Privacy Policy

LoopAtHome — Privacy Information

Ableton AG, Schönhauser Allee 6-7, D-10119 Berlin herewith informs you about the processing of personal data for which Ableton is responsible in the sense of the EU General Data Protection Regulation (GDPR).

Apart from sending us a letter, you may contact us at any time via privacy[at]ableton[dot]com

You can reach our data protection officer by sending an e-mail to AbletonDSB[at]daspro[dot]de or by sending a letter to Ableton DSB, daspro GmbH, Kurfürstendamm 21, 10719 Berlin.

Below we have compiled the most important information on typical data processing for you, broken down by groups of data subjects. For certain data processing operations, which only concern specific groups, the information requirements are fulfilled separately. Where the term "data" is used, only personal data within the meaning of the GDPR are meant.

  1. LoopAtHome Website Visitors
  2. Participants in LoopAtHome Challenges
  3. Newsletter Recipients
  4. Communication Partners, Artists, Externals
  5. Rights of Data Subjects and Further Information

 

1. LoopAtHome Website Visitors

1.1 Server-log data

When using the website, certain information is sent to the server of our website by the browser used on your device for technical reasons. This data is stored and processed on our server.

(i) We process the following data for the purpose of providing the contents of the website that you have visited, to ensure the security of the IT infrastructure used, to correct errors, to enable and simplify searches on the website and to manage cookies.

(ii) The data processed is HTTP data: HTTP data is protocol data that is generated when the Website is visited via the Hypertext Transfer Protocol (Secure) (HTTP(S)) for technical reasons: This includes IP address, type and version of your Internet browser, operating system used, the page visited, the page previously visited (referrer URL), date and time of the visit. HTTP(S) data also accumulates on the servers of service providers (e.g. when requesting third-party content).

(iii) The legal basis for the processing is our legitimate interest in the operation of an Internet presence and the communication with communication partners in accordance with Article 6 (1) (f) GDPR.

(iv) The data is automatically transmitted by the browser of the user.

(v) Recipients of the personal data are IT service providers which we use as processors within the framework of a data processing agreement.

(vi) IP addresses are anonymized after 24 hours at the latest. Pseudonymous usage data will be deleted after six months.

(vii) Without disclosure of personal data such as the IP address, the use of the website is not possible. Communication via the website without disclosure of data is technically not possible.

 

1.2 Technically required cookies

We use cookies on our website. Cookies are small text files containing information that can be stored on the user's device via the browser when visiting a website. The information stored in cookies can be read out and processed when the website is visited again using the same device. In doing so, we use processing and storage functions of the browser of your device and collect information from the storage of the browser of your device.

In the structure of our LoopAtHome privacy policy, we only use technically required cookies. Cookies that are technically required for the functioning of the website cannot be deactivated via the cookie management function of this website. However, you can generally deactivate cookies at any time in your browser. Different browsers offer different ways to configure the cookie settings in the browser. However, we would like to point out that some functions of the website may not function or no longer function properly if you generally deactivate cookies in your browser.

a) Ablsessionid 

We use the Ablsessionid cookie as the so-called "session ID". This enables us to save the customer account, individual settings and certain user actions for the duration of your visit (e.g. login, language settings, shopping basket function).

(i) The purpose of data processing is to enable the login, user-specific settings (e.g. language) and the technical provision of a shopping cart function.

(ii) The processed data are data concerning the customer's account, language selection, country, cookie settings and shopping cart.

(iii) The legal basis for the processing is our legitimate interest in the provision of the individual sessions for the users, including the shopping basket function or the respective language setting in accordance with Article 6 (1) (f) GDPR.

(iv) The data is automatically transmitted by the browser of the user.

(v) Recipients of the personal data are IT service providers which we use as processors within the framework of a data processing agreement.

(vi) The data is deleted after one year.

(vii) Without disclosure of personal data the use of the website is not possible. Communication via the website without disclosure of data is technically not possible.

b) crftoken

We use the crftoken cookie on our website, which is used to protect against so-called cross-site request forgery attacks. Here, attackers attempt to display fake requests to website visitors. The cookie helps us to prevent such attacks.

(i) The purpose of the data processing is to increase the security of the website and to prevent so-called cross-site request forgery attacks.

(ii) The data processed are the crftoken test result and the HTTP log data.

(iii) The legal basis for the processing is our legitimate interest in protecting our website visitors from cross-site request forgery attacks in accordance with Article 6 (1) (f) GDPR.

(iv) The data is automatically transmitted by the browser of the user.

(v) Recipients of the personal data are IT service providers which we use as processors within the framework of a data processing agreement.

(vi) The data is deleted at the end of the session.

(vii) Without disclosure of personal data the use of the website is not possible. Communication via the website without disclosure of data is technically not possible.

 

1.3 Social media content from third party providers

a) YouTube Embedding (Privacy Enhanced Mode)

We include videos on our website that are stored on YouTube. In this embedding, the contents of the YouTube website are displayed in parts of a browser window. However, the YouTube videos are only accessed by clicking on them separately. The embedding of YouTube content is carried out in the so-called "Privacy Enhanced Mode". This is provided by Google as the provider of YouTube and thus ensures that no data is transmitted to Google and no cookies are stored on your device before a click to play the video.

As soon as you click the button to play the YouTube content, the video is loaded from YouTube. Technically, the same thing happens then as would happen if you clicked a link to go to the YouTube website: YouTube receives all information that your browser automatically transmits (including your IP address). YouTube also sets its own cookies on your device. This also happens if you do not have a YouTube user account. If you are logged in at YouTube or Google, your data will be associated directly with your account. If you do not want the association to your YouTube or Google user account, you must log out of YouTube and Google before clicking on the video file.

The collection and processing of this data is the sole responsibility of Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland. We have no knowledge of further details of the processing of personal data in the area of data controllership of Google. Ableton has no influence on the data processing of Google.

For information about the processing of personal data by Google, please refer to the Google Privacy Policy: https://policies.google.com/privacy

Google also processes your personal data in the USA and is certified under the EU-US Privacy Shield: www.privacyshield.gov/EU-US-Framework.

b) United We Stream

We include video livestreams on our website that are stored on the United We Stream website. In this embedding, the contents of the United We Stream website are displayed in parts of a browser window. However, the United We Stream videos are only accessed by clicking on them separately. The “auto play” option of United We Stream is deactivated. 

As soon as you click to play the United We Stream content, the video is loaded from United We Stream. Technically, the same thing happens then as would happen if you clicked a link to go to the United We Stream website: United We Stream receives all information that your browser automatically transmits (including your IP address). United We Stream also sets its own cookies on your device. 

The collection and processing of this data is the sole responsibility of Clubcommission Berlin Verband der Berliner Club-, Party- und Kulturereignisveranstalter e.V., Brückenstraße 1, 10179 Berlin. We have no knowledge of further details of the processing of personal data in the area of data controllership of Clubcommission Berlin Verband.

For information about the processing of peronal data by Clubcommission Berlin Verband, please refer to the Clubcommission Berlin Verband Privacy Policy: https://en.unitedwestream.berlin/privacy/

 

2. Participants in LoopAtHome Challenges

On our Ableton LoopAtHome Challenges page, we offer information and input for our community to participate in LoopAtHome Challenges and to create their own creative content. However, our Ableton LoopAtHome Challenges page does not provide the opportunity to upload content or to creatively interact with the community and other participants. If the participants of LoopAtHome Challenges want to, they can share their own creations on social media channels of their choice under the hashtag #LoopAtHome. Ableton will be present on Metapop, Facebook and Twitter to coach participants and moderate discussions. However, using social media channels is subject to the terms and conditions and the privacy policy of the respective social media platform only. Using such social media platforms regularly requires users to create an account on the respective platfom. 

For information about the processing of personal data by Metapop, Facebook or Twitter, please refer to the listed contacts and information within the privacy policies:

  • Metapop: Sounds Unlimited Inc., 6725 W Sunset Blvd, Los Angeles, CA 90028, USA

For more information see Metapop privacy policy: https://metapop.com/pages/privacy

Metapop also processes your personal data in the USA.

  • Facebook: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland 

For more information see Facebook privacy policy: https://www.facebook.com/policy.php

Facebook also processes your personal data in the USA and is certified under the EU-US Privacy Shield: www.privacyshield.gov/EU-US-Framework.

  • Twitter: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland

For more information see Twitter privacy policy: https://twitter.com/en/privacy

Twitter also processes your personal data in the USA and is certified under the EU-US Privacy Shield: www.privacyshield.gov/EU-US-Framework.

If you send us questions regarding the LoopAtHome Challenges by email and ask for our support, the following information applies:

(i) The purpose of the data processing is to support participants of the LoopAtHome Challenges if they have any questions regarding the Challenges. A change of this purpose is not planned.

(ii) The processed data are:

  • Name or pseudonymous name, e-mail address, date and time at which the email was sent
  • Communication data that you put in the email (e.g. questions regarding LoopAtHome Challenges)

(iii) The legal basis for the processing is our legitimate interest according to Article 6 (f) GDPR in supporting the participants of LoopAtHome Challenges, if they have any questions regarding the LoopAtHome Challenges. 

(iv) The data is provided by the participants itself.

(v) We use service providers as processors within the framework of a data processing agreement for the provision, maintenance and servicing of IT systems.

(vi) The data will be deleted one week after the end of LoopAtHome Weekend.

(vii) Data is required to get our support regarding your questions about the LoopAtHome Challenges. Without providing data, we cannot answer your questions and provide you with our support. 

 

3. Newsletter Recipients

If you subscribe to a newsletter, we will send you information about Ableton and our products and partners. We also occasionally invite you to participate in surveys as part of our newsletter. If you participate in such surveys, the information in Section 3 of the Ableton Privacy Policy on the Ableton Website applies, and we also monitor the reach and success of the newsletter through anonymous or pseudonymous analysis.

 

 

(i) If you subscribe to our newsletter, we process your data for the purpose of sending the newsletter.

(ii) The processed data are:

  • Name, e-mail address
  • HTTP data:
    This is protocol data that is technically required for opening the newsletter via the Hypertext Transfer Protocol (Secure) (HTTP(S)): This includes IP address, type and version of your Internet browser, operating system used, the page visited, the page previously visited (referrer URL), date and time of the visit.
  • Web Extend Identifiers
    These are pseudonymised identifiers such as external IDs or hashed email addresses
  • Opening and reading times of the newsletter

(iii) The legal basis for the processing of newsletter data is Article 6 (1) (a) GDPR (consent). 

(iv) You provide your contact details yourself when you subscribe to the newsletter; the further data for analysis is transmitted automatically by your browser. 

(v) We use service providers as processors within the framework of a data processing agreement for the provision of services, especially for the provision, maintenance and servicing of IT systems. In particular, we use Emarsys Interactive Services GmbH, Stralauer Platz 34, 10243 Berlin, Germany, and Validity Inc., 4010 Boy Scout Boulevard, Suite 1100, Tampa, FL 33607 USA as processors for the mailing and the analysis of the newsletter. Validity Inc. is certified under the EU-US Privacy Shield.

(vi) Data regarding newsletters will be deleted when you unsubscribe from the newsletters. Data from the session cookie is deleted after the end of the session. The remaining data will be deleted after one year.

(vii) Data is required to receive newsletters. Without providing data, they cannot be sent. A revocation of the consent is possible at any time. Please use the unsubscribe function in the newsletter.

 

4. Communication Partners, Artists, Externals

(i) The purpose of the processing is the preparation and execution of a contractual relationship or other communication.

(ii) The data processed are name, contact details, communication details, communication timestamps and technical metadata of the communication.

(iii) The legal basis for processing the data with natural persons is Article 6 (1) (b) GDPR (contract or contract initiation), whereas for contracts with legal persons Article 6 (1) (f) GDPR (legitimate interest, namely communication with contact persons relevant to the contract) and Article 6 (1) (c) GDPR (statutory obligations, in particular tax and commercial law provisions) apply.  For simple communication, the legal basis is Article 6 (1) (f) GDPR (legitimate interest, namely documentation of communication processes).

(iv) Contact and contract data can be transmitted to other service providers, business partners as well as offices and authorities if necessary for the execution of the contract or order. We also use service providers as processors within the framework of a data processing agreement for the provision of services, especially for the provision, maintenance and servicing of IT systems.

(v) Data of contract partners and service providers will be deleted ten calendar years after termination of the contract or order.

(vi) The processing of contact data on part of the service providers and business partners is necessary to execute the contract or order. If the data is not provided, the communication may be considerably disturbed.

 

5. Rights of Data Subjects and Further Information

(i) We do not use any methods of automated individual decision-making.

(ii) You have the right to request information at any time about all your personal data which we are processing.

(iii) If your personal data is incorrect or incomplete, you have the right to have it rectified and completed.

(iv) You can request the erasure of your personal data at any time, as long as we are not bound by legal obligations that require or allow us to continue processing your data.

(v) If the applicable legal requirements are met, you can request a restriction to the processing of your personal data.

(vi) You have the right to object to the processing, insofar as the data processing is based on profiling or direct marketing purposes.

(vii) If the processing is carried out on the basis of the balancing of interests, you may object to the processing by stating reasons arising from your particular situation.

(viii) If the data processing takes place on the basis of your consent or a contract, you have the right to a transfer of the data provided by you, insofar as the rights and freedoms of others are thereby not impaired.

(ix) If we process your data on the basis of a declaration of consent, you have the right to revoke this consent at any time with future effect. The processing carried out prior to a revocation remains unaffected by the revocation.

(x) Moreover, you have the right to file a complaint at any time with a data protection supervisory authority, if you believe that data processing has been carried out in violation of the applicable law.

 

Version: April 21, 2020