Privacy policy

Introduction and general information

Thank you for your interest in our website. The protection of your personal data is very important to us. In the following, you will find information on how we handle your data that is collected through your use of our website. Your data will be processed in accordance with the legal regulations on data protection.

Responsible person in terms of the GDPR

Wilhelm Schimmel Pianofortefabrik GmbH

Friedrich-Seele-Straße 20

38122 Braunschweig, Germany

 

Phone +49(0)531/8018-0

info@schimmel-piano.de

Contact details of the data protection officer

Proliance GmbH / www.datenschutzexperte.de

Datenschutzbeauftragter

Leopoldstr. 21

80802 München

datenschutzbeauftragter@datenschutzexperte.de

 

When contacting the data protection officer, please name the company to which your inquiry relates. Please refrain from enclosing sensitive information, such as a copy of an ID card, with your request.

Definition of terms

Our privacy policy is intended to be simple and understandable for everyone. In this privacy policy, the official terms of the General Data Protection Regulation ("GDPR") are generally used. The official definitions are explained in Article 4 EU GDPR.

Access to and storage of information in terminal devices

By using our website, information (e.g. IP address) may be accessed or stored (e.g. cookies) in your terminal devices. This access or storage may involve further processing of personal data within the meaning of the GDPR.

In cases where such access to information or such storage of information is absolutely necessary for the technically error-free provision of our services, this is done on the basis of Section 25, paragraph 1 sentence 1, Paragraph 2 No. 2 TTDSG.

In cases where such a process serves other purposes (e.g. the needs-based design of our website), it will only be carried out on the basis of Section 25 (1) TTDSG with your consent in accordance with Article 6 (1) (a) GDPR. The consent can be revoked at any time for the future. The requirements of the GDPR and the German Federal Data Protection Act (BDSG) apply to the processing of your personal data.

For more information on the processing of your personal data and the relevant legal bases in this context, please refer to the following sections on the specific processing activities on our website.

Web hosting

This website is hosted by an external service provider (Gärtner Datensysteme GmbH & Co. KG). The hosting of this website takes place in Germany. Personal data collected on this website is stored on the hoster's servers. This may include IP addresses, contact requests, meta and communication data, website accesses and other data generated via a website.

We collect the listed data in order to be able to guarantee a smooth connection setup of the website and a technically error-free provision of our services. The processing of this data is absolutely necessary to provide you with the website. The legal basis for the processing of the data is our legitimate interest in the correct presentation and functionality of our website in accordance with Article 6 (1) (f) GDPR.

We have concluded a data processing agreement with the provider in accordance with the requirements of Article 28 GDPR, in which we obligate the provider to protect our customers' data and to refrain from disclosing it to third parties.

Server log files

When you call up our website, it is technically necessary for data to be transmitted to our web server via your Internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:

  • Date and time of request
  • Name of the requested file
  • Page from which the file was requested
  • Access status
  • Web browser and operating system used
  • (Complete) IP address of the requesting computer
  • Amount of data transferred

 

We collect the listed data in order to be able to guarantee a reliable connection of the website and a technically error-free provision of our services. The processing of this data is absolutely necessary to provide you with the website. The log files are used to evaluate system security and stability, as well as for administrative purposes. The legal basis for the processing of the data is our legitimate interest in the protection and functionality of our website pursuant to Article 6 (1) (f) GDPR.

For reasons of technical security, in particular to defend against attempted attacks on our web server, we store this data for 52 weeks. After this period, the data is automatically deleted. A storage of this data together with other personal data of the user, a comparison with other databases or a transfer to third parties will not take place at any time.

Cookies

Our website uses so-called "cookies". Cookies are small text files that are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your terminal device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your terminal device until you delete them yourself or an automatic solution is provided by your web browser.

Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or language settings). Other cookies are used to evaluate user behavior or to display advertising.

The processing of data through the use of strictly necessary cookies is based on a legitimate interest pursuant to Article 6 (1) (f) GDPR in the technically error-free provision of our services. For details on the processing purposes and legitimate interests, please refer to the explanations on the specific data processing.

The processing of personal data through the use of other cookies is based on consent pursuant to Article 6 (1) (a) GDPR. The consent can be revoked at any time for the future. Insofar as such cookies are used for analysis and optimization purposes, we will inform you separately about this within the framework of this data protection declaration and obtain consent in accordance with Article 6 (1) (a) GDPR.

You can set your browser to allow you to

  • be informed about the setting of cookies,
  • accept cookies only in individual cases,
  • exclude the acceptance of cookies for certain cases or in general,
  • enable automatic deletion of cookies when closing the browser.

 

Cookie settings can be managed under the following links for the respective browsers:

 

Sie können Cookies vieler Unternehmen und Funktionen, die für Werbung eingesetzt werden, auch einzeln verwalten. Verwenden Sie dazu die entsprechenden Nutzer-Tools, abrufbar unter https://www.aboutads.info/choices/ oder http://www.youronlinechoices.com/uk/your-ad-choices.

Most browsers also offer a so-called "do-not-track function". When this feature is enabled, the browser tells ad networks, websites, and applications that you do not want to be tracked for behavioral advertising and the like.

For information and instructions on how to edit this feature, see the links below, depending on your browser provider:

 

Zusätzlich können Sie standardmäßig das Laden sog. Scripts verhindern. „NoScript“ erlaubt das Ausführen von JavaScripts, Java und anderen Plug-ins nur bei vertrauenswürdigen Domains Ihrer Wahl. Informationen und Anleitungen, wie Sie diese Funktion bearbeiten können, erhalten Sie über den Anbieter Ihres Browsers (z. B. für Mozilla Firefox unter: https://addons.mozilla.org/de/firefox/addon/noscript/).

Please note that if you disable cookies, the functionality of our website may be limited.

Real Cookie Banner

Zur Verwaltung der eingesetzten Cookies und ähnlichen Technologien (Tracking-Pixel, Web-Beacons etc.) und diesbezüglicher Einwilligungen setzen wir das Consent Tool „Real Cookie Banner“ ein. Details zur Funktionsweise von „Real Cookie Banner“ findest du unter https://devowl.io/de/rcb/datenverarbeitung/.

 

Rechtsgrundlagen für die Verarbeitung von personenbezogenen Daten in diesem Zusammenhang sind Art. 6 Abs. 1 lit. c DS-GVO und Art. 6 Abs. 1 lit. f DS-GVO. Unser berechtigtes Interesse ist die Verwaltung der eingesetzten Cookies und ähnlichen Technologien und der diesbezüglichen Einwilligungen.

 

Die Bereitstellung der personenbezogenen Daten ist weder vertraglich vorgeschrieben noch für den Abschluss eines Vertrages notwendig. Du bist nicht verpflichtet, die personenbezogenen Daten bereitzustellen. Wenn du die personenbezogenen Daten nicht bereitstellst, können wir deine Einwilligungen nicht verwalten.

Changing cookie settings

You can revoke or change your cookie settings at any time. To do so, call up the cookie settings again via this link:

Contact form and contact by e-mail

If you send us inquiries via contact form or e-mail, your data from the inquiry form or your e-mail, including the personal data you provide there, will be stored by us for processing the inquiry and for the case of follow-up questions. The submission of an e-mail address is required for contacting us, the submission of your first and last name and your telephone number is voluntary. Under no circumstances will we pass on this data without your consent. The legal basis for the processing of the data is our legitimate interest in responding to your request in accordance with Article 6 (1) (f) GDPR and, if applicable, Article 6 (1) (b) GDPR, if your request is aimed at concluding a contract. Your data will be deleted after final processing of your request, provided that there are no legal obligations to retain data. You can object to the processing of your personal data at any time in the case of Article 6 (1) (f) GDPR.

Newsletter

If you would like to receive the newsletter offered on the website with regular information about our offers and products, we require your e-mail as mandatory information.

Additional data may be provided in order to address you personally in the newsletter and/or to identify you if you wish to exercise your rights regarding data privacy.

For sending the newsletter, we use the so-called double opt-in procedure. This means that we will only send you our newsletter by e-mail if you have expressly confirmed that you consent to the sending of newsletters. In the first step, you will receive an e-mail with a link that you can use to confirm that you, as the owner of the corresponding e-mail address, want to receive newsletters in the future. With the confirmation, you give us your consent in accordance with Article 6 (1) (a) GDPR that we may use your personal data for the purpose of sending the requested newsletter.

When registering for the newsletter, we store, in addition to the email address required for sending, the IP address through which you registered for the newsletter, as well as the date and time of registration and confirmation, in order to be able to track possible misuse at a later date. The legal basis for this is our legitimate interest according to Article 6 (1) (f) GDPR.

You can unsubscribe from the newsletter at any time via the link included in each newsletter or by sending an e-mail to the responsible person named above. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to the continued use of the collected data or the continued processing is otherwise permitted by law.

Google Maps

Our homepage uses the online map service provider Google Maps via an interface. This allows us to display interactive maps directly on the website and enables you to use the map function conveniently. The provider of the map service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. To use the functionalities of Google Maps, it is necessary to store your IP address.

Google uses cookies to collect information about user behaviour. The legal basis for the processing of your personal data is your consent given for this purpose in accordance with Article 6 (1) (a) DSGVO, Section 25 (1) TTDSG.

Since a transfer of personal data to the USA takes place, further protection mechanisms are required to ensure the level of data protection of the GDPR. To ensure this, Google uses standard data protection clauses in accordance with Article 46 (2) (c) GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured by this contractual extension, we endeavour to obtain additional regulations and commitments from the recipient in the USA.

For more information on the handling of user data, please refer to Google's privacy policy:
https://www.google.de/intl/de/policies/privacy/
Opt-out: https://www.google.com/settings/ads/

YouTube

On our website, we integrate videos from "YouTube", a social media platform of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). The legal basis for the processing of your personal data is your consent granted for this purpose in accordance with Article 6 (1) (a) GDPR.

If the playback of embedded YouTube videos is started by your consent, the provider "YouTube" uses cookies to collect information about user behaviour. According to "YouTube", these cookies are used, among other things, to collect video statistics, to improve user-friendliness and to prevent abusive behaviour. If you are logged in to Google, your data will be directly assigned to your account when you click on a video. If you do not wish to have your data associated with your YouTube profile, you must log out before activating the button. Google stores this data as a usage profile and uses it for the purposes of advertising, market research and/or designing its websites to meet user needs. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. Please contact Google directly for this purpose.

Since a transfer of personal data to the USA takes place, further protection mechanisms are required to ensure the level of data protection of the GDPR. To ensure this, Google uses standard data protection clauses in accordance with Article 46 (2) (c) GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured by this contractual extension, we endeavour to obtain additional regulations and commitments from the recipient in the USA.

For more information about Google's privacy policy and data usage, please visit the following Google website: https://policies.google.com/privacy?hl=de&gl=de

Google Analytics

Our website uses Google Analytics, an internet analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses so-called "cookies".

Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, and compiling reports on website activity. Google will also use this information to provide the website operator with other services related to the use of the website and the Internet. The IP address sent by your browser as part of Google Analytics is not combined with other data from Google. The processing is carried out in accordance with Article 6 (1) (a) GDPR on the basis of the consent given by you.

We use Google Analytics only with IP anonymization enabled. This means that your IP address is only processed by Google in a shortened form.

We have concluded a data processing contract with the service provider, in which we oblige him to protect our customers' data and not to pass it on to third parties.

Since a transfer of personal data to the USA takes place, further protection mechanisms are required to ensure the level of data protection of the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Article 46 (2) (c) of the GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we endeavor to obtain additional regulations and commitments from the recipient in the USA.

The Google Analytics terms of use and information on data protection can be accessed via the following links:
http://www.google.com/analytics/terms/de.html
https://www.google.de/intl/de/policies/

 

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Deletion of user-level and event-level data linked to cookies, user identifiers (e.g., user ID), and advertising IDs (e.g., DoubleClick cookies, Android advertising ID, IDFA [Apple identifier for advertisers]) takes place no later than 14 months after their collection.

You can prevent the storage of cookies by adjusting the settings of your browser software accordingly. However, we would like to point out that in this case, you may not be able to use all functions of this website without restrictions. You can also prevent Google from collecting the data generated by the cookie and from analysing your use of the website (including your IP address) and from having this data processed by Google by downloading and installing the browser plugin available under https://tools.google.com/dlpage/gaoptout?hl=de .

Google Ads

We use "Google Ads" on our website, a service of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). We use Google Ads for marketing and optimization purposes, in particular to display ads that are relevant and interesting to you.

If you have given us your consent to do so pursuant to Article 6 (1) sentence 1 (a) of the GDPR, we can use Google Ads to draw attention to our attractive offers on external websites with the help of advertising media. This allows us to determine how successful individual advertising measures are.

These advertisements are delivered by Google via so-called "AdServers". We use so-called AdServer cookies for this purpose, through which certain parameters for measuring success, such as display of the ads or clicks by the users, can be measured.

If you access our website via a Google ad, Google Ads will store a cookie on your PC. These cookies usually lose their validity after 30 days. They are not intended to identify you personally. The following information is usually stored as analysis values for this cookie: unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), opt-out information (marking that the user no longer wishes to be addressed). These cookies enable Google to recognize your web browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked across Ads customers' websites. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media; in particular, we cannot identify users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of Google Ads. According to our knowledge, Google receives the information that you have called up the relevant part of our website or clicked on an ad from us. If you have a user account with Google and are registered, Google can assign the visit to your user account. Even if you are not registered with Google or have not logged in, there is the possibility that Google learns your IP address and stores it.

Since a transfer of personal data to the USA takes place, further protection mechanisms are required to ensure the level of data protection of the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Article 46 (2) (c) of the GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we endeavor to obtain additional regulations and commitments from the recipient in the USA.

Further information on data use by Google, on setting and objection options, and on data protection can be found on the following Google web pages:

 

You can prevent the installation of cookies by deleting existing cookies and deactivating the storage of cookies in the settings of your web browser. We would like to point out that in this case you may not be able to use all functions of our website to their full extent. Preventing the storage of cookies is also possible by setting your web browser so that cookies from the domain "www.googleadservices.com" are blocked (https://www.google.de/settings/ads). We would like to point out that this setting will be deleted when you delete your cookies. In addition, you can deactivate interest-based ads via the link http://optout.aboutads.info . Please note that this setting will also be deleted when you delete your cookies.

Facebook Pixel

We use "Facebook Pixel" on our website, a service of Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland (hereinafter referred to as: "Facebook").

If you have given us your consent to do so pursuant to Article 6 (1) (a) of the GDPR, we use Facebook Pixel for marketing and optimization purposes, in particular to place relevant and interesting ads for you on Facebook and thus improve our offer, make it more interesting for you as a user and avoid annoying ads.

Facebook Pixel enables Facebook to display our ads on Facebook, so-called "Facebook Ads", only to those Facebook users who were visitors to our internet presence, in particular who have shown interest in our online offer. Facebook Pixel also makes it possible in this case to check whether a user was redirected to our website after clicking on our Facebook Ads. Facebook Pixel uses, among other things, cookies, i.e. small text files that are stored locally in the cache of your web browser on your end device. If you are logged in to Facebook with your user account, your visit to our online presence will be noted in your user account. The data collected about you is anonymous for us, so it does not offer us any conclusions about the identity of the user. However, this data can be linked by Facebook with your user account there. If you have a user account with Facebook and are registered, Facebook can assign the visit to your user account.

Since a transfer of personal data to the USA takes place, further protection mechanisms are required to ensure the level of data protection of the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 (2) (c) GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even through this contractual extension, we endeavor to obtain additional regulations and commitments from the recipient in the USA.

Further information from the third-party provider on data protection can be found on the following Facebook website: https://www.facebook.com/about/privacy.
Information on Facebook Pixel can be found on the following Facebook website: https://www.facebook.com/business/help/651294705016616

 

You can make the relevant settings as to which types of advertisements are displayed to you within Facebook on the following Facebook website: https://www.facebook.com/settings?tab=ads.

 

We would like to point out that this setting will be deleted when you delete your cookies. In addition, you can deactivate cookies that are used for range measurement and advertising purposes via the following websites:
http://optout.networkadvertising.org/
http://www.aboutads.info/choices
http://www.youronlinechoices.com/uk/your-ad-choices/


Please note that this setting will also be deleted when you delete your cookies.

External links

Social networks (Instagram, Facebook, Twitter, YouTube) are only integrated on our website as a link to the corresponding services. After clicking on the embedded text/image link, you will be redirected to the page of the respective provider. Only after being forwarded will user information be transferred to the respective provider. For information on the handling of your personal data when using these websites, please refer to the respective privacy policies of the providers you use.

Data transfer and recipients

A transfer of your personal data to third parties does not take place, with the exception of

  • if we have explicitly referred to this in the description of the respective data processing,
  • if you have given your express consent to this in accordance with Article 6 (1) sentence 1 (a) GDPR,
  • the disclosure is necessary pursuant to Article 6 (1) sentence 1 (f) GDPR for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,
  • in the event that there is a legal obligation for the disclosure pursuant to Article 6 (1) sentence 1 (c) GDPR, and
  • as far as this is necessary for the processing of contractual relationships with you according to Article 6 (1) sentence 1 (b) GDPR.

 

In addition, we use external service providers for the processing of our services, which we have carefully selected, commissioned in writing and with whom we have concluded order processing agreements in accordance with Article 28 GDPR, if necessary. These are bound by our instructions and are regularly monitored by us. These are, among others, service providers for hosting, sending emails and maintenance and care of our IT systems, etc. The service providers will not disclose this data to third parties.

Data security

We take appropriate technical and organizational measures in accordance with Article 32 of the GDPR, taking into account the state of the art, the costs of implementation and the nature, scope, circumstances and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk. This website uses SSL encryption for security reasons and to protect the transmission of confidential content.

Duration of the storage of personal data

The duration of the storage of personal data is measured by the relevant statutory retention periods (e.g. from commercial law and tax law). After expiry of the respective period, the corresponding data is routinely deleted. If data is required for the fulfilment or initiation of a contract or if we have a legitimate interest in continuing to store it, the data will be deleted when it is no longer required for these purposes, or you have exercised your right of revocation or objection.

Your rights

In the following, you will find information on which rights the applicable data protection law grants you towards the responsible party with regard to the processing of your personal data:

 

The right to request information about your personal data processed by us in accordance with Article 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details.

 

The right to request the correction of inaccurate or incomplete personal data stored by us without undue delay in accordance with Article 16 GDPR.

 

The right to request the erasure of your personal data stored by us in accordance with Article 17 GDPR, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.

 

The right to request the restriction of the processing of your personal data in accordance with Article 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure, and we no longer need the data, you however need it for the assertion, exercise or defence of legal claims, or you have objected to the processing in accordance with Article 21 GDPR.

 

The right, pursuant to Article 20 of the GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another responsible party.

 

The right to complain to a supervisory authority in accordance with Article 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our registered office stated above or, if applicable, that of your usual place of residence or workplace.

 

The right to revoke consent given in accordance with Article 7 (3) GDPR: You have the right to revoke consent to the processing of data once given at any time with effect for the future. In the event of revocation, we will immediately delete the data concerned, unless further processing can be based on a legal basis for processing without consent. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Right of objection

Insofar as your personal data is processed by us on the basis of legitimate interests pursuant to Article 6 (1) sentence 1 (f) GDPR, you have the right to object to the processing of your personal data pursuant to Article 21 GDPR, insofar as this is done for reasons arising from your particular situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement to specify a particular situation.

If you wish to exercise your right of revocation or objection, simply send an e-mail to: info@schimmel-piano.de

Legal obligations

The provision of personal data for the decision on the completion of a contract, the fulfilment of the contract or for the implementation of pre-contractual measures is voluntary. However, we can only make the decision in the context of contractual measures if you provide such personal data that is required for the completion of the contract, the fulfilment of the contract or pre-contractual measures.

Automated decision-making

Automated decision-making or profiling according to Article 22 GDPR does not take place.

Subject to alteration

We reserve the right to adapt or update this data protection declaration if necessary in compliance with the applicable data protection regulations. In this way, we can adapt it to the current legal requirements and take into account changes to our services, e.g. when introducing new services. The current version applies to your visit.

Stand dieser Datenschutzerklärung: 29.09.2023

Cookie Consent with Real Cookie Banner