I. Preamble
For us, Vinyl Digital GmbH, the protection of your privacy and your personal rights is an important concern. Please read carefully the following summary of how our website works and how we handle your personal data in accordance with the strict provisions of German data protection law and the requirements of the European General Data Protection Regulation (GDPR).
II Controller and contact data protection officer
The controller within the meaning of the GDPR, other data protection laws applicable in the member states of the EU and other provisions of a data protection nature is
Vinyl Digital GmbH, Am Metzenweg 1, 55494 Mörschbach, Germany
Phone: 06764 / 3039900-32 (costs at landline rate)
E-mail: support@vinyl-digital.com
You can reach the data protection officer of the controller at
Email: datenschutz@vinyl-digital.de
III Scope of the processing of personal data
We collect and use your personal data only to the extent necessary to provide a functional website and our content and services, e.g. when you register on our website or log into an existing customer account or when you order products. The collection and use of your personal data only takes place regularly with your consent. An exception applies in cases where prior consent is not possible for factual reasons and the processing of the data is permitted by law.
The security of your personal data is a high priority for us. We therefore use technical and organisational measures to protect your data stored by us in order to effectively prevent loss or misuse by third parties. In particular, our employees who process personal data are obliged to maintain data secrecy and must comply with this. To protect your personal data, it is transmitted in encrypted form; for example, we use SSL=Secure Socket Layer for communication via your Internet browser. You can recognise this by the lock symbol that your browser displays for an SSL connection. In order to ensure the permanent protection of your data, the technical security measures are regularly reviewed and, if necessary, adapted to the state of the art. These principles also apply to companies that process and use data on our behalf and in accordance with our instructions.
IV. Purposes of processing and legal basis for processing your personal data
We collect, process and use your personal data for the following purposes
1) Establishment and fulfilment of contractual relationships
2) Sending newsletters
3) Marketing measures, e.g. for the organisation of competitions
4) Customer service and customer support
5) Provision of telemedia, e.g. for processing orders for our online range of goods and services
The processing of your personal data may be based on the following legal bases
Art. 6 para. 1 lit. a GDPR serves as the legal basis for processing operations for which we obtain your consent for a specific processing purpose.
Art. 6 para. 1 lit. b GDPR, insofar as the processing of personal data is necessary for the fulfilment of a contract, e.g. when you purchase a product. The same applies to such processing operations that are necessary for the performance of pre-contractual measures, for example in the case of enquiries about our products or services.
Art. 6 para. 1 lit. c GDPR, insofar as we are subject to a legal obligation that requires the processing of personal data, such as for the fulfilment of tax obligations.
Art. 6 para. 1 lit. d GDPR in the event that vital interests of you or another natural person require the processing of personal data.
Art. 6 para. 1 lit. f GDPR applies on the basis of our legitimate interests, e.g. when using service providers in the context of order processing, such as shipping service providers or when carrying out statistical surveys and analyses as well as logging registration procedures. We are interested in the use of a user-friendly, appealing and secure presentation and optimisation of our website, which serves both our business interests and meets your expectations.
V. Duration of storage and routine deletion of personal data
We process and store your personal data only for the period required to fulfil the purpose of storage or if this is provided for in laws or regulations. Your personal data will be erased or blocked once the purpose no longer applies or has been fulfilled. In the event of blocking, deletion will take place as soon as legal, statutory or contractual retention periods do not conflict with this, there is no reason to assume that deletion would impair your interests worthy of protection and deletion would not cause disproportionately high costs due to the special type of storage.
VI Collection of general data and information, so-called log files
Our website collects a range of general data and information, which is temporarily stored in log files on a server, each time it is accessed on the basis of Art. 6 Para. 1 lit. f GDPR. A log file is created as part of an automatic log of the processing computer system. The following can be recorded
1) Access to the website (date, time and frequency)
2) How you arrived at the website (previous page, hyperlink, etc.)
3) Amount of data sent
4) Which browser and browser version you are using
5) The operating system you are using
6) Which internet service provider you are using
7) Your IP address, which your Internet access provider assigns to your computer when you connect to the Internet
The collection and storage of this data is necessary for the operation of the website in order to ensure the functionality of the website and to deliver the content of our website correctly. We also use the data to optimise our website and to ensure the security of our IT systems. For this reason, the data is stored for a maximum of 7 days as a technical precaution.
We also use this data for the purposes of advertising, market research and the customised design of our services by creating and analysing user profiles under pseudonyms, but only if you have not exercised your right to object to this use of your data (see information on the right to object under "Your rights").
VII Cookies, web analysis services and social media
A) General information
We would like to provide you with a pleasant online experience on our website and use cookies, web analysis services and social media plugins for this purpose in accordance with Art. 6 para. 1 lit. f GDPR. For this purpose, we use various cookies and services to ensure the functionality of our website and to make the website as informative and user-friendly as possible for you. It is important to us that you can surf our website comfortably. For this reason, the continuous optimisation of our website is very important to us. This includes, for example, pre-filled form fields so that you do not always have to enter all the data again and settings you have made can be saved. It is also important to us that you are shown content on our website that actually interests you and makes your online experience easier. However, we do not lose sight of the careful handling of your personal data. You will therefore find detailed information below about the use of the cookies and services we use on this website. Of course, you have the option of deactivating all cookies and services. This can be done by blocking or deleting cookies via your Internet browser or by deactivating them separately by setting a specified opt-out cookie. Please bear in mind that deactivation must be carried out for each browser you use. If all cookies in your browser are deleted, the corresponding opt-out cookie will also be affected.
B) Cookies
Cookies are small text files which are placed in your browser history and which are used to reconstruct settings and other changes you have already made on your next visit.
These functional cookies ensure that our website functions properly. These cookies are stored for a maximum of 2 years, after which they are automatically deleted. For example, the following functions are possible with these cookies
1) saving products that you have placed in the shopping basket or added to the wish list
2) Saving the entries you made during check-out or during an order so that you do not have to enter this data again
3) Saving default settings such as language, location, number of search results, etc.4) Saving settings for an optimal video display, e.g. the desired buffer size and the resolution data of your screen
5) recording your browser settings in order to optimise the display of our website on your screen
6) recognising misuse of our websites and services, e.g. by registering several consecutive and failed login attempts
7) loading the website evenly so that the website remains accessible
8) saving your login data so that you do not have to re-enter it each time
You have the option of blocking the setting of these cookies and deleting cookies that have already been set. You can obtain more information on this from the manufacturer or in the help function of your Internet browser. However, we must point out that certain functionalities on our website will no longer be available or will only be available to a limited extent if you do not allow these functional cookies.
C) Analysis services for statistical purposes
In order to determine which content from our website is of most interest to you, we continuously measure the number of visitors and the most viewed content. We use the data collected for statistical purposes, for example
1) to record the number of visitors to our websites
2) to record the respective visit time of our website visitors
3) to record the order in which different websites are visited
4) to assess which parts of our website need to be adapted
5) for website optimisation
We use the following service for statistical purposes, which you can deactivate by setting an opt-out cookie:
a) Google Analytics
Google Analytics is a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses cookies to enable us to analyse the use of our website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The cookies stored by Google Analytics are deleted after 14 months at the latest.
Further information on data protection and the terms of use for Google Analytics can be found at
https://www.google.com/analytics/terms/de.html and
https://policies.google.com/privacy?hl=de
b) Pingdom
We also use the Pingdom monitoring service from the Swedish company Pingdom AB, Kopparbergsvägen 8, 722 13, Västerås, Sweden. This tool enables an analysis of the loading behaviour and availability of our website and collects your IP address. Cookies are set for this purpose. You can prevent this by making the appropriate setting in your browser. You can find Pingdom's privacy policy here: https://www.pingdom.com/legal/privacy-policy/.
c) Social media plugins
On our website, we offer you so-called social media plugins from various social networks so that you can connect with your social media channels. These plugins are labelled with a logo or the addition "social plugin".
When you visit our website that contains such a plugin, your browser establishes a direct connection to the servers of the respective social network. The content of the plugin is transmitted by the social network directly to your browser and integrated into the page. Through this integration, the social network receives the information that your browser has accessed the corresponding page of our website, even if you do not have a profile with the social network or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a server of the social network and stored there. If you are logged into your account on one of these social networks while using our website, the social network can directly associate your visit to our website with your profile. If you interact with the social media plugin, e.g. by clicking the "Like" button or posting a comment, this information is also transmitted directly to a server of the social network and stored there. The information is also published on your profile and displayed to your profile friends. If you do not want a social network to assign the data collected via our website directly to your profile, you must log out of the social network before visiting our website.
The following social media plugins are integrated on our website
Facebook Like / Share
Operator: Facebook Inc, 1601 Willow Road, Menlo Park, CA 94025, USA
Facebook privacy policy: https://de-de.facebook.com/about/privacy/
Google+ button
Operator: Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Google+ privacy policy: https://developers.google.com/+/web/buttons-policy
Instragram social plugin
Operator: Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA
Instragram privacy policy: https://help.instagram.com/155833707900388/
Pin-it button
Operator: Pinterest Inc, 651 Brannan Street, San Francisco, CA 94103, USA
Pinterest privacy policy: https://policy.pinterest.com/de/privacy-policy
Twitter Tweet Button
Operator: Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA
Twitter privacy policy: https://twitter.com/de/privacy
YouTube Social Plugin
Operator: YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA
YouTube privacy policy: https://policies.google.com/privacy?hl=de
VIII. Sending information about our offer and special promotions as well as other news, e.g. newsletters
We use your data to send information you have ordered about our offer and other promotions to the e-mail address you have provided. This only takes place with your consent or legal authorisation. Consent to the dispatch is given on the basis of Art. 6 para. 1 lit. a, Art. 7 GDPR and § 7 para. 3 UWG.
a) Newsletter registration on our website
You can subscribe to a free newsletter on our website. When you register for the newsletter, the data from the input screen is transmitted to us, i.e. at least your email address.
Your consent is obtained for the processing of the data as part of the registration process and reference is made to this privacy policy.
b) Dispatch due to the sale of goods and services
If you purchase goods or services on our website, we may send you information about our own similar goods and services to the e-mail address you have provided, even without your consent.
c) Dispatch based on the use of wish lists
If you add items to your wish list on our website (only for registered users), you will receive a message by e-mail if the status of the items in question changes.
If you no longer require this information, please remove all items from your wish list.
d) Postal dispatch
We may also use your data to send you information about our offers and promotions by post.
We want you to enjoy reading our emails. That is why we try to include only content that you are likely to be interested in. We therefore measure and store opening and click rates in your user profile, i.e. whether and when you open our emails, which content of the emails you click on and when, as well as whether and why our emails could possibly not be delivered. We also use this data for statistical purposes.
Of course, you can unsubscribe from receiving our information at any time, i.e. revoke your consent with effect for the future. To do this, you will find a corresponding unsubscribe link in every email or newsletter and can confirm your cancellation on our website. You can also contact us at any time to revoke your consent:
By email: datenschutz@vinyl-digital.de
By post: Vinyl Digital GmbH, Am Metzenweg 1, 55494 Mörschbach, Germany
Certain information messages that are necessary for contract processing and the function of our website, for example regarding the service (e.g. registration confirmation, customer service information) or a chargeable package (e.g. order confirmation, contract documents, payment processing) cannot be cancelled. You will receive these messages to the contact information you have provided.
As part of the wish list function, which is only accessible to registered users, we would like to point out that your wish list is generally visible to other users of our website. Apart from the items on your wish list, only your first name and surname are visible. Other personal data is not public, even when using the wish list. If you do not wish to use this function, please remove all items from your wish list.
IX. Processing of personal data when contacting us, registering or placing a guest order
a) Making contact
When you contact us by telephone, e-mail or via a contact form, the data you provide will be stored by us on the basis of Art. 6 para. 1 lit. a GDPR in order to answer your questions. The contact is logged in order to be able to prove the contact in accordance with the legal requirements. Your consent is obtained for the processing of the data as part of the contact form and reference is made to this privacy policy. We delete the data collected in this context once the respective conversation with you has ended and the matter in question has been conclusively clarified.
b) Registration
On our website, we offer you the opportunity to register by providing personal data. The data is entered into an input mask and transmitted to us and stored. The registration serves the fulfilment of a contract or the implementation of pre-contractual measures and is therefore based on Art. 6 para. 1 lit. b GDPR.
For the conclusion and processing of contracts, we require contact details, such as name, delivery and billing address and e-mail address, as well as information on the type of payment method you have chosen, depending on the individual case. In addition, we use your data to maintain our customer database so that only accurate data is stored there. In order to avoid typing errors and to ensure that your ordered items arrive with you, we check the completeness and accuracy of your address when you enter it.
c) Guest order
You have the option of placing your orders as a guest. If you decide in favour of this type of order, you do not have to register before placing an order. Please note that you will have to enter your details again for each subsequent order.
We collect, process and use the information you provide as part of a guest order for the purpose of fulfilling the contract in accordance with Art. 6 para. 1 lit. b GDPR. We store the information you provide for the duration of the processing and fulfilment of your order. Your data will then be deleted unless you decide to activate your customer account within 365 days of placing your order. Data that we are required to store due to legal, statutory or contractual retention obligations will be blocked instead of deleted to prevent it from being used for other purposes.
d) Miscellaneous
Based on Art. 6 para. 1 lit. c and f GDPR, we use and store your personal data and technical information to the extent necessary to prevent or prosecute misuse or other unlawful behaviour on our website, e.g. to maintain data security in the event of attacks on our IT systems. This also takes place insofar as we are legally obliged to do so, for example due to official or court orders, and for the exercise of our rights and claims as well as for legal defence.
X. Disclosure of personal data to third parties
When passing on your personal data, we always ensure the highest possible level of security. Therefore, your data will only be passed on to carefully selected and contractually obligated service providers and partner companies. In addition, your data will only be forwarded by us to organisations that are located within the European Economic Area and are therefore subject to strict EU data protection law or that are obliged to comply with a corresponding level of protection. A transfer of data to third countries does not currently take place and is not planned.
a) Transfer to service providers pursuant to Art. 6 para. 1 lit. b and f GDPR
For the operation and optimisation of our website and our services and for contract processing, various service companies work for us, e.g. for central IT services or the hosting of our website, for the payment and delivery of products or for device installation or for newsletter dispatch, to whom we pass on the data required for the fulfilment of the task (e.g. name, address).
Some of these companies work for us by way of order processing and may therefore only use the data provided in accordance with our instructions. In this case, we are legally responsible for appropriate data protection precautions at the companies we commission. We therefore agree specific data security measures with these companies and monitor them regularly.
In contrast to order processing, we transfer data to third parties for their own use for contract processing in the following cases:
1) When delivering goods to logistics companies and the postal service provider specified in the order.
2) When paying for goods to the payment service provider specified in the order. In the case of credit card payments, a transaction-based security check is carried out with the help of the payment service provider Novalnet AG or its partner EVO Payments International GmbH to prevent credit card fraud.
We do not collect or store any payment transaction information such as credit card numbers or bank details during the payment process. You only disclose these directly to the respective payment service provider.
b) Disclosure to other third parties in accordance with Art. 6 para. 1 lit. c and f GDPR
We will also pass on your data to third parties or government agencies within the framework of existing data protection laws if we are legally obliged to do so, e.g. due to an official or court order, or if we are authorised to do so, e.g. because this is necessary for the prosecution of criminal offences or for the exercise and enforcement of our rights and claims.
XI. Your rights
Of course, you have rights in relation to the collection of your data, which we would like to inform you about. If you would like to exercise one of the following rights free of charge, simply send us a message. You can use the following contact details without incurring any costs other than any transmission costs according to the basic rate:
By email: datenschutz@vinyl-digital.de
By post: Vinyl Digital GmbH, Am Metzenweg 1, 5594 Mörschbach, Germany
For your own protection, we reserve the right to obtain further information necessary to confirm your identity in the event of an enquiry and to refuse to process the enquiry if identification is not possible.
a) Right to information
You have the right to request information from us about the personal data stored about you.
b) Right to rectification
You have the right to request immediate rectification and/or completion of the personal data concerning you.
c) Right to restriction of processing
You have the right to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing.
d) Right to erasure
You have the right to request the deletion of your personal data stored by us, unless the exercise of the right to freedom of expression and information, the processing to fulfil a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims is required.
e) Right to information
If you have asserted the right to rectification, erasure or restriction of processing, we will notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
f) Right to data portability
You have the right to have personal data that you have provided to us handed over to you or to a third party in a structured, commonly used and machine-readable format. If you request the direct transfer of the data to another controller, this will only take place if it is technically feasible.
g) Right to object
If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR, you have the right to object to the processing at any time in accordance with Art. 21 GDPR.
h) Right to withdraw consent
You have the right to withdraw your consent to the collection of data at any time with effect for the future. The data collected until the revocation becomes legally effective remains unaffected by this. Please understand that the implementation of your revocation may take a little time for technical reasons and that you may still receive messages from us in the meantime.
i) Right to lodge a complaint with a supervisory authority
If the processing of your personal data violates data protection law or if your data protection rights have been violated in any other way, you can lodge a complaint with the supervisory authority.
You can also exercise your rights to rectification and erasure in the quickest, easiest and most convenient way by logging into your customer account and editing the data stored there directly.
XII. Links to websites of other companies
Our website contains links to websites of other companies. We are not responsible for the data protection precautions on external websites that you can reach via these links. Please inform yourself there about the data protection of these external websites.
XIII Subject to change
In order to ensure that our data protection information always complies with the current legal requirements, we reserve the right to make changes at any time. This also applies in the event that the data protection information has to be adapted due to new or revised offers or services.
Status: May 2018, V. 1.12
