Privacy Policy

Last updated:

1. Data Controller

ACL-Synth GmbH
Synthesizer Manufacturing
12345 Berlin
Germany
Email: info@acl-synth.com

2. Data We Collect

We collect and process the following types of personal data:

2.1 Newsletter Subscription

  • Email address
  • IP address (for security and abuse prevention)
  • Subscription timestamp
  • Privacy consent confirmation

2.2 Contact Forms

  • Name
  • Email address
  • Message content
  • IP address (for security purposes)

2.3 Repair Service

  • Name and contact information
  • Shipping address
  • Device serial numbers
  • Repair history and communications

2.4 Website Analytics

  • Anonymized IP address
  • Browser and device information
  • Pages visited and time spent
  • Referring website
  • Approximate geographic location (city/country level only)

This data is collected automatically for website improvement and is not linked to any personally identifiable information.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Consent: For newsletter subscriptions (Art. 6(1)(a) GDPR)
  • Contract: For repair services and order processing (Art. 6(1)(b) GDPR)
  • Legitimate Interest: For responding to contact inquiries, preventing abuse, and analyzing website usage to improve our services (Art. 6(1)(f) GDPR)

4. How We Use Your Data

We use your personal data for the following purposes:

  • Sending newsletter updates about our products and company news
  • Responding to your inquiries and support requests
  • Processing and tracking repair services
  • Preventing spam and abuse through rate limiting
  • Improving our services and customer support

5. Cookies

Our website uses only strictly necessary session cookies for the following purposes:

  • Session Management: To maintain your session while browsing
  • Security: CSRF protection to prevent cross-site request forgery attacks
  • Rate Limiting: To prevent abuse of our contact and subscription forms
  • Analytics Session: To group your page views into a single visit for our internal analytics

These cookies are essential for the website to function properly and cannot be disabled. They do not store any personally identifiable information and are deleted when you close your browser.

We do not use any third-party tracking, analytics, or marketing cookies. Our analytics are processed internally and respect Do-Not-Track browser settings.

6. Data Retention

We retain your personal data for the following periods:

  • Newsletter subscribers: Until you unsubscribe or request deletion
  • Contact form submissions: 2 years for customer service purposes
  • Repair service data: 10 years for warranty and legal compliance
  • Session data: Deleted when browser session ends
  • Analytics logs: 90 days in raw form, aggregated statistics retained indefinitely

7. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share data with:

  • Service providers: Email service providers for sending newsletters and transactional emails
  • Shipping companies: For repair service returns (name and address only)
  • Legal authorities: When required by law or court order

8. Your Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your data ("right to be forgotten")
  • Right to Restrict Processing: Request limited processing of your data
  • Right to Data Portability: Receive your data in a structured format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time (for newsletter)

To exercise any of these rights, please contact us at info@acl-synth.com

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encrypted connections (HTTPS) for all data transmission
  • Secure password hashing for user accounts
  • Regular security updates and monitoring
  • Limited access to personal data on a need-to-know basis
  • Rate limiting to prevent abuse

10. International Transfers

Your data is stored on servers located within the European Union. If we need to transfer data outside the EU, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

11. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children under 16.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by posting a notice on our website or sending an email to newsletter subscribers.

13. Contact Information

For any questions about this privacy policy or our data practices, please contact us:

Email: info@acl-synth.com
Address: Synthesizer Manufacturing, 12345 Berlin, Germany

14. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates applicable law. The competent supervisory authority for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219
10969 Berlin, Germany
Website: www.datenschutz-berlin.de