Protecting your privacy and your personal data is very important to us. We therefore comply with the provisions of the German Federal Data Protection Act (BDSG) and the General Data Protection Regulation (GDPR) and describe below how we handle your data and which rights you are entitled to under the applicable provisions.

​

Who is responsible for data processing?

WoodVolts® Guitars
Hauptstraße 20, 95173 Schönwald
Controller: Christian Schlittenbauer
Contact: info@woodvolts.de

​

What is the legal basis for processing?

The legal basis for data processing is Art. 6(1)(b) GDPR. We require your personal data that you provide to us as part of an inquiry in order to carry out pre-contractual measures (initiation of business) or to perform a contract if you are our customer.

​

How long will your data be stored?

We delete your personal data as soon as it is no longer necessary for the purposes stated above or a statutory retention period expires. Such verification and retention obligations arise, among other things, from the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention periods here are up to ten years.
Personal data may be retained for the period during which claims against our company may be asserted (statutory limitation periods of three up to thirty years).

​

Your rights in detail

Right to confirmation

You have the right to request confirmation from the controller stated above as to whether personal data concerning you are being processed.

​

Right of access

You have the right of access to:

• the type and scope of the data specifically stored by us about you

• the categories of personal data that are processed in relation to you (e.g. company, surname, first name, date of birth, address, bank details)

• the recipients or categories of recipients who have received or will receive your data (e.g. departments of our company, credit agencies)

 

Right to data portability

You have the right to receive data that we process automatically during the initiation of business or in performance of a contract, and to have it handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place insofar as it is technically feasible.

​

Right to rectification and erasure

If personal data about you are stored incorrectly by us, you have the right to rectification of this data. You may exercise your right to erasure of the data at any time if the requirements of Art. 17 GDPR are met. This is the case, for example, if you are no longer a customer of our company and no longer make use of any services of our company—then the data are no longer necessary for the purpose for which they were collected.

​

Right to restriction of processing by the controller

We will not process your data as long as the accuracy of your personal data is contested by you and you request that we suspend processing until we have verified the accuracy of your personal data.

​

Right to object to processing

You have the right at any time to object to the use of your data by the controller for the purpose of direct advertising.

​

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority. The authority responsible for our company is:

Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht)
Registered address
Promenade 27 (Schloss)
91522 Ansbach
Germany
Postal address
Postfach 606
91511 Ansbach
Germany
Contact
Telephone: +49 (0) 981 53 1300
Fax: +49 (0) 981 53 98 1300
E-mail: poststelle@lda.bayern.de

​

Further information

Cookies

We also use cookies to extend the functionality of our website and to make it more convenient for you to use. Cookies are small text information that are stored as a file on your device via your Internet browser. However, cookies cannot read any information from your computer or interact with other cookies on your hard drive. No collection or storage of your personal data takes place in cookies. If you do not want your browser to accept cookies, you have the option to prevent cookies from being stored on your computer by changing the corresponding settings in your browser. Please refer to the user instructions of your Internet browser for further information. If you completely disable the storage of cookies, the functional scope of our offer may be limited. It is possible that you will then not be able to use our website in full.

​

Processing of personal data when using our website

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us.
These are:

• browser type and browser version

• operating system used

• referrer URL

• host name of the accessing computer

• time of the server request

• IP address

This data is not merged with other data sources. The basis for data processing is Art. 6(1)(f) GDPR. The operator of this website has a legitimate interest in the technically error-free presentation and optimization of its website—server log files must be recorded for this purpose.

​

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser address line changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

​

Cookies and right to object to direct advertising

We use temporary and permanent cookies, i.e. small files that are stored on users’ devices. Some cookies serve security purposes or are required for the operation of our online offer (e.g. for displaying the website) or to store the user’s decision when confirming a cookie banner. In addition, we or our technology partners use cookies for reach measurement and marketing purposes, about which users are informed in the course of this privacy policy.
A general objection to the use of cookies used for the purposes of online marketing can be declared for a large number of services via the website https://www.youronlinechoices.com/de/beschwerde/. Furthermore, the storage of cookies can be achieved by disabling them in the browser settings. Please note that in this case not all functions of this online offer may be usable.

​

Services used

Google Web Fonts

On the basis of our legitimate interests pursuant to Art. 6(1) sentence 1 lit. f GDPR, we integrate the fonts (“Google Web Fonts”) of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The aim is the optimization and economic operation of our homepage. [We host the fonts from our own servers, so that no data is transmitted to Google.]
You can find the provider’s privacy policy at: https://www.google.com/policies/privacy

​

Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will, however, be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services related to website and Internet use. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; however, we point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of the data generated by the cookie and relating to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link (http://tools.google.com/dlpage/gaoptout?hl=de).
We point out that on this website Google Analytics has been expanded by the code “gat._anonymizeIp();” to ensure an anonymized collection of IP addresses (so-called IP masking). In addition, you can prevent collection by Google Analytics by clicking on the following link. An opt-out cookie will then be set that prevents the further collection of your data when visiting this website. This procedure is recommended especially when accessing our site via mobile devices. Further information on terms of use and data protection can be found at www.google.com/analytics/terms/de.html or at www.google.com/intl/de/analytics/privacyoverview.html.
We base the use of the aforementioned analysis tool on Art. 6(1)(f) GDPR: the processing is carried out to analyze user behavior and is therefore necessary to safeguard our legitimate interests.

​

Cookies (Google Analytics)

In some areas of our website we use so-called cookies. Such file elements enable your computer to be identified as a technical unit during your visit to this website in order to make it easier for you to use our offer—even during repeat visits. However, as a rule you have the option of setting your Internet browser so that you are informed about the occurrence of cookies, so that you can allow or exclude them or delete existing cookies. Please use the help function of your Internet browser to obtain information about changing these settings. We point out that individual functions of our website may not work if you have disabled the use of cookies. Cookies do not allow a server to read private data from your computer or data stored by another server. They do not cause any damage to your computer and do not contain viruses. We base the use of cookies on Art. 6(1)(f) GDPR: the processing is carried out to improve the functioning of our website. It is therefore necessary to safeguard our legitimate interests.
The following cookies are used on our website:
Cookie type: Google Analytics cookie
Cookie names: __utma, __utmz, _ga, _gid
Purpose: Used by Google Analytics based on a unique identification number to distinguish visitors and expires after 2 years (__ga) or 1 day (__gid).
Cookie type: Acceptance of website cookies
Cookie names: __cfduid, cookieconsent_status
Purpose: These cookies are used to identify your client anonymously and to store whether you have acknowledged the notice on the use of cookies. No personal data is stored or transmitted.
Cookie type: LinkedIn cookie
Cookie names: bcookie, bscookie, lissc, licc
Purpose: Cookies from the LinkedIn Insight tag, which are used for website analytics, ad targeting, and ad measurement. Duration: session / 2 years.

​

Google Analytics advertising features

On this website, in addition to the standard configuration of Google Analytics, functions of Google Analytics are also used which support interest-based advertising and advertising based on users’ surfing behavior. Google Analytics uses a third-party cookie from DoubleClick in order to evaluate data on the surfing behavior of users across different websites. With the help of this data, statistical statements can be made about demographic data and areas of interest of website users.
We expressly point out that we cannot view any data about individual users and that the statistical data we use cannot be attributed to specific users.

​

Google Ads Conversion Tracking

We use the Google Ads Conversion Tracking service to measure the success of our advertisements placed via Google. A cookie is set as soon as a user clicks on an ad placed by us via Google Ads. If the user subsequently visits certain pages of our website, we can recognize that the ad has led to a desired user action (e.g. inquiry, purchase, or newsletter registration).
Through conversion tracking, we only receive statistical evaluations that help us measure the effectiveness of our ads and optimize our advertising measures. We do not receive any information that can be used to personally identify users. However, Google itself processes data (e.g. IP address, device information, interactions) in order to provide conversion tracking.
Processing takes place exclusively after your consent via our consent management tool.
Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Legal basis: Consent (Art. 6(1)(a) GDPR)
Basis for third-country transfer: EU-US Data Privacy Framework (DPF), Standard Contractual Clauses (https://business.safety.google/adsprocessorterms)
Objection option (opt-out): You can deactivate personalized advertising in the Google settings: https://adssettings.google.com/. You can also prevent the storage of cookies by setting your browser software accordingly.
Further information: Google privacy information: https://policies.google.com/privacy, information on Google Ads: https://ads.google.com/intl/de/home/

​

Google Photos

We use the service to embed images or image galleries.
The legal basis is Art. 6(1) sentence 1 lit. a) GDPR (consent).
The service transfers personal data to the USA. The EU Commission has decided that this country provides an adequate level of data protection (TADPF). The service has submitted to the TADPF.
In order to oblige the provider of this service to process the transmitted data only in accordance with our instructions and to comply with the applicable data protection regulations, we have concluded a data processing agreement with the provider.
Provider: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland – Tel. +353 1 543 1000, Fax +353 1 686 5660, https://www.google.de/

​

Facebook

Our online offer uses functions of Facebook Limited Ireland, Dublin, Ireland. When you access our pages, you are given the option to use Facebook plug-ins to establish a connection between your browser and Facebook servers. The plug-ins can be recognized by one of the Facebook logos (white “f” on a blue tile or a “thumbs up” symbol). The list and appearance of the Facebook social plug-ins can be viewed here: https://developers.facebook.com/docs/plugins/. If you activate the plug-in, data will be transmitted to Facebook, in particular your IP address and the information which page you are currently visiting. Data may then also be transferred to the USA to the parent company’s registered office of Facebook Limited Ireland. If you have a Facebook account, this data can be linked to it. If you do not want this data to be assigned to your Facebook account, please log out of Facebook before visiting our site. Interactions, in particular using a comment function or clicking a “Like” or “Share” button, are also passed on to Facebook. We do not learn which buttons you use, but upon request we only receive a summarized statistic on the use of our fan pages on Facebook and likewise a summarized statistic on this use. This enables us to continuously improve our Facebook fan page as well. Within the scope of processing data on our fan page and evaluating its use, we and Facebook are jointly responsible under data protection law. We have concluded an agreement with Facebook that transparently regulates the distribution of obligations (Art. 26 GDPR; available at https://www.facebook.com/legal/terms/page_controller_addendum). The essential content of this agreement is that Facebook primarily bears responsibility for visitor data processing and fulfills all relevant GDPR obligations in relation to the processing of visitor data (including, but not limited to, fulfilling the rights of the data subject). Please note that you should only activate Facebook if you also agree to your data being transferred to the USA, even if an adequate level of data protection may not be ensured there. With effect from 31.08.2020, new data processing conditions of Facebook apply, including for our cooperation.
The legal basis for data processing is your consent pursuant to Art. 6(1)(a) GDPR.
You can revoke your consent at any time by deactivating the slider button with which you activated the plug-in. An objection or revocation does not affect the lawfulness of the data processing carried out in the past.
Facebook Ireland Limited, Dublin, Ireland is responsible for data processing by Facebook. Further information on data processing can be found at: https://www.facebook.com/policy.php, on the new data processing conditions here https://www.facebook.com/legal/terms/dataprocessing/update

​

Facebook Connect

The service facilitates registration for services on the Internet. Instead of using a registration form on our website, you can enter your login data of the provider and then use our offer. By using the service, your web browser automatically establishes a direct connection with the provider’s server. You will be redirected to the provider’s page for login. There you can log in with your usage data. This links your user account with the provider to our offer. We have no influence on the further use of data that is collected by the provider through the use of the service.
We use the service to make the registration and login process easier for you and to shorten it. You can prevent processing of the above information by the provider by using our registration form and not using the service.
The service transfers personal data to the USA. The EU Commission has decided that this country provides an adequate level of data protection (TADPF). The service has submitted to the TADPF.
The legal basis is Art. 6(1) sentence 1 lit. a) GDPR (consent).
Provider:
Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
2 Dublin
Ireland
https://www.facebook.com/

​

Facebook Custom Audiences

The service enables us to display interest-based advertisements (“Ads”) to visitors of our website while they are visiting other websites that also use the service. By using the service, your web browser automatically establishes a direct connection with the provider’s server. We have no influence on the scope and further use of data that is collected by the provider through the use of the service. To the best of our knowledge, the provider receives the information that you have accessed the relevant part of our website or clicked on an advertisement from us. If you have a user account with the provider and are registered, the provider can assign the visit to your user account. Even if you are not registered or not logged in, it is possible that the provider will learn and store your IP address and possibly other identifying features.
We use the service for marketing and optimization purposes, in particular to place relevant and interesting ads for you and thus improve our offer, make it more interesting for you as a user and avoid annoying ads.
The service transfers personal data to the USA. The EU Commission has decided that this country provides an adequate level of data protection (TADPF). The service has submitted to the TADPF.
The legal basis is Art. 6(1) sentence 1 lit. a) GDPR (consent).
https://www.facebook.com/settings/?tab=ads#_
Provider:
Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
2 Dublin
Ireland
https://www.facebook.com/

​

Facebook Pixel

The service enables the provider to display our ads on Facebook, so-called “Facebook ads”, only to those Facebook users who have visited our website, in particular to those who have shown interest in our online offer or certain topics or products. The service enables verification of whether a user was redirected to our website after clicking on our Facebook ads. Among other things, the service uses cookies, i.e. small text files that are stored locally in the cache of your web browser on your device. If you are logged into Facebook with your user account, the visit to our online offer is recorded in your user account. The data collected about you is anonymous to us and therefore does not allow us to draw conclusions about the identity of users. However, this data can be linked by the provider to your user account there. We have no influence on the scope and further use of data that is collected by the provider through the use of the service. To the best of our knowledge, the provider receives the information that you have accessed the relevant part of our website or clicked on an advertisement from us. If you have a user account with Facebook and are registered, the provider can assign the visit to your user account. Even if you are not registered with Facebook or not logged in, it is possible that the provider will learn and store your IP address and possibly other identifying features.
We use the service for marketing and optimization purposes, in particular to place relevant and interesting ads for you and thus improve our offer, make it more interesting for you as a user and avoid annoying ads.
The service transfers personal data to the USA. The EU Commission has decided that this country provides an adequate level of data protection (TADPF). The service has submitted to the TADPF.
The legal basis is Art. 6(1) sentence 1 lit. a) GDPR (consent).
Provider:
Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
2 Dublin
Ireland
https://www.facebook.com/

​

Instagram

This website integrates functions of the Instagram service. These functions are offered by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
If the social media element is active, a direct connection is established between your device and the Instagram server. Instagram thereby receives information about your visit to this website.
If you are logged into your Instagram account, you can link the contents of this website to your Instagram profile by clicking the Instagram button. This enables Instagram to assign the visit to this website to your user account. We point out that as the provider of the pages we have no knowledge of the content of the transmitted data or of its use by Instagram.
If consent was obtained, the use of the aforementioned service is based on Art. 6(1)(a) GDPR and Section 25 TTDSG. Consent can be revoked at any time. If no consent was obtained, the service is used on the basis of our legitimate interest in the greatest possible visibility on social media.
Insofar as personal data are collected on our website with the help of the tool described here and forwarded to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). Joint responsibility is limited exclusively to the collection of the data and its transmission to Facebook or Instagram. Processing by Facebook or Instagram after transmission is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in an agreement on joint processing. You can find the wording of the agreement at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the data protection information when using the Facebook or Instagram tool and for the data protection-compliant implementation of the tool on our website. Facebook is responsible for the data security of the Facebook and Instagram products. You can assert data subject rights (e.g. requests for information) regarding the data processed by Facebook or Instagram directly with Facebook. If you assert the data subject rights with us, we are obliged to forward them to Facebook.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://privacycenter.instagram.com/policy/ and https://de-de.facebook.com/help/566994660333381.
Further information can be found in Instagram’s privacy policy: https://privacycenter.instagram.com/policy/.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA to ensure compliance with European data protection standards for data processing in the USA. Each company certified under the DPF undertakes to comply with these data protection standards. Further information can be obtained from the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active

​

YouTube with enhanced privacy

This website embeds videos from the YouTube website. The operator of the pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in enhanced privacy mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, data may still be shared with YouTube partners even in enhanced privacy mode. For example, YouTube establishes a connection to the Google marketing network regardless of whether you watch a video.
As soon as you start a YouTube video on this website, a connection is established to YouTube’s servers. In doing so, the YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.
Furthermore, after starting a video, YouTube may store various cookies on your device or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube may obtain information about visitors to this website. This information is used, among other things, to compile video statistics, improve user-friendliness and prevent fraud attempts.
Further data processing operations may be triggered after starting a YouTube video, over which we have no influence.
The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. If corresponding consent was requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
Further information on data protection at YouTube can be found in their privacy policy at: https://policies.google.com/privacy?hl=de.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA to ensure compliance with European data protection standards for data processing in the USA. Each company certified under the DPF undertakes to comply with these data protection standards. Further information can be obtained from the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active