Privacy Policy

 

1. Privacy Notice

This Privacy Policy explains how personal data are collected and processed when you use our website. Personal data means any information relating to an identified or identifiable natural person.

2. Name and contact data of the controller and company data protection officer

This data protection information applies to data processed by:

Controller:

MPS, a label of Edel Music & Entertainment GmbH,

Neumühlen 17

22763 Hamburg

Germany

Tel.: +4940890850

E-mail: info@mps-music.com

The data protection officer appointed by Edel can be contacted at datenschutz@edel.com.

3. Collection and storage of personal data; type and purpose of use

a) On visiting the website:

It is possible to visit our website without being required to enter personal data.

When accessing the website, however, information will automatically be sent to our website’s server via the browser used on your end device. This information will be temporarily stored in a logfile. The following information will be collected in this context without any action on your part and will be stored until the next automatic deletion process:

• the IP address of the computer sending the enquiry
• date and time of the server enquiry,
• name and URL of the downloaded file,
• website from which our website was accessed (referrer URL),
• browser used and, if applicable, your computer’s operating system and the name of your access provider.

We will process the above data for the following purposes:

• ensuring smooth connection to the website,
• ensuring that the website is user-friendly,
• evaluating system security and stability,
• improving our offering.

The legal basis for data processing is Art. 6(1) sentence 1(f) GDPR. Our legitimate interest can be derived from the data processing purposes set out above. We will never use the collected data in order to draw conclusions relating to you personally.

We also use cookies and analytics services in connection with visits to our website. For more information, see section 6 of this Privacy Notice.

b) On registering for our newsletter

Our website offers you the opportunity to subscribe to our newsletter. We use Brevo as our newsletter service provider. The provider is Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

To subscribe to the newsletter, we require your email address as well as your first and last name in order to address you personally. Registration is carried out using the double opt-in procedure. After registering, you will receive an email asking you to confirm your subscription. Brevo logs the registration, the double opt-in confirmation, the corresponding timestamps, and the IP address in order to document the subscription process.

Brevo also enables us to analyze the performance of our newsletter campaigns. In particular, we can determine whether a newsletter has been opened, which links have been clicked, and how often. Furthermore, newsletter recipients may be segmented according to specific criteria in order to send more relevant content.

The following categories of personal data may be processed:

• First and last name
• Email address
• IP address
• Registration and confirmation timestamps (double opt-in)
• Information regarding the delivery and receipt of newsletters
• Open and click rates
• Browser and device information

The data is processed on servers operated by Brevo within the European Union. Where personal data is processed outside the European Union or the European Economic Area, such processing is carried out in compliance with the applicable data protection requirements and appropriate safeguards pursuant to Article 44 et seq. GDPR.

The processing of your personal data for the purpose of sending newsletters is based on your consent pursuant to Article 6(1)(a) GDPR. The logging of the subscription process is based on our legitimate interest pursuant to Article 6(1)(f) GDPR to demonstrate that valid consent has been obtained.

Your personal data will be stored until you unsubscribe from the newsletter and will then be deleted unless statutory retention obligations apply. If you do not confirm your subscription within two weeks, your registration will be blocked and automatically deleted after one month.

You may withdraw your consent at any time with future effect by using the unsubscribe link included in every newsletter or by contacting us directly.

Further information is available at:

Privacy Policy: https://www.brevo.com/legal/privacypolicy/

c) On contacting us via e-mail or the contact form

If you contact us by e-mail or via the contact form provided on our website, we will store the data you provide (your e-mail address, together with your name and telephone number, if applicable) in order to process your request or respond to your questions.

If using the contact form, you are required to give a valid e-mail address in order that we know who sent the enquiry and in order to be able to respond to it. All other information is provided on a voluntary basis.

The processing of data transmitted in the course of contacting us is carried out for the purpose of handling your request and is based on Art. 6(1)(b) GDPR, insofar as your request relates to the performance of a contract or pre-contractual measures, or on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.

We will delete any data collected in this context once storage is no longer necessary (if, for instance, your enquiry has been satisfied) or we limit processing if statutory retention periods apply.

d) Terms and conditions for participation in the competition

In order to participate in a competition organised by us, certain personal data must be processed for the purpose of any notification and transmission of winnings and for your identification.

The personal data which we require for your participation in a competition organised on our website are marked as mandatory fields on the participation form provided on our website. You may voluntarily provide additional data.

When you enter a sweepstake that we host through our Facebook page or Instagram page, we store your public Facebook/Instagram profile information including your username and your Facebook/Instagram comment (text and image) submitted to participate in the sweepstake to document your sweepstake in the event of your drawing.

We need your address data only after the prize determination and only in the event that you have been determined as the winner, in order to be able to send you the prize. We request your address information by emailing you either to the email address you provided on the entry form or, if you are participating in a Facebook/Instagram competition, to your Facebook/Instagram profile. You are under no obligation to provide us with your address information. However, if you do not provide us with your address information, we may not be able to deliver the prize to you.

Your personal data will be processed by us for the purpose of conducting the competition on the basis of Art. 6 Para. 1 S. 1 lit. b DSGVO. In the case of sweepstakes which we conduct together with cooperation partners, your data will be forwarded to the cooperation partner who is responsible for redeeming the prize. You will be informed of this cooperation partner as part of your address enquiry. Our cooperation partner(s) will be named in the respective competition. Your personal data will only be passed on to third parties or used for advertising purposes (e.g. to send newsletters) if this is necessary to run the competition or if you have given your express consent beforehand.

If you have been identified as a winner of a competition and you have given us your consent, we will post your first and last name in connection with the prize on our website and/or Facebook page/Instagram page.

With your consent, our cooperation partners may contact you directly by email or postal mail with promotional offers.

The processing of your data, for which you have given us your consent, takes place on the basis of Art. 6 Para. 1 S. 1 lit. a DSGVO.

Your personal data will be deleted automatically after the lottery has ended, unless you have given us permission to process your data beyond the purpose of the lottery, or if legal regulations prevent the deletion.

You can revoke your consent given to us within the scope of your participation in a competition at any time with effect for the future by notifying us of your revocation in writing or by contacting us by e-mail at info@mps-music.com or by contacting our corresponding cooperation partner. After revocation of your consent, your personal data, to which your revocation refers, will be deleted immediately, unless there are legal provisions to the contrary.

If you subscribe to a newsletter from one of our cooperation partners as part of the raffle, the data protection provisions specified by this partner apply.

4. Disclosure of data

Your personal data will not be disclosed to third parties for any purposes other than those set out below.

We will only disclose your personal data to third parties if:

• you granted your express consent pursuant to Art. 6 (1) sentence 1(a) GDPR;
• disclosure is required pursuant to Art. 6(1) sentence 1(f) GDPR in connection with the establishment, exercise or defence of legal claims and there is no reason to believe that you have an overriding legitimate interest in your data not being disclosed;
• we are subject to a statutory obligation to such disclosure pursuant to Art. 6(1) sentence 1(c) and
• this is permitted by law and necessary in connection with implementing contractual relations with you pursuant to Art. 6(1) sentence 1(b) GDPR.

5. Ninja Firewall

To protect our website against unauthorized access, malware, automated attacks (such as brute-force attacks), and other security-related threats, we use the NinjaFirewall security software.

The provider is NinTechNet Limited, Unit 1603, 16th Floor, The L. Plaza, 367–375 Queen’s Road Central, Sheung Wan, Hong Kong.

NinjaFirewall is operated exclusively on our own web server and is used solely to detect and prevent security threats. No personal data is transmitted to the provider or to any other third party.

For the purpose of detecting and preventing attacks, the following technical information may be processed:

• IP address
• Date and time of access
• Requested URL
• HTTP header information
• Referrer URL
• Information about the browser and operating system used

Where technically possible, IP addresses are stored only in truncated or anonymized form.

The processing is carried out on the basis of our legitimate interest in ensuring the security, integrity, and availability of our website pursuant to Article 6(1)(f) GDPR.

Further information on NinTechNet’s processing of personal data is available at:

https://nintechnet.com/privacy-policy/

6. Cookies

We use cookies and similar technologies on our website. Cookies are small text files that are automatically created by your browser and stored on your device (e.g. laptop, tablet or smartphone) when you visit our website. Cookies do not cause any damage to your device and do not contain viruses, trojans or other malicious software.

Information stored in cookies relates to the specific device used in each case. However, this does not mean that we obtain direct knowledge of your identity.

The use of cookies serves, on the one hand, to technically provide our website and to make the use of our services more user-friendly. For this purpose, we use so-called session cookies to recognize that you have already visited individual pages of our website. These cookies are automatically deleted after you leave our website.

In addition, we use temporary cookies that are stored on your device for a specified period of time. If you visit our website again, it may automatically be recognized that you have previously visited our website and which settings you selected in order to facilitate your use of our website.

Technically necessary cookies are used on the basis of Section 25 (2) TTDSG and Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in the technically error-free and optimized provision of our website.

Insofar as we use cookies for analytics, statistics or marketing purposes, this is done exclusively on the basis of your explicit consent pursuant to Section 25 (1) TTDSG and Art. 6 para. 1 sentence 1 lit. a GDPR. You may withdraw or amend your consent at any time with effect for the future via the cookie settings.

Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your device or so that a notice always appears before a new cookie is created. Please note that completely disabling cookies may result in certain functions of our website no longer being available or only being available to a limited extent.

In addition to technically necessary cookies, we may also use third-party cookies that help us analyze user behavior on our website, optimize our services and display content and advertising tailored to users’ interests.

Via our cookie banner, you have the option to consent to or reject the use of non-essential cookies. You may change or withdraw your selection at any time via the “Cookie Settings”.

Information on Data Transfers to Third Countries

If you consent to the use of certain cookies and services, personal data may also be transferred to recipients located in countries outside the European Union or the European Economic Area, in particular to the United States. In such countries, an adequate level of data protection comparable to that within the European Union may not exist.

In particular, there is a risk that government authorities may access the transferred data without you having effective legal remedies available against such access.

Any transfer of personal data to third countries is carried out exclusively on the basis of your explicit consent pursuant to Art. 49 para. 1 sentence 1 lit. a GDPR.

7. GA4 Google Analytics

Subject to your consent, our website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics 4 enables us to analyze the use of our website and optimize our online services.

Scope of processing

Google Analytics uses cookies and similar technologies that enable us to analyze your use of our website. The information collected through these technologies is generally transmitted to and processed on Google’s servers.

In Google Analytics 4, IP anonymization is enabled by default. As a result, your IP address is truncated by Google within Member States of the European Union or other contracting states of the European Economic Area before processing. Only in exceptional cases is the full IP address transferred to a Google server and shortened there. According to Google, the IP address transmitted by your browser within the scope of Google Analytics is not combined with other Google data.

During your visit to our website, the following information may be processed:

• Page views
• First visit to the website
• Session start
• Click paths and interactions with the website
• Scroll behavior
• Clicks on external links
• Internal search queries
• Video interactions
• File downloads
• Viewed or clicked advertisements
• Language settings

In addition, the following information may be processed:

• Approximate location (region)
• Truncated IP address
• Browser and device information (e.g. language settings or screen resolution)
• Internet service provider
• Referrer URL

Google Signals

Where Google Signals is enabled, cross-device reports may be created and information about user behavior across different devices may be analyzed. Google may use this information to generate cross-device models and provide aggregated statistics. We have no control over Google’s processing of data through Google Signals. You can disable cross-device analysis by disabling personalized advertising in your Google Account.

Purposes of processing

Google processes the collected information on our behalf to evaluate the pseudonymous use of our website, prepare reports on website activity, and analyze the performance and usability of our website.

Recipients

Recipients of the data may include:

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (processor)
• Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Third-country transfers

Where personal data is transferred to the United States, such transfer is based on the certification of Google LLC under the EU-US Data Privacy Framework. Where necessary, Google also relies on the Standard Contractual Clauses approved by the European Commission.

Storage period

The data transmitted by us to Google Analytics and linked to cookies is automatically deleted after two months. Data whose retention period has expired is deleted automatically once per month.

Legal basis

The processing is carried out exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR.

Withdrawal of consent

You may withdraw your consent at any time with future effect via our cookie settings. The lawfulness of the processing carried out before the withdrawal remains unaffected.

You can also prevent the storage of cookies through your browser settings. In addition, you may prevent Google from collecting and processing the data generated by Google Analytics by:

• refusing or withdrawing your consent, or
• installing the Google Analytics browser add-on: https://tools.google.com/dlpage/gaoptout

Further information is available at:

Google Privacy Policy: https://policies.google.com/privacy

Google Analytics: https://marketingplatform.google.com/about/analytics/

8. Meta Pixel, Meta Conversions API and Meta Custom Audiences

With your consent, we use the Meta Pixel, the Meta Conversions API, and Meta Custom Audiences provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”) on our website. Meta operates the social networks Facebook and Instagram as well as other online services.

These services enable us to understand how users interact with our website after visiting it or after viewing or clicking on an advertisement on Facebook or Instagram. This allows us to measure the effectiveness of our advertising, perform statistical analyses, and optimize our marketing activities.

The information available to us is aggregated and statistical in nature. We do not receive personal data that directly identifies individual users. However, Meta processes the collected information and may link it to your Meta account and use it for its own purposes in accordance with its privacy policy.

Categories of Data Processed

When using the Meta Pixel and the Meta Conversions API, the following categories of data may be processed:

• IP address
• HTTP header information (e.g. browser type, user agent, language settings)
• Date and time of access
• URL of the visited page and referrer URL
• Pixel ID and cookie information
• Event data (e.g. page views, product views, shopping cart activities or purchases)
• Product information, shopping cart value and currency
• Additional standard or custom event data

Where available, existing Meta identifiers (e.g. contained in Meta cookies) may be processed in hashed form in order to match the transmitted data with a Meta user account.

Custom Events

We process the following custom events:

• Searched products
• Viewed products at product level

Meta Conversions API

The Meta Conversions API complements the Meta Pixel by transmitting certain website events directly from our server to Meta. This improves the reliability of event measurement and helps optimize advertising campaigns on Meta platforms.

A complete overview of the supported event parameters is available at:

https://developers.facebook.com/docs/marketing-api/conversions-api/parameters

Meta Custom Audiences (Remarketing)

We also use the Meta Pixel and the Meta Conversions API for remarketing purposes (“Meta Custom Audiences”). This enables us to display interest-based advertising to you on Meta platforms for up to 180 days after your visit to our website.

For this purpose, information about your visit, your interactions with our website and, where applicable, information about viewed products or shopping cart contents may be processed.

Joint Controllership

With regard to the collection and transmission of personal data to Meta, Meta and we act as joint controllers pursuant to Article 26 GDPR. We have concluded a Joint Controller Agreement with Meta for this purpose.

We have no influence over the subsequent processing of your data by Meta.

International Data Transfers

Where personal data is transferred to Meta in the United States, such transfers are based on the certification of Meta Platforms, Inc. under the EU-US Data Privacy Framework.

Storage Period

Cookies set by Meta are stored for up to 180 days, depending on the respective cookie.

Legal Basis

The processing of your personal data is based exclusively on your consent pursuant to Article 6(1)(a) GDPR.

You may withdraw your consent at any time with future effect via our cookie settings.

Further information about Meta’s processing of personal data is available at:

https://www.facebook.com/privacy/policy/

9. PixelYourSite

We use the WordPress plugin PixelYourSite, provided by Minimal Work SRL, Bujoreni, Vâlcea, Romania, to technically implement the Meta Pixel and other tracking technologies on our website.

The plugin serves solely as a technical integration tool for the tracking and analytics services used on our website. Any processing of personal data takes place exclusively in connection with the respective tracking services and only on the basis of your consent pursuant to Article 6(1)(a) GDPR.

Further information is available at:

https://www.pixelyoursite.com/privacy-policy

10. Google Tag Manager

Our website uses Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tag management system that enables us to centrally manage and deploy website tags. The service itself processes personal data only for technically necessary purposes and is used to load and manage other services on our website. Google Tag Manager does not create user profiles, does not store cookies for analytics or advertising purposes, and does not independently evaluate personal data.

The following categories of personal data may be processed:

• IP address
• Browser and device information
• Technical information required to execute tags
• Date and time of the page request

Where personal data is transferred to the United States in connection with Google Tag Manager, such transfer is based on the certification of Google LLC under the EU-US Data Privacy Framework.

The processing is carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR. Our legitimate interest lies in the efficient management and technical deployment of the services used on our website.

Further information is available at:

Google Privacy Policy:

https://policies.google.com/privacy

Google Tag Manager:

https://support.google.com/tagmanager

11. YouTube (Enhanced Privacy Mode)

Our website embeds videos provided by YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in Enhanced Privacy Mode. According to YouTube, personal data is generally processed only when you actively start a video. However, once a video is played, a connection to YouTube’s servers is established. In this process, your IP address, browser and device information, the page you visited, and other technical information may be transmitted to Google.

If you are logged into your Google or YouTube account, Google may associate your visit to our website with your user account. You can prevent this by logging out of your Google or YouTube account before playing a video.

Furthermore, YouTube may use cookies and similar technologies after a video has been started to process information about your use of the service, compile video statistics, improve user experience, and prevent misuse. We have no control over Google’s subsequent processing of your data.

Where personal data is transferred to the United States, such transfer is based on the certification of Google LLC under the EU-US Data Privacy Framework.

The processing is carried out exclusively on the basis of your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with future effect via the cookie settings.

Further information about Google’s processing of personal data is available at: https://policies.google.com/privacy

12. Social media pages, channels and links

The controller operates several social media presences and may also operate broadcast channels. These include in particular:

Facebook: https://www.facebook.com/mpsmusic
Instagram: https://www.instagram.com/mpsrecords/

You will find links to these social media presences and channels on our websites. The links establish a connection to our online presence on the respective platform exclusively upon request, i.e. only after the user clicks on the relevant link. After clicking on the link, the IP address and general browser header information of the user are transmitted to the respective platform. The respective platform may collect additional personal data as soon as you use its services. If you are logged into your user account, the platform may associate your visit to our online presence with your account.

In addition to our social media profiles, we may operate broadcast channels, in particular on Facebook and WhatsApp. Through these channels, users may voluntarily subscribe to our content and receive information, posts, images, videos, links, polls, voice messages and other communications. Users may leave a channel or unsubscribe at any time.

By the judgment of the Court of Justice of the European Union dated 5 June 2018, a joint responsibility of Facebook and the respective fan page operator for the operation of a fan page was established. Similar joint responsibility may also exist in relation to other social media offerings, including channels and comparable communication formats, particularly regarding statistical evaluations and audience measurement.

Despite this possible joint responsibility, we have only limited influence over the processing of personal data by the respective platform operators. This applies both to data provided by you on the platforms, such as comments, videos, images, likes, reactions, poll participation, public messages or other interactions, and to any analysis, tracking, marketing and moderation technologies used by the platform operators.

Please note that the operators of the respective platforms may also process your personal data for their own purposes. This may include analysing your usage behaviour, creating user profiles, personalising content and advertising, audience measurement, ensuring platform security and enforcing terms of use and community standards. We have no complete control over the nature, scope or purposes of these processing activities.

Your personal data may also be processed by the respective operators outside the European Union or the European Economic Area. As a result, risks may arise for you, in particular regarding the enforcement of your data protection rights.

Further information regarding data processing by the respective platform providers and your rights and options to object can be found in the privacy policies of the respective providers:

Facebook: https://www.facebook.com/privacy/policy/

Instagram: https://privacycenter.instagram.com/policy

The data you provide on our social media pages or within our channels, such as comments, videos, images, likes, reactions, poll participation, public messages or other content, will generally not be used or processed by us for any purposes other than communication and the provision of our content. We only reserve the right to delete content if this becomes necessary.

Where we are able to exert influence, we work within the scope of our possibilities to ensure that the operators of the respective platforms handle personal data in compliance with applicable data protection laws.

The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f GDPR. The processing is carried out in the interest of our public relations activities, communication with interested parties, customers and business partners, and the provision of information about our company, products, services and events.

13. Amazon partner program (Amazon Affiliate)

We participate in the Amazon Europe Core S.à r.l. affiliate program. The provider is Amazon Europe Core S.à r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg.

The Amazon affiliate program is designed to provide a means for websites to earn advertising reimbursement through the placement of advertisements and links to Amazon offers. Amazon uses this program in order to track the origin of orders.

If you click on an Amazon link or a corresponding advertisement on our website, Amazon may use cookies and similar technologies. In this context, personal data may be processed, in particular IP addresses, information about your user behavior, technical information about your device, referrer data and, where applicable, cookie IDs.

If you are logged into your Amazon account, Amazon may associate the collected information with your account. If you do not wish this to happen, you must log out of Amazon before visiting our website.

The processing is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25 para. 1 TTDSG. You may withdraw or amend your consent at any time with effect for the future via the cookie settings.

Amazon is certified under the EU-US Data Privacy Framework (DPF). Insofar as personal data are transferred to the United States, such transfer is based on the adequacy decision of the European Commission pursuant to Art. 45 GDPR.

Further information on Amazon’s processing of personal data can be found at: https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010

14. Linkfire

Our website uses Linkfire. The provider is Linkfire ApS, Artillerivej 86, 3., 2300 Copenhagen S, Denmark.

Linkfire enables us to provide links to various music streaming services and online stores through a single link. It also allows us to analyze how users interact with these links in order to improve our content and optimize our online services.

The following categories of personal data may be processed:

• IP address
• Browser and device information
• Cookie information and similar identifiers
• Visited pages and content
• Referrer URL
• Date and time of the visit
• Interactions with Linkfire links (e.g. clicks and redirects)

Where we receive analytics, these are generally provided in aggregated form. We have no control over Linkfire’s subsequent processing of personal data.

The processing is carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR. Our legitimate interest lies in providing users with convenient access to music and streaming platforms and in analyzing and optimizing our online services.

Further information about Linkfire’s processing of personal data is available at: https://linkfire.com/privacy

15. Your rights

a) Information, rectification, erasure, restriction of processing, data transferability, revocation, complaints

You have the right:

• to receive, pursuant to Art. 15 GDPR, information on your personal data processed by us. You can, in particular, receive information on the purposes of processing, the categories of personal data, the categories of recipient to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request rectification, erasure, restriction of processing of personal data or the right to lodge a complaint, where the personal data are not collected from us, any available information as to their source, the existence of automated decision-making, including profiling, and meaningful information about the corresponding details, if applicable;
• to obtain, pursuant to Art. 16 GDPR, without undue delay the rectification of inaccurate or incomplete personal data stored by us;
• to obtain, pursuant to Art. 17 GDPR, the erasure of your personal data stored by us, provided processing is not required in order to exercise the right of freedom of expression and information, for compliance with a legal obligation, for the performance of a task carried out in the public interest or for the establishment, exercise or defence of legal claims;
• to obtain, pursuant to Art. 21 GDPR, restriction of processing, where you contest the accuracy of the personal data, the processing is unlawful, you oppose the erasure of the personal data and we no longer need the personal data, but they are required by you for the establishment, exercise or defence of legal claims pursuant to Art. 18 GDPR or you have exercised your right to object;
• to receive, pursuant to Art. 20 GDPR, the personal data concerning you, which you provided, in a structured, commonly used and machine-readable format and to demand transmission of those data to another controller;
• to withdraw your consent at any time pursuant to Art. 7(3) GDPR by making a corresponding statement to us. This means that we are not permitted to continue to process the data to which this consent applied in future; and
• to lodge a complaint with a supervisory authority, pursuant to Art. 77 GDPR. You can generally lodge such complaint with the supervisory authority in the place of your habitual residence, place of work or our branch, e.g. the competent supervisory authority for Edel. The competent data protection supervisory authority for Edel SE & Co. KGaA is:The Hamburg Commissioner for Data Protection and Freedom of Information
  Ludwig-Erhard-Str. 22
  20459 Hamburg
  Germany

  Phone: +49 40 42854-4040
  E-mail: mailbox@datenschutz.hamburg.de

  Further information is available at:

  https://datenschutz-hamburg.de

b) Right to object

If your personal data are processed on the basis of legitimate interests pursuant to Art. 6(1) sentence 1(f) GDPR, you have the right to object to the processing of your personal data, pursuant to Art. 21 GDPR, on grounds relating to your particular situation or the objection relates to direct marketing. In the latter case, you have a general right to object which will be implemented by us without you having to specify grounds.

If you wish to make use of your right to object, an e-mail to the following address will suffice:

datenschutz@edel.com.

16. Data security

We use SSL or TLS encryption during your visit to our website in order to ensure secure data transmission and protect confidential content. An encrypted connection can usually be identified by the lock symbol in your browser’s address bar and by the use of “https://” in the website address.

In addition, we implement appropriate technical and organizational security measures to protect your personal data against accidental or intentional manipulation, loss, destruction, or unauthorized access by third parties.

Our security measures are continuously reviewed and improved in line with technological developments.

17. Validity and amendments to this Privacy Notice

This Privacy Notice is up to date and is the valid version dated 28  July 2026.

We may be required to update this Privacy Notice as a result of developments to our website and services or due to amendments made to statutory or official requirements. The valid version of the Privacy Notice is available for inspection and printout at all times on our website at https://www.edel.com/en/privacy-policy-2/.