Privacy policy.

Thank you for visiting our website www.music-campus.com. Protecting your personal data is important to us. In this privacy policy, we inform you which data we process, for what purposes, and what rights you have.

Personal data means any information relating to an identified or identifiable person (e.g. name, email address, phone number, IP address).

1Controller

Further legal information can be found in our legal notice.

2General principles

2.1 Data security

We use technical and organisational measures to protect data against loss, manipulation and unauthorised access.

2.2 Retention period

We store personal data only for as long as is necessary for the respective purpose or as required by statutory retention obligations. After that, the data is deleted or its processing is restricted.

3Data processing when you visit the website (server log files)

When you access our website, our web server automatically processes data transmitted by your browser, in particular:

• IP address
• Date and time of access
• page/file accessed
• Referrer URL
• Browser type/version, operating system
• Language settings
• HTTP status code / amount of data

4Cookies, consent and local storage

Without your consent, our website itself does not set any cookies and does not use any analytics or marketing tools. We only load content from external providers (YouTube video, Google Maps) and the visitor statistics via Google Tag Manager if you consent via our consent banner or actively load the respective map or video. We store your choice in your browser’s local storage (entry “mc_consent”) so that the banner does not appear again every time you open a page; this information does not leave your device. After 12 months it is automatically discarded and we ask again. You can change or withdraw your choice at any time via the “Cookie settings” link in the footer of every page.

For the trial lesson request, we store which subject you are interested in, only for the duration of your browser session, in what is known as session storage, so that this information is available on the confirmation page. This information does not leave your device and is automatically deleted when you close the browser window.

Once you have given your consent, embedded third-party services may set cookies (YouTube, Google Maps and the statistics services loaded via Google Tag Manager). In addition, the booking form from msvplus.de is embedded on the “Trial lesson” page. It is loaded without separate consent because it is technically necessary for the trial lesson request you wish to make (Section 25(2) no. 2 TDDDG). Details can be found in the respective sections.

5Fonts (hosted locally)

The fonts used on our website are stored locally on our own server and loaded from there. No connection is made to servers operated by Google or other third parties.

6Google Maps (only after a click)

On several pages (in each case in the “Contact & directions” section), you can display a map from Google Maps. The map is only loaded if you allow “External media” in the consent banner or actively click “Load map”. A click on “Load map” applies only to that particular map and that page view; no permanent consent is stored. Before that, no data is transmitted to Google. After the click, Google may process, among other things, your IP address, device and browser data and, where applicable, location data (depending on your device settings), and may set cookies.

Transfer to third countries: a transfer to the USA cannot be ruled out; Google is certified under the EU-US Data Privacy Framework.

7YouTube (video on the home page)

On our home page we show a muted video embedded via YouTube in privacy-enhanced mode (youtube-nocookie.com). It is only loaded if you allow “External media” in the consent banner or click “Activate video” (this click applies only to the current page view and does not store any permanent consent). It is then loaded directly when you open the home page. Without consent, you only see a still image served from our own server. Once you consent, a connection is established to YouTube/Google servers; in particular, your IP address and device and browser data are transmitted. According to YouTube, in privacy-enhanced mode it does not set any advertising cookies as long as you do not interact with the video; however, the storage of technically necessary information on your device cannot be ruled out.

Transfer to third countries: a transfer to the USA cannot be ruled out; Google is certified under the EU-US Data Privacy Framework.

8Google Tag Manager and visitor statistics (only with consent)

If you consent to the “Statistics” category in the consent banner, we load Google Tag Manager. We use this tool to embed services for measuring reach on our website, such as Google Analytics. In particular, your IP address, information about your browser and device, the pages you visit, the time and duration of your visit and your approximate region are processed and transmitted to Google. The embedded services may set cookies (for example “_ga”) that are stored for up to 14 months. Advertising features and personalised ads are disabled. Without your consent, Google Tag Manager is not loaded.

Transfer to third countries: a transfer to the USA cannot be ruled out; Google is certified under the EU-US Data Privacy Framework. If you withdraw your consent, the page is reloaded and Google Tag Manager is no longer embedded.

9Trial lesson booking via msvplus.de (form/online service)

To book trial lessons, we use a booking form provided by msvplus.de and embedded on our “Trial lesson” page. When you open this page, a connection is established to the msvplus.de servers. If you submit a request or make a booking there, the data you enter is processed, e.g.:

• Name, contact details (email/phone)
• preferred instrument/course, preferred appointment times
• messages/content, where applicable age/student data (if requested)
• technical data (IP address, timestamp) for system security

Where msvplus.de acts as a processor, processing is carried out on the basis of a data processing agreement (Art. 28 GDPR).

10ME Time prepaid card enquiry (form)

On the “ME Time” page, you can request a prepaid card or a gift voucher. In doing so, we process the information you enter: name, email address, phone number, where applicable the name of the gift recipient, and the selected card (number and length of lessons, price). The form is sent to us as an email via a script on our own web server at STRATO; the information is not stored on the web server but is afterwards only held in our email inbox.

To protect against automated spam requests, we do not use a third-party service but a short “music check”: our server sets a random sequence of keys that you play back. We also check how quickly the form was submitted and limit the number of requests. For this purpose, a counter with an encrypted (hashed) value of your IP address is stored on our server for a maximum of one hour; it is then discarded. No cookies are set and no data is transmitted to third parties.

11Contacting us (email, phone, WhatsApp)

If you contact us by email, phone or WhatsApp, we process the data you provide in order to handle your enquiry.

WhatsApp

Our website contains links that let you message us via WhatsApp. WhatsApp (or the WhatsApp website) only opens when you click such a link; before that, no data is transmitted to WhatsApp. When you use WhatsApp, the provider WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, processes, among other things, your phone number, your profile name, metadata and the content of your messages (end-to-end encrypted). A transfer to the parent company Meta Platforms Inc. in the USA cannot be ruled out; Meta is certified under the EU-US Data Privacy Framework. If you do not want this, you can always reach us by email or phone.

Links to social networks

Instagram and Facebook are only included on our website as simple links. Data is only transmitted when you click a link and visit the respective platform; the privacy policy of Meta Platforms Ireland Limited applies there.

12Recipients, service providers and data processing on our behalf

We use service providers (hosting by STRATO GmbH, the msvplus.de booking system) who may process data on our behalf. Where necessary, we conclude data processing agreements in accordance with Art. 28 GDPR.

13Your rights

Subject to the applicable requirements, you have the following rights:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on Art. 6(1)(e)/(f) GDPR (Art. 21 GDPR)
• Withdrawal of consent given (Art. 7(3) GDPR)

Right to lodge a complaint

You also have the right to lodge a complaint with a data protection supervisory authority. For North Rhine-Westphalia (NRW), this is, for example:

14Objection under Art. 21 GDPR

Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation.
In the case of direct marketing, an objection takes effect without any further balancing of interests.

15Data protection contact