Privacy Policy

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to any data that can be used to personally identify you . For detailed information on data protection, please refer to the following sections of this privacy policy.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find the contact information in the section “Information on the Data Controller.”

How do we collect your data?

Your data is collected, in part, when you provide it to us. This may include, in particular, data that you enter into our inquiry form.

Other data is automatically collected by our IT systems at when you visit the website. This includes, in particular, technical data such as your web browser, operating system, IP address, and the date and time of your visit.

What do we use your data for?

Some of the data is collected to ensure that the website operates without technical errors and is secure . Other data is processed when you contact us or submit a request to purchase an instrument manufactured by us .

No online orders or sales contracts are concluded directly through this website . The website is intended primarily to provide information, as well as to facilitate inquiries and to initiate the process of a potential instrument purchase.

What rights do you have regarding your personal data?

Subject to the statutory requirements, you have, in particular, the right to access, rectification, erasure, restriction of processing, data portability, and objection to certain processing activities.

If you have given your consent to data processing, you may revoke this consent at any time with future effect at . You also have the right to file a complaint with a competent data protection supervisory authority at .

If you have any questions about this or other data protection issues, please feel free to contact us at at any time.

2. Hosting

We host the content of our website with the following provider:

ALL-INCLUSIVE

The provider is:

ALL-INKL.COM – Neue Medien Münnich, Owner: René Münnich
Hauptstraße 68
02742 Friedersdorf
Germany

We use this hosting service to ensure the reliable and secure operation of our website at .

When you visit our website, the hosting provider processes data that is technically required. This may include, in particular, your IP address, the date and time of your visit, the pages and files you accessed, the amount of data transferred , as well as technical information about the browser and operating system you are using.

Data processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in ensuring the secure, stable, and reliable operation of our website.

To the extent required by law, a data processing agreement ( ) has been entered into with the hosting provider in accordance with Article 28 of the GDPR.

Order Processing

To the extent that we use external service providers to host our website, , the processing of personal data is carried out on the basis of corresponding data processing agreements, to the extent required by law.

3. General Information and Mandatory Disclosures

Privacy Policy

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations as well as this Privacy Policy.

When you use this website, various types of personal data are collected at . Personal data is data that can be used to personally identify you at . This Privacy Policy explains what data we collect at , how we use it, and the legal basis for doing so.

Please note that data transmission over the Internet—for example, when visiting or communicating via email—may be subject to security vulnerabilities. It is not possible to completely protect data from access by third parties.

Note Regarding the Data Controller

The entity responsible for data processing on this website is:

Martin Schleske
Master Violin Maker’s Workshop

Georg-Hellmair-Platz 382
86899 Landsberg am Lech
Germany

Phone: 08191 / 9694522
Email: violins@schleske.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

No data protection officer has been appointed.

Retention period

Unless a more specific retention period is specified in this Privacy Policy at , we will retain your personal data until the purpose for processing the data no longer applies.

If you submit a valid request for deletion or revoke your consent to data processing at , your data will be deleted unless there are other legally permissible grounds for retention at , such as statutory retention requirements at . In the latter case, the data will be deleted once these grounds no longer apply.

General Information on the Legal Basis for Data Processing

If you have consented to the processing of your data, we process your personal data on the basis of Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect.

If your data is necessary to fulfill a contract or to carry out precontractual measures, we process your data pursuant to Article 6(1)(b) of the GDPR.

If processing is necessary to fulfill a legal obligation , it is carried out on the basis of Article 6(1)(c) of the GDPR.

Data processing may also be carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) of the GDPR. This applies in particular to the secure and reliable operation of the website, technical administration, and the processing of inquiries.

The applicable legal basis is explained in more detail in the individual sections of this Privacy Policy.

Recipients of Personal Data

As part of our business operations, we collaborate with various external agencies and technical service providers. This may require the transfer of personal data.

We disclose personal data only if it is necessary to fulfill a contract or to take steps prior to entering into a contract, if there is a legal obligation , if there is a legitimate interest in the disclosure , or if another legal basis permits it.

When using data processors, the processing of personal data is carried out on the basis of a corresponding contract in accordance with Article 28 of the GDPR, to the extent that this is required by law.

Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your express consent . You may revoke any consent you have already given at any time, effective for the future .

The lawfulness of the data processing carried out up to the time of revocation remains unaffected by the revocation at .

Right to object to processing based on legitimate interests (Art. 21 GDPR)

If data processing is carried out on the basis of Article 6(1)(e) or (f) of the GDPR , you have the right at any time to object to the processing of your personal data on grounds relating to your particular situation. This also applies to profiling based on these provisions.

If you file an objection, we will no longer process your personal data in question unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

Objection to Direct Marketing

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing.

This also applies to profiling, to the extent that it is related to such direct marketing . If you object, your personal data will no longer be used for direct marketing purposes .

Right to File a Complaint with the Competent Regulatory Authority

In the event of violations of the GDPR, you have the right to file a complaint with a data protection supervisory authority. This right to file a complaint is without prejudice to any other administrative or judicial remedies.

The competent supervisory authority for us, as a non-public entity in Bavaria, is:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany

Mailing Address:
P.O. Box 1349
91504 Ansbach
Germany

Phone: +49 (0) 981 180093-0
Email: poststelle@lda.bayern.de

Right to Data Portability

You have the right to have data that we process automatically—based on your consent or in fulfillment of a contract—provided to you or to a third party in a commonly used, machine-readable format.

If you request that your data be transferred directly to another data controller , this will be done only to the extent that it is technically feasible.

Access, Correction, and Deletion

In accordance with applicable legal provisions, you have the right at any time to request, free of charge, information from regarding your stored personal data, its source and recipients, as well as the purpose of the data processing.

You may also have the right to have this data corrected or deleted .

If you have any questions about this or other matters related to personal data, please feel free to contact us at any time at .

Right to Restriction of Processing

You have the right to request that the processing of your personal data be restricted.

The right to restrict processing applies in particular in the following cases:

  • If you dispute the accuracy of your personal data stored by us , you may request that processing be restricted for the duration of the review.
  • If the processing of your personal data at was or is unlawful, you may request that the processing of your data be restricted at instead of having it deleted.
  • If we no longer need your personal data, but requires it to exercise, defend, or assert legal claims , you may request that we restrict the processing instead of deleting it.
  • If you have filed an objection under Article 21(1) of the GDPR, you may request that processing be restricted as long as it has not yet been determined whose interests prevail.

If the processing of your personal data has been restricted, may process this data—other than for storage purposes—only with your consent or under the conditions specified in Article 18(2) of the GDPR.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption.

You can recognize an encrypted connection by the fact that the address bar in the browser changes from “http://” to “https://” and by the padlock icon in in your browser’s address bar.

SSL/TLS encryption protects data transmission from unauthorized access by third parties. However, cannot guarantee absolute security of data transmission.

4. Data Collection on This Website

Server Log Files

When you visit our website, our hosting provider automatically collects technical data and processes it in server log files.

These may include, in particular:

  • IP address,
  • Date and time of access,
  • page or file accessed,
  • amount of data transferred,
  • Referrer URL,
  • Browser type and browser version,
  • Operating system and
  • Additional technical information.

Data is processed for the purposes of technical operation, stability, and security of the website, as well as to detect and prevent attacks and misuse.

The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest, as set forth at , is the secure and uninterrupted operation of the website.

The specific retention period for server log files is determined by the hosting provider’s technical and security-related requirements and is limited to the extent necessary .

Cookies and Similar Technologies

Our website does not use any Google analytics or marketing services.

No YouTube videos from external YouTube servers are embedded on the website .

The website may use technically necessary cookies or similar technologies to the extent that this is necessary for the technical operation of the website or for a feature you have expressly requested .

For the storage of or access to information on that is technically necessary on your device, consent is generally not required under § 25(1) TDDDG ( ), provided that the legal requirements for the exception are met ( ).

If, in the future, non-essential cookies or similar technologies are used on , they will be activated only after the necessary consent has been obtained at , and this Privacy Policy will be updated accordingly.

Contact Form

If you submit inquiries to us via the inquiry form, your information from the inquiry form—including the contact information you provided there—will be processed to handle your inquiry and for any follow-up questions .

The form requests the following information in particular:

  • Name
  • Email address
  • Message

The request is processed via the WordPress plugin Ninja Forms, stored in WordPress at , and also sent to us via email.

This data is processed pursuant to Article 6(1)(b) of the GDPR, provided that your inquiry relates to the initiation of a contract or is necessary for the implementation of precontractual measures.

In all other cases, the processing is based on our legitimate interest in effectively handling inquiries directed to us (Art. 6(1)(f) GDPR).

Requests stored in Ninja Forms are automatically deleted after 180 days.

Data will only be stored for a longer period if this is necessary due to statutory retention requirements, to assert, exercise, or defend legal claims, or for any other legally permissible reason .

Inquiries by email, phone, or fax

If you contact us by email, phone, or fax, your inquiry —including any personal data contained therein—will be processed for the purpose of addressing your request.

Processing is based on Article 6(1)(b) of the GDPR, provided that your inquiry is related to the initiation of a contract or is necessary for the implementation of precontractual measures.

In all other cases, the processing is based on our legitimate interest in effectively handling inquiries directed to us (Art. 6(1)(f) GDPR).

The data will be deleted as soon as the purpose of the processing no longer applies and there are no statutory retention requirements or other legal grounds for further storage.

5. Local Videos

Our website features videos that are served from our own server or from , the server used for the website.

The videos are not embedded via YouTube or any other external video provider .

When accessing a local video, technically necessary connection data— —in particular the IP address, may be processed. This is done as part of the technical operation and hosting of the website .

6. EWWW Image Optimizer

This website uses the “EWWW Image Optimizer” plugin to optimize images from .

The configuration used does not utilize any Easy-IO, ExactDN, or other CDN features for the external delivery of images.

Image optimization takes place within your own WordPress installation or , depending on the server environment used for this purpose.

To the extent that personal data is processed in connection with the technical operation of the website, this is done for the purpose of optimizing and technically providing the website , based on Article 6(1)(f) of the GDPR.

7. WordPress Administration

Various technical tools and plugins are used to administer the website. Some of these tools are used exclusively for managing the website and are not accessible to regular visitors.

OneLogin

OneLogin is used exclusively to authenticate WordPress administrators ( ) and employees. The website does not provide a login option for regular visitors or customers ( ).

Data processing within the framework of this internal administrative system therefore does not affect visitors’ use of the public website.

Simple History

The “Simple History” plugin ( ) is used to log actions within the WordPress admin panel.

This allows for the logging of information regarding administrative processes, user accounts, timestamps, and technical details.

The administrative logs are retained for a maximumof 60 days and are subsequently deleted, unless longer retention is required in individual cases for legal or security-related reasons.

The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the security and traceability of administrative processes, as well as in the detection and investigation of misuse and security incidents.

8. Transfer to Third Countries

To the best of our current knowledge, no personal data is transferred to countries outside the European Union or the European Economic Area via the services listed in this privacy policy , unless such a transfer is expressly indicated.

9. No Analytics or Marketing Services

To the best of our knowledge, this website does not use any Google Analytics or marketing services.

In particular, no Google Analytics services are used to analyze user behavior on .

Similarly, no externally embedded YouTube videos are used.

10. Your Rights

In accordance with the statutory requirements, you have the following rights, in particular:

  • Right of access pursuant to Article 15 of the GDPR,
  • Right to rectification under Article 16 of the GDPR,
  • Right to erasure under Article 17 of the GDPR,
  • Right to restriction of processing under Article 18 of the GDPR,
  • Right to data portability pursuant to Article 20 of the GDPR,
  • Right to object under Article 21 of the GDPR.

If the processing is based on your consent, you may revoke that consent at any time at , effective for the future. The lawfulness of the processing carried out up until the time of revocation at remains unaffected.

To exercise your rights, you may contact the data controller at at any time.

11. Right to File a Complaint with a Supervisory Authority

If you believe that the processing of your personal data at violates the General Data Protection Regulation, you have the right to file a complaint with a data protection supervisory authority at .

The competent supervisory authority for us, as a non-public entity in Bavaria, is:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany

Mailing Address:
P.O. Box 1349
91504 Ansbach
Germany

Phone: +49 (0) 981 180093-0
Email: poststelle@lda.bayern.de

12. Updates to This Privacy Policy

We reserve the right to update this Privacy Policy if there are changes to the technical design of our website ( ), the services we use, or the legal requirements ( ).

The current version published on this website applies in each case.

As of October 5, 2026