Privacy policy

We are pleased that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to inform you at this point which of your personal data we collect when you visit our website and for what purposes it is used. Personal data is individual information about personal or factual circumstances of a specific or identifiable natural person (data subject), e.g. name, address, e-mail addresses, user behaviour. This is data with which we can identify you. In addition, you will also find information on data processing processes outside of this website (e.g. video conferences or newsletters).

Person responsible for data processing

Person responsible for the processing of personal data within the meaning of the EU General Data Protection Regulation (DSGVO)
Herbert WURLITZER
Manufaktur für Holzblasinstrumente GmbH
Rückerstrasse 20
91413 Neustadt a.d. Aisch
Phone: +49 (0) 9161 87 49 54
Email: info@wurlitzerklarinetten.de

General

This privacy statement complies with the legal requirements for transparency in the processing of personal data. This is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address or user behaviour when visiting a website. Information for which we cannot (or can only with disproportionate effort) establish a link to your person, e.g. through anonymisation, is not personal data. The processing of personal data (e.g. collection, retrieval, use, storage or transmission) always requires a legal basis and a defined purpose. Stored personal data are deleted as soon as the purpose of the processing has been achieved and there are no legitimate grounds for further storage of the data. We inform you about the specific storage periods or criteria for storage in the individual processing operations. Irrespective of this, we store your personal data in individual cases for the assertion, exercise or defence of legal claims and if there are statutory retention obligations.

Information according to Art. 13 DSGVO

This information is intended for customers, interested parties, suppliers and employees. We process your personal data for the following purposes:

• To fulfil our contractual obligations to you (Art. 6 para. 1 lit. b DSGVO).
• To carry out pre-contractual obligations (Art. 6 para. 1 lit. b DSGVO).
• To respond to enquiries (Art. 6 para. 1 lit. b DSGVO).
• If you have given us your consent to process your personal data for certain purposes (e.g. to receive our newsletter), the data will be processed on the basis of your consent (Art. 6 para. 1 lit. a DSGVO).
• To fulfil legal obligations to which our company is subject (Art. 6 para. 1 lit. c DSGVO).

To the extent necessary, we also process your data to protect our legitimate interests, in particular to assert legal claims and defend ourselves in legal disputes or to ensure IT security, to consult and exchange data with credit agencies to determine creditworthiness and default risks, for direct advertising and market research insofar as you have not objected to the use of your data for this purpose, for measures to manage business and further develop services and products, for measures to optimise products and sales, for measures to manage risk, to prevent or investigate criminal offences (Art. 6 para. 1 lit. f DSGVO).

Categories of recipients of personal data

Within our company, only those employees have access to the data who absolutely need it to perform their tasks (need-to-know principle). Individual processes and services are carried out by carefully selected service providers who are based within the EEA and who comply with data protection regulations. If service providers commissioned by us receive access to personal data when performing your services, order processing agreements have been concluded with them in accordance with Art. 28 (3) DSGVO.

Duration of data storage

The data processed by us is stored for the duration of the existence and processing of the contractual relationship and in compliance with statutory retention periods. These are, in particular, retention obligations under commercial and tax law in accordance with the German Commercial Code (HGB) and the German Fiscal Code (AO). The regular retention and documentation periods are up to ten years. If there is no contractual relationship, we only process the data for as long as the specific purpose requires.

Your data subject rights

As a data subject, you have the following rights with regard to the personal ##data concerning you vis-à-vis us:

• Right to information about the data we have processed about you.
• Right to rectification or deletion if it is incorrect, out of date or has been unlawfully collected by us.
• Right to restriction of processing if complete deletion is not possible, e.g. because we have to comply with legal retention obligations.
• Right to object to processing if the data processing is based on a balance of interests (the so-called legitimate interest), as described above under "Purpose of processing". This is the case if the processing is not necessary, in particular, for the performance of a contract with you. When exercising your right to object, we ask you to explain the reasons why we should not process your data as we have done. Of course, you can also object to the processing of your personal data for advertising purposes at any time. To do so, send your objection to our address given in the imprint or write us an e-mail to the address given in the imprint.
• Right of revocation if you have given us consent to process your data. You can assert your right of revocation against our company at any time without giving reasons. To do so, please contact us at the address given in the imprint.
• Furthermore, you have the right to complain to a data protection supervisory authority about the processing of your personal data by our company. If you have any questions about data protection, please contact us by e-mail at the address given in the imprint.

Cookies

Cookies are small text files that are sent by us to the browser of your end device when you visit our website and are stored there. As an alternative to the use of cookies, information can also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, however, enable us to carry out various analyses, so that we are able, for example, to recognise the browser you are using when you visit our website again and to transmit various information to us (non-essential cookies). With the help of cookies, we can, among other things, make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your end device. They cannot execute programs or contain viruses. We provide information about the respective services for which we use cookies in the individual processing procedures. You can find detailed information on the cookies used in the cookie settings or in the Consent Manager of this website.

Your rights

Under the conditions of the statutory provisions of the General Data Protection Regulation (DSGVO), you have the following rights as a data subject:

• Information pursuant to Art. 15 DSGVO about the data stored about you in the form of meaningful information about the details of the processing, as well as a copy of your data;
• Correction pursuant to Art. 16 DSGVO of incorrect or incomplete data stored by us;
• Erasure pursuant to Art. 17 DSGVO of the data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
• Restriction of processing pursuant to Art. 18 DSGVO, insofar as the accuracy of the data is disputed, the processing is unlawful, we no longer need the data and you object to their deletion because you need them for the assertion, exercise or defence of legal claims or you have objected to the processing pursuant to Art. 21 DSGVO.
• Data portability pursuant to Art. 20 DSGVO, insofar as you have provided us with personal data within the scope of consent pursuant to Art. 6 (1) a DSGVO or on the basis of a contract pursuant to Art. 6 (1) b DSGVO and these have been processed by us with the aid of automated procedures. You will receive your data in a structured, common and machine-readable format or we will transfer the data directly to another responsible party, insofar as this is technically feasible.
• Objection pursuant to Art. 21 DSGVO against the processing of your personal data, insofar as this is carried out on the basis of Art. 6 Para. 1 lit. e, f DSGVO and there are reasons for this which arise from your particular situation or the objection is directed against direct advertising. The right to object does not exist if overriding compelling legitimate grounds for the processing can be demonstrated or the processing is carried out for the assertion, exercise or defence of legal claims. Where the right to object does not exist for individual processing operations, this is indicated there.
• Revocation pursuant to Art. 7 (3) DSGVO of your granted consent with effect for the future.
• Complaint pursuant to Art. 77 of the GDPR to a supervisory authority if you are of the opinion that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters.

Data processing in detail

In the following, we inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period. An automated decision in individual cases, including profiling, does not take place.

Provision of the website

When you call up and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file: IP address of the requesting computer Date and time of access Name and URL of the accessed file Website from which the access is made (referrer URL) * Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider.

Hosting

Our website is not hosted by ourselves, but by a service provider who processes the aforementioned data on our behalf in accordance with Art. 28 DSGVO for the purpose of providing the website.

Provider
Strato AG
Otto-Ostrowski-Strasse 7
10249 Berlin
(hereinafter referred to as "Strato")

When you visit our website, Strato collects various log files including your IP addresses.

The use of Strato is based on Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in ensuring that our website is presented as reliably as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.

For further information, please refer to Strato's privacy policy:
https://www.strato.de/datenschutz/.

Type and scope of processing

If you send us enquiries (e.g. by contact form, e-mail or telephone), we store all data resulting from this (e.g. name, e-mail address, subject of the enquiry, etc.). We need this data to process your enquiry and to be able to answer follow-up questions. We do not pass on this data without your consent.

Purpose and legal basis

The processing of this data is based on Art. 6 (1) lit. b DSGVO, insofar as your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. Otherwise, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 (1) (f) DSGVO) or on your consent (Art. 6 (1) (a) DSGVO) if you have given it beforehand.

Storage period

The data you entered in the contact form will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after we have completed processing your enquiry). Mandatory legal provisions - in particular retention periods - remain unaffected.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Newsletter

We offer you our newsletter on this website. If you would like to subscribe to it, we need your e-mail address and other data proving that it is your e-mail address and that you agree to receive the newsletter. No other personal data is collected unless you provide it voluntarily (e.g. name, telephone number, place of residence, etc.). When processing the data you provide when registering for the newsletter, we rely exclusively on your consent pursuant to Art. 6 (1) lit. a DS-GVO as the legal basis. You can revoke your consent to the processing and storage of your personal data at any time (e.g. via the "unsubscribe" link in the newsletter) for the future. We store your personal data that you have provided for the purpose of receiving the newsletter until you unsubscribe from the newsletter with us or the dispatch service provider. This does not apply to data that we have stored from you for other purposes. If you unsubscribe from the newsletter mailing list, your email address will be stored by us or the mailing service provider in a blacklist for an indefinite period of time. This is done to prevent future mailings to you. The data from the blacklist will only be used for this purpose and will not be merged with other data. This is not only in your interest, but also in our legitimate interest according to Art. 6 para. 1 lit. f DS-GVO to fulfil our legal obligations when sending newsletters. You can object to the storage if your personal interests outweigh our legitimate interest.

Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass on this data without your consent.
The processing of this data is based on Art. 6 (1) lit. b DSGVO if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6 (1) (f) DSGVO) or on your consent (Art. 6 (1) (a) DSGVO) if this has been requested; consent can be revoked at any time.
The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after we have completed processing your enquiry). Mandatory legal provisions - in particular retention periods - remain unaffected.

Enquiry by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your enquiry including all personal data resulting from it (name, enquiry) will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.
The processing of this data is based on Art. 6 (1) lit. b DSGVO if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of enquiries addressed to us (Art. 6 (1) (f) DSGVO) or on your consent (Art. 6 (1) (a) DSGVO) if this has been requested; consent can be revoked at any time.
The data you send us via contact requests will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

Registration of a customer account

Processing of customer and contract data
We collect, process and use your personal data only insofar as they are necessary for the establishment, amendment or fulfilment of a legal relationship. This is done for the fulfilment of a contract or pre-contractual measures according to Art. 6 para. 1 lit. b DSGVO. The collected customer data is deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

Data transfer upon conclusion of a contract for online shops, dealers and goods dispatch

We only transmit personal data if this is necessary within the framework of the contract processing, for example to shipping service providers or the credit institution commissioned with the payment processing. Any further transmission of data will not take place or will only take place if you have expressly consented to the transmission. The basis for data processing is the fulfilment of a contract or pre-contractual measures in accordance with Art. 6 Para. 1 lit. b DSGVO.

Payment services

We integrate third-party payment services on our website. When you make a purchase from us, your payment data (e.g. name, payment amount, account details, credit card number) are processed by the payment service provider for the purpose of processing the payment; the respective contract and data protection provisions of the respective providers apply. The basis for the data processing is the fulfilment of a contract or pre-contractual measures pursuant to Art. 6 para. 1 lit. b DSGVO as well as in the interest of a payment process that is as smooth, convenient and secure as possible (Art. 6 para. 1 lit. f DSGVO). If you have previously given your consent to data processing, the processing of your data will take place solely on the basis of Art. 6 para. 1 lit. a DS-GVO; the consent can be revoked at any time.

We offer the following payment methods:

CreditPlus

The provider of this payment service is CreditPlus Bank AG, Augustenstraße 7, 70178 Stuttgart (hereinafter "CreditPlus"). For details, please refer to the CreditPlus privacy policy:
https://www.creditplus.de/datenschutz.

PayPal

The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). Data transfer to the USA is based on the standard contractual clauses of the EU Commission.
Details can be found here:
https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full.
Details can be found in PayPal's privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Mastercard

The provider of this payment service is Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium (hereinafter "Mastercard"). Mastercard may transfer data to its parent company in the USA. The data transfer to the USA is based on Mastercard's Binding Corporate Rules. Details can be found here:
https://www.mastercard.de/de-de/datenschutz.html
and
https://www.mastercard.us/content/dam/mccom/global/documents/mastercard-bcrs.pdf.

VISA

The provider of this payment service is Visa Europe Services Inc, London Branch, 1 Sheldon Square, London W2 6TT, United Kingdom (hereinafter "VISA"). The United Kingdom is considered a secure third country under data protection law. This means that the United Kingdom has a level of data protection equivalent to the level of data protection in the European Union. VISA may transfer data to its parent company in the USA. The data transfer to the USA is based on the standard contractual clauses of the EU Commission.
Details can be found here:
https://www.visa.de/nutzungsbedingungen/visa-globale-datenschutzmitteilung/mitteilung-zu-zustandigkeitsfragen-fur-den-ewr.html.
For more information, please see VISA's privacy policy:
https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html.

Presence on social media platforms

Data processing by social networks

We operate publicly accessible profiles on social networks. The individual social networks used by us can be found below. Social networks such as Facebook, Twitter etc. can generally analyse your user behaviour extensively. By visiting our social media presences, the following data protection-relevant processing operations are triggered: If you are logged into your social media account and visit our profile, the operator of this social medium can track this visit. Independently of this, the operator may also process your data (e.g. IP address) under certain circumstances if you are not logged into your account or you do not have an account at all. The operator summarises this data in user profiles in which your preferences and interests are stored. These profiles are used for the placement of personalised advertising within and outside the respective social media presence. If you have an account with the respective social network, the personalised advertising may be displayed on all devices on which you are or were logged in. Depending on the platform, further processing operations may be carried out by the operators of the social media portals; we have no influence on this. For details, please refer to the terms of use and data protection provisions of the respective social media portals.

Legal basis

Our social media presences are intended to ensure as comprehensive a presence as possible on the Internet within the meaning of Art. 6 (1) lit. f DSGVO. The analysis processes carried out by the operators of the social networks may be based on different legal bases, which are to be specified by the respective providers.

Person responsible and assertion of rights

If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal (e.g. Facebook). Despite the joint responsibility with the social media portal operators, we have no full influence on the data processing procedures of the portals. Our options are largely determined by the corporate policy of the respective provider.

Storage period

The data collected directly by us via the social media presence will be deleted from our systems as soon as you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies. Mandatory legal provisions - in particular retention periods - remain unaffected. We have no influence on the storage period of the data collected by the social networks. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Facebook page

We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The data collected is also transferred to the USA and other third countries. We have entered into a Joint Processing Agreement (Controller Addendum) with Facebook which sets out which data processing operations we or Facebook are responsible for. You can view this agreement at the following link:
https://www.facebook.com/legal/terms/pagecontrolleraddendum.
You can adjust your advertising settings yourself in your user account. To do so, click on the following link and log in:
https://www.facebook.com/settings?tab=ads.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:
https://www.facebook.com/legal/EUdatatransfer_addendum and https://de-de.facebook.com/help/566994660333381.
More information on data processing by Facebook can be found at https://www.facebook.com/about/privacy/.

Instagram page

We have a profile on Instagram. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Data transfer to the USA is based on the standard contractual clauses of the EU Commission.
Details can be found here: https://www.facebook.com/legal/EUdatatransfer_addendu, https://help.instagram.com/519522125107875 and a href="https://de-de.facebook.com/help/566994660333381" target="_blank">https://de-de.facebook.com/help/566994660333381.
For details on their handling of your personal data, please refer to Instagram's privacy policy: https://help.instagram.com/519522125107875.

Google Analytics

Nature and scope of processing

We use Google Analytics services and functions on this website, which are offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. With the help of Google Analytics, we as the website operator can determine how our website is used. As part of the analysis, we find out how often our website is accessed, how long visitors stay on the page and which devices or systems they use to access the website. In addition, we may use Google Analytics to track your mouse movements and clicks. This information may be stored and used by Google to build a profile about you. In doing so, Google Analytics uses machine learning technologies to analyse and supplement your data. Furthermore, Google Analytics uses technologies to recognise website visitors in order to analyse user behaviour. The processing of the collected data usually takes place on Google servers in the USA.

Purpose and legal basis

When using Google Analytics, we rely on Art. 6 (1) lit. f DS-GVO as the legal basis for the storage and analysis of personal data, as we have a legitimate interest in analysing the use of our website. This enables us to optimise our online presence and offers for you. If you have previously given your consent to the processing of data on this website by Google Analytics, the processing of your data takes place solely on the legal basis of Art. 6 (1) lit. a DS-GVO. You can revoke your consent at any time. The transfer of your personal data to the USA is based on the standard contractual clauses of the EU Commission. You can find more information on this at https://privacy.google.com/businesses/controllerterms/mccs/.

IP anonymisation

When using Google Analytics on this website, we use a function whereby Google shortens your IP address before it is transmitted to Google servers in the USA. This only happens if you are in the European Union or in a country of the European Economic Area. Your full IP address will only be transmitted to the USA in exceptional cases and then shortened there. Google Analytics uses this information to track how you use our website. Your IP address will not be merged with any other data held by Google.

Browser plugin

You can prevent Google from collecting and processing data about you. To do this, you must download the browser plugin at https://tools.google.com/dlpage/gaoptout?hl=de and install it in your browser. For more information on the processing of user data, please refer to the Google Analytics privacy policy at https://support.google.com/analytics/answer/6004245?hl=en.

Order processing

Storage period

Google stores data linked to cookies, user IDs or advertising IDs. This data is stored for two months and then anonymised or deleted. You can find more information about the storage period or the deletion of your data at https://support.google.com/analytics/answer/7667196?hl=de.

Google Tag Manager

Type and scope of processing

We use services and functions from Google Tag Manager on this website, which are offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a tool that allows us to use other tools on our website. It does not create user profiles, it does not store cookies and it does not perform independent analytics. However, your IP address is recorded and may be transmitted to the USA. Google Tag Manager itself is only used to manage these tools that are integrated through it.

Purpose and legal basis

When using Google Tag Manager on this website, we rely on Art. 6 (1) lit. f DS-GVO as the legal basis, as we have a legitimate interest in implementing and directing tracking tools on this website easily and quickly. If you have previously given your consent to data processing on this website by Google Tag Manager, the processing of your data will take place solely on the legal basis of Art. 6 (1) lit. a DSGVO. You can revoke your consent at any time.

Google Fonts

This site uses so-called Google Fonts, which are provided by Google, for the uniform display of fonts. When you call up a page, your browser loads the required fonts into its browser cache in order to display texts and fonts correctly.
For this purpose, the browser you use must connect to Google's servers. This informs Google that your IP address has been used to access this website. The use of Google Fonts is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the uniform presentation of the typeface on its website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.
If your browser does not support Google Fonts, a standard font will be used by your computer. Further information on Google Fonts can be found at https://developers.google.com/fonts/faq
and in Google's privacy policy:
https://policies.google.com/privacy?hl=en.