Your privacy is of great concern to us.
Name of the controller
ORFEO International Music GmbH
Matthias Lutzweiler | Iwen Schmees
Address of the data controller:
ORFEO International Music GmbH
Gruber Str. 46b
Data Protection Officer:
consileo GmbH & Co. KG
Purpose and Data Minimisation
We collect and use your personal data solely within the framework of the European General Data Protection Regulation (EU-GDPR) and the legal provisions of the German Federal Republic. Below we inform you about the nature, scope and purpose of the collection and use of personal data. There shall be no processing for purposes other than those laid out below. You may access this Policy anytime on this website.
Data transmission and logging for system-internal and statistic purposes
For technical reasons, your web browser automatically transmits data to our webserver when you access our website. This data includes, inter alia, date and time of access, URL of the referring website, file viewed, amount of transmitted data, browser type and version, operating system and your IP address. This data is stored separately from other data you enter when using our service. We are not able to associate this data to a particular person. This data is analysed for statistical purposes and will subsequently be deleted.
Data subjects and data categories
Data subjects include clients, website users, vendors and business partners, as well as staff members. Within the scope described in “Purpose and data minimisation”, data categories include among others name, forename, address, IP address, payment details.
The legal basis for storing, processing and transferring your data is your consent (e.g. for use of non-essential cookies acc. Art. 6 I 1 a) EU-GDPR), our legitimate interest to constantly improve our communication with users by using tools, which is not overridden by your interests or fundamental rights and freedoms requiring protection of personal data (e.g. for use of essential cookies Art. 6 I 1 f) EU-GDPR), or in case of a contract conclusion (e.g.sales), your contractual agreement with us (Art. 6 I 1 b) EU-GDPR).
Erasure of data
When the purpose expires and there are no legal requirements to keep your personal data, we will delete it. In principal, data is only stored for the duration of the above-mentioned purposes.
Recipients or categories of recipients personal data might be shared with
Data transfer to third countries
Within the scope of maintenance services our group-intern service providers from countries outside the EU may have exceptionally and after prior consultation with the controller access to the usage data.
Rights of the data subject
You have at any time the right to address the controller (see above) and request information on how your data is process. You also have a right to rectification of your data. Or you can have the processing restricted, meaning a right to have processing limited to parts of your data. At any time, you may object to the processing of your personal data. When you do so, we will check whether there are any conflicting legal transmitting and processing obligations and inform you accordingly. At any time, you may request the erasure of your data. When you do so, we will check whether there are legal requirements or legitimate interest for further storing of your data and we will inform you accordingly. You also have a right to data portability, meaning that we hand over your data in a structured, commonly used and machine-readable format determined by us upon your request.
In addition, if you feel that we do not treat your personal data properly and as laid out in this Policy, you have a right to complaint to the supervisory authority responsible for your country.
When you’ve given your consent to the processing of your data you may, of course, revoke your consent at any time.
If you receive advertising from us, you also have a right to object at any time so that we stop sending you ads.
NewsletterWhen you register for the newsletter, we process your personal data (first name, last name, e-mail) for the purpose of sending you our newsletter with information and offers from ORFEO International Music GmbH. We send our newsletter using the RapidMail newsletter tool from Rapidmail GmbH (Augustinerplatz 2, 79098 Freiburg i.Br.). The data collected is stored by Rapidmail GmbH on servers in Germany. The processing of your data is based on your consent in accordance with Art. 6 (1)(a) GDPR. If you register for our newsletter, we also store your IP address and the date and time of your registration. This is necessary to be able to prove your consent. As we need to document your consent in accordance with Art. 6 (1)(c) GDPR in conjunction with. Art. 7 (1) GDPR, we are entitled to do so. You can unsubscribe from the newsletter at any time by clicking on the unsubscribe link at the end of each newsletter. By subscribing to the newsletter, you confirm that you wish to receive it in the future at the e-mail address you have provided to us.
When you use our webshop we process your personal data in order to conduct the order and purchase process. For that we process your name, surname, e-mail address, address, payment details.
It is also possible to create a voluntary profile for the future purchase processes. We will process your personal data to the extent as it is foreseen to conduct the order/purchase process.
Google Analytics as a web analysis tool
Legal basis for the processing:
Art. 6 (1) a GDPR (consent)