Privacy policy

1.1 Data controller

The data controller within the meaning of the General Data Protection Regulation (GDPR), i.e. the party who decides on the purposes and means of processing personal data in connection with the processing, is:

Show Code Corporation 2 Enterprise Dr. Old Lyme, CT 06371 USA Email: [email protected]

2.1 General information on data processing

2.1.1 No obligation to provide personal data

Unless there is a contractual or legal obligation to provide personal data, you are not obliged to provide data.

2.1.2 Consequences of non-provision

If data is required (for example if data is marked as mandatory), failure to provide it will result in the service in question not being provided. Otherwise, failure to provide it may result in our services not being provided in the same form and quality.

2.1.3 Transferring personal data to government authorities

We only transfer personal data to government authorities (including law enforcement agencies) if this is necessary to fulfill a legal obligation to which we are subject or if it is necessary to assert, exercise, or defend legal claims.

2.1.4 Retention of personal data

We do not store your data for longer than we need it for the respective processing purposes. If the data is no longer required, it is regularly deleted, unless its temporary storage is still necessary, for example to comply with legal retention obligations or to obtain evidence for legal disputes within the framework of the statutory limitation provisions.

2.1.5 Categories of personal data processed by us

The following categories of personal data may be processed:

• account data: username and password
• personal master data: title, name, date of birth
• address data: street, house number, additional address information if applicable, postal code, city, state or province, country
• contact data: phone number, email address
• registration data: information about the service you signed up for; times and technical information about registration, confirmation, and cancellation; data you provided during registration
• payment data: bank account data, credit card data, data relating to payment providers
• log file data: date and time of your visit to our service; the website from which the accessing system reached our site; websites accessed during use; session identification data (session ID); and the following information about the accessing computer system: IP address used, browser type and version, device type, operating system, and similar technical information

2.2 Visiting our website

This section describes how we process your personal data when you visit our website.

2.2.1 Information regarding the processing

Categories of personal data: log file data

Purpose of processing: establishing connections, displaying service content, detecting attacks on our site based on unusual activity, troubleshooting

Legal basis: legitimate interests (Art. 6(1)(f) GDPR)

Our legitimate interests: proper functioning of services, security of data and business processes, prevention of misuse, prevention of damage caused by interference with information systems

Retention period: logs are immediately accessible for 3 days. After this time, they are archived into one‑month chunks and deleted after 1 month.

Recipients: Better Stack, Inc., 651 N Broad Street, Suite 206, Middletown, Delaware 19709, United States; DigitalOcean LLC, 105 Edgeview Drive, Suite 425, Broomfield, CO 80021, USA.

2.3 Data processing during registration and access

When registering for an account and accessing SoundBase, we process the following personal data.

2.3.1 Information regarding the processing

• Categories of personal data: account data, registration data
• Purpose of processing: to generate an account and to provide you with access to SoundBase
• Legal basis: performance of a contract (Art. 6(1)(b) GDPR in connection with the SoundBase Terms of Use)
• Retention period: the data collected during registration is stored as long as you have a SoundBase account. If you delete your SoundBase account, your data is deleted unless statutory retention periods require longer storage.
• Recipients: MongoDB Atlas, a cloud-based database service provided by MongoDB Inc., 1633 Broadway, 38th Floor, New York, NY 10019, USA (processing in the USA); DigitalOcean LLC, 105 Edgeview Drive, Suite 425, Broomfield, CO 80021, USA.

2.4 Data processing during the use of SoundBase

When using SoundBase, we process the following personal data.

2.4.1Information regarding the processing

• Categories of personal data: personal master data, contact data, payment data
• Purpose of processing: to enable you to use the features of SoundBase, for example the use of interactive or collaboration features such as sending a message through SoundBase, filling out a form, publishing statements on the platform, and sharing content with other users
• Legal basis: performance of a contract (Art. 6(1)(b) GDPR in connection with the SoundBase Terms of Use)
• Retention period: the data is stored for as long as necessary to fulfill the contractual obligations and for the duration of your use of SoundBase. If you delete your SoundBase account, your data is deleted unless statutory retention periods require longer storage.
• Recipients: MongoDB Inc. (as detailed above); Stripe Inc., 510 Townsend St., San Francisco, CA 94103, USA, and for customers within the EU, Stripe Payments Europe, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, as online payment service providers; Better Stack Inc., 651 N Broad Street, Suite 206, Middletown, Delaware 19709, United States. For internal accounting within the Sennheiser Group, financial data (which may contain personal user information) is transferred to Sennheiser Global Services Sp. z o.o., Pl. Władysława Andersa 3, 61-894 Poznań, Poland, and Sennheiser Electronic Corporation, 1 Enterprise Dr., Old Lyme, CT 06371, USA.

2.5 Data processing when contacting us

If you contact us through SoundBase, we process the following personal data.

2.5.1 Information regarding the processing

2.6 Data processing for marketing purposes

When we engage in marketing activities (for example by means of contests or promotions) towards you, we process the following personal data. We only contact you for marketing purposes if you consent in advance.

2.6.1Information regarding the processing

• Categories of personal data: personal master data, contact data
• Purpose of processing: marketing activities such as contests or promotions
• Legal basis: consent (Art. 6(1)(a) GDPR)
• Retention period: the data is stored and used for the above-mentioned purposes for as long as you do not revoke your consent.
• Recipients: Sennheiser electronic SE & Co. KG, Am Labor 1, 30900 Wedemark, Germany.

2.7 Tracking, analysis, and optimization

We use tracking technologies to analyze and optimize our services and their use, to measure the success of advertising campaigns, and to optimize the display of advertising.

Purposes of processing

Analyzing user behavior through tracking helps us to check the effectiveness of our services, optimize them, adapt them to the needs of users, and fix errors. Tracking to measure the success of advertising campaigns serves to optimize our ads for the future.

Legal basis: consent (Art. 6(1)(a) GDPR)

Information on the tracking methods used can be found in the consent tool and in the following section:

• Tool used: Matomo
• Purpose: analysis of how users use SoundBase and optimization of our services
• Personal data processed: region, IP address, country, user ID, system details
• Technologies used: JavaScript and cookies (only with consent)
• Legal basis: legitimate interests to optimize the software performance for various countries and user locations, which is necessary to assure that the software works smoothly around the world
• Recipients: Matomo by InnoCraft, 7 Waterloo Quay, PO625, 6140 Wellington, New Zealand.

2.8 Cookies and other information stored on your device

To make SoundBase more attractive and to enable the use of certain functions, we and certain third parties use cookies or local storage entries on our Website or on the App. These are small text files or pieces of information that are stored on your device. Some of the cookies or local storage entries we use are deleted after the end of the browser session, i.e. after you close your browser (session cookies). Other cookies or local storage entries remain on your device and allow us or our partner companies to recognize your browser on your next visit (persistent cookies).

The following cookie categories are used.

Technically necessary cookies

These cookies or local storage entries are technically necessary for the operation and functionality of the website. They make the website technically accessible, secure, and usable and provide essential and fundamental functionalities, such as navigation on the website, correct display of the website in the internet browser, or consent management. Since these are technically necessary cookies or local storage entries, we may store these on your device without your consent.

• Provider: Stripe
  • Purpose: provides transaction flow state to Stripe and customer ID information
  • Cookie function: userId
  • Storage duration: 1 year
• Provider: monti-APM
  • Purpose: links session data with backend server logs
  • Cookie function: userStatus
  • Storage duration: 1 year
• Provider: my.soundbase.app
  • Purpose: allows users to resume sessions on the same server that they were previously connected to
  • Cookie function: cache-control
  • Storage duration: 6 months

Non-necessary cookies

These cookies or local storage entries provide features or enable the use of certain tools on our Website or in our App. We require and obtain your consent before these cookies or local storage entries are stored on your device.

• Provider: Matomo
  • Purpose: tracks user behavior over several visits
  • Cookie function: user session
  • Storage duration: 1 year

Deactivation of cookie settings

Most browsers are preset to automatically accept cookies. You can object to the creation of cookies by disabling cookies in your browser's system settings. However, some cookies are technically necessary for the functionality of our website, as the site cannot be accessed and displayed otherwise. By disabling cookies, you may not be able to use the website to its full extent.

Cookies that are not technically necessary for the functionality of our website are only used with your prior consent. You can also control the installation of cookies yourself at any time by changing your browser settings and/or deleting all cookies.

3.1 Right to object

You have the right to object, on grounds relating to your particular situation, at any time with effect for the future, to the processing of personal data concerning you which is carried out in accordance with Article 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions. You can exercise your right to object free of charge.

3.2 Right of access

You have the right to know whether we process personal data relating to you, what personal data this is, and to receive further information in accordance with Art. 15 GDPR.

3.3 Right of correction

You have the right to request that we immediately correct any inaccurate personal data concerning you (Art. 16 GDPR). Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary statement.

3.4 Right to erasure (“right to be forgotten”)

You have the right to request that we erase personal data concerning you without undue delay, provided that one of the reasons specified in Art. 17(1) GDPR applies and the processing is not required for one of the purposes specified in Art. 17(3) GDPR.

3.5 Right to restriction of processing

You have the right to request a restriction on the processing of your personal data if one of the conditions set out in Art. 18(1)(a) to (d) GDPR applies.

3.6 Right to data portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transfer this data to another controller without hindrance from us or to have us transfer it directly, provided this is technically feasible. This right applies if the basis for data processing is consent or a contract and the data is processed automatically. It does not apply to data stored only in paper form.

3.7 Right to withdraw consent

3.8 Right to lodge a complaint

You have the right to file a complaint with a supervisory authority.