Generally speaking, I have no particular interest in your personal data at all. I do however run this website and hope that some people might find it helpful. By doing so, I cannot avoid that I am processing some personally identifiable information ("data") of website visitors, record store customers as well as artists and other partners.
1. Visitors of christophberg.com
(a) I am processing data that is automatically shared by the device that you are using whilst visiting christophberg.com. This data includes your IP address, date and time (including time zone) of your visit, the actual page visited, the web page you visited prior to coming to christophberg.com, information about your browser (including type and version), your operating system and language settings. This data is used by the web server to correctly display the content of my website according to your settings and preferences.
(b) This website is hosted on servers provided by ALL-INKL.COM - Neue Medien Münnich, Inh. René Münnich, Hauptstr. 68, 02742 Friedersdorf, Germany ("Webhost"). The Webhost is processor pursuant to Art. 28 GDPR. This processing is based on a Data Processing Agreement I entered into with Webhost, assuring the security and protection of your personal data.
(c) You may also voluntarily subscribe to my newsletter. Mailjet SAS, 13-13 bis, rue de l’Aubrac 75012 Paris, France ("Mailjet") renders the newsletter services on my behalf. The following personal information will be processed by Mailjet: your email address. Mailjet uses the Google AJAX Search API, a programming application interface provided by Google. This processing is based on a Data Processing Addendum I entered into with Mailjet, assuring the security and protection of your personal data. You may unsubscribe from the newsletter at any time.
(d) The legal basis is provided by Art. 6(1) lit. f) of the General Data Protection Regulation ("GDPR"). My legitimate interest is to provide you with an appropriately displayed website and/or with the requested newsletter.
(e) Server log files will be deleted automatically after 7 days. Your newsletter data will not be deleted until you unsubscribe from the newsletter service.
(f) "YouTube" is the YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When I am embedding YouTube videos on christophberg.com, I am using the so-called “Privacy-enhanced mode”. Thus, YouTube will not store any information about your visit to a page on this website that has a YouTube video embedded unless you interact with such videos. The legal basis is provided by Art. 6(1) lit. f) of the GDPR. My legitimate interest is advertising my own work. If you interact with the video, YouTube will receive the information that you have accessed the respective page on this website. In addition, further data may be transmitted to servers operated by YouTube. Should you be logged in to your YouTube and/or Google account, YouTube may associate your browsing behaviour with your personal profile. You can prevent YouTube and/or Google from doing so by logging off of your YouTube and/or Google account prior to interacting with a YouTube video embedded on christophberg.com. For more information about your rights and privacy settings please read here.
2. Record store customers
(a) I am processing the following data for the purpose of entering into or preparing a contractual relationship with you: your name, billing and shipping address, email address as well as the order and payment status.
(b) My record store is powered by Limited Run, a service provided by Cloudwarmer, Inc. ("Limited Run"). The following personal information will be processed by Limited Run: your name, billing address, shipping address, email address and the order and payment status. PayPal Holdings, Inc (“PayPal”) is my payment services provider. The following personal information will be processed by PayPal, or - depending on your location - the PayPal affiliate responsible for your territory: your name, billing address, shipping address, email address, payment details.
(c) Limited Run and PayPal are processors pursuant to Art. 28 GDPR. The basis for data processing in the USA is your consent pursuant to Art. 49(1) lit. a) GDPR. Please note that in the USA there is no level of data protection comparable to the provisions of the GDPR. Therefore, it is possible that US authorities may access personal data without us or you being informed. An enforcement of your rights is probably not possible in the USA. You can withdraw your given consent at any time with effect for the future. That said, Limited Run and PayPal are assuring the security and protection of your personal data.
(d) IP Mappers is processing the following data on store.christophberg.com: your IP address. This data is used for the purpose of locating the IP address allocated to your device whilst placing an order in my record store. According to European tax regulations, VAT applying to non-physical products (downloads) must be paid in the country where you purchase such product.
(e) The legal basis is provided by Art. 6(1) lit. b) of the GDPR, I am processing data to enter into or prepare a contractual relationship. Please note that I may be unable to enter into a contractual relationship when you are not providing the contractual data required. I am obligated to store contractual information (including your data) for ten years according to applicable business and tax laws. The legal basis for the transfer of order and payment information to webshop and payment providers is provided by Art. 6(1) lit. f) GDPR, my legitimate interest is to offer order and payment services as customary in the industry, and Art. 6(1) lit. a) GDPR, your consent. If you order from my record store, the provision of data is obligatory based on statutory and contractual regulations. The contractual relationship cannot be established and carried out if you do not provide the data.
3. Artists and other partners
(a) When you reach out to me via email or otherwise with any inquiry whatsoever, I am processing the data you provide me with. This may be most likely your name, address, email address, phone. If you don't want me to process any of this data, please amend your email signature accordingly before contacting me.
(b) Depending on your inquiry it may be required to share your data with other artists, labels and/or publishers, e.g. when you are getting in touch with a licensing request.
(c) The legal basis is provided by Art. 6(1) lit. b) of the GDPR when we are entering into or preparing a contractual relationship and/or Art. 6(1) lit. f) of the GDPR in cases where it is my legitimate interest to provide you with the information requested by you. Please note that I may be unable to enter into a contractual relationship when you are not providing the contractual data required. I am obligated to store contractual information (including your data) for ten years according to applicable business and tax laws.
4. Questions and information