• Notes and modifications as a result of the new data protection regulations (GDPR)

    Thank you for your interest in our website. The protection of your personal data is important to us. The following text includes information on how we handle your data, collected through your use of our website. Your data will be processed in accordance with the statutory data protection regulations. Where links are provided to other websites we have neither influence nor control over the linked content and the data protection conditions on these sites. We recommend examining the data protection declarations on the linked websites in order to be able to determine whether and to what extent personal data is collected, processed, used or made accessible to third parties.

    Responsible supervisory authority within the meaning of data protection law 
    Wilhelm Schimmel Pianofortefabrik GmbH
    Friedrich-Seele-Strasse 20,
    D- 38122 Braunschweig
    info@schimmel-piano.de
    Tel: +49 (0)531/8018-0

    Our responsible supervisory authority within the meaning of data protection law: 
    Mr. Dominik Fünkner
    Datenschutzexperte.de
    Friedrichstrasse 22
    D-80801 München
    Tel: +49 89 217685170
    E-mail: datenschutzbeauftragter@datenschutzexperte.de

    Definitions
    Our data protection declaration should be simple and easy for everyone to understand. The data protection declaration generally uses the official terms in the General Data Protection Regulation (GDPR). The official definitions of terms are explained in Article 4 GDPR (https://dejure.org/gesetze/DSGVO/4.html)

    Data processing through the visit to our website
    When you open our website it is technically necessary that data regarding your Internet browser is communicated to our web server. The following data is recorded in the course of an ongoing connection for communication between your Internet browser and our web server: 

    Domain visited 

    • Date and time of the requests
    • The page from which the file was requested
    • Access status (file transferred, file not found, etc.)
    • Web browser used and operating system used
    • IP address of the requesting computer
    • Data quantity transferred

    We collect the listed data in order to ensure creation of a smooth connection to the website and to allow convenient use of our website by its users. The log file is also used to analyse system security and stability as well as for administrative purposes. The legal basis for the temporary storage of the data and/or the log files is Article 6 (1) lit. f GDPR.

    We store this data for seven days for technical security reasons, more specifically for defence against attempted attacks on our web server. After this time the data is automatically deleted. This data is not analysed. This data is not conflated with other data sources.

    Contact form
    If you send us an enquiry using a contact form or by e-mail, then we will store the information in the enquiry form and/or your e-mail, including the contact data that you provided so that the enquiry could be processed and in the event of further questions. We will never pass this data to a third party without your permission. The legal basis for the processing of the data is our legitimate interest in answering your enquiry in accordance with Article 6 (1) lit. f GDPR and in some cases Article 6 (1) lit. b DSGVO, if your enquiry aims to agree a contract. Your data will be deleted once the processing of your enquiry has been completed if there are no statutory storage obligations that contradict this.

    Data transfer and recipient
    Your personal data will not be transferred to third parties except 

    • If we indicate this explicitly in the relevant data processing description.

    • If you have provided express permission in accordance with Article 6 (1) page 1 lit. a GDPR,

    • Transfer is necessary in accordance with Article 6 (1) page 1 lit. f GDPR to assert, exert of defend legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-transferral of your data, 

    • In the event that there is a legal obligation to transfer in accordance with Article 6 (1) page 1 lit. c GDPR and

    • To the extent that this is necessary in accordance with Article 6 (1) page 1 lit. b GDPR for the processing of contractual relationships with you.

    We also use external service providers, carefully selected and commissioned by us in writing, in order to provide our services. They are bound by our instructions and are inspected by us at regular intervals. We have agreed order processing contracts with them as necessary in accordance with Article 28 GDPR. They are service providers for web hosting, sending e-mails and the repair and maintenance of our IT systems etc. The service providers will not transfer this data to third parties. 

    Storage periods for personal data
    The storage period for personal data is calculated according to the relevant statutory storage deadlines (e.g. in commercial law and tax law). At the end of the relevant period the corresponding data will be routinely destroyed. If data is necessary in order to fulfil or initiate a contract or if we have a legitimate interest in continued storage then the data will be deleted once it is no longer needed for these purposes or you exercise your right of revocation or right of objection.  

    Your rights
    The following text includes information on the rights of the individual that the valid data protection law grants you towards the responsible parties with regard to processing of your personal data:

    The right, in accordance with Article 15 GDPR, to demand information on the personal data we have processed. In particular you can demand information on the purposes of the processing, the category of personal data, the categories of recipients who were or will be given access to your data, the planned storage period, the existing of a right of rectification, deletion, limitation of processing or objection, the existence of a right of appeal, the origin of the data if we did not collect them, and on the existence of an automated decision-making system, including profiling and any significant information on the details of the data.

    The right, in accordance with Article 16 GDPR, to demand immediate rectification of incorrect or completion of incomplete personal data that we are storing on you.

    The right, in accordance with Article 17 GDPR, to demand deletion of the personal data we are holding on you where it is not necessary for it to be processed in order to exercise the right to free expression and information, to fulfil a legal obligation, for reasons of public interest or in order to assert, exert or defend a legal claim. 

    The right, in accordance with Article 18 GDPR, to demand limitation of the processing of your personal data where you dispute the accuracy of the data, the processing is unlawful but you reject its deletion and we no longer need the data but you need it to assert, exert or defend a legal claim or you have objected to the processing in accordance with Article 21 GDPR. 

    The right, in accordance with Article 20 GDPR, to receive your personal data in a structured, standard and machine-readable format or to demand transfer of the same to another responsible party. 

    The right, in accordance with Article 77 GDPR, to complain to a supervisory authority. Usually you can contact the supervisory authority of the federal state of our headquarters, listed above, or in some cases the location of your habitual residence or workplace. 

    The right to revoke issued consent in accordance with Article 7 (3) GDPR: you are entitled to revoke consent that you have issued for the processing of the data at any time, effective from that time. In the event of a revocation we will delete the relevant data immediately wherever there is no legal basis for processing without consent. Revocation of consent does not affect the legality of the processing that took place based on the consent up to the time of revocation; 

    Right of objection 

    If we process your personal data on the basis of legitimate interests in accordance with Article 6 (1) page 1 lit. f GDPR you are entitled, in accordance with Article 21 GDPR, to object to the processing of your personal data where this is for reasons of your particular situation. Where the objection is against the processing of personal data for the purpose of direct advertising you have a general right of objection without the need to state a particular situation. 

    If you would like to exercise your right of revocation or right of objection please send an e-mail to info@schimmel-piano.de.

    Modification of our data protection declaration
    We reserve the right to adapt or update this data protection declaration as necessary, taking into account the valid data protection regulations. In this way we can adapt them to comply with the current legal requirements and take into account changes in our services; e.g. when introducing new services. The latest valid version applies to your visit. 

    Status of the data protection declaration: 25.05.2018