Privacy Policy

1. Data Protection at a Glance General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any information that can be used to identify you personally. Detailed information about data protection can be found in our privacy policy, which is provided below this text.

Data Collection on This Website Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find their contact details in the section “Information on the Responsible Entity” in this privacy policy.

How do we collect your data?
Your data is collected in part by you providing it to us. This may include, for example, data you enter into a contact form.
Other data is collected automatically or with your consent when you visit the website through our IT systems. This mainly concerns technical data (e.g., internet browser, operating system, or the time of page access). The collection of this data happens automatically as soon as you enter the website.

How do we use your data?
Some of the data is collected to ensure the proper functioning of the website. Other data may be used to analyze your user behavior. If contracts can be concluded or initiated through the website, the transmitted data will also be processed for contract offers, orders, or other requests.

What rights do you have regarding your data?
You have the right to obtain information about the origin, recipients, and purpose of your stored personal data at any time free of charge. You also have the right to request correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. Furthermore, you have the right to request the restriction of processing your personal data under certain circumstances. You also have the right to file a complaint with the competent supervisory authority.
For this and any other questions regarding data protection, you can contact us at any time.

Analysis Tools and Third-Party Tools
When you visit this website, your browsing behavior may be statistically analyzed. This is primarily done with the help of analysis programs.
Detailed information about these analysis programs can be found in the following privacy policy.

2. Hosting
We host the content of our website with the following provider:

Strato
The provider is Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin (hereinafter referred to as “Strato”). When you visit our website, Strato collects various log files, including your IP addresses.
Further information can be found in Strato’s privacy policy: https://www.strato.de/datenschutz/.
The use of Strato is based on Art. 6, Sec. 1 lit. f GDPR. We have a legitimate interest in ensuring a reliable presentation of our website. If explicit consent has been requested, processing will be carried out solely on the basis of Art. 6, Sec. 1 lit. a GDPR and § 25 Sec. 1 TDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) in the sense of TDDG. The consent can be revoked at any time.

Order Processing
We have entered into an order processing agreement (AVV) for the use of the service mentioned above. This is a data protection law-required contract that ensures that Strato processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

3. General Information and Mandatory Information

Data Protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
When you use this website, various personal data will be collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this happens.
Please note that data transmission over the internet (e.g., communication by email) can have security vulnerabilities. A complete protection of the data from third-party access is not possible.

Information about the Responsible Entity
The responsible entity for data processing on this website is:
FILDER quartett
Sebastian Krieg
Jacob Brodbeck Straße 54
70794 Filderstadt
Email: info@filderquartett.de
The responsible entity is the natural or legal person who alone or together with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Retention Period
Unless a more specific retention period is stated within this privacy policy, your personal data will remain with us until the purpose for processing the data no longer applies. If you submit a legitimate request for deletion or revoke your consent for data processing, your data will be deleted, provided we have no other legally permissible reasons to store your personal data (e.g., tax or commercial retention periods); in the latter case, the deletion will take place after these reasons no longer apply.

General Information on the Legal Grounds of Data Processing on This Website
If you have consented to data processing, we process your personal data based on Art. 6 Sec. 1 lit. a GDPR or Art. 9 Sec. 2 lit. a GDPR, if special categories of data are processed according to Art. 9 Sec. 1 GDPR. In the case of explicit consent for the transfer of personal data to third countries, the data processing also takes place based on Art. 49 Sec. 1 lit. a GDPR. If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), the data processing is also based on § 25 Sec. 1 TDDG. The consent can be revoked at any time. If your data is necessary for contract fulfillment or to carry out pre-contractual measures, we process your data based on Art. 6 Sec. 1 lit. b GDPR. Furthermore, we process your data if it is required to fulfill a legal obligation based on Art. 6 Sec. 1 lit. c GDPR. Data processing can also take place based on our legitimate interest according to Art. 6 Sec. 1 lit. f GDPR. The applicable legal grounds for data processing in each case are provided in the following sections of this privacy policy.

Recipients of Personal Data
In the course of our business activities, we collaborate with various external entities. In some cases, the transfer of personal data to these external entities is necessary. We only share personal data with external entities if this is required to fulfill a contract, if we are legally obligated to do so (e.g., transfer of data to tax authorities), if we have a legitimate interest under Art. 6 Sec. 1 lit. f GDPR in the transfer, or if another legal basis permits the transfer of data. When using processors, we only transfer personal data of our customers based on a valid contract for data processing. In the case of joint processing, a joint processing agreement is concluded.

Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your express consent. You can revoke your consent at any time. The lawfulness of the data processing carried out before the revocation remains unaffected by the revocation.

Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6 SEC. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS INCLUDES PROFILING BASED ON THESE PROVISIONS. THE RELEVANT LEGAL BASIS FOR THE PROCESSING IS PROVIDED IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGAL REASONS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21 SEC. 1 GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING; THIS ALSO INCLUDES PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ART. 21 SEC. 2 GDPR).

Right to File a Complaint with the Competent Supervisory Authority
In the event of violations of the GDPR, the data subjects have the right to file a complaint with a supervisory authority, particularly in the member state of their habitual residence, workplace, or the place of the alleged violation. The right to file a complaint exists regardless of other administrative or judicial remedies.

Right to Data Portability
You have the right to request that data we process automatically based on your consent or in fulfillment of a contract be provided to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of data to another controller, this will only be done to the extent technically feasible.

Access, Correction, and Deletion
You have the right to obtain information about your stored personal data, its origin, recipients, and the purpose of data processing, free of charge, at any time, within the scope of applicable legal provisions, and if necessary, the right to correct or delete this data. For this and any other questions about personal data, you can contact us at any time.

Right to Restrict Processing
You have the right to request the restriction of the processing of your personal data. You can contact us at any time for this. The right to restrict processing exists in the following cases:

  • If you dispute the accuracy of the personal data stored by us, we usually need time to verify this. During the verification period, you have the right to request the restriction of the processing of your personal data.
  • If the processing of your personal data was unlawful, you can request the restriction of data processing instead of deletion.
  • If we no longer need your personal data, but you require it for the exercise, defense, or assertion of legal claims, you have the right to request the restriction of processing instead of deletion.
  • If you have filed an objection under Art. 21 Sec. 1 GDPR, a balancing of your and our interests must be carried out. As long as it is not clear whose interests prevail, you have the right to request the restriction of processing your personal data.
    If you have restricted the processing of your personal data, such data – apart from its storage – may only be processed with your consent or for the assertion, exercise, or defense of legal claims, or to protect the rights of another natural or legal person, or for reasons of an important public interest of the European Union or a member state.

SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the address bar of your browser changing from “http://” to “https://” and the padlock symbol in your browser bar.
When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

4. Data Collection on This Website

Cookies
Our websites use so-called “cookies.” Cookies are small data packages that do not cause harm to your device. They are stored on your device either temporarily for the duration of your session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted after your visit ends. Persistent cookies remain on your device until you delete them yourself or until they are automatically deleted by your web browser.
Cookies may come from us (first-party cookies) or from third parties (so-called third-party cookies). Third-party cookies enable the integration of specific services from third-party companies within websites (e.g., cookies for processing payment services).
Cookies serve various purposes. Many cookies are technically necessary, as certain website functions would not work without them (e.g., the shopping cart function or video display). Other cookies may be used to analyze user behavior or for advertising purposes.
Cookies that are necessary for conducting electronic communication, providing specific functions you desire (e.g., the shopping cart function), or optimizing the website (e.g., cookies to measure web audience) are stored based on Article 6(1)(f) of the GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimized provision of their services. If consent has been requested for storing cookies and similar recognition technologies, processing will take place solely on the basis of this consent (Article 6(1)(a) of the GDPR and § 25(1) of the TTDSG); consent can be withdrawn at any time.
You can configure your browser to be informed about the setting of cookies and allow cookies only in specific cases, exclude the acceptance of cookies for certain cases or generally, and activate the automatic deletion of cookies when closing the browser. If cookies are disabled, the functionality of this website may be limited.
The cookies and services used on this website can be found in this privacy policy.

Borlabs Cookies
This website uses Borlabs Cookie, which sets a technically necessary cookie (borlabs-cookie) to store your cookie consents.
Borlabs Cookie does not process any personal data.
The cookie borlabs-cookie stores the consents you gave when entering the website. If you want to withdraw these consents, simply delete the cookie in your browser. When you re-enter or refresh the website, you will be asked for your cookie consent again.

Requests by Email, Phone, or Fax
If you contact us by email, phone, or fax, your request, including all personal data derived from it (name, request), will be stored and processed for the purpose of handling your inquiry. We do not pass on this data without your consent.
The processing of this data is based on Article 6(1)(b) of the GDPR, if your inquiry is related to the fulfillment of a contract or is required for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling inquiries addressed to us (Article 6(1)(f) of the GDPR) or on your consent (Article 6(1)(a) of the GDPR) if it was requested; consent can be withdrawn at any time.
The data you send us via contact requests remains with us until you ask for its deletion, revoke your consent to storage, or the purpose for storage ceases (e.g., after your inquiry has been processed). Mandatory legal provisions – especially statutory retention periods – remain unaffected.

5. Social Media

Instagram
This website integrates functions from the Instagram service. These functions are provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
When the social media element is active, a direct connection between your device and the Instagram server is established. Instagram receives information about your visit to this website.
If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to this website with your user account. We point out that as the provider of the pages, we have no knowledge of the content of the transmitted data and how Instagram uses it.
The use of this service is based on your consent under Article 6(1)(a) of the GDPR and § 25(1) of the TTDSG. The consent can be withdrawn at any time.
If personal data is collected on our website with the help of the tool described here and forwarded to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Article 26 GDPR). The joint responsibility is limited exclusively to the collection of data and its transfer to Facebook or Instagram. The processing that takes place after the forwarding by Facebook or Instagram is not part of the joint responsibility. Our shared obligations have been documented in an agreement on joint processing. You can find the text of the agreement here: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing data protection information when using the Facebook or Instagram tool and for implementing the tool on our website in a data protection-compliant manner. Facebook is responsible for the data security of Facebook or Instagram products. Rights of affected individuals (e.g., access requests) regarding data processed by Facebook or Instagram can be asserted directly with Facebook. If you assert rights with us, we are obligated to forward them to Facebook.
Data transfer to the USA is based on the EU Commission’s standard contractual clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://privacycenter.instagram.com/policy/ and https://de-de.facebook.com/help/566994660333381.
More information can be found in Instagram’s privacy policy: https://privacycenter.instagram.com/policy/.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that ensures compliance with European data protection standards for data processing in the USA. Any company certified under the DPF commits to adhering to these data protection standards. You can find more information about this at the following link: https://www.dataprivacyframework.gov/participant/4452.

6. Plugins and Tools

Google Services
Analytics Tools: Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies that allow for the analysis of website usage. The information generated by the cookie about your use of this website is generally transmitted to a Google server and stored there. We have activated IP anonymization on this website (“anonymizeIP”), so your IP address will be truncated by Google within the member states of the European Union or in other contracting states of the European Economic Area before being stored.
The storage of Google Analytics cookies is based on your consent in accordance with Art. 6(1)(a) GDPR. For more information, please visit:
https://support.google.com/analytics/answer/6004245?hl=en

Google Ads
The website operator uses Google Ads. Google Ads is an online advertising program from Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads allows us to display ads on Google search results or on third-party websites when users enter specific search terms on Google (keyword targeting). Furthermore, targeted ads can be displayed based on user data available on Google (e.g., location data and interests) (audience targeting). We as website operators can quantitatively analyze this data by, for example, examining which search terms led to the display of our ads and how many ads resulted in clicks.
The use of this service is based on your consent under Art. 6(1)(a) GDPR and § 25(1) TTDSG. The consent can be revoked at any time.

Google Conversion Tracking
This website uses Google Conversion Tracking. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
With Google Conversion Tracking, Google and we can see whether a user has performed specific actions. For example, we can evaluate which buttons on our website were clicked the most and which products were viewed or purchased most frequently. This information helps us generate conversion statistics. We learn the total number of users who clicked on our ads and what actions they took. We do not receive information that allows us to personally identify users. Google itself uses cookies or similar recognition technologies to identify users.
The use of this service is based on your consent under Art. 6(1)(a) GDPR and § 25(1) TTDSG. The consent can be revoked at any time.
More information on Google Conversion Tracking can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=en.

Google Tag Manager
We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The Google Tag Manager is a tool that allows us to integrate tracking or analytics tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, store cookies, or conduct independent analyses. It merely manages and triggers the tools integrated through it. However, the Google Tag Manager records your IP address, which may also be transmitted to Google’s parent company in the United States.
The use of the Google Tag Manager is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in quickly and easily integrating and managing various tools on the website.
If the necessary consent was given, processing is solely based on Art. 6(1)(a) GDPR and § 25(1) TTDSG, as far as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) as per TTDSG. Consent can be revoked at any time.

Data Transfer by Google
Google Ireland Limited is a subsidiary of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA to ensure compliance with European data protection standards for data processing in the USA. Any company certified under the DPF is committed to adhering to these data protection standards. More information can be found at: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

Google Fonts (Local Hosting)
This site uses Google Fonts, which are provided by Google, for the uniform display of fonts. The Google Fonts are installed locally. No connection to Google servers takes place.
For more information on Google Fonts, visit https://developers.google.com/fonts/faq and Google’s privacy policy: https://policies.google.com/privacy?hl=en.

Google Maps
This site uses the Google Maps service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. This service allows us to embed map material on our website.
To use the features of Google Maps, it is necessary to store your IP address. This information is typically transmitted to a Google server in the USA and stored there. The operator of this site has no control over this data transfer. When Google Maps is activated, Google may use Google Fonts for the consistent display of fonts. When accessing Google Maps, your browser loads the required web fonts into its browser cache to correctly display texts and fonts.
The use of Google Maps is in the interest of an appealing presentation of our online offerings and easy accessibility of the locations listed on the website. This constitutes a legitimate interest according to Art. 6(1)(f) GDPR. If explicit consent was requested, processing is solely based on Art. 6(1)(a) GDPR and § 25(1) TTDSG, as long as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) under TTDSG. Consent can be revoked at any time.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
More information on the handling of user data can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=en.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA to ensure compliance with European data protection standards for data processing in the USA. Any company certified under the DPF is committed to adhering to these data protection standards. More information can be found at the following link: https://www.dataprivacyframework.gov/participant/5780.

Akismet
We have integrated Akismet on this website. The provider is Aut O’Mattic A8C Ireland Ltd., Business Centre, No.1 Lower Mayor Street, International Financial Services Centre, Dublin 1, Ireland (hereinafter Aut O’Mattic), whose parent company is located in the USA.
Akismet allows us to analyze submitted comments for spam characteristics. For this purpose, we process the provided visitor name, email address, IP address, comment text, browser type, and access time.
The use of Akismet is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in undisturbed, spam-free communication with website visitors. If explicit consent was requested, processing is solely based on Art. 6(1)(a) GDPR and § 25(1) TTDSG, as long as the consent includes the storage of cookies or access to information on the user’s device (e.g., for device fingerprinting) under TTDSG. Consent can be revoked at any time.
More details can be found here: https://akismet.com/gdpr/.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://wordpress.com/support/data-processing-agreements/.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA to ensure compliance with European data protection standards for data processing in the USA. Any company certified under the DPF is committed to adhering to these data protection standards. More information can be found at: https://www.dataprivacyframework.gov/participant/4709.

Booking Tool: eviivo
For bookings, we use the service provider eviivo Limited, 154 Pentonville Road, London, N1 9JE, United Kingdom.
When you make a booking through the link https://via.eviivo.com, you will be redirected to the eviivo page.
The privacy policy of eviivo can be found at:
https://eviivo.com/privacy-policy/
Please note that personal data is processed when using eviivo, over which we have no direct influence.

Use of Elementor
This website uses the Elementor Page Builder plugin, a tool that allows us to visually design the content of the website.
Elementor may process personal data, such as IP addresses, especially when using forms or interactive content.
For more information on data processing by Elementor, we refer to their privacy policy:
https://elementor.com/privacy-policy/

Wordfence
We use the
 Wordfence security plugin to protect our website and ensure its security. Wordfence protects our website from brute force attacks, malware, and other threats. In doing so, Wordfence may collect certain data from visitors to enhance security.

What data is processed by Wordfence?

Wordfence collects the visitor’s IP address to detect and block malicious activities such as brute force attacks or harmful requests. It may also monitor security events such as failed login attempts. This data is used solely for security purposes and is not stored or used for any other reasons.

How long is the data stored?

Collected data, such as IP addresses and security event information, is typically stored for a period of 30 days. The retention period serves the purpose of identifying attack patterns and implementing appropriate security measures.

Who has access to the data?

The collected data is used exclusively for ensuring the security of the website and is accessible only to administrators and authorized users responsible for managing the website.

GDPR Compliance:

Wordfence does not store personal data for advertising purposes or outside the necessary timeframes for security monitoring. We have entered into a Data Processing Agreement (DPA) with Wordfence to ensure that data processing complies with the General Data Protection Regulation (GDPR).

Use of RankMath
For search engine optimization (SEO), we use the RankMath plugin. This tool can be used to analyze and optimize website content and may collect personal data, such as IP addresses, to improve website performance.
For more information on data processing by RankMath, please see their privacy policy:
https://rankmath.com/privacy-policy/

Data Processing Agreement
We have concluded a Data Processing Agreement (DPA) for the use of the above-mentioned services. This legally required contract ensures that the personal data of our website visitors is processed only according to our instructions and in compliance with the GDPR.

Source: https://www.e-recht24.de