In general, our website may be used anonymously. Providing personal data is purely voluntary and you will always be informed if and for what purpose we want to store your data. If you make use of other services, the processing of personal data may be necessary or even mandatory. Personal data are data that enable us to identify you personally and/or to contact you, such as your name, address or e-mail address.

We evaluate your visit to our website statistically with Google Analytics, to which you can object, see under “Google Analytics”.

What Data We Do (Not) Process, For What Purpose, For How Long And On What Legal Basis

Anonymous Use Of Our Website

You may use our website anonymously. When you visit our website, your web browser tells our web server your IP address so that communication is possible. Your IP address may be used to identify you. However, we do not store your IP address. You remain completely anonymous to us when visiting our website.

Logging And Evaluation In Case Of Attacks

Error messages – usually caused by attack attempts – are recorded and evaluated for reasons of security. Only the following data that may allow identification are used with respect to the recording of error messages: Your IP address, date and time, exact name (URL) of the requested data file(s), HTTP status code, volume of data transferred, referrer (website from which the file was requested), browser identification string that is sent from your browser (User Agent String). Such data shall be deleted after seven days if they are no longer useful (possibly for evidence).

The legal basis for data processing is Art. 6 para. 1 subpara. 1 letter f GDPR. The legitimate interests in processing on the basis of Art. 6 para. 1 para. 1 letter f GDPR are ensuring of the functionality and security of our website as well as defence against attacks and other abuses.

Google Analytics

We use Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). For more information on how Google uses data when you use websites or apps provided by Google’s partners, click here: https://policies.google.com/technologies/partner-sites?hl=en

Google Analytics uses “cookies”, small text files that are stored in your web browser and that permit to analyse how you use our website. The information generated by the cookie regarding your use of our website is normally transferred to a Google server in the USA, and is stored there. As the IP anonymize function is activated on our website, your IP address will, within Member States of the European Union or other contracting states of the Agreement on the European Economic Area, first be shortened by Google. Only in exceptional cases will Google transfer the full IP address to a Google server in the USA, and will shorten it there. On behalf of us, Google will use this information in order to analyse your usage of our website, to compile reports on website activities, and to provide further services to us relating to the usage of the website and the internet. The IP address transferred by your browser within the framework of Google Analytics will not be combined by Google with other data.

You can prevent the storage of cookies by setting your browser software, however, in such case, you may possibly not be able to fully use all features on our website. Furthermore, you can prevent collection by Google of the data generated by the cookie and relating to your use of our website (including your IP address), as well as processing of these data by Google, by downloading and installing the browser plug-in provided under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

The legal basis for data processing is Art. 6 para. 1 subpara. 1 letter f GDPR. The legitimate interests in processing on the basis of Art. 6 para. 1 para. 1 letter f GDPR are our interest in the analysis, optimization and economical operation of our website and of our marketing and a better promotion of the sale of our products and services.

Google is certified under the Privacy Shield and thus offers an adequate level of data protection as decided by the EU Commission in an adequacy decision:
https://www.privacyshield.gov/participant?id=a2zt00000000001L5AAI&status=Active

Data Processing Upon Contact

If you call us or send us a message, for example via the contact form or by e-mail, we need your e-mail address, your postal address or a telephone number if you want us to reply to you. You may also use a pseudonym instead of your name. We will use this data as well as data and time of your contact exclusively to handle your request. Your data will not be passed on to third parties but only internally to the department responsible for your particular request. We will delete your data as soon as it is no longer needed for this purpose, i.e. usually three months after the last contact with you. If you have any further questions, please contact us again within three months. The legal basis for the data processing is Art. 6 para. 1 subpara. 1 letters b and f GDPR. The legitimate interest in processing on the basis of Art. 6 para. 1 subpara. 1 letter f GDPR is to fulfil your request.

Exceptions: We are required to retain business and commercial letters and other tax-relevant documents in order to fulfil our commercial and tax law archiving obligations; we will delete them by 31 March of the seventh calendar year following their creation, and in the case of booking receipts of the eleventh calendar year following their creation. Our accounting department has access to these data. The legal basis for tax law retention is Art. 6 Para. 1 Para. 1 Letter c GDPR in connection with sections 147 AO, 257 HGB.

If your request is for a special purpose (e.g. ordering, quotation request, newsletter order), only the explanations in the respective section for that special purpose apply to data processing in this context.

Data Processing For Newsletter Subscription

If you subscribe to one or more of our newsletters, we need your e-mail address, otherwise we cannot send you the newsletter. All other information is voluntary. Your data will not be passed on to third parties, and we use it only for sending our newsletter. You will first receive an email with a link you must click to confirm that you want to receive the newsletter (“Double-Opt-In”). This will prevent others from subscribing to the newsletter in your name. We will analyze which links you click on in order to tailor the newsletter to your specific preferences and when you read the newsletter so that we can send it to you at your favourite time. In addition, we store your registration for the newsletter, your consent to the usage analysis and your confirmation to be able to prove that you have registered and agreed. For the purpose of sending the newsletter and analyzing its use, we will store your data until you revoke your consent or until the newsletter is permanently discontinued; for the purpose of customer service, we will delete your data as soon as you object or by 31 March of the fifth calendar year following your last order or enquiry or expression of interest; for the purpose of proof of consent by 31 March of the fourth calendar year following the last newsletter dispatch.

We use MailChimp as our marketing automation platform. By subscribing to our newsletter, you acknowledge that the information you provide will be transferred to MailChimp for processing in accordance with their Privacy Policy and Terms.

For the processing for the purpose of sending the newsletter and for the usage analysis, the legal basis is Art. 6 para. 1 para. 1 letter a GDPR. For processing for the purpose of proof of consent, the legal basis is Art. 6 para. 1 subpara. 1 letter c in connection with. Art. 5 para. 2 GDPR, Art. 7 para. 1 GDPR and Art. 24 para. 1 GDPR as well as Art. 6 para. 1 para. 1 letter f GDPR. The legitimate interests in processing on the basis of Art. 6 para. 1 para. 1 letter f GDPR are the promotion of the sale of our products and services, corresponding advertising, and the proof of your consent, i.e. the defence against legal claims.

Video Surveillance

Safety-relevant areas of our premises and grounds may be video-monitored. Cameras are installed open. Video-monitored areas are marked with visible signs at least at the entrance. Recordings are made which are deleted after 72 hours unless they are further needed due to an incident. Recordings can only be viewed by employees responsible for corporate security. Every access to the recordings is logged to prevent misuse.

The legal basis for data processing is Art. 6 para. 1 subpara. 1 letter f GDPR. Legitimate interests are the exercise of our domestic authority, the avoidance or prosecution of abusive conduct, the clarification of cases of damage and the establishment or exercise of legal claims or the defence against legal claims. Video recordings will not be used for any other purposes.

Your Rights

You have a right of access, to rectification or erasure, restriction of processing, to object to processing and to data portability under the respective statutory preconditions with regard to the personal data concerning you. In particular, you have the right to object to the processing of your data for advertising purposes at any time without incurring costs other than the transmission costs according to the basic rates of your provider (e.g. the costs of an e-mail = usually none). This applies, for example, if you were our guest and do not want to receive offers for similar stays. If the data processing is based on a consent, you have the right to withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of consent until the withdrawal or of the processing on another legal basis. If you want to exercise these rights, you can simply write to kontakt@blackmores-musikzimmer.de or click on the unsubscribe link in any email to unsubscribe. If we call you, you can of course also tell us directly in the conversation.

Your Right To Object To Processing

To the extent that processing of your personal data is based on Art. 6 para. 1 subpara. 1 lit. e or f GDPR, you have the right to object to processing in accordance with Art. 21 GDPR. If your objection is made for reasons arising from your particular situation, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms of or for the establishment, exercise or defence of legal claims. If your objection is directed against direct marketing, including profiling, insofar as it is connected with such direct marketing, we will no longer process your personal data for these purposes.