Privacy policy

We process your personal data exclusively in accordance with applicable law, in particular the European General Data Protection Regulation (GDPR). The following information explains how we handle your personal data.

A. Overview

1. Data controller and data protection officer

This privacy policy applies to data processing by Lautsprecher Teufel GmbH, Budapester Straße 44, 10787 Berlin (hereinafter referred to as “Teufel”).

Teufel’s data protection officer is
Mr. Mario Arndt,
DEUDAT GmbH, Zehntenhofstr. 5b, 65201 Wiesbaden
Tel.: +49 611 950008-40
Fax: +49 611 950008-59
Email: teufel@deudat.de

Our data protection officer is always available for any questions or suggestions about data protection.

2. Personal data

Personal data is any data that is directly or indirectly attributable to you or that can be attributable to you.

3. Purposes

We process this data primarily for two purposes: the performance of the contract and marketing purposes (advertising, newsletters, analysis of our website and of your use).

4. Your rights

It’s your data! You have various rights in relation to your data that you can exercise against us. We clearly indicate these rights to you hereafter whenever they appear and where relevant. An overview of your rights can also be found below.

5. Your protection

Our entire web presence, i.e. all forms in which you enter data, the ordering process and other functions, are secured by SSL (Secure Socket Layer). This widely used system for protecting data transmissions (this is also used in online banking) guarantees secure and reliable handling of your data. You can recognize an SSL connection by the “s” at the beginning of the http or by a lock icon on your browser. We also use other suitable technical and organizational measures to protect your personal data.

6. Your contact with us

If you contact us by e-mail or via a contact form, the personal data you provide will be automatically stored. This data, which you transmit to us of your own accord, is stored for the purpose of processing your request or for relevant communication. The processing is based on your consent or on a contractual basis in accordance with Art. 6 (1) lit. a, f GDPR.

B. Hosting

For hosting our website, we contract the services of Metaways (Metaways Infosystems GmbH, Pickhuben 2, 20457 Hamburg). Certain personal data related to the use of our website is therefore processed on Metaways’ servers. This includes, inter alia, your IP address, your device identifier (MAC address, IMEI, etc.), information on the start and end of communication processes and, if applicable, location data that can be derived from network communication.

In so doing, Metaways acts on our behalf and is subject to our instructions. We use their hosting services to procure a secure website on the basis of article 6(1)(f) GDPR.

C. General data processing on the blog

On our blog, it is possible to comment on and subscribe to posts. The data entered, the comment and the subscription are stored by us. The data processing is done only for the purpose of publishing the comment. The e-mail address you provide will not be made public, but will only be used to contact you if necessary with regard to questions or support and if you request us to do so. This data processing is based on your consent pursuant to article 6(1)(a) GDPR.

We store your IP address and freely entered data in order to be able to follow up any unlawful posts or such posts as infringe the rights of third parties and to serve our interest in prosecution and enforcement. The legal basis for this processing is article 6(1)(f) GDPR. The log files are automatically deleted after 6 months.

You may withdraw your consent, if given, at any time by writing an email to datenschutz@teufel.de.

Yop Polls

In addition, we use the WordPress survey tool YOP Poll from E-Biz Solutions SRL (Fundac Margareta Baciu Nr. 12 700554, Iasi, Romania) on the blog for conducting votes and process the IP address of the participants in anonymized form in order to optimize the informative value of the voting. The anonymized IP address of the respective participant is stored on Teufel servers without YOP Poll having access to it.

The storage of the IP address and the use of the voting tool are based on our legitimate interests pursuant article 6(1)(f) GDPR to prevent multiple voting and abuse.

D. Data processing via cookies and other tracking technologies

I. General information

Teufel uses cookies and other tracking technologies on these websites – including those provided by third parties – to offer customers a safe and reliable browsing experience and to display relevant content and personalized advertising to them.

For this purpose, Teufel collects information and data on customers’ behavior on this website – including via third-party tracking technologies – and shares it with third parties; in addition, information is read from or stored on customers’ end devices. Before visiting the website, customers can decide which cookies or other tracking technologies should be enabled.

Our website also uses Borlabs Cookie consent technology to obtain your consent to store certain cookies in your browser or to use certain technologies and document this consent in a GDPR-compliant manner. The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany. When you visit our website, a Borlabs cookie is stored in your browser to retain the consents and opt-outs you have provided. This data will not be shared with the provider of Borlabs Cookies. The collected data will be stored until you request us to delete it or until you delete the Borlabs Cookie yourself, or until the purpose for storing the data is no longer applicable. Mandatory legal retention periods remain unaffected. Details on Borlabs Cookie’s data processing can be found at https://borlabs.io/kb/what-information-does-borlabs-cookie-store/ Borlabs Cookie consent technology is used to obtain legally required consent for the use of cookies pursuant to article 6(1)(c) GDPR.

Teufel uses software from Tealium Inc, 11095 Torreyana Road, San Diego, CA 92121 (“Tealium”) to manage and control cookies and other tracking technologies. The use of the service is based on Art. 6 (1) lit. f GDPR and is done in order to control centrally the use of cookies and pixels within the company. We also use the software to control your browser settings for cookies and pixels. Tealium itself does not have access to the content of the cookies and pixels (see below under II.).

II. Functionality cookies and pixels: Technically necessary data processing

When visiting our website, information is automatically sent from your end device to our servers and applications and stored in a so-called log file.

The information is as follows:

Browser/browser version; operating system, name of your internet provider
Website, application that brought you to us
Your device’s IP address
URL and name of the site visited
Date and time of the server request

This data is processed to provide the technical basis for your connection to the website, the proper display of the website on your device and an evaluation of the system’s security and stability. Our legal basis for processing the information is the contract execution or initiation according to Art. 6 (1) lit. b GDPR or our legitimate interest according to Art. 6 (1) lit. f GDPR.

Specifically, these are the following cookies:

Tealium Tag Manager

Provider of the service: Tealium Inc., 11095 Torreyana Road, CA 92121 (USA)

Privacy notice: https://tealium.com/privacy-policy/

Purposes of the data processing and legal bases for the same:
Management and control of cookies:
Tealium permits us to manage and control the setting of cookies on our website. Tealium’s software also allows us to control your browser settings about cookies and pixels and to take into account your privacy preferences. We use the software to set when a cookie or pixel will be loaded and what data will be processed in the cookie or pixel. Tealium itself is not aware of the content of the cookies and pixels, but does itself place a cookie in your browser, through which information is transmitted, e.g. your browser settings or your IP address in pseudonymous form, to permit the management of cookies and pixels.

Legal basis: Our legitimate interests according to Art. 6 (1) lit. f GDPR, since we as an e-commerce business rely on a management tool to manage cookies and pixels and your interests and fundamental rights do not override our interests in this type of processing.

Data processing locations:
EU/EEA, USA

We have entered into an agreement incorporating standard data protection clauses with Tealium in accordance with Art. 46 GDPR. Nevertheless, the USA is a country which does not offer an adequate level of protection for personal data as provided for in EU Regulation 2016/679; this signifies inter alia that government authorities in the USA could have the opportunity to gain access to your data without effective remedies being in place.

Storage period or criteria for determining the storage period:
Erasure on achievement of purpose

III. Analysis cookies or pixels: Data processing for web analysis

With analysis cookies, we or third parties primarily collect information about how our websites are used. In this context, for example, information on the number of visitors, search terms entered and the region from which our customers access the website is processed. We also measure the impact that certain pages have on our customers. We or third parties use this information to compile statistics in order to tailor the content of our websites more specifically to the needs of our customers and to optimize our offer. We or third parties also collect information across devices to some extent to get a better overall view. Specifically, these are the following cookies:

Exactag Analytics

Provider of the service: Exactag GmbH, Wanheimer Str. 68, 40468 Düsseldorf (Germany)

Privacy notice: https://www.exactag.com/datenschutz/

Purposes of the data processing and legal bases for the same:
Evaluation of the effectiveness of advertisements and optimization of advertising campaigns:
Exactag creates pseudonymous user profiles based on your browsing behavior on our website. Information such as, for example, the type of device used by you, the operating system, browser version, information about your geographic location or information about your interaction with advertising (e.g. number of clicks or views) on our website is collected in the user profile and passed on to Exactag. This information permits us to evaluate the effectiveness of our advertisements and to optimize our advertising campaigns. To rule out any possibility of your being personally identified or to preclude this to a large extent, you will be allocated an ID number when you visit our website.

Legal basis: Our legitimate interests according to Art. 6 (1) lit. f GDPR, since we as an e-commerce business rely on an evaluation of our advertising campaigns through pseudonymous user profiles and your interests and fundamental rights do not override our interests in this type of processing.

Display of suitable advertising across multiple devices:
Exactag will assign a random code to the device that you use to view our website to display personalized advertising across multiple devices. If you have also set up an account with us and if you log into this account, then irrespective of the device used, we allocate a further ID number to you, which we also communicate to Exactag. Exactag subsequently enables us to display personalized advertising on the devices used by you. Exactag provides us moreover with information about usage behavior for our website across various types of device. It is not, however, possible for us to evaluate your personal browsing behavior on the various different devices, since the data we receive for statistical purposes from Exactag is aggregated data only. Due to the random identification, neither we nor Exactag can identify you personally.

Legal basis: Your consent according to Art. 6 (1) lit. a GDPR.

Data processing locations:
EU/EEA

Storage period or criteria for determining the storage period:
Erasure on achievement of purpose

Rights of withdrawal and/or possibilities for objection:
Withdrawal and objection with effect for the future: https://www.exactag.com/en/confirmation/

Mapp Intelligence (formerly: Webtrekk Analytics)

Provider of the service: Mapp Digital c/o Webtrekk GmbH, Robert-Koch-Platz 4, 10115 Berlin (Germany)

Privacy notice: https://www.webtrekk.com/privacy-notice.html

Purposes of the data processing and legal bases for the same:
Evaluation of the use of our website and optimization of the website:
Webtrekk uses cookies to create anonymous or pseudonymous user profiles based on your browsing behavior on our website. Data such as, for example, your operating system, the browser version, your IP address, the geographic location, the website that you viewed beforehand (referrer URL), information about your order and the data and time of your visit to our website is collected and passed on to Webtrekk. This information permits us to evaluate the use of our website and to optimise our advertising campaigns. To rule out any possibility of your being personally identified or to preclude this to a large extent, you will be allocated an ID number when you visit our website and the IP address, which was stored in truncated form only, will be deleted following the session identification for the purposes of geolocation.

Legal basis: Our legitimate interests according to Art. 6 (1) lit. f GDPR, since we as an e-commerce business rely on an evaluation of the use of our website through pseudonymous data and your interests and fundamental rights do not override our interests in this type of processing.

Evaluation of your browsing behavior across multiple devices:
Webtrekk will assign a random code to the device that you use to view our website to display personalized advertising across multiple devices. If you have also set up an account with us and if you log into this account, then irrespective of the device used, we allocate a further ID number to you, which we also communicate to Webtrekk. This enables Webtrekk to provide us with an evaluation of your browsing behavior across multiple devices. Due to the random identification, neither we nor Webtrekk can identify you personally.

Legal basis: Your consent according to Art. 6 (1) lit. a GDPR.

Data processing locations:
EU/EEA

Storage period or criteria for determining the storage period:
Erasure on achievement of purpose

Rights of withdrawal and/or possibilities for objection:
Withdrawal and objection with effect for the future: https://mapp.com/opt-out-mapp/

E. Data processing for other marketing purposes

I. Competitions

If you participate in our competitions, we will generally only process the data you have provided for these purposes in order to carry out the competition. Depending on how the competition is organised, the processing of personal data for conducting the competition includes notably a prize notification or a message to the effect that you did not win. If you receive a prize from us and this needs to be sent to you, we use your data for these purposes as well and pass the data on to shipping service providers. The data processing for our competitions is based on Art. 6 (1) lit. b and, where appropriate, Art. 6 (1) lit. a GDPR.

II. Newsletter

If you have given us your consent and have subsequently clicked on the confirmation link sent (double opt-in procedure), you will regularly receive our newsletter with product recommendations, practical tips, surveys and background information. We use the help of the service provider Emarsys eMarketing Systems GmbH (Hans- Fischer Straße 10, 80339 Munich) to send out the newsletter and to target your interests. Further information on data processing by Emarsys can be found at https://www.emarsys.com/privacy-policy/.

Based on your consent, Art. 6 (1) lit. a GDPR, we use your e-mail address, your usage behaviour in the newsletter and your purchasing behavior in the web shop to store a personal profile assigned to your e-mail address, and to inform you within the newsletter only about offers that are of interest to you. For this purpose, the newsletters contain a tracking pixel – a miniature graphic that triggers a server request to permit a log file to be written.

Based on your consent, we also combine the data on your behavior and settings in the newsletter with your data from our merchandise management system in a software solution of Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA) and evaluate it therein on an anonymized basis to optimize newsletter management.

Your pseudonymized personal data is therefore only used for comparison, so that we can no longer draw any conclusions about you as a person in the Microsoft software solution. In this way, we can, for example, carry out automated analyses of the browsing and purchasing behavior of newsletter subscribers and also incorporate (tracking) data from other service providers (e.g. Mapp Intelligence) into the analyses on an anonymous basis. Further information on data processing by Microsoft can be found at https://privacy.microsoft.com/.

Your personal data that we have stored in this context will be deleted as soon as it is no longer required to achieve its purpose. You may withdraw your consent to receive the newsletter at any time with effect for the future at unsubscribe@teufel.de or via a link in the e-mail.

The processing of the data takes place in the territory of the European Union and/or the European Economic Area, the United Kingdom and, where applicable, the USA. The transfer of data to the UK is permitted on the basis of an adequacy decision of the European Commission pursuant to Art. 45 GDPR. We have concluded a contract with Microsoft with regard to data transfers to the USA incorporating standard data protection clauses in accordance with Art. 46 GDPR. In this context, we would nevertheless like to point out that the USA is a country that does not offer an adequate level of protection for personal data as provided for in EU Regulation 2016/679; this signifies inter alia that government authorities in the USA could have the opportunity to gain access to your data without effective remedies being in place.

F. Data processing in case of external content

I. Youtube, Vimeo

To provide our customers with a better presentation of our products, we have integrated videos into our website. The processing is carried out on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR. We cannot rule out the possibility that personal data may be processed by the respective provider outside the European Union and/or the European Economic Area. This may make it difficult to enforce data subjects’ rights (such as e.g. the right of access). We have integrated the videos into our website to bring our customers closer to our products and to illustrate product features in a way that is more relatable. Since we have integrated the videos via external video service providers, we do not need to host the videos on our own servers and can use our resources elsewhere.

Whenever a video is clicked, a connection is established to the server of the respective video services provider. Data regarding your device settings and your interaction with the video services is transmitted to the respective provider of the video service via a plug-in. Depending on whether you have a customer account with the respective provider of any video service and have logged into this, the respective provider may also use the data processed to create a profile. The respective provider of the video service is solely responsible for these data processing operations. With regard to these data processing operations, you should exercise your rights as a data subject (such as e.g. rights of access) directly with the respective provider, since only this provider has access to your personal data and can take appropriate measures and provide information.

Should you need help in exercising your rights, you can of course also contact us. The providers of video services used by us are:

Google Ireland LTD, Gordon House, Barrow Street, Dublin 4, Ireland (YouTube), privacy politcy: https://policies.google.com/privacy,
Vimeo Inc. 555 West 18th Street, New York, New York 10011, USA (Vimeo), privacy policy: https://vimeo.com/privacy.

II. Spotify, Soundcloud

We have integrated link buttons to music streaming services into our website. The processing is carried out on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR. We cannot rule out the possibility that personal data may be processed by the respective provider outside the European Union and/or the European Economic Area. This may make it difficult to enforce data subjects’ rights (such as e.g. the right of access). We have integrated the music streaming services into our website to use audiovisual means to advertise our products. Since we have integrated the music via external music streaming services providers, we do not need to host the songs on our own servers and can use our resources elsewhere.

Whenever you visit our website and click on the button of a music streaming services provider, a direct connection is established between your browser and the server of the music streaming services provider. As a result, the music streaming services provider obtains certain information about the device that you use to visit the website and about how you interact with the music streaming service. Depending on whether you have a customer account with the respective provider of the music streaming service and have logged into this, the respective provider may also use the data processed to create a profile. The respective provider of the music streaming service is solely responsible for these data processing operations. With regard to these data processing operations, you should exercise your rights as a data subject (such as e.g. rights of access) directly with the respective provider of the music streaming service, since only this provider has access to your personal data and can take appropriate measures and provide information.

Should you need help in exercising your rights, you can of course also contact us. The providers of music streaming services used by us are:

SoundCloud Ltd, c/o JAG Shaw Baker, Berners House, 47-48 Berners Street, London W1T 3NF, Great Britain; for Germany: SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, privacy policy: https://soundcloud.com/pages/privacy
Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden, privacy policy: https://www.spotify.com/legal/privacy-policy/

III. Usersnap

On our website, we use a third-party interactive feedback tool called Usersnap (Usersnap GmbH, Industriezeile 35, 4020 Linz, Austria). If you so choose, you may use it to evaluate our website and send us improvement suggestions. If you send us feedback, Usersnap will process personal data about you on our behalf. This includes screen resolution and size, a timestamp of your visit to our website, your IP address, your geographic location, the URL and data about the type of end device you are using. We use this data solely to process feedback and improve our services. Submitting feedback is completely voluntary and based on your consent pursuant to article 6(1)(a) GDPR.

Since data is processed on Usersnap’s servers, we have concluded a contract for commissioned processing with them in accordance with EU standard contractual clauses pursuant to article 28 GDPR to ensure the security of said data processing. We store the feedback we receive and, if applicable, our response until the feedback is resolved. After that, your feedback data will be deleted or anonymized. You may revoke your consent to this data being processed at any time by sending an email to unsubscribe@teufel.de.

Further data protection information from Usersnap is available via the following link:

https://usersnap.com/privacy-policy.

IV. Google Search

On our blog, we use Google Programmable Search Engine as a search service provided by Google Ireland LTD (Gordon House, Barrow Street, Dublin 4, Ireland). If you use the search, Google processes your personal data. Said processing is performed with your consent in accordance with article 6(1)(a) GDPR. Data processed includes, inter alia, search terms you entered, and the IP address of the computer you are using. If you are signed into Google at the same time, Google will assign the data directly to your user profile and reserves the right to tie that data to your account. The possibility exists that your personal data will be processed by Google outside the European Union or the European Economic Area.

You may revoke your consent to this data being processed at any time by sending an email to unsubscribe@teufel.de.

Further information from Google on the handling of user data is available via the following link: https://policies.google.com/privacy

J. Your rights

In addition to the rights already described for the respective processing, you also have the following rights where the relevant statutory requirements apply.

I. Right to confirmation about any data processing and to obtain information

According to Art. 15 GDPR you have the right to confirmation about whether we process personal data and to obtain information about the purposes for which we process data, which categories of personal data are processed, who may where applicable be the recipients of this data and for how long we store this data. You also have the right to request information about whether your personal data has been transferred to a third country or an international organization and what the appropriate safeguards are for the transfer.

II. Right to rectification

You have a right to require us to rectify inaccurate or incomplete data in our systems, Art. 16 GDPR.

III. Right to erasure

This right (Art. 17 GDPR) assures you of the possibility of having data stored by us erased. We always comply with this request to the extent required provided no statutory retention periods are to be observed.

IV. Right to restriction

You may require us to restrict the processing of your data if: the accuracy of the data is contested by you; the processing is unlawful, but you refuse to accept its erasure; if we no longer need the data, but it is required by you for the establishment, exercise or defense of legal claims, or you have objected to the processing in accordance with Art. 21 GDPR.

V. Right to data portability

According to Art. 20 GDPR, you have the right to receive selected data concerning you stored in a commonly used, machine-readable data format, or to request the transmission of this data to another data controller.

VI. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority at any time. You can find out how to contact them here: https://edpb.europa.eu/about-edpb/about-edpb/members_en

VII. Right to object

In addition to the rights to object to the processing of your data for advertising purposes described above, you have a general right to object to data processing that we carry out on the basis of Art. 6 (1) lit. f) GDPR. We are then obliged to comply with your objection if you provide us with reasons of overriding importance.

VIII. Right to withdraw consent

You can revoke your consent to the processing of your personal data at any time with effect for the future, e.g. by e-mail at datenschutz@teufel.de.

K. Changes to our privacy policy

We reserve the right to change our security and data protection measures, inter alia, where this is required as the result of technical developments. In such cases, we shall also adapt our privacy policy accordingly. Please therefore note the current version of our data protection information.