Source: https://www.roba.com/dataprotection/
Timestamp: 2019-04-19 14:46:47+00:00

Document:
Please be welcomed to the website of ROBA which ROBA Music Verlag GmbH, (“ROBA”, “we”, “us”, “our”) operates. Protecting our users’ personal data is an important concern for ROBA. All ROBA activities on and in connection with this website (“our website”) comply with the applicable data protection laws.
We collect and process personal data, i.e. information that identifies, or at least makes it possible to identify, you as a natural person (e.g. your name, your address and/or e-mail address) when you decide to actively communicate with us, when you subscribe to services we may provide, and when you use our online client platform (the “Platform”) as a writer, publisher or other contracting partner of ROBA (jointly “ROBA Partner(s)”) in the “my.roba.com” section of our website (see sections A.1 and A.2 below). Furthermore, we collect and process certain technical data that results from you visiting our website (see section B below) which is also considered personal data. Processing means any operation which is performed on personal data, such as collection, recording, organisation, structuring, storage, adaptation, retrieval, any kind of disclosure, erasure or destruction or other use.
a) When you subscribe to services that we may offer our users from time to time you will obviously have to submit your email address as well as any other data necessary for the provision of the service. Also, there are means on our website to get in touch with us directly, especially our contact form, which in turn requires you to submit personal data, such as your name and email address, but also the very content of your request.
b) We collect, store and use such data in order to fulfil your corresponding request. For this, the legal basis is Article 6 sec. 1 sent. 1 lit. f GDPR, as it is in our mutual interest to handle your requests. Your data will not be collected, stored or used in any other way or for any other purpose. Hence, as an example, if you submit your email address via our contact form with a request for certain information, we will use only your email address to get back to you with – so we hope – the information you requested. Hence, you fully control the information you provide ROBA about yourself and how it may be used.
The Platform under my.roba.com is a service for ROBA composers and publishing partners who wish to stay fully informed and up to date on their royalty earnings. For you we provide an online interface to our corresponding databases. For this, the legal basis is the performance or the of a contract or pre-contractual measures, Article 6 sec. 1 sent. 1 lit. b GDPR.
a) To ensure that only you as a ROBA Partner may gain access to the corresponding information we conduct an registration process. If you have decided to get in touch with the designated contact person or filled out our request form and after you have received your login data, you may login to your account on the Platform.
b) You are not required to submit any extra personal data before or while using the Platform (see section 2.3, though). Please, be aware, however, that the data you can retrieve on the Platform is personal and confidential. If you pass on your login data to anyone else, or if it gets passed on to anyone else, that person can access the data just as you can, unless and until you tell us to block your login data.
The Website under www.roba.com is a website which demonstrates our services and offers. Users of our label services under www.robadigital.com can use our login portal to get insights and information about their digital sales and neighbouring rights. Our music search system under music.roba.com and www.robapm.com are services for producers of media content (the “Producers”) to licence music and keep track of their licensed products. For Producers we provide an online interface to our corresponding databases, to access sample music and to download tracks for their production. For this, the legal basis is the performance or the preparation of a contract, Article 6 sec. 1 sent. 1 lit. b GDPR.
We use this information to create your account and to contact you regarding relevant licensing opportunities. Considering potential licensing contracts, this is based on Art. 6 sec. 1 lit. b GDPR. Upon registration, our team will evaluate the soundness of your business by matching it to additional data collected a public internet search. We use this information to prevent fraudulent behavior on our platform to protect our and our client’s interests, Art. 6 sec. 1 lit. f GDPR.
b) Upon registering to our licensing platform, you can opt into our newsletters to receive information regarding our platform and services we offer. You can opt-out of the newsletter and any marketing communication at any time and free of charge (notwithstanding provider fees) by sending an email to this address info@roba.com or clicking this link: (www.roba.com/pages/de/subscribe). Data processing for the newsletter is based on your consent (i.e. your “opt-in”), Art. 6 sec. 1 lit. a GDPR. Furthermore, you may from time to time take part in contestsand competitions hosted on our website. In this case we will process the data provided upon entering such contest (in most cases your email address) based on Art. 6 sec. 1 lit. b GDPR exclusively for the purposes of your participation in such contest, unless you provide consent for further use separately.
c) ROBA will collect and maintain a history of your use of our website, especially of your browsing of our music library, download and licensing history, we will use this information to assess and detect any case of possibly unlicensed use of our music products. For this purpose, we match your use of the website regarding browsing, listening and download history to our directory of anonymized download patterns of Producers. For this the legal basis is Article 6 sec. 1 lit. f GDPR, as it is in our legitimate interest to detect such use.
d) In case we directly license our music to you we will further collect and maintain a record of any contractual informationgathered upon closing a licensing agreement. For this, the legal basis is Article 6 sec. 1 lit. f GDPR.
e) While not being required to submit personal data through the Platform, you can edit certain personal data in the “Settings” section of the Platform. We will store and use edited personal data to, as applicable, continue providing the services of the Platform for you and/or to fulfil our obligations towards you. For example, by informing us of a new postal address, you allow us to send you any statements or other documents we may owe you to that address, unless stipulated otherwise in your contractual documentation.
In our newsletters we use commercially established technologies, enabling us to measure interactions with the newsletters (e.g. opening of the e-mail, clicked links). We use this data in pseudonymous form for general statistical evaluations as well as for the optimization and further development of our content and customer communication. This data is collected using small graphics embedded in the newsletter (so-called pixels), which can also collect Technical Data regarding the device you use. The data is collected exclusively pseudonymized and is not linked to your other personal data. The legal basis for this is our aforementioned legitimate interest, Art. 6 sec. 1 lit. f GDPR.
Through our newsletter we want to share content that is as relevant as possible for our customers and better understand what readers are interested in. If you do not wish the analysis of usage behavior, you can unsubscribe the newsletter or deactivate graphics in your e-mail program by default. The data on the interaction with our newsletters is stored pseudonymously for 30 days and subsequently made completely anonymous.
a) The general log files may tell us which Internet browser and operating system you were using, and which IP address was allocated to your Internet access when you were visiting the site, the URL of the internet page from which you arrived at our website, the exact time when you accessed and left our website, the amount of data transmitted, and the pages you accessed on our website. The last octet (8-bit byte) of the IP address in the general log files will be masked, thereby restricting our (or a third party’s) ability to connect the IP address to your specific Internet access. The personal data automatically collected is necessary for us to provide the website (Article 6 sec. 1 sent. 1 lit. f GDPR), and for our legitimate interest to guarantee the website’s stability and security (Article 6 sec. 1 sent. 1 lit. f GDPR).
Personal data that is collected automatically is retained for 35 days and properly erased afterwards.
b) Should our web server(s) detect an error in processing requests, it will send the corresponding information to an error log file. Those log files for technical reasons also record the client IP address from which the request was sent, i.e. your IP address if your request caused the error.
c) We have no means, and no interest in, identifying you through the general or error log file data. We use the general log file data for statistical purposes. The information we can from time to time retrieve from the files relates to, for example, peak times of the use of our website, which information our users are most interested in on the website, how users navigate on our website and which browsers and operating system our users use. We use that information to improve the technical setup as well as the design of our website. The error log files are used to diagnose and fix the error. The personal data collected during this process is necessary for our legitimate interest to guarantee the website’s stability and security (Article 6 sec. 1 sent. 1 lit. f GDPR).
In addition to the general and error log files, we keep log files of all logins to and logouts from, and downloads of documents from, the Platforms under www.roba.com, www.robapm.com and www.robadigital.com in order to protect you and ourselves from any misuse of the service. For that purpose, we also display the exact time and date of your latest login in the “Settings” section of your account on the Platform, which we store in our database. Platform Log Files are retained for 35 days and properly erased afterwards.
a) Our website uses http cookies. An http cookie is a piece of text stored on your computer by your web browser. Cookies are sent as a field in the header of the http response by our web server(s). It is then sent back by your browser every time it accesses the respective web server.
Our website uses session and persistent cookies to provide you with an easy and comfortable web service. They allow us to, for example, display the German contact information any time you visit our website if your first visit to the site came from Germany. It is our legitimate interest (Art. 6 sec 1 lit. f) to provide you a comfortable web service.
We will use the Information gathered by cookies deployed by Google Analytics to analyze your use of our website, to generate reports on website activities and to perform other website related services to you.
We have no influence on the data that Facebook, Google and Twitter collect based on the buttons. According to the available information, however, if you do not click on the respective buttons no personal data will be collected and stored unless you have logged onto to your Facebook, Google or Twitter account. In that case certain user data (including your IP address at the time) may be collected and linked to the account information already present at Facebook, Google or Twitter, respectively. If you wish to prevent this, please log out of your social media accounts before visiting our website.
we are otherwise bound to do so by law.
The information we collect from you may be transferred to, processed and stored at a destination outside the European Economic Area (“EEC”) when we transfer data to third parties or members of the ROBA group of companies. Recipients outside the EEA are either Privacy Shield certified or bound by Standard Contractual Clauses draft by the EU Commission for the protection of personal Data.
ROBA takes great care to ensure the security of personal data. Your data is conscientiously protected from loss, destruction, distortion/falsification, manipulation and unauthorized access or unauthorized disclosure through appropriate technical and organizational measures. However, due to the inherent nature of the Internet as an open global communications vehicle, we cannot guarantee that information, during transmission through the Internet or while stored on our system or otherwise in our care, will be safe from intrusion by others, such as hackers.
We strive to keep our processing activities with respect to your personal data as limited as possible. Personal data provided by you upon using our services will be retained only for as long as we need it to fulfil the purpose for which we have collected it or if required by statutory retention requirements. Technical Data will be retained only if it is necessary to provide access to our site. The IP-Address will be retained for 7 days to enable us to engage in effective defense against attacks on our site, i.e. DDOS attacks. However, we may retain Technical Data if certain marketing purposes require. In no event will we retain your Technical Data longer than 35 days, provided storage of data is not required by statutory retention requirements. This may be the case as far as data collected during the use of the Platform is relevant for taxes or accounting reasons. In Germany, we are obliged to keep such data up to ten years according to German Tax and Trade Law.
Upon your objection we will cease any processing of your personal data based on Art. 6 lit. f. Wherever we have compelling legitimate grounds to process your data, we can further process such data, provided our interest in doing so prevails in a weighting against your interest against the processing activity.
You may (i) exercise the rights referred to above or (ii) pose any questions or (iii) make any complaints regarding our data processing by contacting us under the contact details set out below. Additionally, you have the right lodge a complaint with a supervisory authority.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6