Learning Music and Learning Synths Websites— Privacy Information
Ableton AG, Schönhauser Allee 6-7, D-10119 Berlin herewith informs you about the processing of personal data for which Ableton is responsible in the sense of the EU General Data Protection Regulation (GDPR).
Apart from sending us a letter, you may contact us at any time via privacy[at]ableton[dot]com You can reach our data protection officer by sending an e-mail to AbletonDSB[at]daspro[dot]de or by sending a letter to Ableton DSB, daspro GmbH, Kurfürstendamm 21, 10719 Berlin.
Below we have compiled the most important information on typical data processing for you, broken down by groups of data subjects. For certain data processing operations, which only concern specific groups, the information requirements are fulfilled separately. Where the term "data" is used, only personal data within the meaning of the GDPR are meant.
- Learning Music and Learning Synths Website Visitors
- Participants at Learning Music and Learning Synths
- Rights of Data Subjects and Further Information
1. Learning Music and Learning Synths Website Visitors
When you use the Learning Music and Learning Synths websites, your device’s browser sends certain information to our website’s server for technical reasons. This data is stored and processed on our server.
(i) We process the following data for the purpose of providing the contents of the website that you have visited, to ensure the security of the IT infrastructure used, to correct errors, to enable and simplify searches on the website, and to manage cookies.
(ii) The data processed is HTTP data: HTTP data is protocol data that is generated when the Website is visited via the Hypertext Transfer Protocol (Secure) (HTTP(S)) for technical reasons: This includes IP address, type and version of your Internet browser, operating system used, the page visited, the page previously visited (referrer URL), date and time of the visit. HTTP(S) data also accumulates on the servers of service providers (e.g. when requesting third-party content).
(iii) The legal basis for processing this data is our legitimate interest in the operation of an Internet presence and the communication with communication partners in accordance with Article 6 (1) (f) GDPR.
(iv) The data is automatically transmitted by your browser.
(v) Recipients of the personal data are IT service providers which we use as processors within the framework of a data processing agreement.
(vi) IP addresses are anonymized after 24 hours at the latest. Pseudonymous usage data will be deleted after six months.
(vii) Without disclosure of personal data such as the IP address, the use of the website is not possible. Communication via the website without disclosure of data is technically not possible.
1.2 Social media content from third party providers
YouTube Embedding (Privacy Enhanced Mode and IFramePlayer API)
On our website we include videos that are stored on YouTube. In this embedding, the contents of the YouTube website are displayed in parts of a browser window. However, the YouTube videos are only accessed when your click on them. We embed YouTube content in the so-called "Privacy Enhanced Mode." Google (as the provider of YouTube) provides this option, and it ensures that no data is transmitted to Google and no cookies are stored on your device before you click to play the video.
As soon as you click the button to play the YouTube content, the video is loaded from YouTube. Technically, the same thing happens then as would happen if you clicked a link to go to the YouTube website: YouTube receives all information that your browser automatically transmits (including your IP address). YouTube also sets its own cookies on your device. This happens even if you do not have a YouTube user account. If you are logged in to YouTube or Google, your data will be associated directly with your account. If you do not want your data to be associated to your YouTube or Google user account, you must log out of YouTube and Google before clicking on the video file.
The collection and processing of this data is the sole responsibility of Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Google Ireland Limited uses Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as a service provider.
We have no knowledge about further details of how Google processes your personal data in the area of data controllership or about potential data processing activities in the USA. Ableton has no influence on Google’s data processing.
2. Participants at Learning Music and Learning Synths
(i) We process your data for the purpose for providing you with the possibility to take part in the Music and Synths Learning Programs of Ableton.
(ii) The processed data are:
- State of each musical widget (only if you use Learning Music) We store the state of each musical widget in local storage on your device. We do this so your work is not lost if you accidentally navigate away from a page while making a piece of music.
- Musical data (if you want to export a Live Set from Learning Music) If you choose to export a Live Set, then your musical data is sent to our server and a Live Set is generated. We only process your musical data to make it possible for you to download the generated Live Set.
- User settings/preferences (only if you use Learning Synths) We store the preferences that you set in local storage on your device like your desired “Audio Quality” setting and a flag for whether or not MIDI should be used as an input method for the synthesizers.
(iii) The legal basis for processing of personal data of participants at Learning Music and Learning Synths is our legitimate interest in providing our users with the possibility to improve their music making and synthesizer skills (Article 6 (1) (f) GDPR).
(iv) The data is actively provided by you or automatically transmitted by your browser.
(v) We use service providers as processors within the framework of a data processing agreement for the provision of services, especially for the provision, maintenance and servicing of IT systems.
(vi) At Learning Music you can delete the state of each musical widget at any time by clicking the “Reset all lessons” link at the bottom of the screen. At Learning Synths you can also change the user settings/preferences whenever you want. If you want to send us your musical data by exporting a Live Set, it will be deleted as soon as your Live Set file is downloaded.
(vii) Without the provision of the state of each musical widget data it is not possible to use Learning Music. Without the provision of the user settings/preferences it is not possible to use Learning Synths. It is not possible to export a Live Set from Learning Music without the provision of musical data.
3. Rights of Data Subjects and Further Information
(i) We do not use any methods of automated individual decision-making.
(ii) You have the right to request information at any time about all your personal data which we are processing.
(iii) If your personal data is incorrect or incomplete, you have the right to have it rectified and completed.
(iv) You can request the erasure of your personal data at any time, as long as we are not bound by legal obligations that require or allow us to continue processing your data.
(v) If the applicable legal requirements are met, you can request a restriction to the processing of your personal data.
(vi) You have the right to object to the processing, insofar as the data processing is based on profiling or direct marketing purposes.
(vii) If the processing is carried out on the basis of the balancing of interests, you may object to the processing by stating reasons arising from your particular situation.
(viii) If the data processing takes place on the basis of your consent or a contract, you have the right to a transfer of the data provided by you, insofar as the rights and freedoms of others are thereby not impaired.
(ix) If we process your data on the basis of a declaration of consent, you have the right to revoke this consent at any time with future effect. The processing carried out prior to a revocation remains unaffected by the revocation.
(x) Moreover, you have the right to file a complaint at any time with a data protection supervisory authority, if you believe that data processing has been carried out in violation of the applicable law.