(for Google-Android-compatible devices and iOS devices)
Musikhaus Thomann is firmly committed to protecting the secrecy of your app data!
This Privacy Notice describes the way in which Musikhaus Thomann (hereinafter “Thomann”) collects, processes and uses, as well as protects according to the German Telemedia Act (Telemediengesetz – TMG) and the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG) the data you provide us with when using the Thomann app and which is required when installing the Thomann app on your Android device (e.g. compatible Android smartphone or Android tablet) or iOS device (e.g. iPhone, iPod or iPad).
1. Responsible authority
The responsible authority within the meaning of the data protection regulations for all data processing and data
transmission processes through the Thomann app is:
FAO Data Protection Officer
You can write to our Data Protection Officer at this address in the event of any questions, comments, complaints or information requests in connection with this Privacy Notice and the processing of your personal data. Our Data Protection Officer will gladly take care of your data protection concerns.
2. What data do we require from you to run the Thomann app? What data is collected and stored when using the Thomann app?
a. Downloading and installing the Thomann app
From the Google Play Store (Google-Android-compatible devices)
To use the Thomann app on your Android device (e.g. Android smartphone or Android tablet), you will need to download the Thomann app from the Google Play Store and install it on your device. To do this, you must be logged into the Google Play Store with your Android user account by entering your user name (your email address) and password. Information and data may be collected and processed by Google through the Play Store. For further information regarding the purpose and scope of data collection, and regarding the further processing and use of your data in the Play Store by Google, see Google’s privacy rules. These are available online at http://www.google.co.uk/intl/en-GB/policies/privacy/. There you will find, amongst other things, information regarding settings for the protection of your privacy and regarding your further rights regarding the collecting, processing and use of your data by Google. For further information on using the Google Play Store, please refer to the Play Store Terms of Service, which are available online at https://play.google.com/intl/en-GB/about/play-terms.html. From the App Store or iTunes
To use the app on your iOS device (e.g. iPhone, iPod or iPad), you will need to download the app from the Apple App Store (from iTunes on a Mac) and install it on your device. To do this, you must be logged into the App Store with your Apple user account by entering your Apple ID (usually your email address) and your password. Information and data may be collected and processed by Apple through the App Store. For information regarding the purpose and scope of data collection, and regarding the further processing and use of your data by Apple, see Apple’s own privacy rules. These are available online at https://www.apple.com/legal/privacy/en-ww/. There you will find, amongst other things, information regarding settings for the protection of your privacy and regarding your further rights regarding the collecting, processing and use of your data by Apple. For further information on using the App Store and iTunes and other online services from Apple, please refer to the Apple Terms and Conditions, which are available online at http://www.apple.com/legal/internet-services/itunes/uk/terms.html.
b. Permissions for the Thomann app to access data on the device
For Google-Android-compatible devices
When installing the Thomann app in the Google Play Store, you must confirm the following access permissions:
- Photos/media/files, using at least one of the following elements: files on the device such as images, videos or audio elements, as well as on the device’s external storage
If you do not wish to accept these access permissions, please do not install or use the Thomann app. The Thomann app has access to the following during use:
- Access to the device’s network functions (the Thomann app only works when the device is online);
- Access to location
- Reading, modifying or deleting USB memory content
For iOS devices
The Thomann app requires access to the following data/functions of your device during use only, which you can configure in the settings of your iOS device (under Settings/Privacy):
- Access to location
- Access to the device’s network functions (the Thomann app only works when the device is online).
c. Data processing when using the Thomann app, in particular the Shopping function
When using the Thomann app, in particular when viewing various Thomann products, only the product views (e.g. image material, products on shopping lists) are stored in your device’s temporary storage (“caching”).
You can use the Shopping function in the Thomann app either by logging in with the log-in details (email address, password) of your existing Thomann customer account or by entering your personal data without logging in.
If you place an order using your existing Thomann customer details, you will not need to enter any further details in the Thomann app during the order process. The details stored in your customer account (first name and surname, address) will be displayed during the order process. Of course, you can amend and/or correct these details.
If you place an order through the Thomann app without logging in, the form within the Thomann app will ask you for all the details that Thomann requires to complete and process orders: first name and surname, company (optional), postal address, telephone number (only for queries), email address.
In addition, it is possible to simply import these details directly from your smartphone or tablet’s contacts on iOS devices. In order to do this, you have to allow the Thomann app to access your contacts in your iOS device’s settings (under Settings/Privacy).
d. Data stored on the device when using the Thomann app
The following data is stored locally on your device when using the Thomann app:
- Product details, i.e. images of the items you have viewed in the Thomann app in your device’s non-temporary memory (“cache”);
- Log-in. Of your log-in details, only your email address is stored locally; your password for accessing your Thomann customer account is not saved, but rather just a “token” that allows you to conveniently log in again. This access token, which is unique to the device you are using, is generated on Thomann’s app server for authentication purposes the first time you log into the Thomann app. The token will become invalid once the password is changed. If the app is deleted, the access token will also be deleted.
3. How is my data used and passed on to third parties, and for what purpose?
As a principle, the protection of your personal data is of highest priority for Thomann. You decide whether or not
you wish to make such data known to Thomann. We will neither sell to any third party nor otherwise market
your personal data. We save and process your personal data only to the extent required to fulfil our
legal obligations to you. If we wish to use your data for further purposes, such as informing you of current offers,
we will obtain your explicit consent. You may revoke such consent at any time without any formal requirements.
Please address the notice of withdrawal to the address specified under 1., for the attention of the Thomann Data
Passing on data for order and payment processing purposes
In addition, Musikhaus Thomann will transfer your data to third parties that are involved in the processing of your order made through the Thomann app. For example, if you have placed an order via the Thomann app, Thomann will transmit your order information to the Thomann partner companies and contractors that process and deliver your order to you. Data will only be transmitted to the extent required in order to fulfil or deliver your order or to process an enquiry. We will also transmit personal data to third parties where we are required to do so by law.
Thomann will not transmit any personal data relating to the users of the Thomann app if we do not have specific permission to do so. We do not sell user names or email addresses to any other companies that may send you unwanted advertising material or mail.
To complete the order through the Thomann app, depending on the payment method you select, it will be necessary to pass on the payment information you have provided (e.g. credit card details), to payment service providers appointed by Thomann in order to process your order. If you select the “PayPal” payment method, PayPal will be called up via Webview, and the information about the contents of the shopping basket will be passed onto PayPal. There you will be able to authorise the payment process yourself by giving your details. After authorisation, the transaction-related details (email, name, delivery and billing address, transaction ID) will be transmitted to Thomann’s shop system directly from PayPal.
Data automatically collected by using the Thomann app (usage data)
We welcome anybody to use the Thomann app free of charge and to look at the products on offer. When you use the Thomann app, we record the IP address assigned to your device along with other general usage data, in order to evaluate how and to what extent and how long you have used the Thomann app. We use Google Analytics as an analysis tool for this app-tracking.
You can find details of the data collection and processing by Google Analytics under 5. There you will also find information on your right to object to data collection and processing by Google Analytics.
4. What security measures have we taken to protect your data?
Thomann has taken precautions to ensure the security of your personal data. Your data will be diligently protected against loss, destruction, manipulation and unauthorised access or unauthorised disclosure and transmission. Thomann protects data collected when using the Thomann app by saving it on servers protected by passwords and firewalls (not on the device itself), which use encryption technology to prevent unauthorised access. Thomann does its utmost and implements state-of-the-art technology to provide you with a secure environment for the completion of your order through the Thomann app; however, we cannot guarantee absolute security of your data. Thomann would ask that you to take every available precaution to protect your personal data when using the Thomann app. We encourage you to at least change your passwords on a regular basis and to use a combination of letters and numbers, as well as special characters where appropriate, when setting your password. Communication between the Thomann app installed on your device and the app server operated by Thomann is always performed via a sufficiently encrypted internet connection (SSL certificate). In addition, technical error messages and system events in the Thomann app are logged and transmitted to Thomann. No personal data is transmitted in the process, only information that caused the Thomann app to crash. These crash reports are not associated with your device’s personal data.
5. We use Google Analytics. What does that mean for your data?
Use of the Thomann app is automatically logged. To do this, Thomann uses the version of Google Analytics specially designed for apps, “Mobile App Analytics”. Google Analytics is an analysis service of Google Inc. (hereinafter referred to as “Google”). The logging starts as soon as the Thomann app is downloaded and installed on your device. Google Analytics sets an “anonymous identifier”, which performs the functions of a cookie on platforms such as mobile devices, on the device you are using. This is a file that is stored on your device and enables analysis of how you use the Thomann app. The information about your use of the Thomann app generated by the anonymous identifier is usually transmitted to and stored on a Google server in the United States. Google will use this information on behalf of Thomann for the purposes of analysing use of the Thomann app, compiling reports on app activity and providing further services related to app and internet use to Thomann, the app provider. Google will not combine the IP address of your device transmitted by the Thomann app via Google Analytics with other Google data.
Right to object
You can prevent collection and transfer of the data generated by the anonymous identifier and relating to your use of the Thomann app (including your IP address) to Google, as well as the processing of such data by Google. To do this on Android, take the following steps:
- Go to the additional information and app settings in the Thomann app under “More”.
- Choose the menu option “Version” and then “Advanced settings”.
- Press the button next to “Google Analytics”, so that it is no longer green and displays “OFF”. Google Analytics is then deactivated.
On iOS from Version 7, you can switch off ad-tracking directly in your Apple device’s settings. To do this, take the following steps:
- Go to “Settings” on your Apple device
- Choose the menu option “Privacy”
- Scroll right to the bottom and tap “Advertising”
- Move the button next to “Limit Ad Tracking” so that it is green.
6. Links to Facebook
We link to Facebook within the Thomann app. The sole responsibility for Facebook and its website lies with Facebook
Inc., 1601 Willow Rd, Menlo Park, CA 94025, USA (hereinafter referred to as “Facebook”).
No data is initially transferred to Facebook as a result of our links to Facebook. If you click on the link, you will be taken directly to our Facebook page. This will open the internet browser on your device. Data is only transmitted to Facebook if you are logged into your Facebook user account.
For further information regarding the purpose and scope of data collection, and regarding the further processing and use of your data by Facebook, see Facebook’s own privacy rules. These are available online at https://www.facebook.com/full_data_use_policy. There you will find, amongst other things, information regarding settings for the protection of your privacy and regarding your further rights regarding the collecting, processing and use of your data by Facebook.
7. Rights of persons affected, in particular right of information
You have the right to access the data stored about you and information concerning its origin and recipient and the purpose of data processing by the Thomann app free of charge at any time. In addition, you have the right to rectify, delete or block your personal data, provided the legal requirements to do so are met (Section 35 of the German Federal Data Protection Act [BDSG]). To exercise these rights and for any other questions regarding privacy, you can contact the Thomann Data Protection Officer at any time at the address specified under 1.
As of: September 2015