Privacy - AUDIOLITH

Privacy policy for www.audiolith.net

INTRODUCTION AND TERMS

1. INTRODUCTION

In operating our website www.audiolith.net (hereinafter referred to as the “website”), we process personal data. We treat this data confidentially and process it in accordance with the applicable laws, in particular the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG-neu). With our privacy policy, we want to inform you which personal data we collect from you, for what purposes and on what legal basis we use it and, if applicable, to whom we disclose it. We will also explain what rights you have to protect and enforce your data privacy.

2. TERMS

Our privacy policy contains technical terms that are used in the GDPR and the BDSG-new. For your better understanding, we would like to explain these terms in simple terms in advance:

2.1 Personal data

“Personal data” means any information relating to an identified or identifiable person (Art. 4 No. 1 GDPR). Details of an identified person can be, for example, their name or email address. However, personal data is also data for which the identity is not immediately apparent, but can be determined by combining your own or third-party information to find out who the person is. A person can be identified, for example, by providing their address or bank details, their date of birth or user name, their IP addresses and/or location data. All information that can be used to identify a person in any way is relevant here.

2.2 Processing

Art. 4 no. 2 GDPR defines “processing” as any operation involving personal data. This applies in particular to the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal data.

RESPONSIBLE COMPANY AND DATA PROTECTION OFFICER

3. RESPONSIBLE PARTY

Responsible for data processing is:

Company: Audiolith International GmbH (“we”)

Legal representative: Lars Lewerenz, Artur Schock (Managing Director)

Address: Holstenkamp 42, DE-22525 Hamburg

Telephone: +49 (0)40 - 609 4613 30

E-mail: audiolith@audiolith.net

4. DATA PROTECTION OFFICER

We have appointed a data protection officer for our company. You can reach him at:

Name: Sven Naumann

Address: Audiolith International GmbH “Data Protection Officer”, Holstenkamp 42, DE-22525 Hamburg

Telephone: +49 (0)40 - 609 4613 30

E-mail: datenschutz@audiolith.net

PROCESSING FRAMEWORK

5. PROCESSING FRAMEWORK: WEBSITE

As part of the website with the URL www.audiolith.net, we process the personal data of you listed in detail in sections 6-16 below. We only process data that you actively provide on our website (e.g. by filling out forms) or that you automatically provide when using our website.

Your data will be processed exclusively by us and will not be sold, lent or passed on to third parties. If we use the help of external service providers to process your personal data, this is done within the framework of so-called order processing, in which we as the client are authorized to issue instructions to our contractors. We use external service providers to operate our website for hosting, maintenance, care and further development. If other external service providers are used for individual processing operations listed in sections 6-16, they will be named there.

Data transfer to third countries does not take place and is not planned. We will provide information about exceptions to this principle in the processing operations described below.

THE PROCESSING OPERATIONS IN DETAIL

6. PROVISION OF THE WEBSITE AND SERVER LOG FILES

6.1 Description of the processing

Each time you visit the website, we automatically collect information that your browser transmits to our server. This information is also stored in the so-called log files of our system.This involves the following data:

- Your IP address

- the browser software you are using, as well as its version and language

- the operating system you are using

- the website from which you accessed our website (so-called referrer)

- the subpages you have accessed on our website

- the date and time of your visit to our website

- Your internet service provider

- Amount of data transferred

- Country and location from which you visited our website

- Your length of stay on our website

The temporary storage of your IP address by the system is necessary in order to be able to deliver our website to a user’s end device. For this purpose, the user’s IP address must remain stored for the duration of the session. However, your IP address is not recorded in our log files.

6.2 Purpose

Processing is carried out to enable the website to be accessed and to ensure its stability and security. In addition, the processing serves the statistical evaluation and improvement of our online offer.

6.3 Legal basis

Processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR).Our legitimate interest lies in the purpose stated in section 6.2.

6.4 Storage period

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.The log files are deleted after 7 days.

7. CONTACT FORM AND CONTACT BY E-MAIL

7.1 Description of the processing

We have provided a contact form on our website for contacting us. In this form, you are asked to enter your e-mail address, your name and a message to us.When you click the “Send” button, the data is transmitted to us using SSL encryption (see section 16). The contact form can only be transmitted if you accept our privacy policy by clicking on the corresponding checkbox. You can also contact us via the e-mail addresses provided on the website.In this case, the personal data transmitted with the e-mail will be processed by us.

7.2 Purpose

By providing a contact form on our website, we want to offer you a convenient way to get in touch with us. The data transmitted with and in the contact form or your e-mail will be used exclusively for the purpose of processing and responding to your request.

7.3 Legal basis

Processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR).Our legitimate interest lies in the purpose stated in section 7.2. If the e-mail contact is aimed at the conclusion or fulfillment of a contract, the data processing is carried out for the fulfillment of the contract (Art. 6 para. 1 lit. b GDPR).

7.4 Storage period

We will delete the data as soon as it is no longer required to achieve the purpose for which it was collected.This is usually the case when the respective communication with you has ended. Communication ends when it can be inferred from the circumstances that your request has been conclusively clarified.If statutory retention periods prevent deletion, the data will be deleted immediately after the statutory retention period has expired.

8 COOKIES

8 COOKIES

8.1 Description of the processing

Our website uses cookies. Cookies are small text files that are stored on the user’s device when visiting a website.

Cookies contain information that enables the recognition of an end device and, if necessary, certain functions of a website. In most cases, we only use so-called “session cookies”. These are automatically deleted when you end your internet session and close the browser. Other cookies remain stored on your end device for a longer period of time. We use the following cookies on our website:

- Cookie name: … Purpose/function: … Storage duration: This cookie expires at the end of the browser session.

We use cookies to make our website more user-friendly and to offer the functions described in section 10.1.

8.2 Legal basis

The processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose stated in Section 10.2.

8.3 Storage duration

Cookies are automatically deleted at the end of a session or at the end of the specified storage period.Since cookies are stored on your end device, you as the user also have full control over the use of cookies.You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically.If cookies are deactivated for our website, individual functions of our website cannot be used or can only be used to a limited extent.

9 NEWSLETTER

9.1 Description of the processing

We send out a newsletter at irregular intervals. With the newsletter we inform you about our offers and information on the following topics in the area of new products, concerts, tours, releases, information about the label or our artists. You will only receive our newsletter if you actively subscribe to our mailing list.You can subscribe by filling out and submitting a newsletter registration form on our website or by placing an order in our online store.You only need to enter your e-mail address to subscribe to the newsletter. All other details (such as your first name and surname) are voluntary and are used solely to personalize the emails. We use the so-called double opt-in procedure to carry out and verify newsletter registrations. Registration takes place in several steps.First, you register for the newsletter on our website https://newsletter.audiolith.net.You will then receive an e-mail from us at the e-mail address you have provided.In this e-mail, we will ask you to confirm that you have actually subscribed to the newsletter and wish to receive it.Confirmation is provided by clicking on a confirmation link in the e-mail.Only after successful confirmation will we add you to our newsletter mailing list and send you future e-mails. As part of the double opt-in procedure, we store the date, time and your IP address both when you register and when you confirm.

If you purchase goods or services on our website and enter your email address, we may subsequently use it to send you a newsletter for existing customers.In such a case, only direct advertising for our own similar goods or services will be sent via the newsletter.

9.2 Purpose

The processing takes place in order to offer the newsletter function and to be able to send newsletter e-mails to subscribers and existing customers.The collection and storage of the date, time and IP addresses when subscribing to the newsletter serves to document the consent given and to protect against the misuse of email addresses.

9.3 Legal basis

The processing of our subscriber newsletter is based on consent in accordance with Art. 6 para. 1 lit. a GDPR. Your consent is voluntary.The collection and storage of date, time and IP addresses when subscribing to the newsletter is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR).Our legitimate interest lies in the purpose stated in section 11.2.

In the case of our newsletter for existing customers, processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR to protect the overriding interests of the controller. Our legitimate interest lies in direct advertising to existing customers. This is permissible within the framework of Section 7 (3) UWG.

9.4 Storage period and revocation of consent

If you do not confirm your subscription to our newsletter within 24 hours of receiving the corresponding registration email, your data will be deleted automatically. We process your personal data for the duration of your newsletter subscription. You can unsubscribe from our newsletter at any time by withdrawing your consent.

A simple declaration is sufficient for this (by e-mail to datenschutz@audiolith.net by post to Audiolith International GmbH, Holstenkamp 42 (right), DE-22525 Hamburg). You can also unsubscribe from the newsletter by clicking on the unsubscribe link in every newsletter email or here (https://newsletter.audiolith.net/?p=unsubscribe&id=3). If you withdraw your consent, we will no longer send you newsletters and your personal data will be removed from our active mailing list. We will add your e-mail address to our so-called black list in order to enforce your revocation. This enables us to ensure that you do not receive any newsletters from us in future and that your e-mail address is not misused by third parties.

10. GOOGLE WEBFONTS

10.1 Description of the processing

Our website uses “Google Webfonts”, a font replacement service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”). Google Web Fonts replaces the standard fonts of your device with fonts from Google’s catalog when displaying our website. If your browser prevents the integration of Google Web Fonts, the text on our website will be displayed in the standard fonts of your device. The Google fonts are loaded directly from a Google server. In order for this to happen, your browser sends a request to a Google server.

As a result, your IP address may also be transmitted to Google in connection with the address of our website.However, Google Web Fonts does not store any cookies on your end device.According to Google, data processed as part of the Google Web Fonts service is transferred to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com.They are not associated with data that may be related to the use of other Google services such as the search engine of the same name or Gmail.Further information on data protection at Google Webfonts can be found at https://developers.google.com/fonts/faq?hl=de-DE&csw=1. General information on data protection at Google can be found at http://www.google.com/intl/de-DE/policies/privacy/.

10.2 Purpose

The processing is carried out in order to display the text on our website in a more legible and aesthetically pleasing way.

10.3 Legal basis

Processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR).Our legitimate interest lies in the purpose stated in section 13.2.

10.4 Recipients and transfer to third countries

Through the use of Google Web Fonts, personal data may be transmitted to Google.Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield.Further information on the EU-US Privacy Shield can be found at https://www.privacyshield.gov/EU-US-Framework.

10. FONT AWESOME

Our website uses “Font Awesome”, a service for displaying and integrating icons developed by Fonticons, Inc.We operate Font Awesome exclusively as an installation on our own server.Therefore, the use and display of icons does not involve any data transfer to Fonticons, Inc.

11. YOUTUBE VIDEOS

11.1 Description of the processing

Our website uses services from “YouTube”, a video platform operated by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We use YouTube by embedding individual videos from the platform on our website as so-called iFrames so that they can be played directly on our website.

The videos are embedded in the “extended data protection mode” offered on YouTube, i.e. no personal data will be transferred from you to Google as long as you do not play the videos. Only when you play a video will data be transferred to Google, over which we have no influence. If you play an embedded video on a subpage of our website, Google will be informed which subpage you have visited and which video you have watched. Your IP address may also be transmitted to Google. If you are logged in as a YouTube or Google user, Google will assign this information to your user account. Google stores your data as user profiles and uses them for advertising purposes, for market research and/or for the needs-based design of Google websites. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google directly. Further information on data protection at Google can be found at http://www.google.com/intl/de-DE/policies/privacy/.

11.2 Purpose

The processing takes place in order to be able to show you videos on our website.

11.3 Legal basis

Processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR).

Our legitimate interest lies in the purpose stated in section 16.2.

11.4 Recipients and transfer to third countries

By integrating YouTube, personal data may be transmitted to YouTube LLC or Google.Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield.Further information on the EU-US Privacy Shield can be found at https://www.privacyshield.gov/EU-US-Framework.

12. VIMEO VIDEOS

12.1 Description of the processing

Our website uses services from “Vimeo”, a video platform operated by Vimeo LCC, 555 West 18th Street, New York, New York 10011, USA. We use Vimeo by embedding individual videos from the platform on our website as so-called iFrames so that they can be played directly on our website.When you visit a subpage of our website on which a video is embedded, a connection to the Vimeo servers is established and the video is displayed on our website. This tells Vimeo which website you have visited. Your IP address may also be transmitted to Vimeo.If you play an embedded video, this information will also be passed on to Vimeo.If you are logged in as a Vimeo user, Vimeo assigns this data to your user account. Further information on data protection at Vimeo can be found at http://vimeo.com/privacy.

12.2 Purpose

The processing is carried out in order to be able to show you videos on our website.

12.3 Legal basis

Processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose stated in section 17.2.

12.4 Recipients and transfer to third countries

Vimeo also processes data in the USA.

13 SOUNDCLOUD

13.1 Description of the processing

Our website uses services from “Soundcloud”, a platform for audio material operated by SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Germany.We use Soundcloud by embedding individual audio files from the platform on our website as so-called iFrames so that they can be played directly on our website.When you visit a subpage of our website on which an audio file is embedded, a connection to the Soundcloud servers is established and the audio file is displayed on our website.This tells Soundcloud which website you have visited.Your IP address may also be transmitted to Soundcloud.

If you play an embedded audio file, this information will also be passed on to Soundcloud. If you are logged in as a Soundcloud user, Soundcloud assigns this data to your user account. Further information on data protection at Soundcloud can be found at https://soundcloud.com/pages/privacy.

13.2 Purpose

The processing takes place in order to be able to display and play audio files on our website.

13.3 Legal basis

Processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose stated in section 18.2.

13.4 Recipients

By using the Soundcloud service, personal data may be transmitted to the company SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Germany.

14. GOOGLE MAPS

14.1 Description of the processing

Our website uses “Google Maps”, a service for displaying maps provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”). We use Google Maps by embedding a map with our business address on our website. The map is loaded directly from a Google server. In order for this to happen, your browser sends a request to a Google server. As a result, your IP address may also be transmitted to Google in connection with the address of our website. However, Google Maps does not store any cookies on your end device. If you are logged in to Google when you visit our site, Google Maps assigns this information to your Google user account. Google stores your data as user profiles and uses them for advertising purposes, for market research and/or for the needs-based design of Google websites. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google directly.

Further information on data protection at Google can be found at http://www.google.com/intl/de-DE/policies/privacy/.

14.2 Purpose

The processing takes place in order to be able to show you an interactive map on our website.

14.3 Legal basis

Processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose stated in section 20.2.

14.4 Recipients and transfer to third countries

Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield.Further information on the EU-US Privacy Shield can be found at https://www.privacyshield.gov/EU-US-Framework.

15. CONTENT DELIVERY NETWORKS (CDN)

15.1 Description of the processing

Our website uses so-called Content Delivery Networks (CDN).CDNs shorten the loading time of common JavaScript libraries because the files are transferred from fast, local or underutilized servers of external service providers.Another advantage compared to storing the JavaScrip libraries locally on our server is that the files are regularly checked for security and kept up to date by the external service providers.We have integrated the JavaScript library jQuery from the external service providers for the implementation of some programming functions.

When you visit our website, a connection is established to the servers of the aforementioned external services and the jQuery library is loaded into our website. This tells the external service providers which website you have visited. Your IP address may also be transmitted. To prevent the execution of Java Script altogether, you can install a Java Script blocker in your browser.

15.2 Purpose

Processing is carried out in order to shorten the loading time of our website and to be able to integrate the JavaScript library quickly and securely.

15.3 Legal basis

Processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose stated in section 10.2.

15.4 Recipients and transfer to third countries

By integrating the JavaScript libraries, your data is transmitted to one of the following CDNs

- jQuery hosted by Google ajax.googleapis.com: Google Inc, 1600 Amphitheater Parkway, Mountainview, California 94043, USA; For more information on data protection at Google, please visit https://www.google.com/policies/privacy/partners/?hl=de.

- jQuery hosted by jQuery, www.jquery.com: JS Foundation, 1 Letterman Dr Suite D4700, San Francisco, California 94129, USA

SECURITY MEASURES

16. security measures

To protect your personal data from unauthorized access, we have provided our website with an SSL or TLS certificate. SSL stands for “Secure Sockets Layer” and TLS for “Transport Layer Security” and encrypts the communication of data between a website and the user’s end device. You can recognize the active SSL or TLS encryption by a small lock logo that is displayed on the far left in the address bar of the browser.

YOUR RIGHTS

16. security measures

YOUR RIGHTS

17. RIGHTS OF DATA SUBJECTS

With regard to the data processing described above by our company, you have the following rights as a data subject:

17.1 Information (Art. 15 GDPR)

You have the right to request confirmation from us as to whether we are processing personal data concerning you. If this is the case, you have a right of access to this personal data and to the further information listed in Art. 15 GDPR under the conditions set out in Art. 15 GDPR.

17.2 Rectification (Art. 16 GDPR)

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you and, where applicable, the completion of incomplete personal data.

17.3 Erasure (Art. 17 GDPR)

You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the grounds listed in Art. 17 GDPR applies, e.g. if your data is no longer required for the purposes pursued by us.

17.4 Restriction of data processing (Art. 18 GDPR)

You have the right to demand that we restrict processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if you dispute the accuracy of your personal data, data processing will be restricted for the period of time that enables us to verify the accuracy of your data.

17.5 Data portability (Art. 20 GDPR)

You have the right, under the conditions set out in Art. 20 GDPR, to request the surrender of the data concerning you in a structured, common and machine-readable format.

17.6 Withdrawal of consent (Art. 7 para. 3 GDPR)

You have the right to withdraw your consent to processing based on consent at any time. The revocation applies from the time of its assertion. In other words, it is effective for the future. Withdrawal of consent therefore does not retroactively render the processing unlawful.

17.7 Complaint (Art. 77 GDPR)

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. You can assert this right with a supervisory authority in the EU Member State of your place of residence, your place of work or the place of the alleged infringement.

17.8 Prohibition of automated decision-making/profiling (Art. 22 GDPR)

Decisions that have legal consequences for you or significantly affect you may not be based solely on automated processing of personal data, including profiling.We inform you that we do not use automated decision-making, including profiling, with regard to your personal data.

17.9 Objection (Art. 21 GDPR)

If we process your personal data on the basis of Art. 6 para. 1 lit. f GDPR (for the protection of overriding legitimate interests), you have the right to object to this under the conditions listed in Art. 21 GDPR.However, this only applies if there are grounds relating to your particular situation.

After an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. We also do not have to stop processing if it serves the assertion, exercise or defense of legal claims. In any case - regardless of a particular situation - you have the right to object to the processing of your personal data for direct marketing purposes at any time.

Last updated: May 2018

Audiolith International GmbH, Audiolith Publishing GmbH & Anti Publishing OHG Statement regarding AI:

- Responsibly produced AI tools have significant poten9al for the music sector. The rights of all those involved
in crea9ng and distribu9ng music must be respected and licensed specifically in advance.

-Without prejudice to any prior rights reservations, Audiolith International GmbH, Audiolith Publishing GmbH & Anti Publishing OHG hereby expressly reaffirms that its
rights are fully reserved as set out below. We reaffirm that:

-Any past, present or future use of any of the works or content owned or controlled by Audiolith International GmbH, Audiolith Publishing GmbH & Anti Publishing OHG
(including recordings, audiovisual recordings, compositions, lyrics, artwork, images, data, metadata, etc.) for
the purpose of reproducing, performing, distributing, linking to or ingesting, machine learning or any AI
training, development or commercialisation of AI systems, tools or technology, web scraping, ripping,
recording, altering, making extracts or derivatives, crawling, text or data mining or similar purposes, and by
any means (including by automated means), is prohibited, except as specifically and explicitly authorised by
Audiolith International GmbH, Audiolith Publishing GmbH & Anti Publishing OHG in advance.
Directive 2019/70/EC or similar laws in other jurisdictions (to the extent that this Article would apply to the
above uses, an interpretation we do not agree with). Our reservation applies to all content owned or
controlled by Audiolith International GmbH, Audiolith Publishing GmbH & Anti Publishing OHG, now or in the future, including where this content may be identified through

-In the absence of an express advance licence permitting the above uses, we expressly reserve our rights in
respect of the use of Audiolith International GmbH’s, Audiolith Publishing GmbH’s & Anti Publishing OHG’s content, including without limitation under Article 4 of the EU
publicly available means.

- We will take the necessary steps to prevent the infringement of our rights.

- Please contact us as regards any licensing requests (publishing@audiolith.net).