1. Introduction and Controller
The protection of your personal data is of particular concern to us. We treat your personal data confidentially and in accordance with the statutory data protection regulations (GDPR, Austrian Telecommunications Act – TKG 2021) and this Privacy Policy.
The controller responsible for data processing on this website is:
Mgr.art. Wolfgang Bauer
Mühlgasse 55
2500 Baden
Austria
Email: office AT wmbauer DOT net
2. Data Collection on Our Website
Provision of the Website (Log Files)
When you visit our website, the hosting provider (web space provider) automatically collects information that your browser automatically transmits to us (so-called server log files). This includes:
- Browser type and browser version
- Operating system used
- Referrer URL (the previously visited page)
- Host name of the accessing computer
- Time of the server request
- IP address
This data is technically necessary to display our website to you stably and securely. The legal basis for this is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. This data is not merged with other data sources and is automatically deleted or anonymized after 14 days at the latest.
Contact Form / Email Contact
If you send us inquiries via the contact form or email, your details will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We process this data based on your consent (Art. 6 (1) (a) GDPR) or to implement pre-contractual measures (Art. 6 (1) (b) GDPR). We do not pass on this data without your consent.
3. Data Processing for Orders in the Online Shop
When you purchase digital goods (sheet music as a PDF download) in our online shop, we process the data you enter to execute the purchase contract and provide you with the downloads.
Processed data categories:
- Last name, first name
- Email address (for sending the download link and the invoice)
- Billing address
Legal basis: Processing is necessary for the performance of the contract with you (Art. 6 (1) (b) GDPR). Without this data, we cannot conclude the purchase contract and cannot provide the download.
Storage period: After complete execution of the contract, your data will be blocked for further use and deleted after expiry of the statutory retention periods under tax law (in Austria usually 7 years pursuant to § 132 BAO).
4. Transfer of Data to Payment Service Providers
To process payments in our online shop, we use external payment service providers. Depending on which payment method you select during the ordering process, we pass on the data required for payment processing (name, purchase price, credit card details if applicable) to the commissioned payment service provider.
The legal basis for the transfer of data is the performance of the contract pursuant to Art. 6 (1) (b) GDPR. The data protection regulations of the respective providers can be found on their websites (e.g., PayPal or Stripe).
5. Cookies and Local Storage
Our website uses exclusively technically necessary cookies and local storage functions of WordPress and the online shop system used (e.g., to store the contents of your shopping cart during your visit or to manage your login status).
These functions are strictly necessary for the online shop to function. The legal basis for this is our legitimate interest in a fully functional web shop operation (Art. 6 (1) (f) GDPR) as well as § 165 (3) TKG 2021.
No tracking cookies, no Google Analytics, no Facebook Pixel, and no other marketing tools that require explicit consent (cookie banner) are used.
6. WordPress Plugins and Fonts
We use the WordPress content management system and selected plugins on this website to provide the shop functions. All fonts (Google Fonts) and scripts are installed locally on our own server. No background data transfer to third-party servers (such as Google in the USA) takes place when the page is loaded.
7. Your Rights
You generally have the following rights regarding your personal data stored by us:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure / „Right to be forgotten“ (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)
If you believe that the processing of your data violates data protection law or that your data protection claims have otherwise been violated in any way, you can lodge a complaint with us (at the email address provided above) or with the competent supervisory authority.
In Austria, this is the:
Österreichische Datenschutzbehörde (Austrian Data Protection Authority)
Barichgasse 40-42
1030 Vienna
Website: www.dsb.gv.at
