Privacy Policy

1. Introduction and Scope

The Beauty of Sound GmbH (hereinafter "we" or "us") takes the protection of your personal data very seriously. This privacy policy informs you about how we collect, process, and use your personal data when you visit our website or use our services.

This privacy policy applies to:

• The website thebeautyofsound.com and all subpages
• Our newsletters and email communication
• Contact forms and inquiries
• Product orders and customer service

2. Responsible Party

The party responsible for data processing on this website is:

3. General Information on Data Processing

3.1 Scope of Processing Personal Data

We collect and use personal data of our users only to the extent necessary to provide a functional website as well as our content and services. The collection and use of personal data of our users is generally only done with the user's consent or when processing is permitted by legal regulations.

3.2 Legal Basis for Processing

Your data is processed on the basis of:

• Your consent (Art. 6 Para. 1 lit. a GDPR, Art. 6 DSG)
• Contract fulfillment (Art. 6 Para. 1 lit. b GDPR, Art. 6 DSG)
• Legitimate interest (Art. 6 Para. 1 lit. f GDPR, Art. 6 DSG)
• Legal obligation (Art. 6 Para. 1 lit. c GDPR, Art. 6 DSG)

3.3 Data Deletion and Storage Duration

Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Storage beyond this may occur if this was provided for by legal regulations. Data will also be blocked or deleted when a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for contract conclusion or contract fulfillment.

4. Provision of the Website and Creation of Log Files

4.1 Description and Scope of Data Processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

• Information about the browser type and version used
• The user's operating system
• The user's internet service provider
• The user's IP address (anonymized)
• Date and time of access
• Websites from which the user's system reaches our website (referrer)
• Websites accessed by the user's system via our website

4.2 Legal Basis and Purpose

The data is stored in the log files of our system. The legal basis for the temporary storage of the data and log files is our legitimate interest in the technical functionality and security of our website (Art. 6 Para. 1 lit. f GDPR).

4.3 Storage Duration

The data is deleted as soon as it is no longer required for the purpose for which it was collected. In the case of data collection for website provision, this is when the respective session has ended. Log files are deleted after 7 days at the latest.

5. Use of Cookies

5.1 What are Cookies?

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system.

5.2 Types of Cookies

We use the following types of cookies:

• Technically necessary cookies: These cookies are required for the basic functionality of the website.
• Functional cookies: These cookies enable improved functionality and personalization.
• Analysis cookies: These cookies help us understand how visitors interact with the website.

5.3 Legal Basis and Storage Duration

The legal basis for processing personal data using technically necessary cookies is our legitimate interest (Art. 6 Para. 1 lit. f GDPR). For all other cookies, we obtain your consent (Art. 6 Para. 1 lit. a GDPR).

5.4 Objection and Removal Options

You can set your browser to inform you about the setting of cookies and allow cookies only on a case-by-case basis, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser.

6. Contact Form and Email Contact

6.1 Description and Scope of Data Processing

A contact form is available on our website that can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored:

• Name
• Email address
• Phone number
• Address
• Message/Request
• Date and time of inquiry

6.2 Legal Basis and Purpose

The processing of data is carried out to process your inquiry and is based on your consent (Art. 6 Para. 1 lit. a GDPR) or on our legitimate interest in responding to your inquiry (Art. 6 Para. 1 lit. f GDPR).

6.3 Storage Duration

The data is deleted as soon as it is no longer required for the purpose for which it was collected. For personal data from the contact form input mask, this is when the respective conversation with the user has ended. Further storage may occur if legal retention periods require this (e.g., tax law retention obligations of 10 years).

7. Newsletter

7.1 Description and Scope of Data Processing

It is possible to subscribe to a free newsletter on our website. When registering for the newsletter, the following data is transmitted to us:

• Email address
• Time of registration

7.2 Double Opt-In and Logging

We use the so-called double opt-in procedure for newsletter registration. This means that after your registration, we send you an email to the specified email address, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 48 hours, you will need to register again if you wish to receive the newsletter.

7.3 Legal Basis

The processing of data is based on your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke this consent at any time. The lawfulness of data processing operations that have already occurred remains unaffected by the revocation.

7.4 Unsubscribe

You can unsubscribe from the newsletter at any time via the corresponding link in the newsletter or by sending a message to the contact address mentioned above.

8. Google Analytics

8.1 Scope of Processing

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited ("Google"). Google Analytics uses so-called "cookies," text files that are stored on your computer and enable an analysis of your use of the website.

8.2 IP Anonymization

We have activated IP anonymization. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

8.3 Legal Basis and Purpose

The legal basis for using Google Analytics is your consent (Art. 6 Para. 1 lit. a GDPR). The purpose is to analyze website usage and create reports on website activities.

8.4 Objection

You can prevent the storage of cookies by setting your browser software accordingly. You can also prevent the collection of data generated by the cookie and related to your use of the website to Google, as well as the processing of this data by Google, by downloading and installing the browser add-on: https://tools.google.com/dlpage/gaoptout

9. Social Media

9.1 Links to Social Media Profiles

Links to our social media profiles are integrated on our website (Instagram, Facebook, LinkedIn, YouTube, Twitter/X, Spotify). These links are designed as pure text links or icons and do not transmit any data until you actively click on them.

9.2 Data Transfer

When you click on one of these links, you will be redirected to the respective platform. From this point on, the privacy policies of the respective provider apply.

10. Your Rights as a Data Subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us as the controller:

10.1 Right to Information

You have the right to request confirmation from us as to whether personal data concerning you is being processed by us. If such processing exists, you can request information about this personal data from us (Art. 15 GDPR, Art. 8 DSG).

10.2 Right to Correction

You have the right to request that we immediately correct inaccurate personal data concerning you (Art. 16 GDPR, Art. 8 DSG).

10.3 Right to Deletion

You have the right to request that we immediately delete personal data concerning you, provided that one of the legal reasons applies and processing is not necessary (Art. 17 GDPR, Art. 8 DSG).

10.4 Right to Restriction of Processing

You have the right to request restriction of processing from us if one of the legal requirements is met (Art. 18 GDPR).

10.5 Right to Data Portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to transmit this data to another controller (Art. 20 GDPR).

10.6 Right to Object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you based on Art. 6 Para. 1 lit. e or f GDPR (Art. 21 GDPR).

10.7 Right to Revoke Data Protection Consent

You have the right to revoke your data protection consent at any time. The revocation of consent does not affect the lawfulness of processing carried out on the basis of consent before its revocation.

10.8 Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a supervisory authority, particularly in the member state of your habitual residence, place of work, or place of the alleged infringement if you believe that the processing of personal data concerning you violates the GDPR or the DSG.

11. Data Security

We use the widespread SSL (Secure Socket Layer) procedure in connection with the highest encryption level supported by your browser when visiting the website. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead.

In addition, we employ technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in accordance with technological developments.

12. Disclosure of Data to Third Parties

We do not transfer your personal data to third parties for purposes other than those listed below. We only disclose your personal data to third parties if:

• You have given your express consent (Art. 6 Para. 1 lit. a GDPR)
• Disclosure is necessary for the assertion, exercise, or defense of legal claims (Art. 6 Para. 1 lit. f GDPR)
• Disclosure is necessary to fulfill a legal obligation (Art. 6 Para. 1 lit. c GDPR)
• This is legally permissible and necessary for the processing of contractual relationships with you (Art. 6 Para. 1 lit. b GDPR)

13. Order Processing

We use external service providers (processors) to carry out our data processing. An order processing contract has been concluded with all processors in accordance with Art. 28 GDPR. These service providers are:

• Hosting provider for our website (Hosteurope)
• Email marketing services for newsletter dispatch
• Cloud services for data storage

14. International Data Transfers

Insofar as we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)) or this occurs in the context of using third-party services or disclosure or transmission of data to third parties, this only occurs if it is necessary to fulfill our (pre)contractual obligations, on the basis of your consent, due to a legal obligation, or on the basis of our legitimate interests.

15. No Automated Decision-Making

We refrain from automated decision-making or profiling in accordance with Art. 22 GDPR.

16. Currency and Changes to this Privacy Policy

This privacy policy is currently valid and is dated December 2025.

Due to the further development of our website and offers or due to changed legal or official requirements, it may become necessary to change this privacy policy. The current privacy policy can be accessed and printed at any time on the website at www.thebeautyofsound.com/datenschutzerklaerung.php.