Privacy Notice

This Privacy Notice describes how Thomann GmbH (hereinafter also referred to as “Musikhaus Thomann”) processes and protects according to the General Data Protection Regulation (GDPR) and the relevant German data protection laws, in particular the German Federal Data Protection Act (BDSG), the data you provide us with when using our website.

The security of personal data such as name, address, telephone number or email, is a serious and important concern for our company. Therefore, we conduct our online activities in compliance with the respective statutory provisions relating to data protection and data security. Below, you can find the information we process.

Responsible authority, contact person for queries or exercising your rights as a data subject, contact

The responsible authority within the meaning of the data protection regulations for all data processing through the Musikhaus Thomann website is:

Thomann GmbH, Hans-Thomann-Strasse 1, 96138 Burgebrach, Germany

In the event of any questions, comments, complaints or to exercise your rights as a data subject in connection with our Privacy Notice and the processing of your personal data by Musikhaus Thomann’s websites, you can contact Musikhaus Thomann’s Data Protection Officer directly by email . They will gladly take care of your data protection concerns.

Personal data / types of use

As a principle, the protection of your personal data is of highest priority for Musikhaus Thomann. You decide whether or not you wish to make such data known to us, for example in the course of any registration, survey or the like. Such information on your part is relevant for your enquiry, but you provide it on a voluntary basis. An exception to this rule is when prior consent cannot be obtained for practical reasons and the processing of data is permitted by law.

Legal basis for the processing of personal data

If we obtain the consent of the data subject to process their personal data, Article 6(1)(a) GDPR serves as the legal basis for the processing of personal data.

When processing personal data necessary for the performance of a contract to which the data subject is party, Article 6(1)(b) GDPR shall serve as the legal basis. This also applies to any processing required to perform pre-contractual measures.

If processing of personal data is necessary for compliance with a legal obligation to which Musikhaus Thomann is subject, Article 6(1)(c) GDPR shall serve as the legal basis.

In the event that the vital interests of the data subject or of another natural person necessitate the processing of personal data, Article 6 (1)(d) GDPR shall serve as the legal basis.

If processing is necessary to safeguard the legitimate interests of our company or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, Article 6(1)(f) GDPR shall serve as the legal basis for processing.

Should we access your device and the information stored there or should we save information on your device as part of our processing (e.g. by using cookies), the primary legal basis is § 25(1)(1) TTDSG if we require your consent for this access, or § 25(2)(2) TTDSG if the access concerns processing that is technically absolutely necessary.

Data deletion and storage duration

The data subject’s personal data will be deleted or blocked as soon as the purpose of storage ceases to apply. Data may be stored beyond this if provisions have been made for this by the European or national legislator in Union regulations, laws or other rules to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the standards mentioned above expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

Exchange of data / contractual relationships with partners / third parties

In addition to the types of use described above, Musikhaus Thomann will transfer your data to third parties that are involved in the processing of your order or that participate in contracts. For example, if you place an order via our website, we will transmit your order information to Musikhaus Thomann’s partner companies and contractors who process and deliver your order to you. Data will only be transmitted to the extent required in order to fulfil or deliver your order or to process an enquiry. The legal basis for this is the fulfilment of the contract concluded with you (e.g. for orders) or the initiation of a contract (Article 6(1)(b) GDPR).

Furthermore, when shipping such goods with a value that exceeds the insured liability limit of the shipping company appointed by us, we will pass on the type and value of the goods as well as the name and address of the recipient of the goods to our supplementary transport insurance provider. We do this in our legitimate interest, in particular to protect our goods from accidental loss or damage in transit. Without this supplementary transport insurance, we would not be able to ship higher-priced goods. We have contractually obligated the insurance company to adhere to the designated purpose and maintain confidentiality, and to process the transmitted data exclusively for the purpose of processing an insurance claim. The legal basis for this is Article 6(1)(f) GDPR.

We will also transmit personal data to third parties where we are required to do so by law. The legal basis in this instance is Article 6(1)(c) GDPR.