Privacy Policy

Privacy Policy (Datenschutzerklärung) of Peakhouse Audio

Thank you for your interest in our company. We take data protection seriously.

You can generally use our website without providing any personal data. However, if a data subject wants to use our company's services via our website, the processing of personal data may be required. If processing personal data is necessary and there is no legal basis for such processing, we will always obtain the consent of the data subject.

The processing of personal data (e.g., name, address, email address, or phone number of a data subject) will always be in compliance with the General Data Protection Regulation (GDPR) and in accordance with applicable national data protection laws.

Through this privacy policy, we aim to inform the public about the nature, scope, and purpose of the personal data we collect, use, and process. We will also inform data subjects about their rights under this policy.

As the responsible party for processing, we have implemented numerous technical and organizational measures to ensure the most complete protection of the personal data processed through our website. However, data transfers over the Internet can be subject to security gaps. A 100% protection cannot be guaranteed. Therefore, affected persons can also alternatively transmit their personal data by phone.

1. Definitions

This privacy policy is based on the definitions used by the European legislator when enacting the GDPR (Article 4 GDPR). The privacy policy is intended to be easily readable and understandable for everyone. To ensure this, we would like to first explain the terms used in this privacy policy. Among other things, the following definitions are used in this privacy policy:

Personal Data: Any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"). A natural person is identifiable if they can be directly or indirectly identified, in particular by reference to an identifier such as a name, identification number, location data, an online identifier, or one or more specific factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.
Data Subject: Any identified or identifiable natural person whose personal data is processed by the controller.
Processing: Any operation or set of operations performed on personal data, whether or not by automated means, such as collecting, recording, organizing, structuring, storing, altering, retrieving, consulting, using, disclosing by transmission, dissemination, or otherwise making available, aligning, or combining, restricting, deleting, or destroying.
Restriction of Processing: The marking of stored personal data to limit its future processing.
Profiling: Any type of automated processing of personal data that involves using such data to evaluate certain personal aspects relating to a natural person, particularly to analyze or predict aspects concerning their work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
Controller: The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Recipient: A natural or legal person, authority, agency, or other body to which personal data is disclosed, whether or not they are a third party.
Third Party: A natural or legal person, public authority, agency, or other body other than the data subject, the controller, the processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data.
Consent: The data subject's consent is any freely given, informed, and unambiguous indication of the data subject’s wishes, either by a statement or by a clear affirmative action, signifying agreement to the processing of personal data relating to them.

2. Name and Contact Details of the Controller

This privacy notice applies to data processing by:

Controller: Peakhouse Audio, represented by CEO Jan Koray

Email: jan@peakhouse-audio.de
Phone: +49 (0)2330 / 892 88 52

3. Collection and Storage of Personal Data and the Purpose of Using Them

a) When visiting the website

You can generally visit our website without disclosing your identity. When accessing our website, the browser on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected automatically and stored until its automated deletion:

IP address of the requesting computer
Date and time of access
Name and URL of the accessed file
Website from which the access was made (referrer URL)
Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

We process this data for the following purposes:

Ensuring a smooth connection to our website
Ensuring comfortable use of our website
Analyzing system security and stability
Other administrative purposes

The legal basis for data processing is Article 6(1) sentence 1 lit. f GDPR. Our legitimate interest arises from the above-mentioned purposes for data collection. Under no circumstances do we use the collected data to draw conclusions about your person.

In addition, we use cookies and analytical services when you visit our website. Further explanations are provided under sections 5 and 7 of this privacy policy.

b) When using our contact form

If you have any questions, we offer you the opportunity to contact us via a form on our website. A valid email address is required so that we know who the inquiry comes from and can respond. Other information may be provided voluntarily. It is up to you whether you wish to provide this data when using the contact form.

Data processing for the purpose of contacting us is based on Article 6(1) sentence 1 lit. a GDPR, with your voluntary consent.

The personal data collected from you when using the contact form will be automatically deleted once we have completed your inquiry.

c) When making purchases through our website

You can make purchases on our website either as a guest without registering or by registering as a customer for future orders. Registration has the advantage that you can log in to our shop in the future with your email address and password without having to re-enter your contact details.

Your personal data will be entered into a form and transmitted and stored with us. When placing an order, we collect the following data:

Salutation, first name, last name
A valid email address
Address
Telephone number (landline and/or mobile)

This data is collected for the following purposes:

Identifying you as our customer
Processing, fulfilling, and handling your order
Correspondence with you
Billing
Handling potential liability claims and asserting claims against you
Ensuring the technical administration of our website
Managing customer data

Consent for the processing of this data is obtained during the order process.

The data processing is carried out based on your order and/or registration, in accordance with Article 6(1) sentence 1 lit. b GDPR, for the purpose of appropriately processing your order and fulfilling the mutual obligations arising from the purchase contract.

The personal data collected for processing your order will be stored until the statutory retention period expires and then deleted, unless we are required to store it for a longer period due to tax and commercial law retention obligations (e.g., according to HGB, StGB, or AO) or you have consented to a longer storage period.

4. Data Sharing

We will only share your personal data with third parties if it is necessary for the execution of the contract, such as with logistics companies or financial institutions responsible for payment matters. The extent of the data shared will be limited to the necessary minimum.

In cases of payment via PayPal, credit card via PayPal, direct debit via PayPal, installment purchase via PayPal, or "buy on account" via PayPal, we will pass your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, for payment processing. PayPal reserves the right to perform a credit check. The results of the credit check are used to decide whether to offer the respective payment method. The credit report may include probability values (so-called scores). These values are based on a scientifically recognized mathematical-statistical process. The calculation of scores includes address data. You can find further data protection information in PayPal’s privacy policy: PayPal Privacy Policy.

Your personal data will not be shared with third parties for purposes other than those listed above.

We may also share your data with third parties when:

You have expressly consented to it as per Article 6(1) sentence 1 lit. a GDPR
The sharing is necessary for the establishment, exercise, or defense of legal claims under Article 6(1) sentence 1 lit. f GDPR
There is a legal obligation to share the data under Article 6(1) sentence 1 lit. c GDPR
The sharing is necessary for the performance of the contract with you under Article 6(1) sentence 1 lit. b GDPR

7. Analytics and Tracking Tools

The tracking measures listed below are implemented based on Article 6(1) Sentence 1 lit. f of the GDPR. The tracking measures used are intended to ensure the needs-based design and continuous optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate this data for the purpose of optimizing our offerings for you. These interests are considered legitimate within the meaning of the aforementioned provision.

The respective purposes of data processing and data categories can be found in the respective tracking tools.

a) Google Analytics

To ensure the needs-based design and continuous optimization of our pages, we use Google Analytics, a web analytics service provided by Google Inc. (https://www.google.de/intl/en/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google"). In this context, pseudonymized usage profiles are created, and cookies (see Section 5) are used. The information generated by the cookie about your use of this website, such as:

Browser type/version
Operating system used
Referrer URL (the previously visited page)
Hostname of the accessing computer (IP address)
Time of the server request

is transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity, and to provide other services related to website and internet usage for market research and needs-based design of the website. This information may also be transmitted to third parties if required by law or if third parties process the data on behalf of Google. In no case will your IP address be merged with other data from Google. IP addresses are anonymized, making it impossible to associate them (IP masking).

You can prevent the installation of cookies by adjusting your browser settings accordingly; however, we point out that in this case, not all functions of our website may be fully available.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en).

Alternatively, especially for browsers on mobile devices, you can prevent the collection by Google Analytics by clicking on the link above. An opt-out cookie will be set, which prevents the future collection of your data when visiting our website. The opt-out cookie is valid only in this browser and only for our website and will be placed on your device. If you delete the cookies in this browser, you will need to set the opt-out cookie again.

For more information about data protection related to Google Analytics, please refer to the following link in the Google Analytics Help: https://support.google.com/analytics/answer/6004245?hl=en

b) Google AdWords Conversion Tracking

To statistically record the use of our website and to evaluate this data for the optimization of our website, we also use Google Conversion Tracking. In this process, a cookie (see Section 5) is placed on your computer by Google AdWords if you arrived at our website via a Google ad.

These cookies expire after 30 days and do not serve for personal identification. If the user visits certain pages of the AdWords customer's website and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page.

Each AdWords customer receives a different cookie. Therefore, cookies cannot be tracked across the websites of AdWords customers. The information obtained through the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers are informed about the total number of users who clicked on their ad and were redirected to a page containing a conversion tracking tag. However, they do not receive any information that allows personal identification of users.

If you do not wish to participate in the tracking process, you can also reject the placement of a cookie by adjusting your browser settings to disable cookies generally. You can also disable cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com". Google's privacy policy regarding conversion tracking can be found at the following link: https://services.google.com/sitestats/en.html

8. Social Media Plugins

We use social media plugins (e.g., Facebook, Twitter, Google+) on our website based on Article 6(1) Sentence 1 lit. f of the GDPR to increase the visibility of our company. The underlying advertising purpose is considered a legitimate interest within the meaning of the GDPR. The responsibility for data protection-compliant operation is to be ensured by the respective providers. We integrate these plugins using the so-called two-click method to protect visitors to our website as effectively as possible.

a) Facebook

We use social media plugins from Facebook on our website to make their use more personal. For this purpose, we use the "LIKE" or "SHARE" buttons. These are provided by Facebook.

When you visit a page of our website that contains such a plugin, your browser establishes a direct connection with Facebook’s servers. The content of the plugin is transmitted directly from Facebook to your browser and integrated into the website.

Through the integration of the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged into Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there.

If you are logged into Facebook, Facebook can directly associate the visit to our website with your Facebook account. If you interact with the plugins, for example by clicking the "LIKE" or "SHARE" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook for everyone to see.

Facebook can use this information for advertising, market research, and needs-based design of the Facebook pages. To do this, Facebook creates usage, interest, and relationship profiles, for example, to evaluate your use of our website in relation to the ads shown to you on Facebook, to inform other Facebook users about your activities on our website, and to provide further services related to Facebook usage.

If you do not want Facebook to associate the data collected through our website with your Facebook account, you must log out of Facebook before visiting our website.

For the purpose and scope of data collection and further processing and use of the data by Facebook, as well as your rights and settings options for protecting your privacy, please refer to Facebook's privacy policy, which you can view here: https://www.facebook.com/about/privacy/

b) Twitter

We have integrated plugins from the microblogging network Twitter Inc. (Twitter) on our website. The Twitter plugins (tweet buttons) are identified by the Twitter logo on our page. An overview of tweet buttons can be found here: https://dev.twitter.com/web/tweet-button

When you visit a page of our website that contains such a plugin, a direct connection is established between your browser and Twitter's server. As a result, Twitter receives the information that you visited our page with your IP address. If you click on the Twitter "tweet button" while logged into your Twitter account, you can link the content of our pages to your Twitter profile. This allows Twitter to associate your visit to our pages with your user account. We point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or how it is used by Twitter.

If you do not want Twitter to associate your visit to our pages, please log out of your Twitter account.

Further information can be found in Twitter's privacy policy, which you can view here: https://twitter.com/en/privacy

c) Google "+1" Button

Our website uses the "+1" button from the social network Google, which is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA. The button is marked with a "+1".

The "+1" button is shorthand for "this is really cool" or "check this out." The button is not used to track your visits on the web.

If a page of our website contains the "+1" button, your internet browser will automatically load and display the button from Google's server. The website you visit is automatically sent to Google's server. By displaying the "+1" button, Google does not permanently record your browser history but only for up to two weeks for system maintenance and troubleshooting purposes.

These data are not structured by individual profiles, usernames, or URLs. They are also not accessible to website publishers or advertisers. This information is only used for maintenance and troubleshooting in Google's internal systems. Your visit to a page with the "+1" button will not be evaluated in any other way by Google.

A further evaluation of your visit to a page on our website with a "+1" button does not take place.

The granting of "+1" is a public action, meaning that anyone who performs a Google search or accesses content on the web that you have given a +1 can potentially see that you gave the corresponding content a +1. Therefore, only give a +1 if you are absolutely sure you want to share this recommendation with the entire world.

A click on this +1 button serves as a recommendation for other users in Google's search results. You can publicly indicate that you like our website, that you approve of our website, or that you recommend our website. If you have registered with Google+ and are logged in, the +1 button will turn blue when clicked. The +1 will also be added to the +1 tab in your Google profile. On this tab, you can manage your +1s and decide whether to make the +1 tab public.

To store and publicly share your +1 recommendation

9. Rights of Data Subjects:

Users have rights under the GDPR, such as the right to access data being processed (Article 15 GDPR), the right to correct or delete inaccurate data (Articles 16 and 17 GDPR), the right to restrict processing (Article 18 GDPR), the right to data portability (Article 20 GDPR), and the right to object (Article 21 GDPR). Consent can be withdrawn at any time.

10. Right to Object:

Users can object to the processing of their data if it is based on legitimate interests, particularly with regard to direct marketing.

11. Data Security:

The website uses SSL encryption for secure data transmission. Security measures are regularly updated to protect against unauthorized access, data loss, and manipulation.

12. Updates and Changes:

The privacy policy has been valid since March 2018 and may be updated in the event of changes to the website or legal requirements. The latest version of the privacy policy will be made available on the website.

The privacy policy provides a transparent description of how tracking technologies are used and how users can exercise their rights.