Data Privacy Declaration of STUDIOBOX GmbH

This Data Privacy Declaration is intended to inform you about the personal data we collect when you use our website available at  https://www.acousticbooth-studiobox.com/ and the purpose for which such data and any personal data collected for the purpose of handling the contract/order will be used. This information is available to you and can be printed at any time at https://www.acousticbooth-studiobox.com/data-privacy.html

Person or Body Responsible/Contact

The person or body responsible in the sense of data protection legislation is:

STUDIOBOX GmbH
Soundproof acoustic booths,
represented by the managing director Raimund Würtz
Wilhelm-Hauff-Weg 9
D-75045 Walzbachtal

Please do not hesitate to contact us by e-mail at data-privacy@acousticbooth-studiobox.com if you have any questions or suggestions concerning data privacy protection.

Subject Matter of Data Privacy

The subject-matter of data privacy is personal data. According to Art. 4(1) of the EU General Data Protection Regulation, this means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Collection and Use of Your Data

Webserver Log Data

We collect and automatically store information in so-called server log files. These files also contain information transmitted to us by your browser. These are the:

  • browser type / version
  • operating system used
  • referrer URL
  • time of server query
  • data file retrieved
  • The IP address is to be rendered anonymous in future. Our provider, 1&1 Internet SE, Elgendorfer Str. 57,
    56410 Montabaur, is presently working on a solution.

The data will not be combined with other data sources. The data will only be accessed if there is a legitimate suspicion of attacks on our infrastructure or in order to rectify defects. In that case we also reserve the right to deactivate anonymization of the IP addresses temporarily.

We collect the data on the basis of our legitimate interest in the safe and defect-free operation of our server infrastructure, in combatting misuse and in prosecuting criminal offences, in which respect when balancing the interests involved we reached the conclusion that this interest is not overriden by your rights and your interest in protecting your personal data (Art. 6(1)(f) EU General Data Protection Regulation).

Contact Form

You can contact us directly by e-mail using the contact form on our website, especially in order to obtain offers and price lists. When you send us a message we will collect the following personal data that you have to provide:

  • name
  • email address
  • postal code
  • town / city
  • country

We need your town / city, postal code and country because our offers vary depending on the place and country of delivery.

We also collect additional data you provide voluntarily, for example your telephone number and the name of your company. We use this data in order to generate an e-mail with your contact information, which is sent to us so that we can process your query according to your request. The legal basis for this is Art. 6(1)(b) of the EU General Data Protection Regulation.

Making Available the Requested Goods, Work or Services

When you order goods, work or services from us, we use the personal data you provide on the order form or in the relevant contract, on the order slip or in your order e-mail (as a rule containing, in whole or in part, your name, your (e-mail) address and telephone number, the name and address of your company, the delivery address including contact data (name, e-mail, position occupied by the person responsible on site, if necessary his/her telephone number in case of queries), your job title or role as well as details on the goods, work or services ordered) solely in order to process your order or to make the goods, work or services ordered available. This can include the necessary steps taken prior to conclusion of a contract, responding to your related questions, the provision of dispatch and invoice information, the processing and provision of customer feedback and support including the dispatch of price lists and checklists, offers, planning proposals and newsletters not relating to marketing. We also communicate with customers who obtain our products and services, by post, e-mail and telephone where the handling and processing of customer affairs is concerned. The legal basis for this is Art. 6(1)(b) of the EU General Data Protection Regulation.

Obligation to Provide Personal Data

As a matter of principle, the grant of consent and the making available of personal data when using our website is voluntary. If you do not grant your consent or do not provide personal data, this generally has no detrimental effects on you. However, there are situations in which we are unable to act without certain personal data, for example where such data is required in order to process your query or your orders. In these cases we are unfortunately unable to satisfy your request without the relevant personal data. This means that within the context of our business relationship you must provide the personal data required in order to take up and conduct the business relationship and to fulfil the relevant contractual obligations, or which we are obliged to collect by law. As a rule, we will not be in a position to enter into or perform a contract with you without such data.

No Automated Decision-Making Including Profiling

We do not use automated decision-making including profiling in the sense of Art. 22 of the EU General Data Protection Regulation in order to establish and conduct the business relationship.

Forwarding of Data

We shall treat your data as confidential and, as a matter of principle, shall not pass it to third parties. Our servers are located in Germany and are operated by the company 1&1 Internet SE, Elgendorfer Str. 57, 56410 Montabaur on our behalf. This ensures that your data does not leave the area of influence of the EU General Data Protection Regulation.

However, data shall be forwarded if this is necessary to clarify the unlawful use of our services or for prosecution purposes, in particular to enforce the contractual agreements made with you. If there are specific indications of unlawful or abusive conduct, personal data shall be forwarded to the criminal prosecution authorities and, if appropriate, to the law firm representing us. The data shall be forwarded in such cases on the basis of our legitimate interest in enforcing our contractual claims, in combatting misuse and in prosecuting criminal offences if, when balancing the interests as required, we have reached the conclusion that your rights and your interest in protecting your personal data are not overriding (Art. 6(1)(f) EU General Data Protection Regulation).
Furthermore, we are subject to a statutory obligation to provide information to certain public offices on request (for example the public prosecution authorities and the finance authorities). In such cases the data shall be provided in order to meet statutory obligations to which we are subject (Art. 6(1)(c) EU General Data Protection Regulation).

In addition, logistics service providers we might deploy and subcontractors shall receive the personal data they require for processing of their orders in order to perform the agreement to which they are a contracting party or in order to take pre-contractual steps at your request (Art. 6(1)(b) EU General Data Protection Regulation).

Cookies

We use so-called cookies in order to make our products more user-friendly, more effective and more secure. Cookies are tiny text data files that are placed on your computer and stored by your browser. Cookies can remain stored on your computer beyond the period of use of our products, for example to enable you a faster page load on your next visit.

We specifically use the following cookies:

  • We need session cookies to enable internal functions. They are deleted automatically after your visit ends.
  • Cookies of the web analysis service “etracker” (see below)
  • When visiting our website you will be reminded that we use cookies. If you confirm this reminder with “OK” we will store this information in a cookie so that the reminder will no longer be displayed.

You can set your browser so that you are informed when cookies are placed and can permit cookies in individual cases only, can exclude the acceptance of cookies in certain cases or generally, and can activate the automatic deletion of cookies when you close your browser. If cookies are deactivated, the functionality of this website could be restricted.

Our cookies cannot identify you in person. We use cookies on the basis of our legitimate interest in a design that caters to your needs, in which respect when balancing the interests involved we reached the conclusion that your rights and your interest in protecting your personal data are not overriding (Art. 6(1)(f) EU General Data Protection Regulation).

Analysis of Use Data (“etracker”)

We use etracker for the statistical analysis of visitor figures and visitor behaviour, for which so-called “cookies” are used. The data collected is analyzed pseudonymously only, stored solely on servers in Germany, is not combined with other data or communicated to third parties. When storing visitor data, in particular the IP addresses, device and domain data of visitors is stored in abbreviated or encoded form so that is it not possible to draw conclusions about the individual visitor. The IP addresses are automatically abbreviated by default at the earliest possible point in time, without you as a visitor to our website having to make any specific adjustments or configurations. This means that etracker offers the pre-settings for data protection required under the EU General Data Protection Regulation (privacy by design and privacy by default). etracker Analytics and etracker Optimiser were examined by independent data privacy experts in a comprehensive technical and legal procedure. Compliance with the provisions of the EU General Data Protection Regulation and the new German Federal Data Protection Act (BDSG) was confirmed, certified and underscored through the ePrivacyseal of data privacy quality. The following link contains further information on the issue of “etracker and data privacy”: https://www.etracker.com/data-privacy/

Change in Purpose

We process your personal data solely for the purposes mentioned in this Data Privacy Declaration. We only diverge from these purposes insofar as is permitted by legal provisions or insofar as you have consented to the changed purpose of the data-processing. Insofar as we process your data for purposes other than those for which we originally collected the data, we will inform you about these new purposes before further processing and will make all relevant information available to you.

Deletion of Your Data

As soon as storage of your personal data is no longer necessary for the purposes for which we collected it, we will delete or anonymize your personal data. Insofar as we collected your personal data within the context of a query about prices and products, we will delete such data six (6) months after having provided the information about prices or after having made an offer. Insofar as we collected and stored your personal data in connection with a contract for delivery of our products or for the provision of work or services, we will delete the data unless it is required for longer for prosecution under criminal law or in order to secure, assert or enforce legal claims, three (3) months after the warranty period expires, which generally runs for two (2) years where contracts for sale are concerned. Insofar as we are subject to statutory safe-keeping periods under commercial or tax law, the data required to meet these obligations will be blocked instead of being deleted (“restriction of processing”).

Your Rights

Each person is entitled to obtain information (Art. 15 EU General Data Protection Regulation), rectification (Art. 16 EU General Data Protection Regulation), erasure (Art. 17 EU General Data Protection Regulation), a restriction of processing (Art. 18 EU General Data Protection Regulation), has a right to object (Art. 21 EU General Data Protection Regulation) and a right to data portability (Art. 20 EU General Data Protection Regulation). The limitations under Secs. 34 and 35 of the German Federal Data Protection Act (BDSG) apply to the rights to obtain information and erasure. There is also a right to raise a complaint with a competent data privacy supervisory body (Art. 77 EU General Data Protection Regulation in conjunction with Sec. 19 German Federal Data Protection Act (BDSG)).

Right to Information

You are entitled at any time to obtain from us information about the personal data about you that is being processed by us. You may make a corresponding request by post or by e-mail to the above-mentioned address.

Right to Rectification of Inaccurate Data

Insofar as the personal data we have collected about you is inaccurate, you are entitled to require the rectification of that data. You may make a corresponding request by post or by e-mail to the above-mentioned address.

Right to Erasure

Subject to the requirements set out in Art. 17 of the EU General Data Protection Regulation, you are entitled to require the erasure of the personal data concerning you. This applies especially where the purpose for which the data was collected or processed is no longer necessary or if the data was unlawfully collected or processed. To this end you may make a request by post or by e-mail to the above-mentioned address.

Right to Restrict Processing

You are entitled to require us to restrict the processing of your personal data. This right arises especially where the accuracy of the personal data is disputed or where you require restricted processing instead of erasure (e.g. because you require the data in order to establish, exercise or defend legal claims). You may make a corresponding request by post or by e-mail to the above-mentioned address.

Right to Object

You are entitled to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you. In that case we will promptly discontinue the processing of your personal data unless we are able to demonstrate compelling legitimate grounds for the processing. These grounds have to override your interests, rights and freedoms or have to be based on the establishment, exercise or defence of legal claims.

Right to Data Portability

You may require us to surrender the personal data concerning you in a commonly used and machine-readable format. You may make a corresponding request by post or by e-mail to the above-mentioned address.

Right to Complain

You are entitled to turn to the competent supervisory authority in case of complaints. The supervisory authority competent for us is:

Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg

Königstrasse 10 a

70173 Stuttgart

poststelle@lfdi.bwl.de

Amendments to this Data Privacy Declaration

The current version of this data privacy declaration can be retrieved at any time at  https://www.acousticbooth-studiobox.com/data-privacy.html.

As at: 25 May 2018