Data Policy

1. General Information

1.1 What are personal data

Personal data are details that disclose or can disclose the identity of the user. We adhere to the principle of data minimization. Wherever possible, the collection of personal data is avoided.

1.2 Handling of personal data

Personal data are used exclusively for establishing, structuring, executing, or processing the contractual relationship (Art. 6 I S. 1 b GDPR).

In addition, personal data will only be processed if we have obtained your consent (Art. 6 I S. 1 a GDPR) or if the data are necessary for our legitimate interests, provided that a balancing of interests shows that your overriding rights, freedoms, or interests are not affected (Art. 6 I S. 1 f GDPR).

We may use processors to process your personal data, with whom we have concluded data processing agreements if necessary. Beyond this, personal data will not be passed on to third parties.

Data will only be passed on to the shipping company commissioned with delivery to the extent necessary to deliver ordered goods. For payment processing, the necessary payment data will be forwarded to the credit institution commissioned with payment and, if applicable, to the commissioned and selected payment service provider.

The processing of your personal data takes place within the EU as well as in countries deemed safe or adequate by the EU. Should data processing take place in the USA, we aim to ensure that the services we use are certified under the “Data Privacy Framework.”

1.3 Usage data

When visiting the website, general technical information is collected. These include the IP address used, time, duration of the visit, browser type, and possibly the referring page. These usage data are technically recorded in a log file and may be used and stored for statistical evaluation of this website. These usage data are not linked with your other personal data.

1.4 Registration data

To fully use the features of our website, registration is required. Registration data are collected through your input and used for the specific stated purpose according to your consent (Art. 6 I S. 1 a GDPR).

1.5 Duration of storage

We store your personal data only as long as required by law (especially tax law), after the purpose for which the data were collected has ended.

Currently, this equals 190 days.

The aforementioned data are stored as log files on the servers of our internet service provider. This is necessary to display the website on your device and to ensure stability and security.

2. Your Rights

2.1 Right of access

You can request information from us on whether we process personal data concerning you. If this is the case, you have a right of access to these personal data as well as the further information listed in Art. 15 GDPR.

2.2 Right to rectification

You have the right to correct inaccurate personal data concerning you and may request completion of incomplete personal data in accordance with Art. 16 GDPR.

2.3 Right to erasure

You have the right to demand that we delete personal data concerning you without undue delay, in particular if one of the following reasons applies:

• Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.

• You withdraw your consent, and there is no other legal basis for processing.

• Your data were unlawfully processed.

The right to erasure does not exist if your personal data are required for the establishment, exercise, or defense of legal claims.

2.4 Right to restriction of processing

You have the right to request restriction of processing of your personal data if:

• You contest the accuracy of the data (for the period of verification),

• Processing is unlawful and you oppose deletion,

• We no longer need the data, but you require them for legal claims,

• You have objected to processing and the balance of interests is pending.

2.5 Right to data portability

You have the right to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format. You also have the right to transmit these data to another controller, provided that processing is based on consent or contract and is carried out by automated means.

2.6 Right of withdrawal

If processing of your personal data is based on your consent, you may withdraw that consent at any time.

2.7 General and right to lodge a complaint

Exercising your rights is generally free of charge. You have the right to lodge a complaint with the competent supervisory authority (the State Data Protection Officer).

3. Data Security

3.1 Data security

All data on our website are secured by technical and organizational measures against loss, destruction, access, modification, and distribution.

3.2 Sessions and cookies

We use cookies and server-side sessions to operate the website. We ensure that no personal data are taken from sessions or cookies without your express consent and that cookies are only used if technically necessary for the website (e.g., spam protection in contact forms, shopping cart function). This is based on Art. 6 I S. 1 f GDPR.

With your consent, we may use cookies to personalize content and ads, offer social media features, and analyze traffic. The information may be shared with partners in social media, advertising, and analytics.

Below are the domains, names, and duration of cookies used only with your consent:

SourceNameDurationCoachycookie_accept2SessionCoachyckCsrfTokenSessionCoachywires_challengeSessionCoachywiresSessionGoogle Tag Manager_gcl_au90 daysGoogle Tag Manager_gcl_aw90 daysGoogle Tag Manager_uetvid16 daysGoogle Analyticsanalytics_storageSessionGoogle Analyticsad_storageSessionGoogle Analyticsad_user_dataSessionGoogle Analyticsad_personalizationSession

4. Newsletter

If you subscribe to our newsletter, we use the required data (or those provided separately by you) to send you our email newsletter regularly. You can unsubscribe at any time via the link in the newsletter or by contacting us directly.

5. Comments

If you use the comment function on our website, the comments, the time of creation, your chosen pseudonym, and temporarily also your IP address are stored. This is to protect our rights in case of unlawful content.

6. Presence on social media platforms

We use the following social media platforms for corporate presentation and communication (please refer to the linked privacy policies and opt-out options):

• Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland)
  Privacy Policy
  Opt-Out or youronlinechoices.com

• Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, USA)
  Privacy Policy & Opt-Out

• YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)
  Privacy Policy

These platforms may process personal data outside the EU.

We process data only for communication and optimization of our online presence (Art. 6 I S. 1 f GDPR) or, if you have consented to the respective platform, also based on your consent (Art. 6 I S. 1 a GDPR).

7. Third-party services

7.1 Google Tag Manager

This website uses Google Tag Manager. It manages website tags via an interface but does not use cookies or collect personal data.

7.2 Kit.com

This website uses Kit.com for newsletter distribution. Provider: Kit.com, 750 West Bannock Street #761, Boise, Idaho, 83701-0761. Kit.com is a service that helps organize and analyze newsletter campaigns.

When you provide data for the newsletter (e.g., email address), they are stored on Kit.com servers in the USA. Kit.com participates in the “Data Privacy Framework” to ensure compliance with EU data protection standards.

With Kit.com, we can analyze newsletter campaigns. When you open an email, a web beacon connects to Kit.com servers to detect if the email was opened and which links were clicked. Technical data (time of retrieval, IP address, browser type, operating system) may also be collected. These cannot be attributed to specific recipients but serve only for statistical analysis.

If you do not want Kit.com analysis, you must unsubscribe from the newsletter (link provided in each email or via our website).

Data processing is based on your consent (Art. 6 I S. 1 a GDPR). You may withdraw consent at any time by unsubscribing. The lawfulness of processing before withdrawal remains unaffected.

Your newsletter subscription data will be stored until you unsubscribe and then deleted from both our servers and Kit.com’s servers. Data stored for other purposes remain unaffected.

For details, please see Kit.com’s Privacy Policy.

7.3 Bunny

(unchanged from German version, Bunny services for videos, fonts, CDN)

7.4 Vimeo

(unchanged from German version, Vimeo video embeddings)

8. Contact

For privacy-related inquiries, please contact us:

MSL Media GmbH
Am Kloßberg 4
64367 Mühltal
Email: hello@pianowithmelanie.com
Phone: +49 176 95678446