Thank you for visiting our website and for your interest in stepfield. The protection and security of your data is very important to us. We have therefore designed our website and our processes to collect or process as little personal data as possible. The following privacy policy explains what information we collect during your visit to our website www.stepfield.de and what parts of this information are used, if any, and how.
We process your personal data in line with this Privacy Policy and in accordance with Germany`s Federal Data Protection Act (BDSG) and the General Data Protection Regulation (GDPR) (collectively the “GDPR”).
Name and contact details of the data controller
This data protection information applies to data processing by
stepfield
Bernd Rösler
Blauenstraße 28
79115 Freiburg
Germany
Andreas Schönenberger
Furtenbachstraße 1,
88299 Leutkirch
Germany
Web: www.stepfield.de
E-Mail: stepfield.music@gmail.com
Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing operations involving personal data, Article 6 (1) (a) of the GDPR serves as the legal basis.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Insofar as processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) (d) GDPR serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) (f) GDPR serves as the legal basis for the processing.
What are your rights?
You have the following rights with respect to us processing your personal data:
Right of access
You have the right to obtain information about whether and which of your personal data is processed by us. In this case, we will also inform you about:
-
the purpose of processing;
-
the categories of data;
-
the recipients of your personal data;
-
the planned storage period or the criteria for the planned storage period;
-
your further rights;
Unless we have been provided with your personal data by you: Any available information about its origin if available: the existence of automated decision-making and information about the logic involved, the scope and the intended effects of the processing.
Right to rectification
You have a right to rectification and/or completion if your personal data processed by us is inaccurate or incomplete.
Right to restriction of processing
You have a right to restriction of processing, provided that
-
we verify the accuracy of your personal data processed by us;
-
the processing of your personal data is unlawful;
-
you need your personal data processed by us for legal prosecution after the purpose has ceased to exist;
-
you have objected to the processing of your personal data and we are reviewing this objection.
Right to erasure
You have a right to erasure if
-
we no longer need your personal data for its original purpose;
-
you withdraw your consent and there is no further legal basis for processing your personal data;
-
you object to the processing of your personal data and - unless it is direct marketing - there are no overriding reasons for further processing;
-
the processing of your personal data is unlawful;
-
the erasure of your personal data is required by law;
-
your personal data was collected as a minor for information society services.
Right to information
If you have exercised your right to rectification, erasure or restriction of processing, we will inform all recipients of your personal data, of this rectification, erasure of data or restriction of processing.
Right to data portability
You have a right to receive your personal data processed by us on the basis of consent or for the performance of a contract in a structured, common and machine-readable format and to transfer it to another controller. If technically feasible, you have the right to have us transfer this data directly to another controller.
Right to object
You have the right to object to the processing of your personal data in case of special reasons. In this case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing. In case of processing of your personal data for direct marketing purposes, you have the right to object at any time.
Right of withdrawal
You have the right to revoke any consent given to us at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the competent supervisory authority if you believe that the processing of your personal data by us violates the law.
Our principle
The protection of your data is particularly important to us in the performance of our services. We therefore only want to process only as much personal data as is absolutely necessary. Nevertheless, we rely on the processing of certain personal data when you use our services. This processing of personal data will always be carried out in accordance with applicable data protection laws.
Collection and storage of personal data as well as type and purpose of their use
When visiting the website
When you visit our website www.stepfield.de, information is automatically sent to the server of our website by the browser used on your end device. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion:
-
IP address of the requesting computer,
-
Date and time of access,
-
Name and URL of the accessed file,
-
website from which the access was made (referrer URL),
-
browser used and, if applicable, the operating system of your computer as well as the name of your access provider.
The aforementioned data is processed by us for the following purposes:
-
Ensuring a smooth connection setup of the website,
-
Ensuring a comfortable use of our website,
-
evaluation of system security and stability as well as
-
for other administrative purposes.
The legal basis for the data processing is Art. 6 (1) (f) GDPR. Our legitimate interest follows from the purposes for data collection listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.
Cookies
Some of the Internet pages use so-called cookies. Cookies do not damage your computer or device and do not contain viruses. Cookies serve to make our offer more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or generally and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.
Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services.
Lifetime of Cookies
Cookies have a lifetime. Some cookies are deleted when you close your browser. Others (for example, those with login details) can remain on your computer for years if you do not delete them. You can delete cookies at any time. Click on one of the links below to go to your browser's user manual. After deleting cookies, you may need to log in again to some websites or specify your preferences.
Cookie management in Google Chrome
Cookie management in Internet Explorer
Different types of cookies
From a technical point of view, a distinction is made between two types of cookies:
-
Session cookies are not stored on your device and disappear when you close your browser.
-
Persistent cookies are stored as text files on your device. Persistent cookies allow our server to recognize your device the next time you visit our website.
-
Analytical cookies are typical third-party cookies that we use to collect statistical data about how our website is used, including: Average page load time; Pages visited; Browser data; IP address; MAC address; Duration of a (page) visit; Data about the operating system; Data about the device used; Clicking behavior and other interactions on one or more pages.
The cookies we use
We think it's important that you have full control over your privacy online. That's why we refrained from placing cookies that are non-essential such as Analytical Cookies. As set out in the Privacy and Electronic Communications Directive (ePrivacy Directive), we thus do not need to obtain your consent when you are visiting our website.
Contact form
If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass on this data without your consent.
The processing of the data entered in the contact form is therefore based exclusively on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
The data you entered in the contact form will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g., after we have completed processing your request). Mandatory legal provisions - in particular retention periods - remain unaffected.
Hosting services by a third-party provider
As part of processing on our behalf, a third-party provider (Wix) provides hosting and web site display services for us. This serves to protect our legitimate interests in the correct presentation of our offer, which are outweighed by a balance of interests. All data collected in the course of using this web site or in forms provided for this purpose as described above are processed on its servers. Processing on other servers only takes place within the framework explained here. Further information about the service can be found in Wix’s privacy policy.
Direct marketing
The legal basis for the processing of your personal data in the context of direct marketing measures is either your consent or our legitimate interest in marketing and promoting stepfield, our brand and services. The purpose of processing your personal data in the context of direct marketing measures is to send information, offers and, if applicable, to promote stepfield.
Your personal data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected; this is the case in particular upon receipt of the revocation or objection. You can revoke your consent at any time for the future or object to the processing of your personal data in the context of direct marketing measures at any time for the future.
Yumpu
Our website uses plugins from the site Yumpu to display our “Covering Up My Eyes” comic. The provider is i-magazine AG, Gewerbestrasse 3, 9444 Diepoldsau, Switzerland.
When you visit our page and wish to read “Covering Up My Eyes” the Yumpu plugin establishes a connection to the Yumpu servers. This tells the Yumpu server which of our pages you have visited. When you call up Covering Up My Eyes, a connection is established to the Yumpu servers in Switzerland. Calling up the online magazines requires that Yumpu is aware of the user's IP address, as without the IP address, the content can generally not be sent to your browser.
Further information about Yumpu can be found in the privacy policy of i-magazine AG:
YouTube
On our website, we implement videos of the video portal "YouTube" of the company Google Inc. The implementation is based on Art. 6 (1) (f) GDPR, whereby our interest lies in the smooth integration of the videos and the resulting appealing design of our website.
Doing so, we use the "extended data protection mode" option provided by Google. When you call up a page that has an embedded video, a connection is established to Google's servers and in the process the content is displayed on the website by notifying your browser. According to Google's information, in "extended data protection mode" your data - in particular which of our Internet pages you have visited as well as device-specific information including the IP address - is only transmitted to the YouTube server in the USA when you watch the video. By clicking on the video, you consent to this transmission.
If you are logged in to Google at the same time, this information will be assigned to your YouTube member account. You can prevent this by logging out of your member account before visiting our website.
Spotify
Functions of the music service Spotify are integrated on our website. The provider is Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm in Sweden. You can recognize the Spotify PlugIns by the green logo on our site. An overview of the Spotify PlugIns can be found at https://developer.spotify.com This means that when you visit our pages, a direct connection can be established between your browser and the Spotify server via the plugin. Spotify thereby receives the information that you have visited our site with your IP address. If you click on the Spotify button while you are logged into your Spotify account, you can link the content of our pages to your Spotify profile. This allows Spotify to associate your visit to our pages with your user account. For more information, please see Spotify's privacy policy.
Use of social media plug ins
On our website we use so-called social media plug ins ("plug ins") from Facebook and Instagram. You can recognise the plug ins by the providers logo. When you visit my pages, direct connections are established between your browser and the servers of the services via the plug ins. They thereby receive the information that you have visited my site with your IP address. If you click on one of the buttons while you are logged in to one of the services, the information that you have visited my site can be assigned to your user account with the respective service. If you are a member of one of these services and do not want the service providers to collect data about you via my website and link it to your membership data, you must log out of the respective services before visiting my website. We would like to point out that we, as the operator of this website, do not have any knowledge of the content of the transmitted data or its use by the individual services. For more information on which data is collected by the respective services when the social plug ins are called up and how this data is used, please refer to the privacy policies of the individual service providers.
Transfer of data
We do not transfer your personal data to third parties for purposes other than those listed below.
We only pass on your personal data to third parties if:
-
you have given your express consent to do so in accordance with Art. 6 (1) (a) GDPR,
-
the disclosure is necessary for the assertion, exercise or defense of legal claims pursuant to Art. 6 (1) (f) GDPR and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
-
in the event that there is a legal obligation for disclosure pursuant to Art. 6 (1) (c) GDPR, as well as
-
this is legally permissible and necessary according to Art. 6 (1) (b) GDPR for the processing of contractual relationships with you.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Children Data
Our website is not intended for children, and we do not knowingly collect data relating to children. If you become aware that your Child has provided us with Personal Data, without parental consent, please contact us and we take the necessary steps to remove that information from our server.
Accuracy
It is important that the data we hold about you is accurate and current, therefore please keep us informed of any changes to your personal data.
Obligation to provide personal data
You are not obliged to provide us with personal data. However, depending on the individual case, the provision of certain personal data may be necessary for the provision of the above services. If you do not provide us with this personal data, we may not be able to provide the service.
How long will you store my data?
Your data will be stored until we have finally processed your request and existing legal retention periods have expired.
When you send a data subject access request
The legal basis for the processing of your personal data in the context of handling your data subject access request is our legal obligation and the legal basis for the subsequent documentation of the data subject access request is both our legitimate interest and our legal obligation.
The purpose of processing your personal data in the context of processing data when you send a data subject access request is to respond to your request. The subsequent documentation of the data subject access request serves to fulfil the legally required accountability.
Your personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the processing of a data subject access request, this is three years after the end of the respective process.
You have the possibility at any time to object to the processing of your personal data in the context of the processing of a data subject access request for the future. In this case, however, we will not be able to further process your request. The documentation of the legally compliant processing of the respective data subject access request is mandatory. Consequently, there is no possibility for you to object.
Legal defense and enforcement of our rights
The legal basis for the processing of your personal data in the context of legal defense and enforcement of our rights is our legitimate interest.
The purpose of processing your personal data in the context of legal defense and enforcement of our rights is the defense against unjustified claims and the legal enforcement and assertion of claims and rights. Your personal data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected.
The processing of your personal data in the context of legal defense and enforcement is mandatory for legal defense and enforcement of our rights. Consequently, there is no possibility for you to object.
Cookie consent
Our website uses the cookie consent tool of Wix to obtain your consent to the storage of certain cookies on your end device or to the use of certain technologies and to document this consent in accordance with the GDPR.
When you enter our website, the following personal data is transferred to Wix:
-
Your consent(s) or revocation of your consent(s).
-
Your IP address
-
Information about your browser
-
Information about your terminal device
-
Time of your visit to the website
Wix is used to obtain the legally required consent for the use of certain technologies. The legal basis for this is Art. 6 para. 1 p. 1 lit. c GDPR. This is subdivided into functional cookies and cookies for the creation of statistics. We have concluded an order processing contract with Wix. This is a contract required by data protection law, which ensures that Wix only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR. Further information about the service can be found in Wix’s privacy policy.
Scope of this privacy policy
This privacy policy only applies to the content on the stepfield website and the data processing on the servers we use. It does not cover such content and websites of third parties to which our offer merely links. The processing of your personal data via such websites is carried out by the respective provider of the website without us having any influence on this processing. For information on the handling and protection of your personal data on these websites, please refer to the privacy policy of the respective website.
Changes
This Privacy Policy is currently valid and has the status January 2022. Due to the further development of our website and offers on it or due to changed legal or regulatory requirements, it may become necessary to change this privacy policy. You can access and print out the current version at any time on the website.
