With this privacy policy, we would like to inform you comprehensively and transparently about our handling of personal data. This includes information about the type, scope and purpose of the personal data collected, used and processed by us. In addition, we would like to use this privacy policy to inform you about the rights to which you are entitled in connection with your personal data.
1. NAME AND ADDRESS OF THE CONTROLLER
The controller within the meaning of the EU General Data Protection Regulation (hereinafter: GDPR) is the
ETON Soundsysteme GmbH
Bösendamm 11 
D-33129 Delbrück
(hereinafter "ETON")
2. PROCESSING OF PERSONAL DATA
Visiting and using our websites www.etongmbh.com / www.eton-gmbh.com / www.etonair.com / www.upgrade-audio.de is generally possible without any indication of personal data. In these cases, we only store general and statistical data about your visit. If you would like to take advantage of special offers from our company via our website, you may be required to provide personal data. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject to the specific processing.
The processing of personal data, such as the name, address, e-mail address or telephone number of a data subject, is always carried out in accordance with the General Data Protection Regulation and in accordance with the country-specific data protection regulations applicable to ETON and the specific processing operation.
a. General data about the website visit
Our website collects a range of general data and information every time a data subject or automated system accesses it. This general data and information is stored in the log files of the server. The following can be recorded: (1) browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrers), (4) the sub-websites that are accessed via an accessing system on our website, (5) the date and time of access to the website, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information that serves to avert danger in the event of attacks on our information technology systems.
When using this general data and information, we do not draw any conclusions about the data subject. We use this data exclusively to deliver the content of our website correctly, to optimise the content of our website as well as the advertising for it, to ensure the long-term functionality of our information technology systems and the technology of our website. This is anonymous data that is evaluated purely statistically. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.
b. Use of the contact form
If you, as a user of the website, contact us by e-mail or via a contact form, the personal data you transmit will be automatically stored. Such personal data provided by you to us on a voluntary basis will be used for the purposes of processing your request and/or contacting you. This personal data will not be passed on to third parties.
c. Use of cookies on our website
ETON's websites use cookies. Cookies are text files that are stored and stored on a computer system via an internet browser.
In principle, it is also possible to visit our websites without accepting cookies. However, the use of individual functions may only be possible with activated cookies. The purpose of the use of cookies on our pages is to make visiting our website as attractive as possible and to enable the use of certain functions. Most of the cookies we use are deleted from your hard drive at the end of the browser session (so-called session cookies). Other cookies remain on your computer and enable us to recognize your computer on your next visit (so-called permanent cookies). These cookies are used to greet you with your username and make it unnecessary for you to re-enter passwords or fill in forms with your data on subsequent visits. Our partner companies are not permitted to collect, process or use personal data via our website using cookies.
If you would like to prevent the use of cookies or delete existing cookies, please proceed as follows:
You can prevent the use of cookies at any time by adjusting the settings of the internet browser you are using and thus permanently object to the setting of cookies. 
You can delete cookies that have already been set at any time via your internet browser. This is possible in the settings of the common browsers. 
3. STORAGE PERIOD OF PERSONAL DATA
We process and store personal data only for the period necessary to achieve the purpose of storage or if this has been provided for by the European legislator or another legislator in laws or regulations to which the controller is subject.
If the purpose of storage ceases to apply or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.
4. RIGHTS OF THE DATA SUBJECT
As a data subject, you have the following rights, which you can exercise at any time:
a) Right to confirmation
You have the right to request confirmation from ETON as the controller as to whether the personal data in question is being processed. If you would like to assert this claim, please contact our data protection officer at any time using the contact details above.
b) Right to information
You also have the right to obtain information about the personal data stored about you and a copy of the personal data stored about you by ETON as the controller free of charge at any time. You also have the right to know whether personal data has been transferred to a third country or to an international organisation. If this is the case, you also have the right to receive information about the appropriate safeguards in connection with the transmission. If you would like to assert this claim, please contact our data protection officer at any time using the contact details above.
c) Right to rectification
You also have the right to request the immediate rectification of any inaccurate personal data concerning you. You also have the right to request the completion of incomplete personal data, including by means of a supplementary statement, taking into account the purposes of the processing.
If you would like to assert this claim, please contact our data protection officer at any time using the contact details above.
d) Right to erasure
You also have the right to obtain from ETON, as the controller, that the personal data concerning you be erased without undue delay, provided that one of the following grounds applies and to the extent that the processing is not necessary:
The personal data has been collected or otherwise processed for purposes for which it is no longer necessary.
The data subject withdraws his/her consent, on which the processing pursuant to Art. 6 (1) (a) GDPR or
Art. 9 (2) (a) GDPR, and there is no other legal basis for the processing.
The data subject objects to the processing in accordance with Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing in accordance with Art. 21 (2) GDPR.
The personal data has been processed unlawfully.
The erasure of the personal data is necessary for compliance with a legal obligation under Union law or the law of the Member States to which the controller is subject.
The personal data was collected in relation to the information society services offered in accordance with Art. 8 para. 1 GDPR.
If one of the above reasons applies and you would like to request the deletion of personal data stored by ETON, please contact our data protection officer at any time using the contact details above.
If the personal data has been made public by ETON and our company as the controller is obliged to delete the personal data in accordance with Art. 17 para. 1 GDPR, ETON will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform other data controllers who process the published personal data,  that you, as a data subject, have requested that these other data controllers delete all links to such personal data or copies or replications of such personal data, to the extent that the processing is not necessary. ETON will initiate the necessary measures in individual cases. 
e) Right to restriction of processing
Every data subject to the processing of personal data has the right to obtain from the controller the restriction of processing if one of the following conditions applies:
The accuracy of the personal data is contested by the data subject for a period of time that allows the controller to verify the accuracy of the personal data.
The processing is unlawful, the data subject opposes the erasure of the personal data and instead requests the restriction of the use of the personal data.
The controller no longer needs the personal data for the purposes of the processing, but the data subject needs them for the establishment, exercise or defence of legal claims.
The data subject has objected to the processing in accordance with Art. 21 (1) GDPR and it is not yet clear whether the legitimate reasons of the controller outweigh those of the data subject.
If one of the above conditions is met and a data subject wishes to request the restriction of personal data stored by ETON, he or she may contact an employee of the controller at any time. The ETON employee will arrange for the processing to be restricted.
f) Right to data portability
Every data subject has the right to receive personal data concerning him/her, which has been provided by the data subject to a controller, in a structured, commonly used and machine-readable format. It also has the right to transmit these data to another controller without hindrance from the controller to whom the personal data has been provided, provided that the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR and the processing is carried out by automated means,  provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller.
Furthermore, when exercising his or her right to data portability in accordance with Art. 20 (1) GDPR, the data subject has the right to obtain that the personal data be transferred directly from one controller to another controller, insofar as this is technically feasible and provided that this does not adversely affect the rights and freedoms of other persons.
To assert the right to data portability, the data subject may contact an ETON employee at any time.
g) Right to object
Every person concerned by the processing of personal data has the right, on grounds relating to his or her particular situation, to object at any time to the processing of personal data concerning him or her on the basis of Article 6(1)(e) or (f) of the GDPR. This also applies to profiling based on these provisions.
ETON will no longer process the personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
If ETON processes personal data for the purpose of direct marketing, the data subject has the right to object at any time to the processing of personal data for the purpose of such marketing. This also applies to profiling, insofar as it is related to such direct advertising. If the data subject objects to ETON processing for direct marketing purposes, ETON will no longer process the personal data for these purposes.
In addition, the data subject has the right to object, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her carried out by ETON for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.
To exercise the right to object, the data subject may contact any ETON employee directly. The data subject is also free to exercise his or her right to object to the use of information society services by means of automated procedures using technical specifications, notwithstanding Directive 2002/58/EC.
h) Automated decision-making on a case-by-case basis, including profiling 
Every data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him/her, provided that the decision (1) is not necessary for the conclusion or performance of a contract between the data subject and the controller,  or (2) is permitted by Union or Member State law to which the controller is subject and that legislation contains appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject, or (3) is given with the explicit consent of the data subject.
If the decision (1) is necessary for the conclusion or performance of a contract between the data subject and the controller, or (2) it is made with the explicit consent of the data subject, ETON shall take appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject, including at least the right to obtain the intervention of a person from the controller,  to present its own position and to contest the decision.
If the data subject wishes to assert rights relating to automated decision-making, he or she may contact an employee of the controller at any time.
i) Right to revoke consent under data protection law
Every person affected by the processing of personal data has the right granted by the European legislator to withdraw consent to the processing of personal data at any time.
If the data subject wishes to exercise his or her right to withdraw consent, he or she may contact an employee of the controller at any time.
5. USE OF SOCIAL MEDIA PLUGINS
a. Facebook-Plugin
The controller has integrated components of the company Facebook on this website. Facebook's operating company is Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the United States or Canada, the controller of personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
If you call up websites of our website equipped with such a plug-in, a connection to the Facebook servers is established and the plug-in is displayed on the website by means of a message to your browser. This transmits to the Facebook server which of our websites you have visited. If you are logged in to Facebook as a member, Facebook assigns this information to your personal Facebook user account. When using the plugin functions (e.g. clicking on the "Like" button, submitting a comment), this information is also assigned to your Facebook account, which you can only prevent by logging out before using the plugin. You can find more information about the collection and use of data by Facebook, your rights in this regard and options for protecting your privacy in Facebook's privacy policy.
If you do not want Facebook to assign the data collected via our website directly to your Facebook profile, you must log out of Facebook before visiting our website. You can also completely prevent the loading of Facebook plugins with add-ons for your browser, e.g. with the "Facebook Blocker" (http://webgraph. com/resources/facebookblocker/). 

b. Google+ Plugin
We use the Google+ button on our website. Google+ is a social network. Google+ is operated by Goo-gle Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Each time one of the individual pages of this website, which is operated by the controller and on which a Google+ button has been integrated, the Internet browser on the data subject's information technology system is automatically prompted by the respective Google+ button to download a representation of the corresponding Google+ button from Google. As part of this technical procedure, Google receives information about which specific subpage of our website is visited by the data subject. More detailed information about Google+ can be found at developers.google.com/+/.
If the data subject is logged in to Google+ at the same time, Google recognises which specific subpage of our website the data subject is visiting every time the data subject accesses our website and for the entire duration of the respective stay on our website. This information is collected by the Goo-gle+ button and assigned by Google to the respective Google+ account of the data subject.
If the data subject does not want personal data to be transmitted to Google, he or she can prevent such a transfer by logging out of his or her Google+ account before accessing our website.
Further information and Google's applicable privacy policy can be found at www.google.de/intl/de/policies/privacy/. Further information from Google on the Google+ button can be found under developers.google.com/+/web/buttons-policy.
c. Instagram
We use links to the "Instagram" service on our website. The operating company of Instagram's services is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.
Each time you visit one of the individual pages of this website operated by the controller and on which an Instagram component (Insta button) has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Instagram component to download a representation of the corresponding component from Instagram. As part of this technical procedure, Instagram receives information about which specific subpage of our website is visited by the data subject.
If the data subject is logged in to Instagram at the same time, Instagram recognises which specific subpage the data subject is visiting every time the data subject accesses our website and for the entire duration of the respective stay on our website. This information is collected by the Instagram component and assigned by Instagram to the respective Instagram account of the data subject. If the data subject clicks on one of the Instagram buttons integrated on our website, the data and information transmitted with it will be assigned to the personal Instagram user account of the data subject and stored and processed by Instagram.
Further information and the applicable data protection regulations of In-stagram can be found at help.instagram.com/155833707900388 and www.instagram.com/about/legal/privacy/.
c. Pinterest
We use links to the "Pinterest" service on our website. Pinterest is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA.
Each time one of the individual pages of this website operated by the controller and on which a Pinterest component (Pinterest plug-in) has been integrated, the Internet browser on the data subject's information technology system is automatically prompted by the respective Pinterest component to download a representation of the corresponding Pinterest component from Pinterest. More information about Pinterest can be found at pinterest.com. As part of this technical process, Pinterest receives information about which specific subpage of our website is visited by the data subject.
If the data subject is logged in to Pinterest at the same time, Pinterest recognises which specific subpage of our website the data subject is visiting every time the data subject accesses our website and for the entire duration of the respective stay on our website. This information is collected by the Pinterest component and assigned by Pinterest to the respective Pinterest account of the data subject. If the data subject presses a Pinterest button integrated into our website, Pinterest assigns this information to the personal Pinterest user account of the data subject and stores this personal data. Pinterest's Privacy Policy, which is available at about.pinterest.com/privacy-policy, provides information about Pinterest's collection, processing, and use of personal information.
6. WEB TRACKING WITH GOOGLE ANALYTICS
This site uses Google Analytics for web analysis. Google Analytics is a web analytics service. Web analysis is the collection, collection and evaluation of data about the behaviour of visitors to websites. A web analysis service collects, among other things, data on the website from which a data subject has come to a website (so-called referrers), which subpages of the website are accessed or how often and for how long a subpage has been viewed.
The operating company of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. The controller uses the addition "_gat._anonymizeIp" for web analysis via Google Analytics. By means of this addition, the IP address of the data subject's Internet connection will be shortened and anonymized by Google if our website is accessed from a member state of the European Union or from another contracting state of the Agreement on the European Economic Area.
The purpose of the Google Analytics component is to analyse the flow of visitors to our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile online reports for us that show the activities on our website, and to provide other services related to the use of our website.
Google Analytics places a cookie on the data subject's information technology system. What cookies are has already been explained above. By setting the cookie, Google is enabled to analyse the use of our website. Each time you visit one of the individual pages of this website, which is operated by the controller and on which a Google Analytics component has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. As part of this technical process, Google becomes aware of personal data, such as the IP address of the data subject, which Google uses, among other things, to trace the origin of visitors and clicks and subsequently enables commission settlements.
The cookie is used to store personal information, such as the access time, the location from which access originated and the frequency of visits to our website by the data subject. Each time you visit our website, this personal data, including the IP address of the Internet connection used by the data subject, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties.
The data subject can prevent the setting of cookies by our website, as already described above, at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from placing a cookie on the information technology system of the person concerned. In addition, a cookie already set by Google Analytics can be deleted at any time via the internet browser or other software programs.
Furthermore, the data subject has the option of objecting to and preventing the collection of data generated by Google Analytics relating to the use of this website as well as the processing of this data by Google. To do this, the data subject must download and install a browser add-on under the link tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information about visits to websites may be transmitted to Google Analytics. The installation of the browser add-on is considered a contradiction by Google. If the data subject's information technology system is deleted, formatted or reinstalled at a later date, the data subject must reinstall the browser add-on in order to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the data subject or another person who is attributable to his or her sphere of influence, there is the possibility of reinstalling or reactivating the browser add-on.
Further information and Google's applicable privacy policy can be found at www.google.de/intl/de/policies/privacy/ and under www.google.com/analytics/terms/de.html. Google Analytics is listed under this link www.google. com/intl/de_de/analytics/.
7. NO AUTOMATED DECISION-MAKING
As part of our website and online shop, we do not use any automated decision-making procedures, including profiling.