The legal regulations for the protection of your data can be found in the Basic Data Protection Regulation and the Federal Data Protection Act.
The responsible party in terms of data protection regulations is Guitar Master Plan GmbH, Arcadiastraße 20, 40472 Düsseldorf, Germany, represented by the Managing Director Benjamin Hübschmann.
In the following, you will find information about which personal data – this is all data that identifies you or makes you identifiable, such as name, address, e-mail address or user behavior – we collect during your visit to our site and how it is used. If you have questions, please feel free to contact us at [email protected]
You also have the right to complain to a supervisory authority in the event of unlawful use of the data. The one in charge for us is:
State Commissioner for Data Protection and Freedom of Information
E-Mail: [email protected]
1. Server data collection
When you visit our site, various server statistics are automatically stored, which your browser sends to our provider’s server. The name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the operating system of the user, referrer URL (the previously visited page), IP address and the requesting provider are logged.
This data is used for the statistical evaluation of visits to our site and cannot be connected to specific persons.
The legal basis for the data collection is Art. 6 para. 1 lit. f) DSGVO. A combination of this data with other data sources is not made. The IP address is anonymized. Our justifiable interest in collecting this data is based on the fact that we can use the data to optimize our offer for users, e.g. by preventing access from malicious sites or optimizing access via certain browsers, and the log of the IP address enables the delivery of the page to the visitor.
In principle, you have a right to object to this data collection. This is exceptionally factually out of the question here, since otherwise the use of the page would be impossible.
The data will be deleted as soon as they are no longer required for the above-mentioned purposes.
1a. Security of data transmission
For the transmission of your data we use a secure server with SSL technology (Secure Socket Layer) with a 128-bit encryption. This is how your data is transmitted to us securely and unreadable for unauthorized persons.
Your passwords are hashed, i.e. stored cryptologically, and are thus protected from access by third parties as well as the responsible parties.
1b. Transmission to third countries (Art. 13 para. 1 f DS-GVO)
It is possible that, in the course of calling up and using our website and associated offers, data may be transmitted to third countries via subcontractors or companies affiliated with them. Potential risks here may include unenforceable data subject rights and a lower level of data protection. We minimize the risk as far as possible by concluding order processing contracts (if such a contractual relationship exists) and standard contractual clauses including effective amendments required by the supervisory authorities.
2. Use and passing on of personal data
If you have provided us with personal data, we use it to respond to your inquiries, to advise you and process contracts concluded with you, and for technical administration purposes. Your personal data will, except in the cases explicitly mentioned in this statement, only be passed on or otherwise transmitted to third parties if this is necessary for the purpose of processing the contract, if this is necessary for billing purposes or if you have given your prior consent. You have the right to revoke your consent at any time with effect for the future, see also section 6 on your data subject rights.
2b. Contract processing
In the context of contracts concluded with you in the context of orders, we collect and store the personal data provided by you, such as name, address, for the purpose of contract processing, e.g. also for billing purposes.
The data is passed on to banks, for example, as part of the billing process. The accounting data is transferred to the tax office within the framework of the tax law requirements.
The legal basis for the collection, processing and forwarding of the data is Art. 6 (1) lit. b) DSGVO in the context of contract processing. b) DSGVO. The legal basis for the transfer of data to the tax office is Art. 6 para. 1 lit. c) DSGVO.
The deletion of this data takes place after the expiration of the applicable legal storage obligations. Unless we are under a legal obligation to retain data, the data will be deleted when the purpose ceases to apply.
You have the right to information and the right to object to your data stored by us at any time, see below, section 6 on your rights as a data subject.
2c. Contact form and inquiry by e-mail
When using our contact form, we collect and store the name and e-mail address for the purpose of responding to your inquiry.
If you send us an inquiry by e-mail, we collect and store the e-mail address and the data contained in the e-mail to answer your inquiry.
Legal basis: If a contractual relationship develops from the inquiry by way of contract initiation or if the inquiry relates to an existing contractual relationship, the legal basis is Art. 6 para. 1 lit. b) DSGVO, as the storage of the data is necessary for the fulfillment of a pre-contractual or contractual obligation. Furthermore, we also have a justifiable interest according to Art. 6 para. 1 lit. f) DSGVO in processing the data for the purpose of communicating with you and responding to your inquiries.
The deletion of the data takes place when the purpose of the storage has ceased to exist, i.e. after answering your e-mail/contact-form inquiry or when the matter related to the inquiry has been conclusively clarified. In the case of an existing contractual relationship or a contractual relationship resulting from the inquiry, the deletion takes place after the expiration of the legal retention periods.
Regarding the right to deletion and information, see section 6 below on your data subject rights.
When you register on our website or create a user account, we collect your first name, last name, e-mail address and password. We need these mandatory details in order to process your respective orders. The data will be stored by us permanently. For the execution of an order your complete address is additionally necessary.
The legal basis for the collection and storage of data within the scope of registration is Art. 6 para. 1 lit. a) as well as Art. 6 para. 1 lit. b) DSGVO within the scope of contract performance.
Deletion takes place when you unsubscribe from our site or revoke your consent to the use of this data, without affecting the lawfulness of the processing carried out on the basis of the consent, unless legal retention periods, e.g. for invoice records, interfere. In these cases, blocking replaces deletion.
You have a right of access to your data stored by us at any time, see below number 6, also about your further data subject right
Legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest results from the fact that we only facilitate the retrievability of the page for you with the aforementioned cookies, do not collect any tracking data in the process and thus no interference with your personal rights and fundamental freedoms occurs.
You can exclude the acceptance of cookies in your web browser. However, this can possibly lead to impairments in functionality. For your further data subject rights, see section 6 below.
These cookies are only valid for the duration of your browser session and are deleted when you end your visit to our site.
3.2. Cookie Consent Tool
In order to be able to administer your consent to the use of tracking tools, we use the cookie consent tool „Free GDPR + Cookie Management“ from the provider iSenseLabs. In this context, in addition to the connection data, the granting or refusal of your consent or the withdrawal from consent will be processed. In order to be able to make the appropriate assignment, the cookie consent tool also sets a cookie in your browser. If you want to withdraw from these settings, simply delete the cookies in your browser. For more information on data protection, please visit: https://gdpr.apps.isenselabs.com/pages/privacy_policy.
If you wish to use one of the above-mentioned consent tools, please inform us accordingly. We will then amend the corresponding passage in the data protection declaration accordingly.
4. Google Tag Manager
Our website uses the Google Tag Manager. The responsible party is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ireland transmits data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, to which we always draw your attention.
With this solution, so-called tags are created and updated, which we can then manage. The Tag Manager implements tags from the services we use and thus triggers other tags. The tool itself does not collect any personal data, yet only serves to manage. However, the tags triggered by this may independently collect personal data (see below for more on this). However, the Google Tag Manager does not access this collected data. When the tool is deactivated, the deactivation takes effect for all tags implemented via the tool.
4a. Google Analytics
In addition, we use the technical extension „Google Signals“, which enables cross-device tracking. Thus, an association of a single website visitor with different end devices takes place. However, this only happens if you have logged into a Google service when visiting the website and at the same time have activated the „personalized advertising“ option in your Google account settings.
The legal basis for the collection and storage of the data is Art. 6 para. 1 p. 1 lit. a) DSGVO. By activating Google Anlaytics in the GDPR/CCPA + Cookie Management of iSenseLabs you agree to the processing of your data for Google Analytics. We have extended Google Analytics on our website with the code „gat._anonymizeIp();“ to ensure anonymized collection of IP addresses (so-called IP masking). Therefore, it is not possible for us to assign the collected analysis data to a specific person.
Data transfer to third countries: The information generated by the cookies about your use of this website is usually transmitted to a Google LLC server in the USA and stored there. However, due to the activated IP anonymization on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.
We have entered into EU standard contractual clauses with Google, with which Google demonstrates to us that it complies with appropriate and suitable technical and organizational measures to protect your personal data.
You can withdraw your consent at any time by deleting all set (consent) cookies in your browser.
If you do not wish the use of „Google Signals“, you can deactivate the „personalized advertising“ option in your Google account settings.
The aforementioned add-on may not be available when accessing our site via browsers of mobile devices. In this case, as well as in general, you can therefore alternatively prevent the use and transfer of data to Google by clicking on this link. Please note that this is a so-called opt-out cookie, which is only valid for www.sniperguitar.de and the browser used in each case. If you delete the cookies in your browser history, you must click the link again to object to the use of data when you access our site again. The same applies if you access the page with another browser.
You can find more information on data protection at Google Analytics at https://support.google.com/analytics/answer/6004245?hl=de.
The data stored by Google is deleted by default within 14 months.
4b. Facebook Ads
We use the advertising tools of the social network of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA („Facebook“) for advertising activities on Facebook. When you are logged into your Facebook account, Facebook uses the information you provided during registration, your Likes, and your other user behavior to determine information such as your interests, based on which you are shown custom ads, including those from our company. Likewise, we can use the information categories specified by Facebook to make default settings as to which, for us anonymous, user groups should see our advertisements. Depending on the privacy settings you set, your name may appear in our ads. You can find more information about Name Ads in Facebook Ads here. The same applies to so-called social ads, where your friends are shown that you „like“ our page, for example. You can determine whether and how your name is displayed in the privacy settings and in the advertising settings. You can also object to the display of Facebook ads in general via opt-out. In addition, you can set whether and how our ads are displayed to you on Facebook in the future by clicking on „x“ or „∨“ in your Timeline for ads. Except in the case of permission granted by you, Facebook will not share any personal information about you with us. We can only track via Facebook’s general evaluation tools how many users, subdivided according to general criteria not associated with personal data, have seen our ad, clicked on it or later made a purchase in our online shop/performed an action on our website (conversion tracking through the so-called visitor action pixel). Please note that there is a possibility that Facebook will in turn assign this data to your account profile, over which we have no control.
Data transfer to third countries: Your behavioral data, as well as the data evaluated via the visitor action pixel, are transmitted to the servers of Facebook Inc. in the USA. We have entered into EU standard contractual clauses with Facebook, with which Facebook demonstrates to us compliance with appropriate and adequate technical and organizational measures to protect your personal data.
For more information about how Facebook Ireland processes personal data, including the legal basis on which Facebook Ireland relies and how data subjects can assert their rights against Facebook Ireland, please see Facebook Ireland’s Data Policy at https://www.facebook.com/about/privacy.
The legal basis for the collection and storage of data is Art. 6 para. 1 lit. a) DSGVO in the case of corresponding consent.
You have the right to information and the right to object to your data stored by us at any time, see below Number 6 on your rights as a data subject.
4c. Microsoft Ads
In addition, we have implemented the additions Microsoft Target Group Marketing and Microsoft Target Group Ads. This enables us to divide our users into target groups using the Microsoft Audience Network and thus to individualize ads for individual users.
We also use the „Bing Ads Conversion Tracking“ application to measure the reach of advertisements. It is determined how successful individual advertising measures of ours are on Bing. In this way, we want to develop and display advertising that is of interest to you and make our offer more attractive.
The legal basis for the collection and processing of your data is, as a result of your express consent, Art. 6 para. 1 lit. a) DSGVO. The conditions for consent and its withdrawal have their legal basis in Art. 7 DSGVO.
Data transfer to third countries: Your behavioral data, as well as the data evaluated via the visitor action pixel, are transmitted to the servers of Microsoft Corp. in the U.S. We have entered into EU standard contractual clauses with Microsoft, with which Microsoft demonstrates to us that it complies with appropriate and adequate technical and organizational measures to protect your personal data.
For more information about how Microsoft processes personal data, including the legal basis on which Microsoft relies and how data subjects can exercise their rights against Microsoft, please see Microsoft’s Data Policy at https://privacy.microsoft.com/de-de/privacystatement.
You have the right to information and the right to object to your data stored by us at any time, see below Item 6 on your data subject rights.
4d. Google Adwords
We use AdWords and thereby the Google Conversion Tracking. Google Adwords sets a cookie on your computer („conversion cookie“) if you come to our website via a Google ad. These cookies lose their validity after 30 days and thus no personal data is collected by our side that could indicate the identity of the user. However, your IP address is transmitted to Google LLC, in the USA, so that they can carry out the evaluations for us as described below. We have entered into EU standard contractual clauses with Google, with which Google demonstrates to us that it complies with appropriate and suitable technical and organizational measures to protect your personal data.
As long as the cookie is still active, we can recognize via Google Conversion Tracking when a user visits our site that this user had clicked on the Adwords ad and in this way was originally forwarded to our site. Each AdWords customer receives a different cookie. The information obtained with the cookies is used solely to create conversion statistics for us as AdWords customers. This is how we get to know the total number of users who clicked on one of our ads and were forwarded to a page of ours tagged with a conversion tracking tag.
The legal basis for the use of the conversion tracking cookie is Art. 6 para. 1 lit. a) DSGVO in the event of corresponding consent.
Withdrawal and deletion:
You can also withdraw your consent at any time by deleting all set (consent) cookies in your browser.
You have the right to information and the right to object to your data stored by us at any time, see below Number 6 on your rights as a data subject
With our newsletter we inform you regularly about new offers, products and news. If you would like to receive the offered newsletter, we need, in addition to ticking the appropriate option in the order process or in our newsletter form, a valid email address of yours. We will then send you a confirmation email with which you can verify your email address and the wish to receive the newsletter. We store the IP address to verify your registration, both when you register and when you activate the confirmation link. In addition, we store the date and time of registration, the e-mail address provided and the date and time of activation of the link in the confirmation e-mail for legally secure proof of your registration.
You can object to receiving further newsletters at any time by clicking on a link at the end of each newsletter, without any transmission cost incurrence other than those according to the basic rates. You can also send us an e-mail with the appropriate request to unsubscribe at [email protected]
Likewise, you can unsubscribe from the newsletter in the log-in area.
The legal basis for the collection and processing of your data for newsletter marketing is, as a result of your express consent, Art. 6 para. 1 lit. a) DSGVO. The conditions for consent and its withdrawal have their legal basis in Art. 7 DSGVO.
If you have made a purchase from us, we will occasionally inform you by e-mail about new products similar to or matching your purchase. If you do not wish to receive this product information by e-mail, you can object to the use of your e-mail address for this purpose in the future at any time by sending an e-mail to [email protected] or after receiving such an information e-mail by clicking on a link at the end of such an e-mail, without any cost incurrence other than the transmission costs according to the basic rates.
The legal basis for the collection and processing of your data is Art. 6 para. lit. f) DSGVO. Our justified interest arises from the form of direct advertising permitted by Section 7 III UWG. The interference with your basic freedoms is low, since we inform you transparently when collecting data, you can object at any time and we only send you targeted information on goods and accessories that are similar to the ones you have purchased or are suitable for them.
The data will be deleted immediately after you unsubscribe from our newsletter.
You have the right to information and the right to object to your data stored by us at any time, see below Number 6 on your rights as a data subject.
6. Data subject rights
a. Right of objection
If we process your data to protect justified interests (Art. 6 para. 1 lit. f) DSGVO), you can object to this processing for reasons arising from your particular situation. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.
In the event of objection to data processing for the purpose of direct marketing, processing for this purpose will no longer take place.
b. Right to information
You have the right to request confirmation from us as to whether we are processing personal data relating to you and, if so, a right of access to the personal data and related information in accordance with Art. 15 of the DSGVO.
c. Right to rectification
You have the right to request that we correct or complete any inaccurate or incomplete personal data relating to you without undue delay in accordance with Art. 16 DSGVO.
d. Right to deletion
You have the right to request that we delete personal data relating to you without undue delay, and we are obliged to delete such data without undue delay, if one of the reasons set out in Art. 17 DSGVO applies.
e. Right to restriction of processing
You have the right to require us to restrict personal data relating to you if one of the conditions set out in Art. 18 DSGVO applies.
f. Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to request that we transfer the data to another controller, as far as this is technically possible