Privacy Policy

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data includes all data that can personally identify you. For detailed information on data protection, please refer to our Privacy Policy outlined below this text.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. Their contact details can be found in the “Information on the Responsible Party” section of this Privacy Policy.

How do we collect your data?

On the one hand, your data is collected by you providing it to us—for example, by entering it into a contact form.
Other data is collected automatically or with your consent by our IT systems when you visit the website. This data is primarily technical (e.g., internet browser, operating system, or time of page access). It is collected automatically as soon as you enter the site.

What do we use your data for?

Some of the data is collected to ensure the website functions properly. Other data may be used to analyze user behavior. If the website is used to conclude or initiate contracts, the data provided will also be processed for contract offers, orders, or other inquiries.

What rights do you have regarding your data?

You have the right to receive information free of charge at any time about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you may revoke this consent at any time going forward. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the relevant supervisory authority.
You can contact us at any time with questions about data protection.

Analytics and Third-Party Tools

Your browsing behavior may be statistically analyzed when visiting this website, mainly using analytics tools.
More detailed information can be found in the full Privacy Policy below.

2. Hosting

We host our website content with the following provider:

Strato

The provider is Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany („Strato“). When you visit our website, Strato collects various log files, including IP addresses.
For more information, please refer to Strato’s Privacy Policy: https://www.strato.de/datenschutz/

Strato is used based on Art. 6(1)(f) GDPR. We have a legitimate interest in a reliable presentation of our website. If consent was requested, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, provided the consent includes the storage of cookies or access to device information (e.g., device fingerprinting). Consent may be withdrawn at any time.

Data Processing Agreement

We have entered into a Data Processing Agreement (DPA) with the provider named above. This is a contract required under data protection law to ensure they process personal data only according to our instructions and in compliance with the GDPR.

3. General Notes and Mandatory Information

Data Protection

The operators of this site take the protection of your personal data seriously. We handle your personal data confidentially and in accordance with legal data protection regulations and this Privacy Policy.

When you use this website, various personal data is collected. Personal data is data that can personally identify you. This Privacy Policy explains what data we collect and how we use it. It also explains how and for what purpose this is done.

Please note that data transmission over the Internet (e.g., via email) can have security vulnerabilities. A complete protection of data from third-party access is not possible.

Information on the Responsible Party

The responsible party for data processing on this website is:

Sunderi Music, Owner: Julian Hammes
c/o Postflex #3113
Emsdettener Str. 10
48268 Greven
Germany

Email: contact@sunderi-music.com

The responsible party is the individual or legal entity that decides alone or jointly with others on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Storage Duration

Unless a more specific storage period is mentioned within this Privacy Policy, your personal data will remain with us until the purpose for data processing no longer applies. If you request deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing it (e.g., tax or commercial retention obligations); in the latter case, deletion occurs after those reasons cease to apply.

Legal Bases for Data Processing

If you have given consent, we process your personal data based on Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR for special categories of data. If you have explicitly consented to data transfers to third countries, processing is also based on Art. 49(1)(a) GDPR. If you consented to cookie storage or device access, processing is also based on § 25(1) TDDDG. Consent can be withdrawn at any time. If your data is necessary for contract performance or pre-contractual measures, we process it under Art. 6(1)(b) GDPR. We also process your data to fulfill legal obligations (Art. 6(1)(c) GDPR) or on the basis of legitimate interests (Art. 6(1)(f) GDPR). Specific legal bases are detailed in this Privacy Policy.

Recipients of Personal Data

We work with various external parties during our business activities. Personal data is shared only when necessary for contract performance, required by law (e.g., to tax authorities), based on our legitimate interests, or other lawful grounds. If we use processors, we share customer data only under a valid data processing agreement. For joint processing, we conclude joint controller agreements.

Revoking Your Consent

You may withdraw previously given consent to data processing at any time. The lawfulness of processing prior to revocation remains unaffected.

Right to Object to Data Collection in Special Cases and Direct Marketing (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION. THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS OR THE PROCESSING SERVES LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO SUCH PROCESSING. THIS ALSO APPLIES TO PROFILING IN CONNECTION WITH DIRECT MARKETING. AFTER YOU OBJECT, YOUR DATA WILL NO LONGER BE USED FOR SUCH PURPOSES.

Right to Lodge a Complaint

If you believe there has been a violation of the GDPR, you have the right to lodge a complaint with a supervisory authority, especially in the EU member state of your habitual residence, workplace, or where the alleged infringement occurred. This is without prejudice to other legal remedies.

Right to Data Portability

You have the right to receive personal data that we process automatically based on your consent or in fulfillment of a contract, in a commonly used, machine-readable format. If you request the direct transfer to another controller, this will only occur if technically feasible.

Access, Correction, and Deletion

Within legal limits, you have the right to free access to your stored personal data, its origin and recipients, and the purpose of processing, as well as a right to correct or delete this data. You can contact us any time about this or other questions regarding personal data.

Right to Restriction of Processing

You have the right to request the restriction of your personal data processing. You can contact us at any time to do so. The right applies in the following cases:

• You dispute the accuracy of your data; we will restrict processing while verifying.

• Processing is unlawful and you prefer restriction to deletion.

• We no longer need the data, but you need it to exercise or defend legal claims.

• You have objected under Art. 21(1) GDPR, and it’s not yet clear whose interests prevail.

If you restrict processing, your data may only be processed—with the exception of storage—with your consent or for legal claims or to protect another person or public interest.

SSL or TLS Encryption

For security and confidentiality, this site uses SSL or TLS encryption—for example, for orders or inquiries you send us. You can recognize an encrypted connection by „https://“ and the lock symbol in your browser.

If SSL/TLS encryption is enabled, third parties cannot read the data you transmit to us.

Objection to Promotional Emails

We hereby object to the use of contact data published under legal notice obligations for sending unsolicited advertising and informational material. The website operators reserve the right to take legal action against unsolicited advertising, such as spam emails.

4. Data Collection on This Website

Cookies

Our website uses so-called „cookies.“ Cookies are small data packets that do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are automatically deleted after your visit ends. Persistent cookies remain on your device until you delete them yourself or automatic deletion takes place via your web browser.

Cookies can come from us (first-party cookies) or from third-party companies (third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g. cookies for processing payment services).

Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or displaying videos). Other cookies may be used to evaluate user behavior or for advertising purposes.

Cookies that are necessary to carry out the electronic communication process, to provide certain functions you request (e.g. for the shopping cart), or to optimize the website (e.g. cookies to measure web audience) are stored based on Art. 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of its services. If consent for the storage of cookies and similar recognition technologies has been requested, processing is based exclusively on this consent (Art. 6(1)(a) GDPR and §25(1) TDDDG); the consent can be revoked at any time.

You can set your browser to inform you about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies in certain cases or generally, and activate the automatic deletion of cookies when the browser is closed. Disabling cookies may limit the functionality of this website.

Which cookies and services are used on this website can be found in this privacy policy.

Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

This data is processed based on Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this was requested; consent can be revoked at any time.

The data you entered in the contact form remains with us until you request its deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g. after your request has been fully processed). Mandatory legal provisions – especially retention periods – remain unaffected.

Request by Email, Phone, or Fax

If you contact us by email, phone, or fax, your inquiry including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.

This data is processed based on Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this was requested; consent can be revoked at any time.

The data you sent to us via contact requests remains with us until you request its deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g. after your request has been fully processed). Mandatory legal provisions – especially retention periods – remain unaffected.

5. Analysis Tools and Advertising

WP Statistics

This website uses the WP Statistics plugin, provided by Veronalabs (Tatari 64, 10134 Tallinn, Estonia) to statistically analyze visitor access.

WP Statistics collects various log files such as your IP address, referrer, browser used, device region, search engine used, and user actions on the site (e.g. clicks and page views).

All data recorded by WP Statistics is stored exclusively on our own server—it is not transmitted to third parties, nor shared with Veronalabs or any external vendor.

Data processing through this tool is based on Art. 6 Abs. 1 lit. f GDPR. We have a legitimate interest in anonymized analysis of user behavior to optimize our web offering and advertising. If consent was requested (e.g. for cookies or access to device information), processing is based on Art. 6 Abs. 1 lit. a GDPR and § 25 Abs.1 TDDDG; consent may be withdrawn at any time.

We use WP Statistics with IP anonymization or hashing enabled by default: IP addresses are truncated or hashed so they cannot identify individual users under GDPR regulations.

6. Newsletter

Newsletter Data

If you would like to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. No further data is collected or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

The processing of the data entered into the newsletter registration form is based exclusively on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent to the storage of the data, the email address, and its use for sending the newsletter at any time—for example, via the „unsubscribe“ link in the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

The data you provide to us for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe. Data that has been stored by us for other purposes remains unaffected by this.

After you unsubscribe from the newsletter distribution list, your email address may be stored in a blacklist to prevent future mailings. The data from the blacklist is only used for this purpose and is not merged with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). The storage in the blacklist is not time-limited. You may object to the storage if your interests outweigh our legitimate interest.

7. Plugins and Tools

YouTube with Enhanced Privacy Mode

This website embeds videos from the website YouTube. The operator of the website is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit one of the websites where YouTube is embedded, a connection to YouTube’s servers is established. In the process, the YouTube server is informed about which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account.

We use YouTube in enhanced privacy mode. According to YouTube, videos played in enhanced privacy mode are not used to personalize surfing on YouTube. Ads served in enhanced privacy mode are also not personalized. No cookies are set in enhanced privacy mode. Instead, so-called Local Storage elements are stored in the user’s browser, which, similar to cookies, can contain personal data and be used for recognition. Details on enhanced privacy mode can be found here: https://support.google.com/youtube/answer/171780.

Depending on activation of a YouTube video, further data processing operations may be triggered, which we have no influence on.

Use of YouTube takes place in the interest of an attractive presentation of our online offerings. This represents a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested, processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. The consent can be revoked at any time.

Further information about data protection on YouTube can be found in their privacy policy at: https://policies.google.com/privacy?hl=de.

The company holds certification under the „EU-US Data Privacy Framework“ (DPF). The DPF is an agreement between the European Union and the USA that ensures compliance with European data protection standards in data processing in the USA. Every company certified under the DPF commits to adhering to these data protection standards. More information can be found here: https://www.dataprivacyframework.gov/participant/5780.

Google Fonts

This site uses so-called Google Fonts for a uniform display of fonts, provided by Google. When you open a page, your browser loads the required fonts into your browser cache to display texts and fonts correctly.

For this purpose, your browser must connect to Google’s servers. As a result, Google learns that this website was accessed via your IP address. The use of Google Fonts is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the uniform display of fonts on their website. If corresponding consent was requested, processing occurs exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) under TDDDG. Consent can be revoked at any time.

If your browser does not support Google Fonts, a standard font from your computer will be used.

Further information on Google Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

The company holds certification under the „EU-US Data Privacy Framework“ (DPF). The DPF is an agreement between the European Union and the USA that ensures compliance with European data protection standards in data processing in the USA. Every company certified under the DPF commits to adhering to these data protection standards. More information can be found here: https://www.dataprivacyframework.gov/participant/5780.

SoundCloud

Plugins from the social network SoundCloud (SoundCloud Limited, Berners House, 47-48 Berners Street, London W1T 3NF, United Kingdom) may be integrated on this website. You can recognize the SoundCloud plugins by the SoundCloud logo on the relevant pages.

When you visit this website, a direct connection between your browser and the SoundCloud server is established after activating the plugin. SoundCloud thereby receives the information that you visited this website with your IP address. If you click the „Like“ or „Share“ button while logged into your SoundCloud user account, you can link and/or share the content of this website with your SoundCloud profile. SoundCloud can thus associate the visit to this website with your user account. We point out that as the provider of the site, we have no knowledge of the content of the data transmitted or its use by SoundCloud.

Storage and analysis of data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the broadest possible visibility in social media. If corresponding consent was requested, processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG insofar as consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) under TDDDG. Consent can be revoked at any time.

The UK is considered a data-protection-safe third country, meaning it has a level of data protection equivalent to the EU.

Further information can be found in SoundCloud’s privacy policy at: https://soundcloud.com/pages/privacy.

If you do not want SoundCloud to associate the visit to this website with your SoundCloud user account, please log out of your SoundCloud account before activating content from the SoundCloud plugin.

Spotify

This website includes functions of the music service Spotify. Provider is Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden. You can recognize Spotify plugins by the green logo on this website. An overview of Spotify plugins can be found here: https://developer.spotify.com.

When you visit this website, a direct connection between your browser and the Spotify server can be established via the plugin. Spotify thereby receives the information that you visited this website with your IP address. If you click the Spotify button while logged into your Spotify account, you can link the content of this website to your Spotify profile. Spotify can thus associate the visit to this website with your user account.

Please note that when using Spotify, Google Analytics cookies are used, so your usage data when using Spotify can also be passed on to Google. Google Analytics is a tool from the Google group to analyze user behavior with headquarters in the USA. Spotify alone is responsible for this integration. We as website operators have no influence on this processing.

Storage and analysis of data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in an appealing acoustic design of their website. If corresponding consent was requested, processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG insofar as consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) under TDDDG. Consent can be revoked at any time.

Further information can be found in Spotify’s privacy policy: https://www.spotify.com/de/legal/privacy-policy/.

If you do not want Spotify to associate the visit to this website with your Spotify user account, please log out of your Spotify account.

Source: https://www.e-recht24.de