Legal information

Data Privacy

The legal basis is the German version.

Data protection has a particularly high priority for Armin & Mario Gropp Klassischer Gitarren- & Lautenbau GbR. The use of our homepage and other services is always associated with the provision of personal data. This happens consciously (e.g. in a contact form) and also unconsciously (IP address in the server log files). Since there is no general legal permission for the processing of personal data, the consent of the data subject is required or we inform about our legitimate interests.

The processing of personal data (e.g. name, address, email address, IP address) is always in line with the European General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection regulations applicable to the Armin & Mario Gropp Klassischer Gitarren- & Lautenbau GbR – the Federal Data Protection Act (BDSG). On the basis of this data protection declaration, data subjects (e.g. viewers of our homepage) are given an overview of the type, scope and purpose of the personal data collected, used and processed by them.

Below you will find an overview of the most important general information and then on specific topics.

Name and contact details of the responsible person `Art. 13 para. 1 lit. a GDPR`	Mario Gropp Armin & Mario Gropp Klassischer Gitarren- & Lautenbau GbR Gunzener Str. 14 / 16 08258 Markneukirchen / Breitenfeld Germany Phone: +49 37422 2535 Email: info@gropp-gitarren.de Website: www.gropp-gitarren.de
Right of complaint `Art. 13 para. 2 lit. d GDPR`	Data subjects may complain to the competent supervisory authority. The competent authority for Armin & Mario Gropp Klassischer Gitarren- & Lautenbau GbR is: The Saxon Data Protection Commissioner Phone: +49 351 493-5401 Email: saechsdsb@slt.sachsen.de Website: www.saechsdsb.de
Existing rights of data subjects `Art. 13 para. 2 lit. b GDPR`	Information about collected data Correction and deletion of collected data Restriction of the use of the collected data Right to withdraw consent

Information on general data protection using SSL

To secure transmitted data, our website uses SSL encryption. We rely on end-to-end encryption and use “Force-SSL”.

The use of encryption is easy to recognise: The display in your browser line changes from “http://” to “https://”. Data encrypted via SSL cannot be read by third parties.

General right to information

You have the right at any time to obtain information about the data stored about you, its origin and recipients and the purpose for which it is stored.

If you have any questions about the processing of your personal data or about data protection in general, you can contact our data protection officer:

Mario Gropp
Armin & Mario Gropp Klassischer Gitarren- & Lautenbau GbR
Gunzener Str. 14 / 16
08258 Markneukirchen / Breitenfeld
Germany

Phone: +49 37422 2535
Email: info@gropp-gitarren.de
Website: www.gropp-gitarren.de

Additional information on the homepage – general

The following additional information applies to the website:

https://www.gropp-gitarren.de/

Purpose of processing `Art. 13 para. 1 lit. c GDPR`	Provision of the website for Armin & Mario Gropp Klassischer Gitarren- & Lautenbau GbR
Legal basis `Art. 13 para. 1 lit. c GDPR`	`Art. 6 para. 1 lit. c GDPR` in conjunction with `§ 13 para. 7 TMG`, `Art. 6 para. 1 lit. f GDPR`
Legitimate interests `Art. 13 para. 1 lit. d GDPR`	Ensuring correct and unaltered presentation Analysis for the protection of the IT infrastructure Basis for investigating authorities in the event of a request for information
Recipients or categories of recipients of the personal data `Art. 13 para. 1 lit. e GDPR`	Order processors in connection with the hosting of the website Investigating authorities in connection with justified requests for information
Transfer of data to a third country `Art. 13 para. 1 lit. f GDPR`	not provided for
Retention period / deletion period `Art. 13 para. 2 lit. a GDPR`	Collected server log files are deleted after 30 days at the latest.
Effects of revocation of consent `Art. 13 para. 2 lit. c GDPR`	If consent to data processing is revoked, the lawfulness of the processing carried out up to that point remains unaffected. A revocation of processing in connection with the server log files is only possible insofar as the data subject no longer uses the website in the future.
Obligation to provide information `Art. 13 para. 2 lit. e GDPR`	The provision of the information is necessary to carry out system security.
Automatic decision-making `Art. 13 para. 2 lit. f GDPR`	not relevant

Name and address of the processor

The technical implementation of the website is carried out in accordance with Art. 28 GDPR by:

pitcom GmbH (hereinafter referred to as the order processor)
Bahnhofstr. 61
08523 Plauen
Germany

Email: info@pitcom.de
Website: www.pitcom.de

The Processor collects, processes and stores all personal data on behalf of the Controller. Only the systems of the processor within the territory of the Federal Republic of Germany are used for this purpose. At no time are systems of a third party used for this purpose.

Cookies

The website uses cookies. Through their use, a user-friendly service can be provided. These cookies are not used for web analysis, tracking or profiling.
Each browser offers the possibility to change the acceptance of cookies and to delete received cookies.

If the browser refuses to accept cookies, it may not be possible to use all the functions of the website.

Collection of general data and information

The website (or the associated web server) collects a series of general data and information with each call. These are stored in the log files of the server.
Recorded are:

type and version of browser used
operating system used
the website from which the access was made (so-called referrer)
the target page
date and time of access
the internet protocol address (IP address)
the internet service provider of the accessing system

When using this general data and information, no automatic conclusions are drawn about data subjects. This information is required in order

to deliver the contents of the website correctly
to ensure the permanent operability of the systems and the technology and
to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack.

The collected data and information are manually evaluated by the processor in order to monitor and ensure data protection and data security on the system. This pseudonymised data of the server log files is stored separately from any further personal data provided by a data subject. As a matter of principle, this data is not passed on to third parties unless there is a legal obligation to pass it on or the passing on serves the purpose of criminal prosecution.

Email contact

The following additional information applies to email communication with us.

Purpose of processing `Art. 13 para. 1 lit. c GDPR`	Email communication
Legal basis `Art. 13 para. 1 lit. c GDPR`	`Art. 6 para. 1 lit. a GDPR`, `Art. 6 para. 1 lit. b GDPR`
Recipients or categories of recipients of the personal data `Art. 13 para. 1 lit. e GDPR`	Armin & Mario Gropp Klassischer Gitarren- & Lautenbau GbR
Transfer of data to a third country `Art. 13 para. 1 lit. f GDPR`	not provided for
Retention period / deletion period `Art. 13 para. 2 lit. a GDPR`	in accordance with GoBD six years from the end of the calendar year in which the contact was made
Effects of revocation of consent `Art. 13 para. 2 lit. c GDPR`	If consent to data processing is revoked, the lawfulness of the processing carried out up to that point remains unaffected. Due to retention obligations, only a blocking of the data will take place, not a deletion.
Obligation to provide information `Art. 13 para. 2 lit. e GDPR`	The provision of the information is necessary in order to contact Armin & Mario Gropp Klassischer Gitarren- & Lautenbau GbR.
Automatic decision-making `Art. 13 para. 2 lit. f GDPR`	not relevant

Social Media (Facebook & Co.)

We maintain online presences within social networks. Our aim is to reach our customers and also interested parties where they are active themselves. In this context, we process user data in order to communicate with the users active there or to offer information about us.

As a rule, the processing of user data on such platforms takes place outside the area of the European Union. This can result in risks for users, because it could, for example, make it more difficult to enforce users’ rights. Therefore, we are only represented on platforms that are operated by companies under European law or are certified in accordance with the Privacy Shield. The latter are obliged to comply with EU data protection standards.

On social media platforms and online presences, user data is usually processed for market research and advertising purposes. The operators create usage profiles based on usage behaviour. Based on this data, targeted advertisements can be placed. This concerns not only the platforms themselves, but also the partner sites connected in the advertising network. Armin & Mario Gropp Klassischer Gitarren- & Lautenbau GbR does not use these possibilities.

Purpose of processing `Art. 13 para. 1 lit. c GDPR`	To reach customers and also interested parties where they are active themselves.
Legal basis `Art. 13 para. 1 lit. c GDPR`	`Art. 6 para. 1 lit. f GDPR`, `Art. 6 para. 1 lit. a GDPR` in the case of voluntary data transfer
Legitimate interests `Art. 13 para. 1 lit. d GDPR`	effective information of users and communication with users
Recipients or categories of recipients of the personal data `Art. 13 para. 1 lit. e GDPR`	Armin & Mario Gropp Klassischer Gitarren- & Lautenbau GbR respective portal operators (see below)
Transfer of data to a third country `Art. 13 para. 1 lit. f GDPR`	USA
Effects of revocation of consent `Art. 13 para. 2 lit. c GDPR`	Should consent to data processing be revoked, the lawfulness of the processing carried out up to that point remains unaffected.
Obligation to provide information `Art. 13 para. 2 lit. e GDPR`	The provision is neither legally nor contractually required.
Automatic decision-making `Art. 13 para. 2 lit. f GDPR`	not relevant

For a detailed description of the respective processing and the options to object (opt-out), please refer to the information of the providers linked below. Data subject rights should be exercised directly with the portal providers. Only they have access to user data and can exercise the rights most effectively:

Facebook & Instagram

Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2 Ireland

Privacy policy (Facebook): https://www.facebook.com/about/privacy/
Privacy policy (Instagram): https://instagram.com/about/legal/privacy
Objection: https://www.facebook.com/settings?tab=ads, https://www.facebook.com/help/1561485474074139?ref=dp and https://www.youronlinechoices.com