(a) GDPR.
We may also process the email address you provide when you complete your purchase to provide you with important technical information about the products you have purchased or to inform you of other products in our range that may be of interest to you. The legal basis for this data processing is Art. 6(1)(f) GDPR or Art. 6(1)(f) GDPR in conjunction with § 7(3) UWG (the German law against unfair competition). Our legitimate interests here are customer retention and the promotion of our business through the provision of product information based on your previous purchases and technical information relevant to you to maintain or enhance the performance of your products. You can object to our sending you product-related emails of this type without incurring any costs other than those of transmission at the current rates. For this purpose, it is enough to do one of three things: i) send an email to this effect to firstname.lastname@example.org; ii) click on the “unsubscribe” link provided at the end of each of our info emails; iii) change the corresponding setting on the profile page of your user account.
c) In the context of your user account
As part of our online purchasing process (or online registration process, if the product was purchased from a physical retail outlet), you are asked to create a user account by entering an email address and a password. Your user account gives you a convenient overview of your licenses and customer data and provides you with the latest versions of your Celemony products. From your user account, you can also adjust your newsletter preferences, which provides you with an alternative method of unsubscribing. You can access your user account at any time and adjust your preferences. Your user account data cannot be seen by third parties.
The legal basis for the above-mentioned data processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in the desire to foster customer loyalty and satisfaction by setting aside an area of the website from which you can obtain a clear overview of all your Celemony products as well as any updates that may be available, and where you can update your personal data and preferences in a swift and uncomplicated manner.
d) When you activate your product
Before you can avail yourself of the full functionality of your Celemony product, it must be activated via our server. This is a copy-protection measure.
In the course of the activation process, an automatic analysis of your device environment is conducted and a license code (aka ‘Host ID’) generated, which is then stored on your hard disk. By combining this with another numerical code generated by our server in the course of the above-mentioned analysis of your device environment and transmitted to our product, your authorization to use the software can be verified when the software is subsequently launched. The data stored by us in the course of this process comprises anonymous numerical codes that cannot be traced back to you.
The legal basis for the above-mentioned data processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in preventing the unlawful copying of our software.
e) When you contact our Support team
Any difficulties you may encounter in the use of our products can be raised with our Support team, usually by sending an e-mail to email@example.com. When you do so, any processing by us of the data you send us is for the sole purpose of responding to your requests. Once the matter in question has been resolved, we retain this data for a period of 5 years to increase the speed and quality of our response to further support requests.
The legal basis for the data processing is Art. 6(1)(f) GDPR. Our legitimate interests lie in facilitating the problem-free use of our products by customers as well as, with respect to the storage of such data, increasing the efficiency of our future support efforts and thereby customer satisfaction.
f) When you subscribe to our newsletter
From your user account, you can subscribe to our free newsletter. Should you do so, the newsletter will be sent to the e-mail address you provide. You will then receive from us on, a regular basis, up-to-date information on updates, offers and workshops devoted to Celemony products. All data processing arising from the dispatch of the newsletter is confined to our own servers.
In addition to your e-mail address, we will store the times of your subscription and confirmation and the IP addresses used in each case. The purpose of this procedure is to verify your subscription and help us detect the possible abuse of your personal data.
The provision of additional data is voluntary; such data will be used to address you more personally. If you have provided us with information regarding your place of residence, we will use it to avoid plying you with content of little interest to you. From the ZIP or postcode you have provided, for instance, we can avoid telling you about events that would require your travelling unreasonable distances to attend.
The purpose of this data processing is to facilitate the dispatch of our newsletter and our legal justification for processing the above-mentioned data is your consent within the meaning of Art. 6(1)(a) GDPR. In as far as the details furnished by you are used to personalize the newsletter, this is based on our legitimate interests within the meaning of Art. 6(1)(f) GDPR. Specifically, our aim here is to make the information we send you more relevant to you and enhance customer satisfaction.
If you are already a registered user, you have the possibility when subscribing to the newsletter of choosing between receiving information about Celemony products in general or only information relevant to the products you have purchased. In the latter case, we use the serial numbers of the products you have purchased, which are known to us as a result of the registration, for the further purpose of ensuring the newsletter we send you respects your wishes.
The legal basis for this data processing is your freely granted consent under Art. 6(1)(a) GDPR. You can object to this at any time either by changing the newsletter settings in your Celemony profile or simply by unsubscribing to the newsletter.
You can cancel your newsletter subscription at any time, for example, by clicking on the link provided for the purpose at the end of each newsletter. Alternatively, you can send an e-mail to firstname.lastname@example.org expressing your desire to unsubscribe or change the newsletter settings of your user account.
g) When you use our newsletter
To assess the reach of our newsletter and its relevance to you, and so as to tailor its contents more closely to your needs, we integrate into our newsletter what are known as “web beacons” or “tracking pixels”, which are one-pixel image files that are stored on our website and loaded when the newsletter is opened. In conducting evaluations, we combine the data mentioned in Section 2(a) and the web beacons with your email address and individual ID. The links used in the newsletter also contain this ID. This allows us to ascertain which of the links contained in the newsletter you click on as your read it and to draw conclusions from this about your personal interests.
The legal basis for this data processing is Art. 6(1)(f) GDPR. Our legitimate interest here lies in our desire to make the newsletter more attractive and avoid plying you with information that is not relevant to you.
You can object to this tracking at any time by sending an e-mail to this effect to email@example.com or by unsubscribing to our newsletter altogether (see above). The information will be stored for as long as you remain subscribed to the newsletter. If you unsubscribe, the data will be stored subsequently in a purely statistical and anonymous form. Furthermore, tracking using the web beacon is not possible if you have deactivated the display of images by your e-mail program. In this case, the newsletter will not be fully displayed and you may find it impossible to take advantage of all its functions. If, however, you manually authorize the display of images, the tracking described above will occur.
In addition, we also use temporary cookies that are stored on your device for a specified period of time for optimized user-friendliness. If you visit our website again to use our services, it will automatically recognize that you have already been with us and what entries and settings you have made so that you do not have to enter them again e.g. the browser notes the contents of your shopping basket and the language you have selected.
The data processed by cookies is required for the aforementioned purposes in order to protect our legitimate interests and those of third parties pursuant to Art. 6(1)(f) GDPR.
Most browsers automatically accept cookies. It is possible, in fact, to configure your browser to ensure that no cookies are stored on your computer or that a message always appears before a new cookie is created. Previously saved cookies can be deleted at any time. However, if you deactivate cookies altogether, you may find yourself unable to use all the functions of our website.
Our use of the tracking technologies (or “tools”) outlined below is based on Art. 6(1)(f) GDPR. Through the use of such tools, we are seeking to ensure that the design and functionality of our website are well adapted to requirements and can be constantly enhanced. We also use tracking tools to compile statistics on the use of our website, to help us evaluate it and make it better serve your needs. These constitute our legitimate interests within the meaning of the above-mentioned provision.
For each of the tools in question, the objectives of the data processing and the categories of data concerned are set out below.
This website uses Google Analytics, a web analysis service of Google LLC, 1600 Amphitheater Parkway, Mountainview, California 94043, USA (“Google”). Google Analytics uses what are called “cookies”, which are text files placed on your computer that make it possible to analyze your use of the website. The data generated by such cookies about your use of this website are as a rule transferred to a server belonging to Google in the USA and stored there. However, if IP anonymization is activated on this website, Google will shorten your IP address within member states of the European Union or in other states party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services related to website and Internet use.
The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.
As an alternative to the browser plug-in, or for browsers on mobile devices, please click on the following link in order to set an opt-out cookie which prevents Google Analytics collecting data on this website in the future (this opt-out cookie only functions for this browser and this domain; if you delete your cookies on this browser, you must click again on this link): https://tools.google.com/dlpage/gaoptout?hl=en
This website uses Google Analytics with the extension „_anonymizeIp()“. As a result of this, IP addresses are processed in a truncated form that makes it impossible for you to be identified personally. As far as the data collected about you is personal, it will be excluded immediately and the personal data will be deleted immediately. For the exceptional cases in which personal data is transmitted to the USA, Google is committed to comply with the EU-US data protection agreement “Privacy Shield”, https://www.privacyshield.gov/EU-US-Framework.
Further information on data protection in connection with Google Analytics can be found in Google’s “Analytics Help” section: https://support.google.com/analytics/answer/6004245?hl=de.
a) Google Adwords Conversion
We use the service Google Adwords (of Google LLC, 1600 Amphitheater Parkway, Mountainview, California 94043, USA (“Google”)) to draw attention to our attractive offers with the help of advertising material (Google Adwords) on external websites. Using the data of such advertising campaigns, we can assess how successful the individual advertising measures are. Our aim here is to display advertisements that are of interest to you, to make our website more interesting for you, and to attain a fair calculation of advertising costs.
This advertising material is delivered by Google via so-called “ad servers.” In addition, we use advertising server cookies, which allow us to measure certain parameters of success, such as the display of advertisements or clicks by users. If you reach our website via a Google advertisement, Google Adwords will store a cookie on your PC. These cookies generally expire after 30 days and are not intended to identify you personally. As a rule, the unique cookie ID, the number of ad impressions per ad (frequency), the last impression (relevant for post-view conversions), and opt-out information (indication that the user does not wish to be addressed again) are stored as analytical values for this cookie.
These cookies allow Google to recognize your Internet browser. If a user visits certain pages of the website of an Adwords client and the cookie stored on the user’s computer has not yet expired, Google and the client can ascertain that the user has clicked on the advertisement and been forwarded to this page. Every Adwords client receives a different cookie. Cookies cannot therefore be tracked via the websites of Adwords clients. We do not collect and process any personal data using the above-mentioned advertising. We simply receive from Google statistical evaluations. Based on these evaluations, we can recognize which of our implemented advertising measures are particularly effective. We do not receive additional data from the use of advertising material; in particular, we cannot identify users based on this information.
b) Google Remarketing
In addition to Adwords conversion tracking, we use the application Google Remarketing. By using this application, our advertisements can be displayed to you during your use of the Internet after you have visited our website. This is done by means of cookies that are stored on your browser and that Google uses to record and evaluate your user behavior when visiting various websites. This allows Google to determine when you previously visited our website. According to Google’s own statements, Google does not combine the data collected in the context of remarketing with personal data that Google may have stored in relation to you. In particular, according to Google, data are pseudonymized during remarketing.
c) DoubleClick by Google
d) The processing of your data by Google
As a result of the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and the further use of the data that are collected by Google as a result of using this tool and are therefore providing you with the information at our disposal: the use of the tools described above means that Google receives the information that you have visited the corresponding section of our website or have clicked on one of our ads. If you are registered with a service provided by Google, then Google can assign your visit to your account. Even if you are not registered with Google or are not logged into your account, it is possible that the provider will recognize and store your IP address.
e) Preventing tracking
There are several ways of preventing your participation in this tracking process: 1. by changing the settings of your browser software; in particular, by rejecting third-party cookies, you will not receive ads from third-party providers; 2. by deactivating the cookies for conversion tracking by configuring your browser settings in such a way that cookies from the domain www.googleadservices.com are blocked, using https://www.google.com/settings/ads these settings will be deleted when you delete your cookies; 3. by deactivating the interest-related ads of providers who are part of the self-regulation campaign “About Ads” using the link https://www.aboutads.info/choices, these settings will be deleted when you delete your cookies; 4. by means of a permanent deactivation in your Firefox, Internet Explorer, or Google Chrome browsers using the link https://www.google.com/settings/ads/plugin. Please note that if you do this, you may not be able to make full use of all of the functions of this website.
f) The legal basis for the processing of your data
The legal basis for the processing of your personal data using the tools described above is Art. 6(1)(f) GDPR. Our legitimate interest in such data processing lies in the analysis, optimization and economic operation of our online services and ultimately in the promotion of our business activities.
For further information concerning DoubleClick by Google, please consult https://www.google.com/doubleclick and regarding Google’s data protection policy in general: https://www.google.com/intl/en/policies/privacy and https://services.google.com/sitestats/en.html. Alternatively, you can consult the website of the Network Advertising Initiative (NAI) https://www.networkadvertising.org/.
Google is subject to the EU-US data protection agreement “PrivacyShield”, https://www.privacyshield.gov/EU-US-Framework.
On our website, we use Facebook Pixel provided by the social network Facebook (operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereafter “Facebook”)). If there is also some transfer of personal data to Facebook servers in the USA, we would point out that Facebook is committed to comply with the EU-US data protection agreement “PrivacyShield”, thereby undertaking to comply with European data protection law.
The use of the Facebook Pixel allows us to target advertisements placed by us on Facebook at Facebook users who have previously visited our site (where the pixel was placed) or who satisfy the criteria we have given to Facebook for determining suitable targets for such advertising (so-called “Custom Audiences”) based on the data Facebook has gathered on such users.
Facebook Pixel also allows us to evaluate the effectiveness of our Facebook advertisements for statistical and market research purposes (the so-called “conversion”), as they inform us when a user, having clicked upon one of our Facebook advertisements, subsequently visits our website.
If you are a Facebook member and the privacy settings of your Facebook account allow it to do so, Facebook will link the information collected by us relating to your visit with your member account and use the information for the targeted placement of Facebook advertisements. For us, however, the data collected remains anonymous; that is to say, it is not possible for us to draw any conclusions about the identity of users of our website.
You will find further details relating to Facebook’s data processing guidelines in the company’s own privacy statement: https://www.facebook.com/about/privacy. You will find further details about Facebook Pixel and how it operates here: https://www.facebook.com/business/help/651294705016616.
If you are a member of Facebook, you can use the following link to object to the collection of your data by means of Facebook Pixel and/or adjust the settings that determine which types of advertisement you are shown on Facebook https://www.facebook.com/settings?tab=ads. These settings are platform-independent i.e. they will affect your interaction with Facebook on all computers or mobile devices.
The legal basis for the processing of your personal data using Facebook Pixel is Art. 6(1)(f) GDPR. Our legitimate interests in this data processing lie in the analysis, optimization and profitable operation of our online offer.
a) Integration of YouTube videos
We have integrated into our online offer videos from the platform YouTube (a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA); these are stored at www.YouTube.com but can be played directly on our website.
When you visit our website, YouTube receives the information that you visited the corresponding subpage of our website. In addition, the data mentioned under Section 2 of this data protection statement are transmitted. This occurs regardless of whether you have logged into a user account provided by YouTube or do not have a user account. When you are logged into Google, your data will be directly assigned to your account. If you do not want your data to be assigned to your profile in YouTube, you must log out before clicking the button. YouTube stores your data as a user profile and uses them for the purposes of advertising, market research, and/or to adapt its website to your needs. Such an evaluation is conducted, in particular (and even for users who are not logged in), to display appropriate advertising and to inform other users of the social network of your activities on our website. You have the right to object to the creation of such user profiles; you must contact YouTube if you wish to exercise this right.
Google also processes your personal data in the USA and is subject to the EU-US data protection agreement “PrivacyShield”, https://www.privacyshield.gov/EU-US-Framework.
The data processing described above is based upon our legitimate interests within the sense of Art. 6(1)(f) GDPR. These interests lie in enhancing the appeal of our online offer by making information available in a way that is graphic, attractively presented and easy to grasp, to the ultimate advantage of our business.
b) Content and data protection with services of third-party providers / Links to services of third-party providers
On the online platforms of certain third-party providers (SoundCloud, YouTube, Facebook, Google+, Twitter), you will find Celemony groups or profiles the users of which have the opportunity of publishing their own content relating to our products (e.g. tracks produced by them or their own comments). We expressly draw your attention to the applicable terms and conditions of use of the third party suppliers in question and in particular to their respective data protection statements and privacy policies. We are not responsible for the content supplied by users on these forums and in no way endorse the views expressed there and disclaim all association with the content in question.
On our website you will also find links to our channels or profiles on the various online platforms of these third-party suppliers (recognizable by the respective gray logos of the third-party providers). These are not what are known as “plug-ins” but, rather, simple links. No data exchange with the websites of these third-party suppliers results from your visit to our website alone. It only occurs when by clicking on one of these symbols you decide to avail yourself of the service offered by the corresponding third-party supplier. To discover what if any processing of your personal data ensues from this, please consult the data protection statements or privacy policies of the third-party providers in question.
We only transmit your data to third parties when this is legally permissible, you have consented to it or its transmission is required to fulfill our commercial objectives.
For instance, we transfer personal data to third parties as part of the payment process (payment service providers), to facilitate delivery (shipping service providers) or to support marketing measures (e.g. online marketing service providers). Furthermore, we may transfer personal data to public bodies and institutions (tax offices, authorities, customs offices), if there is a legal or regulatory obligation to do so, or to legal advisors and debt collection agencies for the purpose of enforcing contractual claims.
You will find further details concerning the recipients or categories of recipient of your data elsewhere in this data protection statement where we discuss the various situations in which processing takes place.
If your personal data is processed, you are a “data subject” within the meaning of the GDPR and you have the following rights vis-à-vis the “controller”:
You have the right under Art. 21(1) GDPR to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6(1)(f) GDPR including profiling based on that provision. When filing your objection, you must state your personal reasons for not wishing us to process your personal data. We will examine the reasons for your objection and then either cease or adapt the processing of your data or else demonstrate compelling legitimate grounds for continuing to process it.
Where personal data relating to you are processed based on Art. 6(1)(f) GDPR for direct marketing purposes, you have the right under Art. 21(2) GDPR to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for such purposes.
To exercise your right of objection under this provision, a simple e-mail addressed to firstname.lastname@example.org will suffice.
In the case of particular types of data processing, specific technical procedures may exist for the exercise of your right to withdraw your consent, or else object, to that form of processing. We may already have drawn your attention to these when describing above the respective data processing methods concerned.
We also employ appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are constantly being improved to stay abreast of technological developments.
To prevent unauthorized access by third parties, all information you provide in the course of the ordering or registration process on our website is transmitted in an encrypted form via an SSL server.
This data protection declaration is currently valid and was last updated in May 2018.
Due to the further development of our website or due to changed legal or official requirements, it may become necessary to introduce changes from time to time to this data protection declaration. You can find the latest version of our Data Protection Statement at any time on our website by following this link: https://www.celemony.com/en/service/legal/privacy.