P R I V A C Y

General Information

This privacy policy provides detailed information about what happens to your personal data when you visit our website stevesono.com. Personal data includes all data by which you can be personally identified. We strictly adhere to legal requirements, particularly the General Data Protection Regulation ("GDPR"), when processing your data and place great importance on ensuring that your visit to our website is absolutely safe.

Responsible Party

Stevan Radulovic
Habererweg 3
85570 Markt Schwaben
Germany


Email: listen@stevesono.com
Phone: +4915123422000


Access Data (Server Log Files)

When you access our website, we automatically collect and store access data in server log files, which your browser automatically transmits to us. This data includes:

  • Browser type and version
  • Operating system used on your computer
  • Referrer URL (source or reference from which you reached our website)
  • Date and time of the server request
  • The current IP address used by your computer (potentially anonymized)

As a rule, it is not possible for us to identify individuals, nor is it our intention to do so. The processing of such data is based on Article 6(1)(f) GDPR, serving our legitimate interest in improving the stability and functionality of our website.


Cookies

To make visiting our website more attractive and enable the use of certain features, we use cookies. These are small text files that are stored on your device. Cookies cannot run programs or transmit viruses to your computer.
Cookies necessary for the electronic communication process or the provision of certain features you request are stored based on Article 6(1)(f) GDPR. We have a legitimate interest in storing cookies for the technically error-free and optimized provision of our services. If other cookies (e.g., cookies for analyzing your browsing behavior) are stored, they will be treated separately in this privacy policy.
Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser during your next visit.
You can configure your browser to inform you about the setting of cookies and to allow cookies only on a case-by-case basis, exclude the acceptance of cookies for specific cases, or generally prevent cookies, as well as activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.


Web Analysis Tools and Advertising


Google Analytics

Our website uses Google Analytics, specifically Google Analytics 4, provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
Google Analytics uses "cookies," which are text files stored on your computer that allow us to analyze how you use our website. In Google Analytics, data from devices located in the EU (based on the geographic location of the IP address) is collected via domains and servers within the EU before being transmitted for processing to Analytics servers.
The legal basis for processing your data is your consent given through the cookie consent tool in accordance with Article 6(1)(a) GDPR.


IP Anonymization

On our website, the IP anonymization feature is automatically enabled for Google Analytics. This means that Google shortens your IP address within EU member states or in other contracting states to the Agreement on the European Economic Area before transmitting it to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage. According to Google, IP addresses are not logged and stored in Google Analytics but are processed briefly for geolocation purposes and immediately deleted afterward. The IP address transmitted by your browser as part of Google Analytics will not be combined with other Google data.


Order Processing

We have concluded a contract with Google for data processing and fully comply with the strict requirements of German data protection authorities when using Google Analytics.


Storage Duration

User and event-level data stored by Google, which is linked to cookies, user identifiers (e.g., user ID), or advertising IDs (e.g., DoubleClick cookies, Android advertising ID), is deleted after two months. Details can be found at the following link: https://support.google.com/analytics/answer/7667196?hl=de.


Right of Withdrawal

Many data processing operations are only possible with your explicit consent. If the processing of your data is based on your consent, you have the right to withdraw your consent to the processing of data at any time with future effect, in accordance with Article 7(3) GDPR. You can do so by accessing the cookie settings and changing your preferences. The legality of data processing carried out on the basis of consent before its withdrawal is not affected by the withdrawal. Data storage for billing and accounting purposes remains unaffected by a withdrawal.

For more information on how Google Analytics handles user data, please refer to Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Further information can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de&gl=de.


Google Tag Manager

Our website uses Google Tag Manager, provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Tag Manager is a solution that allows marketers to manage website tags via an interface. The tool itself is a cookie-less domain and does not store personal data. The tool only triggers other tags, which may, in turn, collect data. Google Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager.


Google Ads and Google Conversion Tracking

Our website uses Google Ads (formerly Google AdWords), an online advertising program provided by Google.
Google Ads enables us to draw attention to our offers on external websites using advertising materials and to measure the success of individual advertising campaigns. This helps us display advertising that is of interest to you, make our website more interesting for you, and ensure a fair calculation of advertising costs.
As part of Google Ads, we use conversion tracking. The advertising materials are delivered by Google through so-called "AdServers." We use AdServer cookies to measure certain parameters for success measurement, such as impressions or user clicks. If you click on a Google ad, a cookie is set for conversion tracking. These cookies are small text files stored on the user’s computer by the browser. These cookies expire after 30 days and are not used for personal identification.
Each Google Ads customer receives a different cookie. Therefore, cookies cannot be tracked across the websites of Ads customers. Information collected with the conversion cookie is used to generate conversion statistics for Ads customers who have opted for conversion tracking. Ads customers receive the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies users.
If you do not wish to participate in tracking, you can object to this use by disabling the Google Conversion Tracking cookie via your internet browser’s user settings. You will not be included in the conversion tracking statistics.
The aggregation of data in your Google account is based solely on your consent, which you can give or withdraw at Google (Article 6(1)(a) GDPR). For data collection processes not aggregated in your Google account (e.g., if you do not have a Google account or have objected to the aggregation), the data collection is based on Article 6(1)(f) GDPR. Our legitimate interest stems from the need for anonymized analysis of website visitors for advertising purposes to optimize both our website and our advertising.

Further information and Google’s privacy policies can be found at: https://policies.google.com/technologies/ads?hl=de.


Google Remarketing

Our website uses Google Remarketing features in conjunction with the cross-device functions of Google Ads and Google DoubleClick.
Google Remarketing analyzes your usage behavior on our website to categorize you into specific advertising target groups and subsequently display relevant advertising messages (remarketing or retargeting) when you visit other online offerings.
Google Remarketing-created advertising target groups can be linked with the cross-device features of Google to display interest-based, personalized advertising messages tailored to your previous usage and browsing behavior on one device, also on your other devices. If you have given the relevant consent, Google links your web and app browsing history to your Google account for this purpose. This way, the same personalized advertising messages can be displayed on any device you sign in to with your Google account.
To support this feature, Google Analytics collects Google-authenticated user IDs, which are temporarily linked to our Google Analytics data to define and create target groups for cross-device advertising.
You can permanently opt out of cross-device remarketing/targeting by disabling personalized advertising in your Google account at the following link: https://www.google.com/settings/ads/onweb/.
Further information and Google’s privacy policies can be found at: https://policies.google.com/technologies/ads?hl=de.


Google Fonts

We use "Google Fonts" (formerly "Google Web Fonts") on our website, a service provided by Google.
Google Fonts allows us to use external fonts, so-called Google Fonts. When you access our website, the required Google Font is loaded into your browser's cache. This is necessary so that your browser can display our texts in a visually improved manner. If your browser does not support this function, a standard font from your computer will be used instead.
The integration of Google Fonts occurs through a server request, typically a Google server in the USA. This request transmits information to the server about which of our web pages you visited. Google also stores the IP address of the browser on your device. We have no control over the extent and further use of data collected and processed by Google through the use of Google Fonts.
We use Google Fonts for optimization purposes, specifically to improve your experience of our website and to make its design more user-friendly. This constitutes our legitimate interest in processing the aforementioned data by the third-party provider. The legal basis is Art. 6(1) sentence 1 lit. f GDPR.
Further information on Google Fonts can be found at https://fonts.google.com/, https://developers.google.com/fonts/faq?hl=en&csw=1.


Contacting Us

If you contact us, including via email, any data transmitted, including your contact information, will be stored in order to process your inquiry or for follow-up questions. This data will not be shared without your consent.
The processing of your data is based solely on your consent (Art. 6(1) lit. a GDPR). You can revoke your previously given consent at any time. A simple notification via email is sufficient for the revocation. The legality of the data processing that took place up until the revocation remains unaffected.
The data you provide will remain with us until you request its deletion, revoke your consent for its storage, or the purpose for the data storage ceases to exist. Mandatory legal provisions – especially retention periods – remain unaffected.


Data Use and Disclosure

Personal data you provide to us, e.g., via email (such as your name, address, or email address), will neither be sold nor marketed to third parties. Your personal data will only be used for correspondence with you and only for the purpose for which you provided the data to us. We will forward your payment data to the credit institution responsible for processing payments.

Automatically collected data during your visit to our website will only be used for the purposes mentioned above. No other use of the data will take place.
We assure you that we will not disclose your personal data to third parties, except in cases where we are legally obligated to do so or you have given us your prior consent.


SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as requests you send to us as the site operator, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the change in the browser's address bar from "http://" to "https://" and by the padlock icon in your browser.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.


Data Retention Period

Personal data communicated to us via our website will only be stored as long as necessary to fulfill the purpose for which it was entrusted to us. Where commercial and tax-related retention periods are to be observed, the storage period for certain data can be up to 10 years.


Rights of Data Subjects

Regarding the personal data that concerns you, as a data subject, you have the following rights vis-à-vis the data controller, in accordance with the legal provisions:


Right of Withdrawal

Many data processing operations are only possible with your explicit consent. If the processing of your data is based on your consent, you have the right to withdraw consent to data processing at any time, effective for the future, in accordance with Art. 7(3) GDPR. The legality of the data processing carried out up until the withdrawal remains unaffected by the withdrawal. Data retention for billing and accounting purposes remains unaffected by a withdrawal.


Right to Access

You have the right, under Art. 15 GDPR, to request confirmation from us as to whether we are processing personal data that concerns you. If such processing is taking place, you have the right to access your personal data being processed by us, including the processing purposes, the categories of processed personal data, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned retention period or the criteria for determining the retention period, the existence of rights to rectification, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the source of your data (if not collected by us), the existence of automated decision-making, including profiling, and, where applicable, meaningful information on the logic involved and the significance and expected impact of such processing on you, as well as your right to information about the guarantees under Art. 46 GDPR in the case of data transfers to third countries.


Right to Rectification

Under Art. 16 GDPR, you have the right at any time to request the immediate rectification of inaccurate personal data concerning you and/or the completion of incomplete data.


Right to Deletion

In accordance with Art. 17 GDPR, you have the right to request the deletion of your personal data if one of the following reasons applies:

  • Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
  • You withdraw your consent on which the processing is based according to Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal basis for processing.
  • You object to processing according to Art. 21(1) GDPR, and there are no overriding legitimate grounds for the processing, or you object to processing according to Art. 21(2) GDPR.
  • The personal data was unlawfully processed.
  • The deletion of personal data is required to fulfill a legal obligation under Union law or the law of the Member State to which we are subject.
  • The personal data was collected in relation to offered services of the information society according to Art. 8(1) GDPR.

However, this right does not apply if the processing is necessary:

  • For exercising the right to freedom of expression and information;
  • For fulfilling a legal obligation that requires processing under the law of the Union or of a Member State to which we are subject or for performing a task carried out in the public interest or in the exercise of official authority vested in us;
  • For reasons of public interest in the field of public health in accordance with Art. 9(2)(h) and (i) and Art. 9(3) GDPR;
  • For archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes in accordance with Art. 89(1) GDPR, to the extent that the right is likely to render the achievement of the purposes of this processing impossible or seriously impair it; or
  • For the establishment, exercise, or defense of legal claims.

If we have made your personal data public and are obligated to delete it according to the above, we shall, considering available technology and the cost of implementation, take reasonable steps, including technical measures, to inform those responsible for processing your data that you, as the data subject, have requested the deletion of all links to or copies or replications of your personal data.


Right to Restriction of Processing

According to Art. 18 GDPR, you have the right to request the restriction (blocking) of the processing of your personal data. You can contact us at any time at the address provided in the imprint. The right to restriction of processing exists in the following cases:

  • If you contest the accuracy of your personal data stored with us, we usually need time to verify this. During the verification period, you have the right to request the restriction of the processing of your personal data.
  • If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
  • If we no longer need your personal data but you require it for the establishment, exercise, or defense of legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
  • If you have objected to processing according to Art. 21(1) GDPR, a balance must be made between your and our interests. As long as it has not been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data may – apart from being stored – only be processed with your consent or for the establishment, exercise, or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the EU or a Member State.


Right to Notification

If you have asserted the right to rectification, deletion, or restriction of processing, we are obligated to notify all recipients to whom your personal data has been disclosed of this rectification, deletion, or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right, under Art. 19 GDPR, to be informed about these recipients upon request.


Right Not to Be Subject to Automated Decisions, Including Profiling

You have the right under Art. 22 GDPR not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.


This does not apply if the decision:

  • Is necessary for entering into or performing a contract between you and us;
  • Is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
  • Is based on your explicit consent.

However, such decisions must not be based on special categories of personal data under Art. 9(1) GDPR unless Art. 9(2)(a) or (g) applies, and suitable measures to safeguard your rights and freedoms and legitimate interests have been taken.

In the cases referred to in (a) and (c), we shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express your point of view, and to contest the decision.


Right to Data Portability

Where processing is based on your consent under Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract according to Art. 6(1)(b) GDPR and the processing is carried out by automated means, you have the right under Art. 20 GDPR to receive your personal data that you provided to us in a structured, commonly used, and machine-readable format and to transmit that data to another controller or to have the data transmitted directly from one controller to another, where technically feasible.


Right to Object

To the extent that we process your personal data based on a balance of interests according to Art. 6(1)(f) GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms or the processing is for the establishment, exercise, or defense of legal claims (objection under Art. 21(1) GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling to the extent that it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection under Art. 21(2) GDPR).

Right to Lodge a Complaint with the Relevant Supervisory Authority Pursuant to Article 77 GDPR

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or the place of the alleged violation. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedy.

Our competent supervisory authority is:
Bavarian State Office for Data Protection Supervision
Promenade 18
91522 Ansbach
P.O. Box 1349, 91504 Ansbach
Phone: +49 (0)981/180093-0
Email: poststelle@lda.bayern.de
Website: https://www.lda.bayern.de


Validity and Amendments to this Privacy Policy

This Privacy Policy is valid from August 30, 2024. We reserve the right to amend this Privacy Policy at any time, subject to applicable data protection laws. This may be necessary, for example, to comply with new legal requirements or to reflect changes to our website or new services offered on our website. The version available at the time of your visit shall apply.

Should this Privacy Policy be amended, we intend to announce the changes on this page so that you are fully informed about the personal data we collect, how we process it, and under what circumstances it may be disclosed.

You have the option of exercising your right to object in the context of the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.