1. Introduction
This privacy policy explains how we handle personal data in accordance with the General Data Protection Regulation (GDPR) and relevant national laws. We aim to provide transparent information about what data we collect, how we use it, and your rights regarding your personal information. If you have questions, please contact us using the details provided in our legal notice.
2. Scope
This policy applies to all personal data processed by our company, including data handled by third-party service providers on our behalf. It covers all our online presences (websites, online shops), social media profiles, email communications, and mobile applications.
3. Data Controller Contact
If you have any questions regarding data protection, please contact:
John A. Taylor
John Taylor Neighbouring Rights Consultant
Lerchenweg 19
41564 Kaarst
Germany
Phone: +49 2131 – 1515290
Email: info@john-taylor.music
4. Legal Bases for Data Processing
We only process your personal data if at least one of the following conditions is met:
- You have given explicit consent (Art. 6(1)(a) GDPR).
- Processing is necessary for the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR).
- We are legally obliged to process your data (Art. 6(1)(c) GDPR).
- Processing is based on our legitimate interests, provided your rights and freedoms do not override these interests (Art. 6(1)(f) GDPR).
5. Data Retention
Personal data is stored only as long as necessary for the purposes described or as required by law. Once the purpose for processing ends, or you withdraw your consent, your data will be deleted unless legal retention periods require otherwise.
6. Your Rights
Under GDPR, you have the following rights:
- Access to your stored data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of your data (“right to be forgotten,” Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to data processing (Art. 21 GDPR)
- Withdrawal of consent at any time (Art. 7(3) GDPR)
- Lodge a complaint with a supervisory authority (Art. 77 GDPR)
7. Data Security
We implement technical and organizational measures to protect your data against unauthorized access, loss, or misuse. Data transmission is encrypted (e.g., via TLS/SSL).
8. Communication
If you contact us by phone, email, or online form, your data is processed solely to handle your request and related business matters. Data is deleted when no longer required and legal retention periods have expired.
9. Cookies
Our website uses cookies to provide essential functions, analyze usage, and enhance your experience. You can manage cookies through your browser settings and withdraw consent at any time. Essential cookies are set based on legitimate interest; all others require your consent.
Types of Cookies
- Essential: Necessary for basic website functions.
- Analytical: Help us understand website usage.
- Functional: Remember your preferences.
- Advertising: Deliver personalized ads.
10. Web Hosting
When you visit our website, technical data such as your IP address, browser type, and access time are automatically recorded by our hosting provider for operational and security purposes. These logs are typically deleted after a short period unless required for legal reasons.
11. Web Analytics
We use analytics tools to evaluate website usage and improve our services. Data collected may include pages visited, device information, and IP addresses (usually anonymized). You can object to analytics tracking at any time.
12. Newsletter and Email Marketing
If you subscribe to our newsletter, we use your email address solely for sending updates and information. You can unsubscribe at any time, and your data will be deleted unless legal retention applies.
13. Messenger and Communication Tools
We offer various communication channels (contact forms, email, messenger services). Data shared through these channels is processed only as needed to respond to your inquiries and is deleted when no longer required.
14. Social Media
We maintain profiles on social media platforms. When you interact with us there, the respective platform’s privacy policy applies. Data you provide may be processed by the platform operator and linked to your user profile.
15. Customer Data
We process customer data as necessary to fulfill contracts, provide services, and manage customer relationships. This may include contact details, payment information, and communication history. Data is retained as long as required for business or legal reasons.
16. Data Processing by Third Parties
We may engage third-party providers (e.g., hosting, analytics, email services) who process data on our behalf under strict contractual obligations and in compliance with GDPR.
17. Data Transfers Outside the EU
If personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.
18. Changes to This Policy
We may update this privacy policy to reflect changes in law or our practices. The latest version is always available on our website.
Note: This template is a general guideline and should be customized to reflect your actual data processing activities, third-party services, and legal requirements. For specific services (e.g., Google Analytics, MailChimp, WhatsApp), include additional details as required by those providers’ privacy obligations
