Privacy policy

Protecting your data is important to us

1. General information

1.1 What is personal data 
Personal data is information that discloses or may disclose the user's identity. We adhere to the principle of data avoidance. As far as possible, we refrain from collecting personal data.

 

1.2 Handling of personal data 
Personal data is used exclusively for establishing the contract, content design, execution or processing of the contractual relationship (Art. 6 (1 b) GDPR).

In addition, personal data will only be processed if we have obtained your consent to do so (Art. 6 (1 a) GDPR) or if the processing of the data is necessary for our legitimate interests and if the assessment shows that there are no overriding interests, fundamental rights or freedoms on your part to the contrary (Art. 6 (1 f) GDPR).

We may use data processors to process your personal data, with whom we have concluded a data processing agreement where necessary, but we will not pass on your personal data to third parties beyond this.

The data will only be passed on to the shipping company commissioned with the delivery for the fulfillment of the contract insofar as this is necessary to deliver ordered goods. In order to process payments, the required payment data will be passed on to the credit institution commissioned with the payment and, if applicable, to the commissioned and selected payment service provider.

Your personal data will be processed in the EU and in countries classified by the EU as safe or appropriate. If personal data is processed in the USA, care is taken to ensure that the services we use are certified under the "Data Privacy Framework".

 

1.3 Usage data 
General technical information is collected when you visit the website. This includes the IP address used, time, duration of the visit, browser type and, if applicable, the originating page. For technical reasons, this usage data is registered in a log file and can be used and stored for the purpose of statistical analysis of this website. This usage data is not linked to your other personal data.

 

1.4 Duration of storage 
We only store your personal data after the end of the purpose for which the data was collected for as long as this is required by law (in particular, tax law).

 


2. Your rights

2.1 Information 
You can request information from us as to whether we process your personal data, and if this is the case, you have the right to access this personal data and the further information specified in Art. 15 GDPR.

 

2.2 Right to rectification 
You have the right to rectify inaccurate personal data concerning you and may request the completion of incomplete personal data in accordance with Art. 16 GDPR.

 

2.3 Right to erasure 
You have the right to obtain from us the erasure of personal data concerning you without undue delay. We are obliged to erase it immediately, in particular, if one of the following reasons applies:

    • Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
    • You withdraw your consent on which the processing of your data was based, and there is no other legal basis for the processing.
    • Your data has been processed unlawfully.

The right to erasure does not apply if your personal data is required to assert, exercise or defend our legal claims.

 

2.4 Right to restriction of processing 
You have the right to demand that we restrict the processing of your personal data if

    • you dispute the accuracy of the data, and we, therefore, check the accuracy,
    • the processing is unlawful, and you oppose the erasure and request the restriction of use instead,
    • we no longer need the data, but you need it to assert, exercise or defend legal claims,
    • you have objected to the processing of your data, and it is not yet certain whether our legitimate reasons outweigh your reasons.

 

2.5 Right to data portability 
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and you have the right to transmit those data to another controller without hindrance from us, where the processing is based on consent or a contract and the processing is carried out by automated means.

 

2.6 Right of revocation 
If the processing of your personal data is based on consent, you have the right to revoke this consent at any time.

 

2.7 General information and right to lodge a complaint 
Exercising your above rights is generally free of charge for you. In the event of complaints, you have the right to contact the supervisory authority responsible for us, the state data protection officer.

 


3. Data security

3.1 Data security 
All data on our website is protected by technical and organizational measures against loss, destruction, access, modification and dissemination.

 

3.2 Sessions and cookies 
To operate the website, we use cookies or server-side sessions in which data can be stored. We only use cookies or server-side sessions that are technically necessary for the operation of this website (e.g., spam protection for the contact form, shopping cart function) and for which the consideration shows that there are no overriding interests on your part (Art. 6 (1 f) GDPR).

 


4. Newsletter

If you subscribe to our newsletter, we will use the data required for this or separately provided by you to regularly send you our e-mail newsletter based on your consent in accordance with Art. 6 (1 a) GDPR.
You can unsubscribe from the newsletter at any time, either by sending us a message using the contact options provided in the legal notice or by clicking on the link provided for this purpose in the newsletter. After unsubscribing, we will delete your e-mail address unless you have expressly consented to further use of your data, or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

 


5. Presence on social media platforms

We use the following social media platforms for company presentation and communication (explicit reference is made to the data protection declarations and opt-out options below).

   

Facebook (Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland)
Privacy policy: https://www.facebook.com/about/privacy/
Opt-Out: https://www.youronlinechoices.com

 

Instagram (Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland)

Privacy policy and opt-out: https://instagram.com/about/legal/privacy/

 

These social media platforms may process personal data outside the EU; in this respect, we refer you to the above data protection declarations of the social media platforms.

 

The respective social media platforms may be able to create user profiles from your usage behavior and the resulting interests and actions on your part and store cookies on your computer in which your usage behavior is stored. If you have an account on the respective social media platform and are logged in, your usage behavior can even be stored independently of your device. Your usage profile can be used, for example, to place advertisements that presumably correspond to your interests.

 

We process the personal data exclusively for communication with you via the social media platform you have selected and to optimize our online presence and ensure that no interests on your part are affected that outweigh this legitimate interest on our part (Art. 6 (1 f) GDPR). If you have already given the respective operator of the social media platform effective consent to the corresponding data processing, your personal data will also be processed based on this consent (Art. 6 (1 a) GDPR).

 


6. Third-party services

6.1 Social media links 
We have our own social media pages with third-party providers that can be reached via links from this website. Using the links will take you to the respective websites of the third-party providers (e.g., Facebook, Instagram). To avoid unnecessary data transfer, we recommend that you log out of the respective third-party provider before using a link so that usage profiles cannot be created by the third-party provider simply by using the link.

 

6.2 Use of YouTube 
This website and the integrated offers may contain so-called embeddings of videos on YouTube. These enable the connection to YouTube and the videos stored there. YouTube is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). YouTube is only used with your consent (Art. 6 (1 a) GDPR). The purpose and scope of data collection and data use by Google, as well as your rights and settings options for protection as a YouTube customer, can be found in YouTube's privacy policy. You can find this at: https://www.youtube.com/t/privacy/.

 

6.3 Main Street Sites
We use the Main Street Sites service of Symmetric Technologies, Inc., 275 Grove St, Suite 2-400, Newton, MA 024661, USA. Main Street Sites is an online service that enables online registrations, online invoicing and payments, class management and website hosting, including for music schools.

 

You will be automatically connected to the Main Street Sites service if you click the corresponding booking button ("Anmelden/Register", "Warteliste/Waitlist" or "Schedule"). 

 

The following personal data is regularly transmitted to Symmetric Technologies, Inc. as part of the booking process:

    • Your e-mail address
    • Your name and the names and dates of birth of the registered children
    • Your address and phone number
    • Details of the course you have booked
    • Your IP address

 

Data processing and/or data transfer also takes place outside the European Union, Andorra, Argentina, Canada (only for commercial organizations), Faroe Islands, Guernsey, Israel, Isle of Man, Jersey, New Zealand, Switzerland, Uruguay, Japan and the United Kingdom. However, only for these countries, with the exception of the countries of the European Union which are classified as safe anyway, there is an adequacy decision (Art. 45 GDPR) of the European Commission regarding data transfer. Therefore, the transfer of data to other countries is at least not expressly permitted. 

 

Although there is also an adequacy decision for the USA, the EU-US Data Privacy Framework (DPF, https://eur-lex.europa.eu/eli/dec_impl/2023/1795/oj), does not classify every data transfer to the USA as harmless, but only the transfer of data to US companies or organizations that have a valid DPF certification. This is not the case with Symmetric Technologies, Inc.

 

In this respect, we would like to draw your attention to the fact that Symmetric Technologies, Inc. is considered to be a company with an inadequate level of data protection according to EU standards. In particular, there is a risk that US authorities may process your data for control and monitoring purposes, possibly without legal recourse.

 

Therefore, the Main Street Sites service is used exclusively based on your consent (Art. 6 (1 a) GDPR). You can view the privacy policy of Symmetric Technologies, Inc. here: https://www.mainstreetsites.com/privacy/

 

6.4 Use of Google reCAPTCHA 
This website uses the reCAPTCHA service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The function is used to distinguish whether the input is made by a human or abusively by automated machine processing. The query includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and used there. However, your IP address will be shortened beforehand by Google within member states of the European Union or other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of reCaptcha will not be merged with other Google data. The processing thus serves to prevent misuse of this website and ultimately takes place anonymously. The use of reCAPTCHA only takes place with your consent (Art. 6 (1 a) GDPR). Google's privacy policy applies, which you can find at https://policies.google.com/privacy?hl=de.

 

6.5 Dropbox 
We also use the Dropbox service provided by Dropbox, Inc., 1800 Owens St Ste 200, CA 94158, San Francisco, USA, an online storage service for files, photos and videos. However, because we are based in the EU, our contractual partner is Dropbox International Unlimited Company, One Park Place, Floor 5, Upper Hatch Street, Dublin 2.

 

Dropbox also processes your data in the USA. However, Dropbox, Inc. is certified under the EU-US Data Privacy Framework, which ensures the correct and secure transfer of personal data from EU citizens to the USA.

 

The data processing takes place based on your consent (Art. 6 (1 a) GDPR). You can withdraw this consent at any time. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

 

In addition, we have concluded a Data Processing Agreement with Dropbox, Inc. using the EU standard contractual clauses for the transfer of personal data to third countries, which you can view here: https://assets.dropbox.com/documents/en/legal/dfb-data-processing-agreement.pdf

 

You can view Dropbox's privacy policy here: https://www.dropbox.com/privacy.

 

6.6 Google Web Fonts 
We use so-called web fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") to display a uniform font on our website. These are automatically stored in your browser cache when you access one of our pages in order to enable the desired display. If your browser does not support the web fonts used, a standard font from your computer may be used. The use of Google Web Fonts is based on your consent (Art. 6 (1 a) GDPR). 

 

You can view Google's privacy policy here: https://www.google.com/policies/privacy/ 

 

You can find more information about Google Web Fonts at https://developers.google.com/fonts/faq


7. Application procedure 

You can apply to us electronically, by telephone or in writing. We will, of course, only use your details to process your application and will not pass them on to third parties. Please note that if you send your application by e-mail, unencrypted e-mails will not be transmitted with access protection. Your personal data will be deleted immediately after completion of the application process or after a maximum of 6 months unless you have expressly given us your consent to store your data for longer or a contract has been concluded. The legal basis is Art. 6 (1 a) GDPR, Art. 6 (1 b) GDPR or Art. 6 (1 f) GDPR and § 26 German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG).


8. Contacting us

You are welcome to use the following contact options to contact us regarding data protection.

 

Controller within the meaning of the GDPR:

Antje Zumbansen 
Blücherstr. 65 b 
10961 Berlin
Germany

E-mail: info@littlemusicmakers.de 
Phone: +49 (0)30 - 29030959