Imprint

Andreas Weisz | Lukas Poellauer

info@sonondomusic.com

 

Privacy

Privacy Statement

1. Data Protection at a Glance
General Information
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data includes all data that can personally identify you. Detailed information on data protection can be found in our privacy statement listed below this text.

Data Collection on This Website
Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. Their contact details can be found in the section “Information on the Responsible Party” in this privacy statement.

How do we collect your data?
Your data is collected in part when you provide it to us. This could include, for example, data you enter into a contact form.

Other data is automatically collected by our IT systems when you visit the website, either with your consent or as part of its operation. This includes primarily technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you access this website.

What do we use your data for?
Part of the data is collected to ensure the website operates correctly. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?
You have the right to receive information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have the right to request correction or deletion of this data. If you have given consent for data processing, you can withdraw this consent at any time for the future. Furthermore, you have the right to request the restriction of the processing of your personal data under certain circumstances. Additionally, you have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time regarding these rights or for further questions on data protection.

Analysis Tools and Tools from Third Parties
Your surfing behavior may be statistically analyzed when you visit this website. This is primarily done using analysis programs.

Detailed information about these analysis programs can be found in the following privacy statement.

2. Hosting
We host the content of our website with the following provider:

All-Inkl
The provider is ALL-INKL.COM – Neue Medien Münnich, Inh. René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany (hereinafter referred to as All-Inkl). Details can be found in the privacy statement of All-Inkl: https://all-inkl.com/datenschutzinformationen/.

The use of All-Inkl is based on Article 6(1)(f) GDPR. We have a legitimate interest in ensuring the most reliable presentation of our website. If consent has been obtained, processing will be carried out exclusively based on Article 6(1)(a) GDPR and Section 25(1) TTDSG, provided the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) under the TTDSG. Consent can be withdrawn at any time.

Data Processing Agreement
We have entered into a data processing agreement (DPA) for the use of the aforementioned service. This is a legally required contract to ensure that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

3. General Information and Mandatory Notices
Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with legal data protection regulations and this privacy statement.

When you use this website, various personal data are collected. Personal data is any data by which you can be personally identified. This privacy statement explains what data we collect and how we use it. It also explains how and for what purpose this happens.

We point out that data transmission on the internet (e.g., communication via email) may have security gaps. Complete protection of data from access by third parties is not possible.

Information on the Responsible Party
The responsible party for data processing on this website are Sonondo
Email: info@sonondomusic.com

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).

Retention Period
Unless a specific retention period is stated within this privacy statement, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent for data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., retention periods under tax or commercial law); in the latter case, the data will be deleted once these reasons no longer apply.

General Information on the Legal Bases of Data Processing on This Website
If you have consented to data processing, we process your personal data based on Article 6(1)(a) GDPR or Article 9(2)(a) GDPR if special categories of data are processed under Article 9(1) GDPR. If explicit consent is given for the transfer of personal data to third countries, data processing is also carried out based on Article 49(1)(a) GDPR. If the storage of cookies or access to information on your device (e.g., via device fingerprinting) has been consented to, processing is additionally carried out based on Section 25(1) TTDSG. Consent can be withdrawn at any time. If your data is necessary for contract performance or pre-contractual measures, we process your data based on Article 6(1)(b) GDPR. Furthermore, we process your data if necessary to fulfill a legal obligation based on Article 6(1)(c) GDPR. Data processing may also be based on our legitimate interest under Article 6(1)(f) GDPR. Specific legal bases for each individual case are outlined in this privacy statement.

Recipients of Personal Data
In the course of our business activities, we work with various external parties. This may require the transfer of personal data to these parties. We only share personal data with external parties if it is necessary for contract fulfillment, if we are legally obliged to do so (e.g., disclosure to tax authorities), if we have a legitimate interest under Article 6(1)(f) GDPR in sharing the data, or if another legal basis permits data sharing. When engaging processors, we share personal data only based on a valid data processing agreement. In cases of joint processing, a joint processing agreement is concluded.

Withdrawal of Consent for Data Processing
Many data processing operations are only possible with your explicit consent. You can revoke any previously granted consent at any time. The legality of the data processing conducted up to the point of revocation remains unaffected by the revocation.

Right to Object to Data Collection in Special Cases and to Direct Advertising (Article 21 GDPR)
IF DATA PROCESSING IS BASED ON ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS FOR PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING SERVES TO ESTABLISH, EXERCISE, OR DEFEND LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING, INSOFAR AS IT IS ASSOCIATED WITH SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ARTICLE 21(2) GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of GDPR violations, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, workplace, or where the alleged infringement occurred. This right is without prejudice to any other administrative or judicial remedies.

Right to Data Portability
You have the right to have data that we process automatically based on your consent or in the performance of a contract delivered to yourself or a third party in a commonly used, machine-readable format. If you request the direct transfer of data to another controller, this will only take place if it is technically feasible.

Access, Rectification, and Deletion
Within the scope of applicable legal provisions, you have the right to access your stored personal data, its origin, recipients, and the purpose of the data processing at any time free of charge. You may also have the right to rectification or deletion of this data. For further information on personal data, you can contact us at any time.

Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data. To do so, you can contact us at any time. The right to restriction of processing applies in the following cases:

  • If you contest the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of processing of your personal data.
  • If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
  • If we no longer need your personal data but you need it to establish, exercise, or defend legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
  • If you have objected pursuant to Article 21(1) GDPR, a balance must be struck between your interests and ours. As long as it is not clear whose interests prevail, you have the right to request the restriction of processing of your personal data.

If you have restricted the processing of your personal data, such data may only be processed (apart from being stored) with your consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.

SSL or TLS Encryption
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the website operator. You can recognize an encrypted connection by the address bar of the browser changing from “http://” to “https://” and by the padlock symbol in your browser’s address bar.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Objection to Promotional Emails
We hereby object to the use of contact data published in the context of the legal notice obligation for sending unsolicited advertising and information materials. The operators of this website expressly reserve the right to take legal action in the event of unsolicited advertising information, such as spam emails.

4. Data Collection on This Website

Cookies
Our websites use so-called “cookies.” Cookies are small data packets that do not cause any damage to your device. They are either temporarily stored for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted after your visit. Persistent cookies remain stored on your device until you delete them or your web browser automatically removes them.

Cookies can be set by us (first-party cookies) or by third-party companies (so-called third-party cookies). Third-party cookies allow the integration of certain services from third-party companies within websites (e.g., cookies for handling payment services).

Cookies serve various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g., the shopping cart function or video displays). Other cookies may be used to evaluate user behavior or for advertising purposes.

Necessary cookies are stored based on Article 6(1)(f) GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of its services. If consent to the storage of cookies has been requested, the processing is carried out exclusively based on this consent (Article 6(1)(a) GDPR and § 25(1) TTDSG); the consent can be revoked at any time.

You can configure your browser to inform you about the use of cookies and to allow cookies only on a case-by-case basis, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are disabled, the functionality of this website may be limited.

Detailed information about the cookies and services used on this website can be found in this privacy policy.

Server Log Files

The provider of these pages automatically collects and stores information in what are known as server log files, which your browser automatically transmits to us. These include:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address

This data is not merged with other data sources.

The collection of this data is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of the website; to this end, server log files must be collected.

Contact Form

If you submit inquiries to us via the contact form, your details from the inquiry form, including the contact details you provide, will be stored by us for the purpose of processing the inquiry and for follow-up questions. We do not share this data without your consent.

The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries directed to us (Article 6(1)(f) GDPR) or your consent (Article 6(1)(a) GDPR) if this has been requested. Consent can be revoked at any time.

The data you enter into the contact form will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your request has been fully processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Inquiry by Email, Phone, or Fax

If you contact us by email, phone, or fax, your inquiry, including all resulting personal data (e.g., name and inquiry), will be stored and processed by us for the purpose of handling your request. We do not share this data without your consent.

The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries directed to us (Article 6(1)(f) GDPR) or your consent (Article 6(1)(a) GDPR), if requested. Consent can be revoked at any time.

The data you send us via contact inquiries will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your request has been fully processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

Social Media

Instagram

Functions of the Instagram service are integrated into this website. These functions are offered by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

When the social media element is active, a direct connection between your device and the Instagram server is established. Instagram thereby receives information about your visit to this website.

If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to this website with your user account. We would like to point out that, as the provider of these pages, we have no knowledge of the content of the transmitted data or how it is used by Instagram.

The use of this service is based on your consent under Article 6(1)(a) GDPR and Section 25(1) of the TTDSG. Consent can be revoked at any time.

To the extent that personal data is collected on our website using the tool described here and forwarded to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Article 26 GDPR). Joint responsibility is limited exclusively to the collection of the data and its transmission to Facebook or Instagram. Processing by Facebook or Instagram that occurs after the transfer is not part of joint responsibility.

Further details on this responsibility agreement can be found at: https://www.facebook.com/legal/controller_addendum.

The transfer of data to the USA is based on the EU Commission’s standard contractual clauses. Details can be found at:

More information can be found in Instagram’s Privacy Policy: https://privacycenter.instagram.com/policy/.

Meta is certified under the “EU-US Data Privacy Framework” (DPF). More information is available here:
https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active.

Newsletter

Newsletter Data

If you would like to receive the newsletter offered on the website, we require an email address as well as information that allows us to verify that you are the owner of the specified email address and consent to receiving the newsletter. Further data is not collected or only on a voluntary basis. We use this data exclusively for sending the requested information and do not share it with third parties.

The processing of the data entered into the newsletter registration form is based solely on your consent (Article 6(1)(a) GDPR). You can revoke your consent to the storage of data, the email address, and their use for sending the newsletter at any time, for example, via the “unsubscribe” link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

Data stored with us for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after cancellation. Data stored for other purposes remains unaffected.

After you unsubscribe from the newsletter, your email address may be stored in a blacklist to prevent future mailings. Data from the blacklist is only used for this purpose and not merged with other data. This serves both your interest and our interest in compliance with legal requirements for newsletter distribution (legitimate interest under Article 6(1)(f) GDPR). Blacklist storage is indefinite unless you object.