Privacy policy

JAHRUND
Vladimir Vanian & Ekaterina Elterman GbR
c/o flexdienst – #10726
Kurt-Schumacher-Straße 76
67663 Kaiserslautern
Germany
Email: jahrundmusic@gmail.com

1. Data Protection Information

We are pleased that you are visiting our website and thank you for your interest in our shop and our products. Below we inform you about which personal data we collect, how we process it, and for what purposes it is used.

2. Collection and Use of Data

Personal data is any information that can directly or indirectly identify a person, such as name, address, email address, or telephone number.

2.1 Data Collection When Visiting the Website

When you use our website for informational purposes only (without registering or contacting us), we collect only data that is technically necessary:

  • IP address

  • Date and time of the request

  • Browser type and version

  • Operating system

  • Accessed page

  • Referrer URL (previous website)

Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

2.2 Data Collection for Registration / Orders

When you create a user account or place an order, we collect:

  • First and last name

  • Address / billing address

  • Email address

  • Telephone number

  • Payment information (if applicable)

Processing is carried out for the performance of a contract (Art. 6(1)(b) GDPR) and, where applicable, based on your consent (Art. 6(1)(a) GDPR). Data is deleted as soon as it is no longer required for its purpose, subject to statutory retention periods.

4. Purposes of Processing

  • Processing orders

  • Payment processing

  • Shipping information

  • Customer service

  • Marketing activities (only with consent)

  • Website usage analysis

5. Data Retention Period

  • Until the contractual purpose is fulfilled

  • Tax retention requirements: 6–10 years

  • After expiry, restricted processing for legal obligations only

6. Hosting & Platform (Shopify)

Our online shop is operated via Shopify Inc., 151 O’Connor Street, Ground Floor, Ottawa, ON K2P 2L8, Canada. Shopify processes technical data (e.g., IP address, usage data) as our data processor.

Further information: https://www.shopify.com/legal/privacy

7. Payment Processing

For payment processing, we use external payment service providers (e.g., PayPal, credit card providers, Shopify Payments). The data required for payment processing is transmitted to the respective provider.

8. Newsletter and Email Marketing

For sending newsletters and marketing emails, we use external email marketing providers, depending on the platform currently used by us. These may include Mailchimp (The Rocket Science Group LLC, USA), Klaviyo, Inc. (USA) and/or Squarespace Email Campaigns (Squarespace, Inc., USA).

These providers help us with sending emails, managing recipient lists, and analysing the performance of our email campaigns. In this context, personal data such as your email address, name (if provided), and information about your interaction with our emails (for example, email opens or link clicks) may be processed.

The processing is carried out on the basis of a data processing agreement in accordance with Article 28 GDPR.

Newsletter subscription

If you explicitly subscribe to our newsletter, we use your email address to send you information about new products, offers, limited vinyl releases and other updates from our store.

The processing is based on your consent pursuant to Article 6(1)(a) GDPR.

You can withdraw your consent at any time free of charge by using the unsubscribe link included in every marketing email or by contacting us directly.

Email marketing to existing customers

If you have purchased goods from us and provided us with your email address in connection with that purchase, we may use your email address to inform you about similar products and limited vinyl releases from our own store.

The processing is based on our legitimate interest pursuant to Article 6(1)(f) GDPR and, where applicable, Section 7(3) of the German Unfair Competition Act (UWG).

This applies only where:

  • we obtained your email address in connection with a sale;

  • we advertise only our own similar products;

  • you have not objected to receiving such marketing communications.

You can object to this use of your email address at any time free of charge by using the unsubscribe link in our emails or by contacting us directly.

Email analytics and personalisation

Our email marketing providers may use tracking technologies to analyse how recipients interact with our emails. This may include information such as whether an email was opened or whether links were clicked.

We use this information to improve our email communication, understand customer preferences, and provide more relevant content. Any personalisation or analysis is carried out only in accordance with applicable data protection laws.

International data transfers

Some of our email marketing providers are based outside the European Union, including in the United States.

Where personal data is transferred to third countries, we ensure that appropriate safeguards are in place in accordance with Chapter V GDPR, such as an adequacy decision or appropriate contractual safeguards.

Further information about the data processing practices of these providers can be found in their respective privacy policies.

9. Meta Pixel & Facebook Custom Audiences

  1. We use the Meta Pixel provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

  2. This pixel allows us to track visitor behavior (e.g., page views, cart actions) and create Facebook Custom Audiences. Visitors to our website may be shown interest-based advertisements (“retargeting”) when visiting Facebook or Instagram.

  3. Meta may associate collected data with an existing user account if you are logged in. Non-logged-in users may also be identified via IP address or device information.

Legal basis: Your consent via the cookie banner (Art. 6(1)(a) GDPR). No marketing cookies are set without consent.

Further information: https://www.facebook.com/about/privacy/

Opt-out options:

10. Integration of External Content (YouTube, Spotify)

We integrate content from Google Ireland Limited (YouTube) and Spotify AB.

When accessing such content, data (e.g., IP address) may be transmitted to these providers.

11. Cookies & Tracking

We use the following categories of cookies:

  • Necessary: required for shop operation (e.g., shopping cart)

  • Statistics: for analysis and optimization (with consent only)

  • Marketing: e.g., Meta Pixel (with consent only)

Consent is obtained via the cookie banner and can be withdrawn at any time.

12. Social Media

We link to our social media profiles, for example:

  • Facebook / Meta Platforms Ireland Limited

  • Instagram / Meta Platforms Ireland Limited

  • YouTube / Google Ireland Limited

Type of Processing

If you click on links or use plugins, technical data (e.g., IP address, browser information, interactions) may be transmitted to the respective provider.

Purpose

  • Display of social media content

  • Interaction with our channels (e.g., following, liking)

  • Marketing and analytics purposes by social media providers (if cookies/pixels are active)

Legal Basis

  • Art. 6(1)(f) GDPR (legitimate interest)

  • Art. 6(1)(a) GDPR (consent for tracking cookies/pixels)

Objection / Opt-out

You can avoid data transmission by not clicking the links or by disabling cookies in your browser settings.
Further information can be found in the respective privacy policies.

13. Analytics & Statistics

Shopify and, where applicable, other tools may collect anonymous or pseudonymous usage data for internal analysis. This only occurs with consent.

14. Disclosure to Third Parties / Data Processors

We work with service providers such as Shopify, Mailchimp, payment and shipping providers, Meta, YouTube, and Spotify. These providers are contractually obligated to comply with GDPR.

15. Transfer to Third Countries

Some providers (e.g., Shopify, Mailchimp, Meta, Google/YouTube) process data in the USA or other third countries. Appropriate safeguards (e.g., EU Standard Contractual Clauses) are applied.

16. Rights of Data Subjects

Under the GDPR, you have the following rights:

  • Access (Art. 15 GDPR)

  • Rectification (Art. 16 GDPR)

  • Erasure (Art. 17 GDPR)

  • Restriction of processing (Art. 18 GDPR)

  • Data portability (Art. 20 GDPR)

  • Objection (Art. 21 GDPR)

  • Withdrawal of consent (Art. 7(3) GDPR)

17. Data Security

  • SSL encryption

  • Technical and organizational measures to protect personal data

  • Absolute security in email communication cannot be guaranteed

18. Changes

We reserve the right to amend this privacy policy if necessary. The current version is always available on our website.