1. Definitions
The data protection declaration of the Notenversand Kurt Maas GmbH &
Co. KG is based on the terms used by the European legislator for the
adoption of the General Data Protection Regulation (GDPR). Our data
protection declaration should be legible and understandable for the
general public, as well as our customers and business partners. To
ensure this, we would like to first explain the terminology used.
The data protection declaration of the Notenversand Kurt Maas GmbH &
Co. KG is based on the terms used by the European legislator for the
adoption of the General Data Protection Regulation (GDPR). Our data
protection declaration should be legible and understandable for the
general public, as well as our customers and business partners. To
ensure this, we would like to first explain the terminology used.
a) Personal data
Personal
data means any information relating to an identified or identifiable
natural person (“data subject”). An identifiable natural person is one
who can be identified, directly or indirectly, in particular by
reference to an identifier such as a name, an identification number,
location data, an online identifier or to one or more factors specific
to the physical, physiological, genetic, mental, economic, cultural or
social identity of that natural person.
b) Data subject
Data
subject is any identified or identifiable natural person, whose
personal data is processed by the controller responsible for the
processing.
c) Processing
Processing
is any operation or set of operations which is performed on personal
data or on sets of personal data, whether or not by automated means,
such as collection, recording, organisation, structuring, storage,
adaptation or alteration, retrieval, consultation, use, disclosure by
transmission, dissemination or otherwise making available, alignment or
combination, restriction, erasure or destruction.
d) Restriction of processing
Restriction of processing is the marking of stored personal data with the aim of limiting their
processing in the future.
e) Profiling
Profiling
means any form of automated processing of personal data consisting of
the use of personal data to evaluate certain personal aspects relating
to a natural person, in particular to analyse or predict aspects
concerning that natural person's performance at work, economic
situation, health, personal preferences, interests, reliability,
behaviour, location or movements.
f) Pseudonymisation
Pseudonymisation
is the processing of personal data in such a manner that the personal
data can no longer be attributed to a specific data subject without the
use of additional information, provided that such additional information
is kept separately and is subject to technical and organisational
measures to ensure that the personal data are not attributed to an
identified or identifiable natural person.
g) Controller or controller responsible for the processing
Controller
or controller responsible for the processing is the natural or legal
person, public authority, agency or other body which, alone or jointly
with others, determines the purposes and means of the processing of
personal data; where the purposes and means of such processing are
determined by Union or Member State law, the controller or the specific
criteria for its nomination may be provided for by Union or Member State
law.
h) Processor
Processor
is a natural or legal person, public authority, agency or other body
which processes personal data on behalf of the controller.
i) Recipient
Recipient
is a natural or legal person, public authority, agency or another body,
to which the personal data are disclosed, whether a third party or not.
However, public authorities which may receive personal data in the
framework of a particular inquiry in accordance with Union or Member
State law shall not be regarded as recipients; the processing of those
data by those public authorities shall be in compliance with the
applicable data protection rules according to the purposes of the
processing.
j) Third party
Third
party is a natural or legal person, public authority, agency or body
other than the data subject, controller, processor and persons who,
under the direct authority of the controller or processor, are
authorised to process personal data.
k) Consent
Consent
of the data subject is any freely given, specific, informed and
unambiguous indication of the data subject's wishes by which he or she,
by a statement or by a clear affirmative action, signifies agreement to
the processing of personal data relating to him or her.
2. Name and Address of the controller
Controller
for the purposes of the General Data Protection Regulation (GDPR),
other data protection laws applicable in Member states of the European
Union and other provisions related to data protection is:
Notenversand Kurt Maas GmbH & Co. KG
Eugen-Friedl-Str. 3a
D-82340 Feldafing
Germany
Phone: +49 8157 997950
Email:
[email protected]
Website:
www.all-sheetmusic.com
3. Use of cookies and other technologies for web analysis and advertising purposes
Insofar as you have given your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR, we
use the following cookies and other third-party technologies on our website. After the purpose
and end of the use of the respective technology by us, the data collected in this context will
be deleted. You can revoke your consent at any time with effect for the future. You can find
more information about your cancellation options in the section "Cookies and other
technologies". For more information, including the basis of how we work with each vendor, see
each technology. If you have any questions about the providers and the basis of our cooperation
with them, please use the contact option described in this data protection declaration.
3.1 Use of Google services
We use the following technologies from Google Ireland Ltd., Gordon House, Barrow Street, Dublin
4, Ireland (“Google”). The information automatically collected by Google technologies about your
use of our website is usually transferred to a server of Google LLC, 1600 Amphitheater Parkway
Mountain View, CA 94043, USA and stored there. There is no adequacy decision by the European
Commission for the USA. Our cooperation is based on standard data protection clauses of the
European Commission. If your IP address is collected using Google technologies, it will be
shortened by activating IP anonymization before it is saved on Google's servers. The full IP
address is only transmitted to a Google server and shortened there in exceptional cases. Unless
otherwise specified for the individual technologies, the data processing takes place on the
basis of an agreement concluded for the respective technology between jointly responsible
persons in accordance with Art. 26 GDPR. You can find more information about data processing by
Google in Google's data protection information.
Google Analytics
For the purpose of website analysis, Google Analytics data (IP address, time of visit, device
and browser information and information about your use of our website) are automatically
collected and stored, from which usage profiles are created using pseudonyms. Cookies can be
used. Your IP address is generally not merged with other Google data. The data processing takes
place on the basis of an agreement on order processing by Google.
For the purpose of optimized marketing of our website, we have activated the data release
settings for "Google products and services". In this way, Google can access the data collected
and processed by Google Analytics and then use it to improve Google services. The data release
to Google within the scope of these data release settings is based on an additional agreement
between those responsible. We have no influence on the subsequent data processing by Google.
We also use the Google Analytics extension function, Google Optimize, to create and carry out
tests.
For web analysis, the extension function of Google Analytics Google Signals enables so-called
"cross-device tracking". As long as your internet-enabled devices are linked to your Google
account and you have activated the setting "personalized advertising" in your Google account,
Google can generate reports on your usage behavior (in particular the number of users across all
devices), even if you change your device. We do not process personal data in this respect; we
only receive statistics based on Google Signals.
For web analysis and advertising purposes, the extension function of Google Analytics, the
so-called DoubleClick cookie, enables your browser to be recognized when you visit other
websites. Google will use this information to compile reports on website activity and to provide
other services related to website activity.
Google Ads
For advertising purposes in the Google search results and on the websites of third parties, the
so-called Google remarketing cookie is set when you visit our website, which is automatically
collected and processed by data (IP address, time of visit, device and browser information and
information for your use of our website) and by means of a pseudonymous CookieID and based on
the pages you have visited, enables interest-based advertising. Any further data processing will
only take place if you have activated the “personalized advertising” setting in your Google
account. In this case, if you are logged in to Google while visiting our website, Google will
use your data together with Google Analytics data to create and define target group lists for
cross-device remarketing.
For website analysis and event tracking, we use Google Ads Conversion Tracking to measure your
subsequent usage behavior when you have reached our website via a Google Ads advertisement. For
this purpose, cookies can be used and data (IP address, time of visit, device and browser
information as well as information about your use of our website based on events specified by us
such as visiting a website or newsletter registration) are recorded, from which pseudonyms are
used Usage profiles are created.
Google Maps
For the visual representation of geographical information, Google Maps collects data about your
use of the Maps functions, in particular the IP address and location data, transmits it to
Google and then processes it by Google. We have no influence on this subsequent data processing.
Google reCAPTCHA
To protect against misuse of our web forms and against spam by automated software (so-called
bots), Google reCAPTCHA collects data (IP address, time of visit, browser information and
information about your use of our website) and uses a so-called JavaScript and cookies analyze
your use of our website. In addition, other cookies stored by Google services in your browser
are evaluated. Reading out or saving of personal data from the input fields of the respective
form does not take place.
Google Fonts
For the uniform presentation of the content on our website, the script code “Google Fonts”
collects data (IP address, time of visit, device and browser information), transmits it to
Google and then processes it by Google. We have no influence on this subsequent data processing.
YouTube video plugin
To integrate third-party content, data (IP address, time of visit, device and browser
information) are collected via the YouTube video plug-in in the extended data protection mode we
use, transmitted to Google and then processed by Google, only if you have a Play video.
3.2 Use of Microsoft services for web analysis and advertising purposes
We use the following technologies from Microsoft Ireland Operations Ltd., One Microsoft Place,
South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland ("Microsoft"). The data
processing takes place on the basis of an agreement between jointly responsible persons in
accordance with Art. 26 GDPR. The information automatically collected by Microsoft technologies
about your use of our website is usually transferred to a server of Microsoft Corporation, One
Microsoft Way, Redmond, WA 98052-6399, USA and stored there. There is no adequacy decision by
the European Commission for the USA. Our cooperation is based on standard data protection
clauses of the European Commission. You can find more information about data processing by
Microsoft in Microsoft's data protection information.
Microsoft Advertising
For advertising purposes in the Bing, Yahoo and MSN search results as well as on the websites of
third parties, the so-called Microsoft Advertising Remarketing Cookie is set when you visit our
website, which is automatically generated by the collection and processing of data (IP address,
time of visit, device and Browser information as well as information about your use of our
website) and by means of a pseudonymous CookieID and based on the pages you visit enables
interest-based advertising.
For website analysis and event tracking, we use Microsoft Advertising Universal Event Tracking
(UET) to measure your subsequent usage behavior when you have reached our website via an
advertisement from Microsoft Advertising. For this purpose, cookies can be used and data (IP
address, time of visit, device and browser information as well as information about your use of
our website based on events specified by us such as visiting a website or newsletter
registration) are recorded, from which pseudonyms are used Usage profiles are created. If your
internet-enabled devices are linked to your Microsoft account and you have not deactivated the
"Interest-based advertising" setting in your Microsoft account, Microsoft can generate reports
on usage behavior (in particular the number of users across all devices), even if you change
your device . "Cross-Device Tracking". We do not process personal data in this respect, we only
receive statistics based on Microsoft UET.
4. Social media
Our online presence on Facebook, Twitter, Youtube
Insofar as you have given your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR to the
respective social media operator, when you visit our online presence on the social media
mentioned above, your data is automatically collected and stored for market research and
advertising purposes, from which usage profiles are created using pseudonyms. These can be used
to e.g. To place advertisements inside and outside the platforms that presumably correspond to
your interests. Cookies are usually used for this. The detailed information on the processing
and use of the data by the respective social media operator as well as a contact option and your
related rights and setting options to protect your privacy can be found in the data protection
information of the providers linked below. If you still need help in this regard, you can
contact us.
Facebook is an offer from Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland
(“Facebook Ireland”). The information automatically collected by Facebook Ireland about your use
of our online presence on Facebook is usually sent to a Facebook server , Inc., 1601 Willow
Road, Menlo Park, California 94025, USA and stored there. There is no adequacy decision by the
European Commission for the USA. Our cooperation is based on standard data protection clauses of
the European Commission. Data processing when visiting a Facebook fan page is based on an
agreement between jointly responsible parties in accordance with Art. 26 GDPR. Further
information (information on Insights data) can be found here.
Twitter is an offer from Twitter International Company, One Cumberland Place, Fenian Street,
Dublin 2, D02 AX07, Ireland (“Twitter”). The information automatically collected by Twitter
about your use of our online presence on Twitter is usually transmitted to a server operated by
Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA and stored there.
There is no adequacy decision by the European Commission for the USA. Our cooperation is based
on standard data protection clauses of the European Commission.
YouTube is an offer from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
(“Google”). The information automatically collected by Google about your use of our online
presence on YouTube is usually transferred to a server operated by Google LLC, 1600 Amphitheater
Parkway Mountain View, CA 94043, USA and stored there. There is no adequacy decision by the
European Commission for the USA. Our cooperation is based on standard data protection clauses of
the European Commission.
5. Collection of general data and information
The website of the Notenversand Kurt Maas GmbH &
Co. KG collects a series of general data and information when a data
subject or automated system calls up the website. This general data and
information are stored in the server log files. Collected may be (1) the
browser types and versions used, (2) the operating system used by the
accessing system, (3) the website from which an accessing system reaches
our website (so-called referrers), (4) the sub-websites, (5) the date
and time of access to the Internet site, (6) an Internet protocol
address (IP address), (7) the Internet service provider of the accessing
system, and (8) any other similar data and information that may be used
in the event of attacks on our information technology systems.
When using these general data and information, the Notenversand Kurt Maas GmbH &
Co. KG does not draw any conclusions about the data subject. Rather,
this information is needed to (1) deliver the content of our website
correctly, (2) optimize the content of our website as well as its
advertisement, (3) ensure the long-term viability of our information
technology systems and website technology, and (4) provide law
enforcement authorities with the information necessary for criminal
prosecution in case of a cyber-attack. Therefore, the Notenversand Kurt
Maas GmbH & Co. KG analyzes
anonymously collected data and information statistically, with the aim
of increasing the data protection and data security of our enterprise,
and to ensure an optimal level of protection for the personal data we
process. The anonymous data of the server log files are stored
separately from all personal data provided by a data subject.
6. Registration on our website
The
data subject has the possibility to register on the website of the
controller with the indication of personal data. Which personal data are
transmitted to the controller is determined by the respective input
mask used for the registration. The personal data entered by the data
subject are collected and stored exclusively for internal use by the
controller, and for his own purposes. The controller may request
transfer to one or more processors (e.g. a parcel service) that also
uses personal data for an internal purpose which is attributable to the
controller.
By
registering on the website of the controller, the IP address—assigned
by the Internet service provider (ISP) and used by the data
subject—date, and time of the registration are also stored. The storage
of this data takes place against the background that this is the only
way to prevent the misuse of our services, and, if necessary, to make it
possible to investigate committed offenses. Insofar, the storage of
this data is necessary to secure the controller. This data is not passed
on to third parties unless there is a statutory obligation to pass on
the data, or if the transfer serves the aim of criminal prosecution.
The
registration of the data subject, with the voluntary indication of
personal data, is intended to enable the controller to offer the data
subject contents or services that may only be offered to registered
users due to the nature of the matter in question. Registered persons
are free to change the personal data specified during the registration
at any time, or to have them completely deleted from the data stock of
the controller.
The
data controller shall, at any time, provide information upon request to
each data subject as to what personal data are stored about the data
subject. In addition, the data controller shall correct or erase
personal data at the request or indication of the data subject, insofar
as there are no statutory storage obligations. The entirety of the
controller’s employees are available to the data subject in this respect
as contact persons.
