imprint & data protection

PRIVACY

I. Introduction and terminology

1. GENERAL
With the operation of our website with the URL www.glitterhouse.com (hereinafter referred to as “website”) we process personal data. These are treated confidentially by us and processed in accordance with the applicable laws – in particular the German Data Protection Regulation (DSGVO), the German Federal Data Protection Act (BDSG) and the Telecommunications Telemedia Data Protection Act (TTDSG). With these data protection provisions, we want to inform you about what personal data we collect from you, for what purposes and on what legal basis we use it and, if applicable, to whom we disclose it. In addition, we will explain to you what rights you have to protect and enforce your data privacy.

We hereby inform you that separate data protection regulations apply to our webshop (https://mailorder.glitterhouse.com/), which can be viewed here: https://mailorder.glitterhouse.com/datenschutzerklaerung.html

2. TERMINOLOGY
Our privacy policy contains technical terms that are in the DSGVO and the BDSG. For your better understanding, we would like to explain these terms in simple terms in advance:

2.1 Personal data
“Personal data” is any information relating to an identified or identifiable person (Art. 4 No. 1 DSGVO). Information of an identified person can be, for example, the name or e-mail address. However, personal data is also data for which the identity is not immediately apparent, but can be determined by combining one’s own information or that of others and thus finding out who it is. A person can be identified, for example, by providing your address or bank details, your date of birth or user name, your IP addresses and/or location data. Relevant here is all information that in any way allows a conclusion to be drawn about a person.

2.2 Processing
The term “processing” is understood by Art. 4 No. 2 DSGVO to mean any operation in connection with personal data. This applies in particular to the gathering, recording, organization, classification, saving, adaptation or alteration, reading out, querying, use, publication, transmission, circulation or any other form of provision, comparison or linking, restriction, erasure or destruction of personal data.

II. Responsability and data protection officer

3. RESPONSIBILITY
Responsible for data processing is:

Company: Glitterhouse Records GmbH („us“)
Legal representative: Jörn Heinecker (managing director)
address: Schlachthofstr. 36a, 21079 Hamburg, Germany
phone: +49 40 752499-0

E-Mail: info@glitterhouse.com

 

4. DATA PROTECTION OFFICER
Our company is not obliged to appoint a company data protection officer. For questions and concerns regarding data protection on our website and in our company, you can contact us using the aforementioned contact details.

 

III. PROCESSING FRAMEWORK

5. PROCESSING FRAMEWORK: WEBSEITE
Within the framework of the website with the URL www.glitterhouse.com, we process the personal data from you listed in detail below in section IV. We only process data from you that you actively provide on the website (e.g. by filling out forms) or that you automatically provide when using our offer
Your data will be processed exclusively by us and will not be sold, lent or passed on to third parties. If we use the help of external service providers to process your personal data, this is done within the framework of so-called order processing, in which we as the client are authorized to issue instructions to our contractors. To operate our website, we use external service providers for hosting, as well as for development, maintenance and care. We host our website with the external provider All-Inkl (ALL-INKL.COM – Neue Medien Münnich, Owner: René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany, https://all-inkl.com/) in the data center location in Germany. The development of our website was done by Alexei Graf von Rothkirch, Veringstraße 155, 21107 Hamburg, Germany, https://alexei-rothkirch.de/. Maintenance and servicing of our website is carried out by Glit-terhouse Records GmbH, Schlachthofstraße 36a, 21079 Hamburg, Germany. If further external service providers are used for individual processing operations listed in section IV, they will be named there
As a matter of principle, we do not transfer data to third countries and do not plan to do so. We will provide information about exceptions to this principle in the processing operations described below. Any data transfer to third countries will then take place on the basis of the so-called EU standard contractual clauses.

 

IV. THE PROCESSING IN DETAIL

6. PROVIDING THE WEBSITE AND SERVER LOGFILES

6.1 Description of processing
Each time you visit our website, we automatically collect information that your browser transmits to our server. This is the following data:

• IP address

• Browser software used, as well as its version and language

• Operating systems

• The website from which visitors came to the website (so-called referrer)

• The subpages accessed on the website

•The date and time the website was accessed

• Internet-Service-Provider

• Country and place from which the user visited the website

• Host name of the accessing computer

These are also stored in the so-called log files of our system. The temporary recording of your IP address by the system is necessary in order to be able to deliver our website to the end device of a user. For this pur-pose, the user’s IP address must remain stored for the duration of the session. However, your IP address is not stored in the log files.

6.2 Purpose
The processing is carried out to enable the online store to be called up and to ensure its stability and security. In addition, the processing serves the statistical evaluation and improvement of our online offer.

6.3 Legal basis
The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f DSGVO). Our legitimate interest lies in the purpose named in section 6.2.

6.4 Storage period
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective ses-sion has ended. Deletion of the log files takes place after 7 days.

7.COOKIES

7.1 Description of processing
Our website uses cookies. Cookies are small text files that are stored on the user’s terminal device when visiting a website. Cookies contain information that enables the recognition of a terminal device and possi-bly certain functions of a website. We distinguish between our own cookies and external, so-called third-party cookies. So-called “session cookies” and “persistent cookies” are used on our site. “Session cookies” are automatically deleted when you end your Internet session and close the browser. Persistent Coo-kies remain stored on your end device for a longer period of time. If cookies are technically necessary for the operation of our site, your consent is not required for this. All other cookies that are not technically required will only be set after you have actively consented to the use of cookies via our Consent Tool. We use the self-hosted service “Borlabs” to obtain and document consent. The Consent Tool itself stores your selection in a cookie on your terminal device. This means that you do not need to make a decision about cookies again on a subsequent visit to our website. You can find out which cookies are used on our website for which pur-pose, how long they are stored on your end device and which consents you have already declared, if any, in the Bor-labs cookie settings, here you can also revoke your consents: Change Cookie Preferences.

The following overview shows which cookies and other tracking technologies are used on our homepage for which purpose and how long they are stored on your end device.

 

Cookie-name		Purpose/Function	Duration of storage	Category
wp-wpml_current_language	WPML	Translation-PlugIn De/En, Bilingualism		First-party-cookie
sp_t	Spotify	Streaming-provider, Player	364 Days	Third-party-Cookie
sp_landing	Spotify	Streaming-provider, Player	366 Days	Third-party-cookie
open.spotify.com	IP-Adresse: 35.186.224.25/US	Streaming-provider, Player		Third-party-request
encore.scdn.co	IP- adress: 146.75.122.248/SE			Third-party-request
open.spotifycdn.com	IP-Adresse: 146.75.122.251/SE	Streaming-provider, Player		Third-party-request
i.scdn.co	IP-adress: 146.75.118.248/SE			Third-party-request
o22381.ingest.sentry.io	IP-adress: 34.120.195.249/US			Third-party-request
apresolve.spotify.com	IP-adress: 34.98.74.57 /US	Streaming-provider, Player		Third-party-request
gew4-spclient.spotify.com	IP-adress: 35.186.224.17/US	Streaming-provider, Player		Third-party-request

7.2 Purpose
We use cookies to make our website more user-friendly and to offer the functions described in section 7.1.

7.3 Legal basis
The processing is necessary with regard to technically required cookies, as well as the use of the Consent Tool to protect the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f DSGVO in conjunction with § 25 para. 2 TTDSG). Our legitimate interest lies in the purpose named in section 7.2. For the processing with regard to all other – i.e. not technically required – cookies, the legal basis is consent (Art. 6 para. 1 lit. a DSGVO in conjunction with § 25 para. 1 TTDSG). Such consent is voluntary.

7.4 Storage period, revocation of consent
Cookies are automatically deleted at the end of a session or at the end of the specified storage period. Since cookies are stored on your terminal device, you as a user have full control over the use of cookies. By chang-ing the settings in your Internet browser, you can disable or restrict the transfer of cookies. Cookies that have already been stored can be deleted. This can also be done automatically. If cookies are deactivated, deleted or restricted for our website, it may be that individual functions of our website cannot be used or can only be used to a limited extent. You can view, change and/or revoke any consent you may have given to the use of cookies at any time in the settings of the “Borlabs” consent tool with effect for the future: Change Cookie Preferences.

7.5 Recipients
When using third-party cookies, data may be transmitted to the corresponding providers of these third-party services. Under certain circumstances, data may also be transferred to third countries outside the European Union or the European Economic Area. We provide information about the recipients of data and the transmission to third countries in the settings of the “Borlabs” consent tool or in the corresponding passage for the third-party service in this privacy policy. You can view this information here: Change Cookie Preferences.

8. CONTACT BY E-MAIL

8.1 Description of processing
You can also contact us via the e-mail addresses provided on the website. To contact us, you can write to us via the e-mail address provided on the website. In this case, the personal data transmitted with the e-mail will be processed by us.

8.2 Purpose
The data transmitted with and in your e-mail will be used exclusively for the purpose of processing and re-sponding to your request.

8.3 Legal basis
The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6 (1) (f) DSGVO). Our legitimate interest lies in the purpose named in section 8.2. If the e-mail contact is aimed at the conclusion or fulfillment of a contract, the data processing is carried out for the fulfillment of the contract (Art. 6 para. 1 lit. b DSGVO).

8.4 Storage period
We delete the data as soon as they are no longer required to achieve the purpose for which they were col-lected. This is usually the case when the respective communication with you has ended. The communication is terminated when it can be inferred from the circumstances that your concern has been conclusively clari-fied. If legal retention periods prevent deletion, the data will be deleted immediately after the expiry of the legal retention period.

9. NEWSLETTER

9.1 Description of processing

We send out a newsletter at irregular intervals. With the newsletter we inform you about label news and mailorder novelties. You will receive our newsletter only if you actively subscribe to our mailing list. You can subscribe to it by filling out and submitting a newsletter registration form on our website.

For the newslet-ter registration, only your e-mail address is required. All other information (such as your first name and last name) is voluntary and is used solely to personalize the e-mails. For the execution and verification of news-letter registrations, we use the so-called double opt-in procedure. A registration takes place in several steps. First, you register for the newsletter on our website. You will then receive an e-mail from us at the e-mail address you provided. In this e-mail, we ask you to confirm that you have actually subscribed to the news-letter and wish to receive it. Confirmation takes place by clicking on a confirmation link in the e-mail. Only after successful confirmation will we add you to our newsletter distribution list and send you future e-mails. As part of the double opt-in process, we save the date, time and your IP addresses both during registration and confirmation.

9.2 Purpose
The processing takes place in order to offer the newsletter function and to be able to send newsletter emails to subscribers. The collection and storage of date, time and IP addresses when subscribing to the newsletter serves to document consent given and to protect against the misuse of e-mail addresses.

9.3 Legal basis
In the case of our subscriber newsletter, processing is based on consent pursuant to Art. 6 (1) lit. a DSGVO. Your consent is voluntary. The collection and storage of date, time and IP addresses during newsletter regis-tration is necessary to protect the overriding legitimate interests of the controller (Art. 6 (1) lit. f DSGVO). Our legitimate interest lies in the purpose named in section 9.2.

9.4 Storage period and revocation of consent
If you do not confirm your subscription to our newsletter within 24 hours of receiving the corresponding registration e-mail, your data will be automatically deleted. We process your personal data for the duration of your newsletter subscription. You can cancel your subscription to our newsletter at any time by revoking your consent. A simple declaration is sufficient (by mail to Glitterhouse Records GmbH, Schlachthofstr. 36a, D-21079 Hamburg, by e-mail to: in-fo@glitterhouse.com). It is also possible to unsubscribe from the news-letter by clicking on the unsubscribe link in every newsletter e-mail. Upon revocation of your consent, you will no longer be sent newsletters and your personal data will be removed from our active distribution list.

9.5 Recipients
For the administration of our newsletter distribution list and for sending the e-mails, we use the services of the newsletter provider BREVO (formerly sendinblue, formerly Newsletter2Go). This is done as part of a contract processing. BREVO is an offer of Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany. Further information on data protection at BREVO can be found at https://help.brevo.com/hc/en-us/categories/360000229110-GDPR . .

10. SOCIAL NETWORKS

10.1 Description of processing
Our website does not use any so-called social media plugins. The Facebook, Instagram and YouTube logos displayed on our website are merely linked to the corresponding profiles of our company on the social net-works. A data transfer to the social networks does not take place with the integration of the logos. If you click on one of the logos, you will only be redirected to the external website of the respective social network.

However, our profiles within the social networks also constitute data processing. If you are logged in to the respective social network when you visit such a profile, this information will be assigned to your user ac-count there. If you interact with our profile, e.g. comment, “share” or “like” a post, this information will also be stored in your user account. As a rule, your interactions with our profile can also be viewed by us.

On the social networks Facebook and Instagram, we have the possibility to obtain statistical data about the use of our Facebook page or our Instagram profile via the so-called “Insights” function. These statistics are provided by Facebook and Instagram respectively. The “Insights” function cannot be disabled. We cannot decide to turn this feature on or off. It is available to all Facebook Fan Page operators and all Instagram business account operators, regardless of whether you use the Insights feature or not.

We are provided with the following data via Facebook Insights for a selectable period of time in anonymized form with regard to fans, subscribers, people reached and people interacting: Total page views, “likes” in-cluding origin, page activity, post interactions, reach, post reach (divided into organic, viral and paid interac-tions), comments, shared content, replies, as well as demographic evaluations, i.e. country of origin, gender and age. In the Insights statistics, it is not possible for us to identify subscribers and fans of our site and to view their profiles.

Furthermore, Instagram Insights provides us with anonymized data about the development and reach of our Instagram profiles, as well as the posts, stories and videos we post there. We also receive statistical infor-mation about the place of origin, gender and age of the subscribers of our Instagram profile in the Instagram Insights.

The social networks with which you communicate store your data as usage profiles using pseudo-nyms and use them for advertising purposes and market research. For example, you may be shown advertisements within the social network and on other third-party websites that match your presumed interests. For this purpose, cookies are usually used, which the social network stores on your terminal device. You have the right to object to the creation of these user profiles; to exercise this right, you must contact the social net-works directly.

10.2 Purpose
We maintain profiles on the aforementioned social networks for the purpose of public relations and corpo-rate communication with customers and interested parties. We use the “Insights” function of Facebook and Instagram to evaluate the reach of our posts on the social network and to make them more appealing to our visitors in the future.

10.3 Legal basis
The legal basis for data processing in the context of our profiles on social networks is the choice of our over-riding legitimate interests (Art. 6 para. 1 lit. f DSGVO). Our legitimate interest lies in the purpose named in section 10.2 If you are asked for consent by the respective operator of a social network, the legal basis is Article 6 (1) a DSGVO. The data processing with regard to our presence on Facebook and Instagram is also based on joint responsibility pursuant to Art. 26 DSGVO.

10.4 Recipients and transfer to third countries
The respective social networks are operated by the companies listed below. Further information on data protection with regard to our profile on the social networks can be found in the linked data protection pro-visions.

• Facebook: Meta Platforms, Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA resp. Meta Plat-forms Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland. Privacy policy: www.facebook.com/policy.php; www.facebook.com/help/186325668085084, www.facebook.com/about/privacy/your-info-on-other#applications and www.facebook.com/about/privacy/your-info#everyoneinfo.

• Instagram: Meta Platforms, Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA resp. Meta Plat-forms Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland; Privacy policy: help.instagram.com/155833707900388/.

• Youtube: YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy of Youtube/Google: www.google.com/policies/privacy/partners/?hl=de.

The social networks also process your personal data in the USA.

11. SOCIAL FEED

11.1 Description of processing
On the home page of our website you will find a section that we call “Social Feed”. There you will see posts that have been published by us on the social network Instagram. These posts are downloaded from our In-stagram profile by the “Smash Baloon” plugin we use and are initially stored temporarily on our server. From there, they are integrated locally into our website. Thus, no transmission of your personal data to Instagram takes place through the output of the “social feed” when you visit our website.

11.2 Purpose
We include the social feed on our website in order to be able to inform you about our latest posts on Insta-gram in an appealing and convenient way.

11.3 Legal basis
The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f DSGVO). Our legitimate interest lies in the purpose named in section 11.2.

11.4 Recipients and transfer to third countries
Through the integration of the social feed, no data transmission to the corresponding social network Insta-gram takes place, as the Instagram posts are cached locally and only integrated into our website from there. We refer to section 11.1.

11.5 Recipients and transfer to third countries
Through the integration of the social feed, data may be transmitted to the corresponding social networks. We refer to section 10.4.

12. GOOGLE WEBFONTS AND FONT AWESOME
When displaying our website, the standard fonts of your terminal device are replaced by fonts from the Google Webfonts catalog. This is done in order to display the text on our website in a more readable and aesthetically pleasing way. When replacing fonts, we have opted for a privacy-friendly solution. We do not integrate Google Fonts as an external service. Instead, we store the fonts to be replaced locally on our serv-er. This has the advantage that when you call up our site, no request is made by your browser to external font replacement services and thus no data, in particular your IP address in connection with the address of our website, is transmitted to third parties.

Our website also uses “Font Awesome”, an icon display and integration service developed by the company Fonticons, Inc. We have stored Font Awesome exclusively on our own server and integrate it from there into our website. Therefore, the use and display of icons is not accompanied by any data transmission to Fonti-cons, Inc.

13. YOUTUBE

13.1 Description of processing
Our website uses services from “YouTube” a video platform operated by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA (hereinafter referred to as “YouTube”). YouTube is represented by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We use YouTube by embedding individual videos from the platform on our website so that they can be played directly on our website. Only when a video is played does a data transmission to Google take place, over which we have no influence. If you play a video embedded on a subpage of our website, it will be transmitted to Google which subpage you visited and which video you watched. If applicable, your IP address will also be transmitted to Google. If you are logged in as a YouTube or Google user, Google assigns this information to your user account. Google stores your data as user profiles and uses them for advertising purposes, for market research and/or for the de-mand-oriented design of the Google websites. You have the right to object to the creation of these user profiles. To exercise this right, you must contact Google directly. Further information on data protection at Google can be found at https://policies.google.com/privacy?hl=en.

13.2 Purpose
The processing is done in order to show you videos in our website.

13.3 Legal basis
The processing is based on consent pursuant to Art. 6 (1) lit. a DSGVO. This is obtained by us via the consent tool “Borlabs” (see section 6.1) or in the context of a content blocker at the point on our website where a Youtube video is to be displayed. Such consent is voluntary.

13.4 Recocation of consent
You can revoke your consent to display YouTube videos on our website at any time in the settings of the “Borlabs” consent tool with effect for the future. This is the link: Change Cookie Preferences.

13.5 Recipients and transfer to third countries
Through the integration of YouTube, personal data may be transmitted to YouTube LLC or Google. Google also processes your personal data in the USA.

14. SPOTIFY

14.1 Description of processing
Our website uses plugins from “Spotify” an audio streaming platform operated by Spotify AB, Birger Jarls-gatan 61, 113 56 Stockholm, Sweden. An overview of the Spotify plugins can be found at: developer.spotify.com. We use Spotify by embedding individual audio files, albums or playlists from the platform on our website as a so-called iFrame, so that they can be played directly on our website as a stream. When you visit a subpage of our website on which a Spotify plugin is embedded, a connection to the Spotify servers is established and the plugin is displayed within our website. This transmits to Spotify which website you have visited. If applicable, your IP address will also be transmitted to Spotify. If you play an embedded audio file, an album or a playlist, this information is also transmitted to Spotify. If you are logged in as a Spotify user, Spotify assigns this data to your user account. If you do not want Spotify to associate your visit to our pages with your Spotify user account, please log out of your Spotify user account. You can find more information about data protection at Spotify at www.spotify.com/de/legal/privacy-policy .

14.2 Purpose
The processing takes place in order to be able to embed playable audio files, albums or playlists from Spotify on our website.

14.3 Legal basis
The processing is based on consent pursuant to Art. 6 (1) lit. a DSGVO. This is obtained by us via the consent tool “Borlabs” (see section 7.1) or in the context of a content blocker at the point on our website where a Spotify plugin is to be displayed. Such consent is free-will.

14.4 Revocation of consent
You can revoke your consent to display Spotify plugins on our website at any time in the settings of the “Borlabs” consent tool with effect for the future: Change Cookie Preferences .

14.5 Recipients and transfer to third countries
By using the Spotify service, personal data may be transmitted to the company Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden. Spotify also processes this data on servers outside the EU.

V. Security measures

15. SECURITY MEASURES
To protect your personal data from unauthorized access, we have provided our website with an SSL or TLS certificate. SSL stands for “Secure Sockets Layer” and TLS for “Transport Layer Security” and encrypts the communication of data between a website and the user’s end device. You can recognize active SSL or TLS encryption by a small lock logo that is displayed on the far left of the browser’s address bar.

 

VI. Your Rights

16. DATA SUBJECT RIGHT
With regard to the data processing by our company described above, you are entitled to the following data subject rights:

16.1 Information (Art. 15 DSGVO)
You have the right to request confirmation from us as to whether we are processing personal data relating to you. If this is the case, you have a right to information about this personal data and to the information listed in detail in Art. 15 DSGVO under the conditions specified in Art. 15 DSGVO.

16.2 Correction (Art. 16 DSGVO)
You have the right to request from us without undue delay the rectification of any inaccurate personal data concerning you and, where applicable, the completion of any incomplete personal data.

16.3 Deletion (Art. 17 DSGVO)
You have the right to demand that we delete personal data relating to you without delay if one of the rea-sons listed in detail in Article 17 of the GDPR applies, e.g. if your data is no longer required for the purposes we are pursuing.

16.4 Restriction of data processing (Art. 18 DSGVO)
You have the right to request us to restrict processing if one of the conditions listed in Art. 18 DSGVO is met, e.g. if you dispute the accuracy of your personal data, data processing will be restricted for the period of time that allows us to verify the accuracy of your data.

16.5 Data portability (Art. 20 DSGVO)
You have the right, under the conditions set out in Art. 20 DSGVO, to request that the data concerning you be handed over in a structured, common and machine-readable format.

16.6 Withdrawal of consent (Art. 7 Abs. 3 DSGVO)
You have the right to revoke your consent at any time in the case of processing based on consent. The revo-cation applies from the time it is asserted. In other words, it has effect for the future. The processing there-fore does not become unlawful retroactively as a result of the revocation of consent.

16.7 Complaint (Art. 77 DSGVO)
If you consider that the processing of personal data concerning you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. You may exercise this right at a supervisory authority in the EU member state of your residence, workplace or the place of the alleged infringement.

16.8 Prohibition of automated decisions/profiling (Art. 22 DSGVO)
Decisions that have legal consequences for you or significantly affect you must not be based solely on auto-mated processing of personal data – including profiling. We inform you that we do not use any automated decision-making including profiling with regard to your personal data.

16.9 Right of objection (Art. 21 DSGVO)
If we process your personal data on the basis of Art. 6 (1) f DSGVO (for the protection of overriding legiti-mate interests), you have the right to object to this under the conditions listed in Art. 21 DSGVO. However, this only applies if there are reasons arising from your particular situation. After an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms. We also do not have to stop processing if it serves the assertion, exercise or defense of legal claims. In any case – also regardless of a specific situation – you have the right to object at any time to the processing of your personal data for direct marketing.

Status: July 2023