Privacy Policy

We have created this privacy statement to explain to you, in accordance with the requirements of the General Data Protection Regulation (GDPR), what information we collect, how we use it, and what choices you have as a visitor to this website.

Unless otherwise stated below, the provision of your personal data is not required by law or contract, nor is it necessary for the conclusion of a contract. You are under no obligation to provide the information. Failure to do so will not result in any consequences. This only applies to the extent that nothing to the contrary is stated in the subsequent processing.

“Personal data” means any information relating to an identified or identifiable natural person.

The responsible party within the meaning of the GDPR and other national data protection laws of the member states as well as other data protection provisions is the

Stretta Music GmbH
Ochsenfurter Straße 6
97246 Eibelstadt
Germany

Email: info@stretta-music.uk | Website: www.stretta-music.uk

Friedemann Hecht
Dudenstr. 10, Aufgang B
10965 Berlin
Germany

Email: kontakt@mehralsdatenschutz.de | Website: https://www.mehralsdatenschutz.de/

You can visit our website without providing any personal information. Each time you access our website, your internet browser transmits usage data to us or our IT service provider and stores it in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the volume of data transferred and the requesting provider. The processing is carried out on the basis of Art. 6 (1.f) GDPR because we have an overriding legitimate interest in ensuring the smooth operation of our website and in improving our service.

If you contact us by e-mail or via our contact form, we will only collect your personal data (name, e-mail address, message text) to the extent provided by you. The data is processed for the purpose of processing and responding to your contact request.

If the purpose of contacting us is to carry out pre-contractual measures (e.g. consultation in case of interest in purchasing, preparation of an offer) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1.b) GDPR.

If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1.f) GDPR due to our overriding legitimate interest in processing and responding to your request. In this case, you have the right at any time to object to this processing of your personal data on the basis of Art. 6 (1.f) GDPR for reasons relating to your particular situation.

Your email address will only be used to process your request. Your data will then be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.

Collection and Processing of Applications by E-mail

Visitors to the site can apply by email for jobs advertised on the site if they are interested. We will only collect your personal information if you provide it to us. This may include your contact details (e.g. name, email address, telephone number), details of your professional qualifications and training, details of professional development courses and performance records.

The purpose of processing the data is to contact you and decide whether to enter into an employment relationship with you. The provision of the data is necessary to carry out the application procedure. The processing of your personal data is based on Art. 6 (1.b) GDPR in conjunction with. § 26 (1) BDSG in order to carry out pre-contractual measures (carrying out the application procedure as a prelude to the conclusion of an employment contract).

If special categories of personal data within the meaning of Art. 9 (1) GDPR are requested from applicants in the course of the application process, such as information on the degree of severe disability, this is done on the basis of Art. 9 (2.b) GDPR, so that we can exercise the rights and fulfil the obligations arising from labour law and social security and social protection law.

We will keep your personal data for as long as is necessary to process your application. Your data will then be deleted after six months at the latest, unless you have consented to further processing and use. If an employment relationship is established following the application process, the data provided will be further processed on the basis of Art. 6 (1.b) GDPR in conjunction with § 26 (1) BDSG for the purpose of implementing the employment relationship and then transferred to the personnel file.

When you open a customer account, we collect your personal information to the extent specified there. The purpose of data processing is to improve your shopping experience and to facilitate the processing of your order. The processing is based on Art. 6 (1.a) GDPR with your consent. You may revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation. Your account will then be deleted.

When you place an order, we collect and process your personal data only to the extent necessary to fulfil and process your order and to deal with your enquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide them will result in no contract being concluded. The processing is based on Art. 6 (1.b) GDPR and is necessary for the performance of a contract with you.

For example, we may share your information with our delivery company, payment service provider, order processing service provider and IT service provider. In all cases, we strictly comply with legal requirements. The amount of data transferred is kept to a minimum.

When you sign up to receive our newsletter ("StrettaLetter"), we collect the following information – if not already available through a customer account:

- Name, first name
- Email address

The data collected will be used solely for the purpose of sending the newsletter. For this purpose, the data is transferred to the newsletter service Brevo (Sendinblue GmbH), Köpenicker Str. 126, 10179 Berlin, Germany. The data will only be stored on European servers.

Here you can reach the data protection officer of the processing company: datenschutz@brevo.com

Here you will find the Privacy Policy of the data processor.

As long as you do not subscribe to our newsletter, no data will be transferred to Brevo.

We use an enterprise resource planning system to process orders. For this purpose, your personal data collected in connection with the order will be transferred to exitB GmbH, Sickingenstr. 70, 10553 Berlin, Germany.

Mollie

We use the payment service provider Mollie B.V. (Keizersgracht 313, 1016 EE Amsterdam, The Netherlands) to process payments on our website. The purpose of the data processing is to be able to offer you various payment methods through the payment processing by the payment service provider Mollie. If you have selected one of the payment options offered by the payment service provider Mollie, the data required for payment processing will be transmitted to Mollie. This includes your payment details (e.g. bank account number or credit card number), your IP address, your internet browser and device type, and in some cases your first and last name, address details and information about the product or service you have purchased from us. This data processing is based on Art. 6 (1.b) GDPR. For more information on data processing when using the payment service provider Mollie, please refer to their privacy policy www.mollie.com/privacy.

VR-Payment

We use the payment service provider VR-Payment GmbH (Saonestr. 3a, 60528 Frankfurt am Main) to process credit card payments on our website. The purpose of the data processing is to enable you to make card payments. If you have chosen one of the payment options provided by VR-Payment, the data required to process the payment will be transmitted to VR-Payment. This includes your payment details, your IP address, your internet browser and device type, your first and last name, your address details and information about the product or service you have purchased from us. This data processing is based on Art. (1.b) GDPR. For more information on data processing when using the payment service provider VR-Payment, please refer to their privacy policy www.vr-payment.de/datenschutz-haftung-in-app-zahlmodul-nutzer.

PayPal

If PayPal is selected as the payment service provider, credit checks may be performed by PayPal for certain payment methods selected by the customer. For further details on the processing of the customer’s personal data by PayPal, please see www.paypal.com/webapps/mpp/ua/privacy-full.

Web Browser Cookies

Our website uses cookies. Cookies are small text files that are stored on or by a user's Internet browser on their computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a unique string of characters that allows the browser to be uniquely identified when the website is visited again.

Cookies are saved on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings on your Internet browser, you can be notified before cookies are set and individually decide whether to accept them, as well as prevent cookies from being stored and the data they contain from being transmitted. Cookies that have already been stored can be deleted at any time. However, please note that you may not be able to use all the features of this website to their full extent.

All major web browsers allow you to manage and delete cookies. Information on how to do this can be found on the manufacturer's support pages.

Technically Necessary Cookies

Unless otherwise stated in the privacy policy below, we use these technically necessary cookies to make our site more user-friendly, effective and secure. Cookies also enable our systems to recognise your browser and offer you services even after you have changed pages. Some functions of our website cannot be provided without the use of cookies. These require the browser to be recognised after a page change.

The use of cookies or similar technologies is based on § 25 (2) TTDSG. The processing of your personal data is based on Art. 6 (1.f) GDPR on our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer.

You have the right to object to the processing of your personal data at any time on grounds relating to your particular situation.

Use of intelliAd Tracking

The purpose of intelliAd tracking is to design and optimise websites according to demand. For this purpose, anonymous usage data is collected and stored in aggregated form. The intelliAd technology is a service provided by emarketing AG (Landsbergerstraße 110, 80339 Munich, Germany).

The data is processed for the purpose of analysing this website and its visitors, as well as for marketing and advertising purposes. To this end, emarketing AG will use the information obtained on behalf of the operator of this website to evaluate your use of the website, compile reports on website activity and provide the operator of the website with other services relating to website activity and internet usage. This information may include the following IP address, date and time of page view, click path, information about the browser and device you are using, pages visited, referrer URL (the website from which you linked to our site), geolocation, purchase activity. The IP address transmitted by your browser as part of intelliAd tracking is anonymised, and the click path is pseudonymised.

The use of cookies or comparable technologies takes place with your consent on the basis of § 25 (1.1) TTDSG in connection with Art. 6 (1.a) GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 Art. 6 (1.a) GDPR. You may revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. You can find more information and intelliAd's privacy policy at www.intelliad.com/privacy-policy.

Here you can object to tracking by intelliAd on all domains of the processing company: login.intelliad.com/optout.php

Use of Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).

The purpose of the data processing is to analyse this website and its visitors, as well as for marketing and advertising purposes. Google will use this information on behalf of the website operator to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services relating to website activity and internet usage. This information may include the following IP address, date and time of page view, click path, information about the browser and device you are using, pages visited, referrer URL (the website from which you linked to our site), geolocation, purchase activity. The IP address transmitted by your browser as part of Google Analytics will not be combined with other data held by Google.

Google Analytics uses technologies such as cookies, web beacons and tracking pixels to help the website analyse how users use the site. The information generated by the cookie about your use of the website is transmitted to and stored by Google on servers in the United States. There is no EU Commission adequacy decision for the USA. The transfer is made in accordance with standard contractual clauses that provide adequate safeguards for the protection of personal data, which can be found at policies.google.com/privacy/frameworks and business.safety.google/adsprocessorterms. Both Google and US government agencies have access to your information. Your data may be combined by Google with other data, such as your search history, your personal accounts, your usage data from other devices and any other data Google may hold about you.

The use of cookies or similar technologies takes place with your consent on the basis of § 25 (1.1) TTDSG in conjunction with Art. 6 (1.a) GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 (1.a) GDPR. You may revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.

For more information on terms of use and privacy, please see marketingplatform.google.com/about/analytics/terms/gb or policies.google.com and policies.google.com/technologies/cookies.

Use of Google Ads Conversion Tracking

We use the Google Ads online advertising programme on our website and in this context we use conversion tracking. Google Conversion Tracking is an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).

The information obtained from the conversion cookie is used to compile conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users.

Your data may be transmitted to Google LLC servers in the USA. There is no EU Commission adequacy decision for the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at policies.google.com/privacy/frameworks and business.safety.google/adscontrollerterms.

The use of cookies or comparable technologies takes place with your consent on the basis of § 25 (1.1) TTDSG in conjunction with. Art. 6 (1.a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 (1.a) GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. You can find more information and Google’s privacy policy at policies.google.com/privacy

Use of the Remarketing Function of Google Inc.

We use the remarketing or “similar target groups” function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on our website.

The application is used to analyse visitor behaviour and interests. Google uses cookies to analyse the use of the website, which is the basis for the creation of interest-based advertising. The cookies are used to track visits to the website and to collect anonymous data about website usage. No personal information about visitors to the website is stored. If you subsequently visit another website in the Google Display Network, we will show you ads that are more likely to take into account the product and information areas you have previously visited.

Your data may be transferred to servers of Google LLC in the USA. There is no EU Commission adequacy decision for the USA. The transfer will be made on the basis of, among other things, standard contractual clauses that provide adequate safeguards for the protection of personal data, which can be viewed at policies.google.com/privacy/frameworks.

The use of cookies or comparable technologies takes place with your consent on the basis of § 25 (1.1) TTDSG in conjunction with Art. 6 (1.a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 (1.a) GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.

Using the Google Tag Manager

We use the Google Tag Manager of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on our website.

This application manages JavaScript tags and HTML tags used in particular to implement tracking and analysis tools. The purpose of this data processing is to help us design and optimise our website to meet your needs.

The Google Tag Manager itself does not store cookies or process personal information. However, it does allow other tags to be triggered that can collect and process personal information.

For more information on terms of use and data protection, see marketingplatform.google.com/intl/en/about/analytics/tag-manager/use-policy.

Use of Social Plugins

We use social networking plugins on our website. In order to keep you in control of your data, we use the privacy-preserving “Shariff” buttons.

Without your express consent, no connection will be made to the servers of the social networks and, consequently, no data will be transmitted.

More information on the Shariff project can be found here: www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html

When you click on the buttons, a pop-up window will appear, allowing you to log in to the service with your details. Only after you have actively logged in will a direct connection to the social networks be established.

By logging in, you consent to the transfer of your data to the relevant social media provider. This includes your IP address and information about which of our pages you have visited. If you are connected to one or more of your social networking accounts at the same time, the information collected will also be associated with your respective profiles. You can only prevent this by logging out of your social media accounts before visiting our website and activating the buttons.

For more information about the scope and purpose of the data collection and use, as well as your rights and options to protect your privacy, please refer to the linked privacy policies of the providers:

Facebook of Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland): www.facebook.com/policy.php

Your data may be transferred to the USA. There is no adequacy decision from the EU Commission for the USA. The transfer will take place, inter alia, on the basis of standard contractual clauses as adequate safeguards for the protection of personal data, available at www.facebook.com/legal/EU_data_transfer_addendum.

Instagram by Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland): help.instagram.com/155833707900388

Your data may be transferred to the USA. There is no adequacy decision from the EU Commission for the USA. The transfer will take place, inter alia, on the basis of standard contractual clauses as adequate safeguards for the protection of personal data, available at commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.

Pinterest of Pinterest Inc (635 High Street, Palo Alto, CA, 94301, USA): policy.pinterest.com/privacy-policy

Your data may be transferred to the USA. There is no EU Commission adequacy decision for the USA.

Twitter of Twitter Inc (1355 Market Street, Suite 900, San Francisco, CA 94107, USA): twitter.com/privacy

Use of Cloudflare

Our website uses the Cloudflare CDN Content Delivery Network of Cloudflare Inc. (101 Townsend St, San Francisco, CA 94107, USA). This is a supra-regional network of servers in different data centres to which our web server connects and through which certain content on our website is delivered.

The purpose of the data processing is to optimise the loading times of our website and thus to make our offer more user-friendly. The following information may be collected, among others IP address, system configuration information, information about traffic to and from customer websites (so-called server log files).

Your data may be transferred to the USA. There is no adequacy decision from the EU Commission for the USA. The transfer will take place, inter alia, on the basis of standard contractual clauses as adequate safeguards for the protection of personal data, available at commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.

The use of cookies or comparable technologies takes place with your consent on the basis of § 25 (1.1) TTDSG in connection with Art. 6 (1.a) GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 (1.a) GDPR. You may revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. You can find more information about privacy when using Cloudflare at www.cloudflare.com/en-gb/privacypolicy/.

Use of YouTube

We use the YouTube video embedding feature of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on our website, which is an affiliate of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

This feature displays videos stored on YouTube in an iFrame on the website. Extended privacy mode is enabled. This means that YouTube does not store any information about visitors to the site. Only when you watch a video is information about that video sent to YouTube and stored there. Your data may be transferred to the US. There is no EU Commission adequacy decision for the US. The transfer is based in part on standard contractual clauses as adequate safeguards for the protection of personal data, which can be viewed at policies.google.com/privacy/frameworks.

The use of cookies or similar technologies takes place with your consent on the basis of § 25 (1.1) TTDSG in conjunction with Art. 6 (1.a) GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 (1.a) GDPR. You may revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. For more information about the collection and use of data by YouTube and Google, your rights in this regard, and ways to protect your privacy, please see YouTube's privacy policy at www.youtube.com/t/privacy.

Use of Vimeo

We use plug-ins from Vimeo Inc. (555 West 18th Street New York, New York 10011, USA) on our website to integrate videos.

When you visit pages on our site that have such a plug-in, a connection is made to the Vimeo servers and the plug-in is displayed on the page by notifying your browser. This sends both your IP address and information about which of our pages you have visited to the Vimeo servers. If you are logged in to Vimeo, Vimeo associates this information with your personal user account. When you use the plugin's features (for example, when you click a button to start a video), this information is also associated with your Vimeo account.

Your data may be transferred to the USA. There is no adequacy decision from the EU Commission for the USA. The transfer will take place, inter alia, on the basis of standard contractual clauses as adequate safeguards for the protection of personal data, available at commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.

The use of cookies or similar technologies takes place with your consent on the basis of § 25 (1.1) TTDSG in conjunction with Art. 6 (1.a) GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 (1.a) GDPR. You may revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. Please refer to Vimeo's Privacy Policy for more information on the purpose and scope of the collection, further use and processing of the data by Vimeo, as well as your rights and options to protect your privacy: vimeo.com/privacy.

Using Spotify

We use plug-ins from Spotify AB (Birger Jarlsgatan 61, 113 56 Stockholm, Sweden) on our website to integrate audio streams.

When you visit pages on our website that have such a plug-in, a connection to Spotify's servers is established and the plug-in is displayed on the page by informing your browser. This sends both your IP address and information about which of our pages you have visited to Spotify's servers. If you are logged in to Spotify, Spotify will associate this information with your personal user account. If you use the plugin's features (e.g. start a playlist by clicking on the playlist button), this information is also associated with your Spotify account.

The use of cookies or similar technologies takes place with your consent on the basis of § 25 (1.1) TTDSG in conjunction with Art. 6 (1.a) GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 (1.a) GDPR. You may revoke your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.

Here you will find the Privacy Policy and the Cookie Policy of Spotify.

Duration of Storage

After the contract has been fully processed, the data will be stored initially for the duration of the warranty period, and thereafter taking into account statutory retention periods, in particular tax and commercial law retention periods, and then deleted at the end of that period, unless you have consented to further processing and use.

Rights of the Data Subject

You have the following rights according to Art. 15 to 20 GDPR, if the legal requirements are met: right of access, right of rectification, right of deletion, right of restriction of processing, right of data portability.

In addition, you have the right to object to processing based on Art. 6 (1.f) GDPR and to processing for the purpose of direct marketing pursuant to Art. 21 (1) GDPR.

Right of Appeal to the Supervisory Authority

You have the right to complain to the supervisory authority in accordance with Art. 77 GDPR if you consider that the processing of your personal data is not lawful.

Right of Objection

If the processing of personal data listed here is based on our legitimate interest pursuant to Art. 6 (1.f) GDPR, you have the right to object to this processing at any time with effect for the future for reasons relating to your particular situation.

After the objection has been made, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing is for the establishment, exercise or defence of legal claims.

If personal data is processed for direct marketing purposes, you may object to this processing at any time by notifying us. Following your objection, we will no longer process the data concerned for direct marketing purposes.