Privacy Policy

The protection of your personal data is important to us. We process personal data in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the German Telecommunications-Telemedia Data Protection Act (TDDDG).

This Privacy Policy explains how personal data is processed when you visit and use this website, purchase products or contact us.

1. Controller

Vicente Sierra Marti
Schrotzburgstraße 11
78244 Gottmadingen
Germany

Email: edmusik@vicentesierra.com
Phone: +49 1522 4221302

2. Hosting by Wix

This website is hosted and technically operated using services provided by Wix.com Ltd.

When you visit our website, technical information may be processed automatically, including your IP address, date and time of access, requested pages or resources, browser type and version, operating system, HTTP status information and the amount of data transferred.

This processing is necessary to provide the website, ensure its security and maintain its technical functionality.

The legal basis for this processing is Art. 6(1)(f) GDPR, based on our legitimate interest in providing a secure, functional and reliable website.

Wix acts as a processor for certain processing activities carried out on our behalf. Wix provides a Data Processing Agreement for Wix users.

Because Wix operates internationally, personal data may be processed or stored in countries outside the European Economic Area (EEA). Where required by applicable data protection law, Wix uses appropriate safeguards for international data transfers, including Standard Contractual Clauses and other appropriate contractual, technical and organisational safeguards.

Further information can be found in the Wix Privacy Policy and Data Processing Agreement.

3. Cookies and Similar Technologies

This website uses cookies and similar technologies.

Cookies are small text files that are stored on your device when you visit a website. Some cookies are technically necessary for the operation, security and basic functionality of the website. Other cookies may require your consent under applicable data protection law.

Where required, non-essential cookies and similar technologies are only used after obtaining your consent.

You can manage or withdraw your cookie consent through the cookie settings provided on this website.

The website is operated using Wix. Wix may use technically necessary cookies and similar technologies to provide and secure the website and its functions.

4. Contact Form

If you contact us using the contact form on this website, the information you provide will be processed in order to handle your enquiry and respond to you.

Depending on the nature of your enquiry, the processing may be necessary to take steps at your request prior to entering into a contract or to perform a contract. In other cases, the processing is based on our legitimate interest in responding to enquiries.

The data may include:

name
email address
message content
any other information you voluntarily provide
date and time of the enquiry
technical information associated with the submission

The data will be retained only for as long as necessary to handle your enquiry and any related follow-up matters, unless statutory retention obligations apply.

5. Orders and Contract Processing

If you purchase a product through this website, we process the personal data necessary to process and fulfil your order and to comply with our legal obligations.

Depending on the type of product purchased, this may include:

name
billing and delivery address
email address
order details
order number
date and time of the order
payment-related information
information necessary to process returns, refunds or warranty claims

The legal basis is Art. 6(1)(b) GDPR where processing is necessary for the performance of a contract.

Where processing is required to comply with statutory obligations, the legal basis is Art. 6(1)(c) GDPR.

Accounting and tax-related records may be retained for the periods required by applicable German commercial and tax law.

6. Payment Processing via Stripe

Payments on this website are processed using Stripe.

When you select Stripe as your payment method, the payment process is handled through Stripe's payment platform. Depending on the payment method and transaction, Stripe may process payment and transaction information such as payment method, transaction amount, transaction status and transaction identifiers.

We do not receive or store complete payment card details such as the full card number on our website.

The processing is necessary for the performance of the purchase contract and is therefore based on Art. 6(1)(b) GDPR.

Stripe is an international payment service provider. Personal data may therefore be transferred to and processed in countries outside the EEA where necessary for the provision of its services. Stripe uses appropriate legal safeguards for international data transfers, including, where applicable, the EU-U.S. Data Privacy Framework and Standard Contractual Clauses.

Further information about the processing of personal data by Stripe can be found in Stripe's Privacy Policy.

7. Recipients of Personal Data

Personal data is only disclosed to third parties where this is necessary for the purposes described in this Privacy Policy, where there is a legal obligation to do so, or where another legal basis under the GDPR permits the disclosure.

Depending on the circumstances, recipients may include:

Wix and its relevant service providers
payment service providers such as Stripe
IT and technical service providers
accounting or tax advisers
delivery and shipping service providers, where required for the fulfilment of an order
public authorities where disclosure is legally required
other processors or service providers involved in providing the website or fulfilling contractual obligations

Where a service provider processes personal data on our behalf, the applicable requirements of Art. 28 GDPR are observed.

8. International Data Transfers

Some service providers used by this website operate internationally. This may result in personal data being processed outside the EEA.

Where personal data is transferred to a third country and the GDPR requires appropriate safeguards, we rely on an applicable legal transfer mechanism, such as an adequacy decision, the EU Standard Contractual Clauses or another legally recognised safeguard.

9. Legal Basis for Processing

Depending on the specific processing activity, we process personal data on the following legal bases:

Art. 6(1)(b) GDPR — processing necessary for the performance of a contract or for taking steps at the request of the data subject prior to entering into a contract;
Art. 6(1)(c) GDPR — processing necessary for compliance with a legal obligation;
Art. 6(1)(f) GDPR — processing necessary for our legitimate interests, such as maintaining a secure, functional and reliable website and responding to enquiries;
Art. 6(1)(a) GDPR — processing based on consent where consent is required.

Where processing is based on consent, you may withdraw your consent at any time with effect for the future.

10. Your Rights

You have the following rights under the GDPR, subject to the applicable legal requirements:

Right of access under Art. 15 GDPR
Right to rectification under Art. 16 GDPR
Right to erasure under Art. 17 GDPR
Right to restriction of processing under Art. 18 GDPR
Right to data portability under Art. 20 GDPR
Right to object under Art. 21 GDPR
Right to withdraw consent under Art. 7(3) GDPR where processing is based on consent

To exercise your rights, please contact us using the contact details provided above.

11. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.

The competent supervisory authority for our place of establishment is:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW)

Lautenschlagerstraße 20
70173 Stuttgart
Germany

Phone: +49 711 615541-0
Email: poststelle@lfdi.bwl.de

You may also contact another competent supervisory authority in accordance with Art. 77 GDPR, in particular the authority in the place of your habitual residence or place of work.

12. Obligation to Provide Personal Data

The provision of personal data is generally voluntary.

However, certain personal data is necessary to enter into and perform a contract, process an order or provide certain services. If the required information is not provided, we may be unable to conclude or perform the relevant contract.

Where the provision of personal data is required by law, we will inform you of this where appropriate.

13. Data Retention

We retain personal data only for as long as necessary for the respective purpose or as required by applicable statutory retention obligations.

Where statutory retention obligations apply, the relevant data will be retained for the legally prescribed period and subsequently deleted, unless further processing is legally permitted or required.

14. SSL/TLS Encryption

For security reasons and to protect the transmission of confidential information, this website uses SSL/TLS encryption.

An encrypted connection can generally be recognised by the browser address bar displaying "https" and the padlock symbol.

15. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy where necessary to reflect changes to our website, services, data processing activities or applicable legal requirements.

The current version of this Privacy Policy is always available on this website.

Last updated: 7 September 2026