Privacy Policy - MPS : MPS

1. Privacy Notice

The following paragraphs provide information on which personal data are gathered when using our website and for what purposes. Personal data are all data relating to your identity, e.g. name, address, e-mail address.

2. Name and contact data of the controller and company data protection officer

This data protection information applies to data processed by:

Controller:

MPS, a label of Edel Music & Entertainment GmbH,

Neumühlen 17

22763 Hamburg

Germany

Tel.: +4940890850

E-mail: info@edel.com

The data protection officer appointed by Edel can be contacted at datenschutz@edel.com.

3. Collection and storage of personal data; type and purpose of use

a) On visiting the website:

It is possible to visit our website without being required to enter personal data.

When accessing the website, however, information will automatically be sent to our website’s server via the browser used on your end device. This information will be temporarily stored in a logfile. The following information will be collected in this context without any action on your part and will be stored until the next automatic deletion process:

the IP address of the computer sending the enquiry
date and time of the server enquiry,
name and URL of the downloaded file,
website from which our website was accessed (referrer URL),
browser used and, if applicable, your computer’s operating system and the name of your access provider.

We will process the above data for the following purposes:

ensuring smooth connection to the website,
ensuring that the website is user-friendly,
evaluating system security and stability,
improving our offering.

The legal basis for data processing is Art. 6(1) sentence 1(f) GDPR. Our legitimate interest can be derived from the data processing purposes set out above. We will never use the collected data in order to draw conclusions relating to you personally.

We also use cookies and analytics services in connection with visits to our website. For more information, see sections 5 and 10 of this Privacy Notice.

b) On registering for our newsletter

On our website you have the possibility to register for a newsletter. For the registration we need your e-mail address, as well as first and last name to be able to address you personally in the newsletter. We use the so-called double opt-in procedure, i.e. after your registration we send you an e-mail in which we ask you to confirm that you agree to receive the newsletter and that you have entered your e-mail address in the registration form yourself.

For the dispatch of our newsletters, we use the service “Brevo”, a newsletter dispatch service of SendinBlue GmbH, Köpenicker Straße 126, 10179 Berlin. Brevo is a European provider that we have selected in particular also from the point of view of the DSGVO compliance of the newsletter dispatch.

Brevo makes it possible for us to analyze user response to our newsletter mailings, e.g. by displaying whether a newsletter message was opened and which links, if any, were clicked and how often. Brevo also allows us to subdivide newsletter recipients based on various categories and better tailor them to specific target groups.

The provider “Brevo” logs the registrations and double opt-in confirmations during newsletter registration in order to document the registration process. This includes the storage of the registration and confirmation time, as well as the IP address. In addition, the provider collects data via a cookie when our website is called up in order to ensure the technical functionality of the newsletter registration. The collected data is stored on Brevo’s servers in Germany. Brevo uses this information to send and evaluate the newsletter on our behalf. The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of Brevo after you unsubscribe from the newsletter. Likewise, any changes to your data stored by Brevo will be logged. If you do not confirm your subscription within 2 weeks, your information will be blocked and automatically deleted after one month.

The processing of your information entered in the form is based on your consent (Art. 6 para. 1 lit. a DSGVO) exclusively for the purpose of sending the requested newsletter. The technically necessary processing of the information retrieved via the cookie is carried out on the basis of our legitimate interest (Art. 6 para. 1 lit. f DSGVO) to ensure a functional dispatch of our newsletter.

You can revoke your consent at any time for the future. To do so, use the “Unsubscribe” link provided in our newsletters or contact us directly, e.g. via the mail address datenschutz@edel.com. The legality of the data processing operations already carried out remains unaffected by the revocation.

For more information about the provider, please refer to the privacy policy of Brevo at https://www.brevo.com/de/legal/privacypolicy/

c) On contacting us via e-mail or the contact form

If you contact us by e-mail or via the contact form provided on our website, we will store the data you provide (your e-mail address, together with your name and telephone number, if applicable) in order to process your request or respond to your questions.

If using the contact form, you are required to give a valid e-mail address in order that we know who sent the enquiry and in order to be able to respond to it. All other information is provided on a voluntary basis.

Data relating to you contacting us is processed on the basis of voluntary consent in line with Art. 6(1) sentence 1(a) GDPR.

We will delete any data collected in this context once storage is no longer necessary (if, for instance, your enquiry has been satisfied) or we limit processing if statutory retention periods apply.

d) Terms and conditions for participation in the competition

In order to participate in a competition organised by us, certain personal data must be processed for the purpose of any notification and transmission of winnings and for your identification.

The personal data which we require for your participation in a competition organised on our website are marked as mandatory fields on the participation form provided on our website. You may voluntarily provide additional data.

When you enter a sweepstake that we host through our Facebook page or Instagram page, we store your public Facebook/Instagram profile information including your username and your Facebook/Instagram comment (text and image) submitted to participate in the sweepstake to document your sweepstake in the event of your drawing.

We need your address data only after the prize determination and only in the event that you have been determined as the winner, in order to be able to send you the prize. We request your address information by emailing you either to the email address you provided on the entry form or, if you are participating in a Facebook/Instagram competition, to your Facebook/Instagram profile. You are under no obligation to provide us with your address information. However, if you do not provide us with your address information, we may not be able to deliver the prize to you.

Your personal data will be processed by us for the purpose of conducting the competition on the basis of Art. 6 Para. 1 S. 1 lit. b DSGVO. In the case of sweepstakes which we conduct together with cooperation partners, your data will be forwarded to the cooperation partner who is responsible for redeeming the prize. You will be informed of this cooperation partner as part of your address enquiry. Our cooperation partner(s) will be named in the respective competition. Your personal data will only be passed on to third parties or used for advertising purposes (e.g. to send newsletters) if this is necessary to run the competition or if you have given your express consent beforehand.

If you have been identified as a winner of a competition and you have given us your consent, we will post your first and last name in connection with the prize on our website and/or Facebook page/Instagram page.

With your consent, our cooperation partners may contact you directly by email or postal mail with promotional offers.

The processing of your data, for which you have given us your consent, takes place on the basis of Art. 6 Para. 1 S. 1 lit. a DSGVO.

Your personal data will be deleted automatically after the lottery has ended, unless you have given us permission to process your data beyond the purpose of the lottery, or if legal regulations prevent the deletion.

You can revoke your consent given to us within the scope of your participation in a competition at any time with effect for the future by notifying us of your revocation in writing or by contacting us by e-mail at info@neue-meister-music.com or by contacting our corresponding cooperation partner. After revocation of your consent, your personal data, to which your revocation refers, will be deleted immediately, unless there are legal provisions to the contrary.

If you subscribe to a newsletter from one of our cooperation partners as part of the raffle, the data protection provisions specified by this partner apply.

4. Disclosure of data

Your personal data will not be disclosed to third parties for any purposes other than those set out below.

We will only disclose your personal data to third parties if:

you granted your express consent pursuant to Art. 6 (1) sentence 1(a) GDPR;
disclosure is required pursuant to Art. 6(1) sentence 1(f) GDPR in connection with the establishment, exercise or defence of legal claims and there is no reason to believe that you have an overriding legitimate interest in your data not being disclosed;
we are subject to a statutory obligation to such disclosure pursuant to Art. 6(1) sentence 1(c) and
this is permitted by law and necessary in connection with implementing contractual relations with you pursuant to Art. 6(1) sentence 1(b) GDPR.

5. Cookies

We use cookies on our website. These are small text files which are automatically created by your browser and stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device, do not contain any viruses, Trojans or other malware.

Information relating to the specific end device used in each case is stored in the cookie. This does not mean, however, that we directly receive information relating to your identity.

The use of cookies serves on the one hand to make it easier for you to use our services. In this context, we use session cookies to identify whether you have already visited individual pages on our website. These are automatically deleted when you leave our website.

We also use temporary cookies in order to optimise our website’s user-friendliness; these are stored on your end device for a specific period. If you re-visit our website in order to take advantage of our services, the website automatically recognises that you are returning and will remember your data and settings in order to save you from entering these a second time.

The data processed using cookies are required for the stated purposes in order to protect our legitimate interests and those of third parties in line with Art. 6(1) sentence 1(f) GDPR.

Most browsers automatically accept cookies. You can, however, configure your browser such that cookies are not stored on your computer or a notice appears every time a new cookie is created. Full deactivation of cookies may, however, prevent you from being able to use all the functions on our website.

Reference to data processing in the USA

By clicking on the button “I accept all cookies”, you also agree according to Art. 49 para. 1 p. 1 lit. a DSGVO that your data will be transmitted to the USA and processed there. According to the assessment of the European Court of Justice, the USA does not guarantee a level of data protection that meets the European GDPR standards. In particular, it is easier and more extensive for US authorities to access personal data compared to authorities in the EU. There is thus a risk that your data collected in connection with your visit to our website may be processed by US authorities for control and monitoring purposes, possibly even without any legal remedy.

6. GA4 Google Analytics

Depending on your consent, Google Analytics 4, a web analysis service of Google LLC, is used on our website. The controller for visitors within EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

The service is implemented in “basic consent mode” – if you do not consent to the data processing, only aggregated data is collected and processed and no cookies are stored. Nevertheless, tags can communicate the consent status and user activity by sending the following types of pings or signals to the Google server:

pings for Google Ads and Floodlight tags: they communicate the default consent status as well as the updated status.
conversion pings: indicate that a conversion has taken place
google analytics pings: when loading and logging events.

In all cases, the pings may contain the following:

– Functional information (such as headers that are passively added by the browser):

– Timestamp

– User agent (web only)

– Referrer

– Aggregated/non-identifying information: An indication of whether or not the current page or a previous page in the user’s navigation on the website contained ad click information in the URL (e.g. GCLID / DCLID)

– Boolean information about the consent status

– Random number generated each time the page is loaded

– Information about the consent platform used by the website owner (e.g. developer ID)

Google compiles detailed information in an overview https://support.google.com/google-ads/answer/10000067?hl=en.

Scope of the processing

Google Analytics uses cookies that enable us to analyze your use of our website. The information collected by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.

In Google Analytics 4, the anonymization of IP addresses is activated by default. Due to IP anonymization, your IP address will be truncated by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

During your website visit, your user behavior is recorded in the form of “events”. Events can be:
– Page views
– First visit to the website
– Start of session
– Your “click path”, interaction with the website
– Scrolls (whenever a user scrolls to the bottom of the page (90%))
– clicks on external links
– internal search queries
– interaction with videos
– file downloads
– seen / clicked ads
– language settings

Also recorded:
– Your approximate location (region)
– your IP address (in shortened form)
– technical information about your browser and the end devices you use (e.g.
language setting, screen resolution)
– your internet service provider
– the referrer URL (via which website/advertising medium you came to this website)

Google Signals
Google Signals is used on this website as an extension to Google Analytics. You can find detailed information about Google Signals here https://support.google.com/analytics/answer/7532985?hl=de. The Google Signals extension is used to create cross-device reports and collect information. Google can thus analyze the behavior of website users across devices and create database models, including cross-device conversions. Google Analytics is used to generate statistics on user behavior, which can be viewed by the website operator. We have no influence on data processing by Google Signals. If you wish to stop the cross-device analysis, you can deactivate the “Personalized advertising” function in the settings of your Google account (https://support.google.com/ads/answer/2662922?hl=de)

Purposes of processing
On behalf of the operator of this website, Google will use this information for the purpose of evaluating your pseudonymous use of the website and compiling reports on website activity. The reports provided by Google Analytics serve to analyze the performance of our website as well as the possible playout of personalized advertisements by Google.

Recipients
Recipients of the data are/may be
– Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as a processor pursuant to Art. 28 DSGVO).
– Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
– Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
It cannot be ruled out that US authorities may access the data stored by Google.

Third country transfer
Insofar as data is processed outside the EU/EEA and there is no level of data protection corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider to establish an appropriate level of data protection. The parent company of Google Ireland, Google LLC, is based in California, USA. A transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out. The USA is currently considered a third country from a data protection perspective. You do not have the same rights there as within the EU/EEA. You may not be entitled to any legal remedies against access by authorities.

Storage period
The data sent by us and linked to cookies are automatically deleted after 2 months. Data whose retention period has been reached is automatically deleted once a month.

Legal basis
The legal basis for this data processing is your consent pursuant to Art.6 para.1 p.1 lit.a DSGVO.

Revocation
You can revoke your consent at any time with effect for the future by calling up the cookie settings and changing your selection there:

The lawfulness of the processing carried out on the basis of the consent until revocation remains unaffected.

You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may result in a restriction of functionalities on this and other websites. In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google, by
a. Not giving your consent to the setting of the cookie or
b. downloading the browser add-on to disable Google Analytics (install at https://tools.google.com/dlpage/gaoptout?hl=de . For more information on Google Analytics terms of use and Google’s privacy policy, please visit https://marketingplatform.google.com/about/analytics/terms/de/ and https://policies.google.com/?hl=en.

Reference to data processing in the USA by Google

7. Google Tag Manager

This website uses the “Google Tag Manager” service. Google Tag Manager is a solution that allows website tags to be managed via an interface. The tool itself processes personal data only for technically necessary purposes. The Google Tag Manager takes care of loading other components, which in turn may collect data. The Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.

Reference to data processing in the USA by Google

By clicking on the button “I accept all cookies”, you consent at the same time according to Art. 49 para. 1 p. 1 lit. a DSGVO that your data will be transmitted to the USA and processed there. According to the assessment of the European Court of Justice, the USA does not guarantee a level of data protection that meets the European GDPR standards. In particular, it is easier and more extensive for US authorities to access personal data compared to authorities in the EU. There is thus a risk that your data collected in connection with your visit to our website may be processed by U.S. authorities for control and monitoring purposes, possibly even without any legal remedy.

8. YouTube with enhanced privacy

This website contains embedded audiovisual media hosted on the platform YouTube. The operator of Youtube is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We implement YouTube in the extended data protection mode. According to YouTube, this mode supports YouTube not storing any information about visitors to this website before they acitivate the video by clicking on it. However, the disclosure of data to YouTube partners is not necessarily excluded by the extended data protection mode. Thus, YouTube – regardless of whether you watch a video – establishes a connection to the Google DoubleClick network.

As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. This might transfer to the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you might enable YouTube to evaluate your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, YouTube can save various cookies on your end device after starting a video. With the help of these cookies, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve the user experience and prevent fraud attempts. Cookies remain on your terminal device until you delete them.

If necessary, further data processing operations may be triggered after the start of a YouTube video, over which we have no control.

YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. If a corresponding consent has been requested, the processing is based exclusively on Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.

For more information about data protection at YouTube, please see their privacy policy at: https://policies.google.com/privacy?hl=de.

9. Google Maps

We use services offered by Google Maps on our website. This enables us to display interactive maps directly on our website and offers you convenient use of the map function.

These maps are all embedded such that no data relating to you as user will be transmitted to Google if you do not access the maps. Only if you access the maps will the data set out in section 3a) of this Notice be transmitted. We cannot influence this data transfer.

On visiting one of our webpages which contains corresponding plug-ins, Google will receive information that you visited the corresponding webpage. The data set out in section 3a) of this Privacy Notice will also be transmitted. This will take place irrespective of whether Google provides a user account to which you are logged in or no such user account exists. If you are logged into Google, your data will be directly linked to your account. If you do not wish the information to be linked to your Google profile, you must log out of Google before visiting the corresponding page on our website. Google stores the data relating to you as usage profiles and uses them for advertising, market research and/or needs-based design purposes. This kind of analysis is conducted in particular in order to provide needs-based advertising (even for users who are not logged in) and in order to inform other users of the social network of your activities on our website. You have a right to object to the creation of such user profiles, in which context you must contact Google directly.

Reference to data processing in the USA by Google

The legal basis is Art. 6(1) sentence 1(f) GDPR.

10. Spotify

Functions offered by the music services provider Spotify are embedded on our website. These are provided by Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden. The Spotify plug-ins can be identified by the green logo on our website. An overview of the Spotify plug-ins is available at https://developer.spotify.com.

If you access pages on our website containing Spotify plug-ins, a direct link is created between your browser and Spotify’s servers. Spotify will thus receive the information that you accessed the corresponding page on our website from your IP address.

If you have a Spotify account, these data could be linked to your account. If you do not wish these data to be linked to your Spotify account, you must log out of Spotify before visiting our website. Interactions will also be forwarded to Spotify.

For more information, please see Spotify’s Privacy Policy: https://www.spotify.com/uk/legal/privacy-policy/

The legal basis is Art. 6(1) sentence 1(f) GDPR.

11. Facebook Pixel

With your consent, we use Facebook Pixel, provided by Facebook Inc. (“Facebook”) to track user actions. This helps us to track user actions once they have seen or clicked a Facebook ad. This enables us to record the effectiveness of the Facebook ads for statistical and market-research purposes. The data recorded in this way are anonymous for us, i.e. we cannot identify the personal data of individual users. These data are, however, stored and processed by Facebook, and we will inform you of this as far as we are aware of it. Facebook can link these data to your Facebook account and use them for its own advertising purposes in line with its privacy policy; https://www.facebook.com/about/privacy/. You can enable Facebook and its partners to display ads on and outside Facebook pages. A cookie could also be stored on your computer for these purposes.

This consent may only be given by users who are older than 13 years of age. If you are younger, please consult your parent or guardian.

Reference to data processing in the USA by Facebook

Please click here, if you wish to revoke your consent.

12. Social media sites and links

The responsible party operates several social media presences. On Neue Meister those are:

Facebook: https://www.facebook.com/mpsmusic
Instagram: https://www.instagram.com/mpsrecords/

You will find links to these social media presences on our websites. The links establish a connection to our online presence of the respective social network exclusively on request – therefore only after the user has clicked on a link. After a click on the link, the IP address and the general header information of the user’s browser are transmitted to the respective social network. The respective social network may collect further personal data as soon as you use its offers. If you are logged into your respective account, Facebook can, for example, assign the visit to your account there.

By the ruling of the European Court of Justice of 05 June 2018, a joint responsibility of Facebook and the respective fan page or profile operator for the operation of a fan page was assumed. Despite this possible joint responsibility of us and the social media portal operator, we unfortunately have little control or influence over the processing of personal data by the respective social media portals. This refers both to the data entered by you on the social media platforms, such as comments, videos, images, likes, public messages, etc., as well as any web tracking, marketing and analysis tools used by the portal. We would like to point out that it cannot be ruled out that the provider of the social media platform may use your profile and behavioral data, for example to evaluate your habits, personal relationships, preferences, etc. Your personal data will also be processed by the respective operator outside the European Union or the European Economic Area. As a result, risks may arise for you, in particular the enforcement of rights may become more difficult.You can find more detailed information on data processing by the provider of the social media platform and further objection options in the privacy statements of the respective providers:

Facebook: https://www.facebook.com/privacy/explanation

Instagram: https://help.instagram.com/519522125107875

The data you enter on our social media pages, such as comments, videos, images, likes, public messages, etc., will not be used or processed by us for any other purpose at any time. We only reserve the right to delete content if this should be necessary. At the points where we can exert influence, we work within the scope of the possibilities available to us to ensure that the operator of the social media platform handles the content in a manner that complies with data protection laws. The legal basis is Art. 6 para. 1 p. 1 lit. f) DSGVO. The data processing is carried out in the interest of our public relations and communication.

13. Amazon partner program (Amazon Affiliate)

Edel participates in the partner program offered by Amazon Europe S.à.r.l. and is a partner of the advertising program which was created to provide a medium for websites which enables advertising costs to be recouped via the placement of ads and links to amazon.de / amazon.co.uk. In participating in the program, we endeavour to display ads which could be of interest to you and which make our website more interesting to our users.

Statistical information relating to you is collected in return for providing the ads, which is then processed by our advertising partners. When you visit our website, Amazon will receive the information that you accessed on visiting our webpage. In this context, Amazon uses web beacons to identify your requirements and may create a cookie on your computer. The data set out in section 3a) of this Privacy Notice will also be transmitted. We have no influence on the data collected and we are not aware of the full scope of the data collected or the retention period. If you are logged into Amazon, your data may be directly linked to your Amazon account. If you do not wish this data to be linked to your Amazon profile, you must log out of Amazon. It is possible that your data may be forwarded to contracting partners of Amazon and public authorities. The data are transmitted to the USA and are analysed there.

The legal basis for the processing of your data is Art. 6(1) sentence 1(f) GDPR.

You can prevent cookies being installed by the Amazon partner program using one of several methods: a) by making a corresponding setting in your browser software, preventing third‑party cookies in particular means that you will not receive advertising from third parties; b) by deactivating interest-based advertising from Amazon via the following link: http://www.amazon.de/gp/dra/info; c) by deactivating interest-based advertising from providers who participate in the self-regulation campaign “AboutAds” by making corresponding settings via the link http://www.aboutads.info/choices, which will delete the relevant cookies. In such cases, you may, however, not be able to use all the functions on our website.

Further information on the purpose and scope of the collection and processing of data, together with further information on your related rights and possible settings for protecting your privacy is available in the above privacy policy and from: Amazon EU S.à.r.l., Amazon Services Europe S.à.r.l. and Amazon Media EU S.à.r.l., all three of which have their business address at: 5, Rue Plaetis, L-2338 Luxembourg; e-mail: ad-feedback@amazon.de.

Reference to data processing in the USA by Amazon

For more information on the use of the data by Amazon is available in the company’s privacy notice: / https://www.amazon.co.uk/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=201909010 and at: https://www.amazon.co.uk/gp/help/customer/display.html?ie=UTF8&%2AVersion%2A=1&%2Aentries%2A=0&nodeId=201149560.

14. Linkfire

We use the music sales analysis tool “Linkfire” provided by Linkfire ApS, Artillerivej 86, 3., 2300 Kopenhagen S, Denmark, on our website.

This helps us to offer you a clear summary of various online providers of a particular product in a single link. We can also track users’ actions once they have clicked a Linkfire link. The data recorded in this way are anonymous for us, i.e. we cannot identify the personal data of individual users. These data are, however, stored on Linkfire servers in Denmark. We have no influence on the scope and further use of the data by Linkfire.

Further information on the purpose and scope of data collection and further processing and use of the data by Linkfire, together with your corresponding rights and possible settings for protecting your privacy can be found in Linkfire’s Privacy Policy (https://linkfire.com/privacy).

If you do not wish Linkfire to collect your data, please click the following link.

We perform this measure on the basis of Art. 6(1) sentence 1(f) GDPR.

15. Your rights

a) Information, rectification, erasure, restriction of processing, data transferability, revocation, complaints

You have the right:

to receive, pursuant to Art. 15 GDPR, information on your personal data processed by us. You can, in particular, receive information on the purposes of processing, the categories of personal data, the categories of recipient to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request rectification, erasure, restriction of processing of personal data or the right to lodge a complaint, where the personal data are not collected from us, any available information as to their source, the existence of automated decision-making, including profiling, and meaningful information about the corresponding details, if applicable;
to obtain, pursuant to Art. 16 GDPR, without undue delay the rectification of inaccurate or incomplete personal data stored by us;
to obtain, pursuant to Art. 17 GDPR, the erasure of your personal data stored by us, provided processing is not required in order to exercise the right of freedom of expression and information, for compliance with a legal obligation, for the performance of a task carried out in the public interest or for the establishment, exercise or defence of legal claims;
to obtain, pursuant to Art. 21 GDPR, restriction of processing, where you contest the accuracy of the personal data, the processing is unlawful, you oppose the erasure of the personal data and we no longer need the personal data, but they are required by you for the establishment, exercise or defence of legal claims pursuant to Art. 18 GDPR or you have exercised your right to object;
to receive, pursuant to Art. 20 GDPR, the personal data concerning you, which you provided, in a structured, commonly used and machine-readable format and to demand transmission of those data to another controller;
to withdraw your consent at any time pursuant to Art. 7(3) GDPR by making a corresponding statement to us. This means that we are not permitted to continue to process the data to which this consent applied in future; and
to lodge a complaint with a supervisory authority, pursuant to Art. 77 GDPR. You can generally lodge such complaint with the supervisory authority in the place of your habitual residence, place of work or our branch.

b) Right to object

If your personal data are processed on the basis of justified interests pursuant to Art. 6(1) sentence 1(f) GDPR, you have the right to object to the processing of your personal data, pursuant to Art. 21 GDPR, on grounds relating to your particular situation or the objection relates to direct marketing. In the latter case, you have a general right to object which will be implemented by us without you having to specify grounds.

If you wish to make use of your right to object, an e-mail to the following address will suffice:

datenschutz@edel.com.

16. Data security

We use the popular SSL (secure sockets layer) technology in conjunction with the highest level of encryption supported by your browser when you access our website. This is generally 256‑bit encryption. If your browser does not support 256-bit encryption, we will use 128-bit v2 technology instead. You can identify whether or not an individual page on our website is transmitted in encrypted form by the closed key/padlock symbol in the lower status bar on your browser.

Online applications are transferred in encrypted form according to the latest technological standards.

We also use suitable technical and organisational security measures in order to protect your data against accidental or deliberate manipulation, partial or total loss, destruction or unauthorised access by third parties. Our security measures are continually improved in line with technological developments.

17. Validity and amendments to this Privacy Notice

This Privacy Notice is up to date and is the valid version dated 02 November 2023.

We may be required to update this Privacy Notice as a result of developments to our website and services or due to amendments made to statutory or official requirements. The valid version of the Privacy Notice is available for inspection and printout at all times on our website at https://www.edel.com/en/privacy-policy-2/.