Privacy Notice

> Information for applicants

Privacy Policy

1. Preamble

This Privacy Policy explains how personal data are collected and processed when you use our website. Personal data means any information relating to an identified or identifiable natural person.

2. Name and contact data of the controller and company data protection officer

This data protection information applies to data processed by:

Controller: 

Edel SE & Co. KGaA (hereinafter: Edel),

Neumühlen 17 

22673 Hamburg 

Germany 

Tel.: +4940890850

E-mail: info@edel.com 

The data protection officer appointed by Edel can be contacted at datenschutz@edel.com.

3. Collection and storage of personal data; type and purpose of use 

a) On visiting the website:

It is possible to visit our website without being required to enter personal data. 

When accessing the website, however, information will automatically be sent to our website’s server via the browser used on your end device. This information will be temporarily stored in a logfile. The following information will be collected in this context without any action on your part and will be stored until the next automatic deletion process:

  • the IP address of the computer sending the enquiry
  • date and time of the server enquiry,
  • name and URL of the downloaded file,
  • website from which our website was accessed (referrer URL),
  • browser used and, if applicable, your computer’s operating system and the name of your access provider.

We will process the above data for the following purposes:

  • ensuring smooth connection to the website,
  • ensuring that the website is user-friendly,
  • evaluating system security and stability,
  • improving our offering.

The legal basis for data processing is Art. 6(1) sentence 1(f) GDPR. Our legitimate interest can be derived from the data processing purposes set out above. We will never use the collected data in order to draw conclusions relating to you personally.

We also use cookies and analytics services in connection with visits to our website. For more information, see section 7 of this Privacy Notice.

b) On registering for our newsletter 

Our website offers you the opportunity to subscribe to our newsletter. We use Brevo as our newsletter service provider. The provider is Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

To subscribe to the newsletter, we require your email address as well as your first and last name in order to address you personally. Registration is carried out using the double opt-in procedure. After registering, you will receive an email asking you to confirm your subscription. Brevo logs the registration, the double opt-in confirmation, the corresponding timestamps, and the IP address in order to document the subscription process.

Brevo also enables us to analyze the performance of our newsletter campaigns. In particular, we can determine whether a newsletter has been opened, which links have been clicked, and how often. Furthermore, newsletter recipients may be segmented according to specific criteria in order to send more relevant content.

The following categories of personal data may be processed:

  • First and last name
  • Email address
  • IP address
  • Registration and confirmation timestamps (double opt-in)
  • Information regarding the delivery and receipt of newsletters
  • Open and click rates
  • Browser and device information

The data is processed on servers operated by Brevo within the European Union. Where personal data is processed outside the European Union or the European Economic Area, such processing is carried out in compliance with the applicable data protection requirements and appropriate safeguards pursuant to Article 44 et seq. GDPR.

The processing of your personal data for the purpose of sending newsletters is based on your consent pursuant to Article 6(1)(a) GDPR. The logging of the subscription process is based on our legitimate interest pursuant to Article 6(1)(f) GDPR to demonstrate that valid consent has been obtained.

Your personal data will be stored until you unsubscribe from the newsletter and will then be deleted unless statutory retention obligations apply. If you do not confirm your subscription within two weeks, your registration will be blocked and automatically deleted after one month.

You may withdraw your consent at any time with future effect by using the unsubscribe link included in every newsletter or by contacting us directly.

Further information is available at:

Privacy Policy: https://www.brevo.com/legal/privacypolicy/

c) On contacting us via e-mail or the contact form

If you contact us by e-mail or via the contact form provided on our website, we will store the data you provide (your e-mail address, together with your name and telephone number, if applicable) in order to process your request or respond to your questions.

If using the contact form, you are required to give a valid e-mail address in order that we know who sent the enquiry and in order to be able to respond to it. All other information is provided on a voluntary basis.

The processing of data transmitted in the course of contacting us is carried out for the purpose of handling your request and is based on Art. 6(1)(b) GDPR, insofar as your request relates to the performance of a contract or pre-contractual measures, or on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.

We will delete any data collected in this context once storage is no longer necessary (if, for instance, your enquiry has been satisfied) or we limit processing if statutory retention periods apply.

d) Online Applications

If you apply for a position via the application form provided on our website, we process the personal data submitted by you (“application data”), in particular:

  • first name and surname
  • address
  • telephone number
  • e-mail address
  • application documents (e.g. cover letter, CV/résumé, certificates and comparable documents)

Your application data are processed exclusively for the purpose of carrying out the application process via the applicant management software provided by rexx systems GmbH, Süderstraße 75-79, 20097 Hamburg, Germany.

Your application data will not be used for any other purposes.

We generally store your complete application documents for a period of six months after completion of the application process. Thereafter, the data will be deleted unless your application was successful or statutory retention obligations or other legitimate reasons prevent deletion.

Certain basic data, in particular:

  • salutation
  • application source
  • date of birth
  • country
  • nationality
  • city
  • postal code
  • first name
  • response to the question “How did you find us?”

will be stored for the purpose of matching previous applications for a maximum period of 24 months and deleted thereafter.

The processing of your application data is carried out on the basis of Section 26 BDSG and Art. 6(1)(b) GDPR. Insofar as you voluntarily provide special categories of personal data, such processing is additionally based on Art. 9(2)(b) GDPR.

e) Talent Pool

With your explicit consent, you may be included in our talent pool so that we may also consider your application data for future suitable job opportunities.

If you consent to inclusion in our talent pool, your application data may be accessed and processed by the internal departments and specialist teams responsible for future recruitment processes within our company.

Inclusion in the talent pool is based exclusively on your voluntary consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by contacting us via the contact details provided in the legal notice.

If you are included in the talent pool, we will store your complete application data for a period of twelve months after completion of the original application process. Thereafter, the data will be deleted unless statutory retention obligations or other legitimate reasons prevent deletion.

f) Job News / Career Newsletter

With your consent, you may subscribe to our career newsletter through which we regularly inform you about current job opportunities.

The only mandatory information required for sending the newsletter is your e-mail address. Any additional information is voluntary and will only be used to provide you with suitable job offers.

The dispatch and management of the career newsletter are carried out via the applicant management software of rexx systems GmbH, Süderstraße 75-79, 20097 Hamburg, Germany.

Your data will be stored for as long as you remain subscribed to the career newsletter. You may withdraw your consent at any time with effect for the future, in particular via the unsubscribe link contained in every newsletter e-mail or by contacting us via the contact details provided in the legal notice.

The processing is carried out on the basis of your consent pursuant to Art. 6(1)(a) GDPR.

Disclosure of Application Data

Your application data will generally only be disclosed to the internal departments and specialist teams within our company that are involved in carrying out the specific recruitment process.

Your application data will not be disclosed beyond this scope unless you have expressly consented to inclusion in our talent pool or we are legally obliged to disclose such data.

g) When using the whistleblowing system

The whistleblowing system (accessible via https://edel.rexx-hr.com/whistleblowing/) can be used to receive, process and manage information about violations of EU law in a secure and confidential manner. We use the services of rexx Systems AG, Süderstraße 77, 20097 Hamburg, Germany, to operate our whistleblowing system.

The following data is processed as part of the whistleblowing system: Information about the accused person, information about violations of conduct as well as the corresponding facts. If the information is provided anonymously, no data on whistleblowers will be processed. If the information is not provided anonymously, the name and contact details of the person providing the information are processed.

Incoming information is received by a narrow circle of expressly authorized and specially trained employees and always treated confidentially & accused persons are informed.

Personal data and information entered into the whistleblowing system are stored in a database operated by rexx systems AG. The inspection of the data is only possible for a very narrow circle of recipients of expressly authorized persons. The rexx systems GmbH and other third parties have no access to the data and the storage of the data takes place on a DSGVO-compliant server environment.

The processing of personal data within the framework of the system is based on the legitimate interest of a company in the detection and prevention of wrongdoing and thus in the prevention of damage to our company, subsidiaries, its employees* and customers. The legal basis for this processing of personal data is Article 6 para.1f EU-DSGVO.

We delete data accruing in this context after storage is no longer necessary, for example because the request you made has been dealt with, or restrict processing if legal retention periods exist.

4. Disclosure of data

Your personal data will not be disclosed to third parties for any purposes other than those set out below.

We will only disclose your personal data to third parties if:

  • you granted your express consent pursuant to Art. 6 (1) sentence 1(a) GDPR;
  • disclosure is required pursuant to Art. 6(1) sentence 1(f) GDPR in connection with the establishment, exercise or defence of legal claims and there is no reason to believe that you have an overriding legitimate interest in your data not being disclosed;
  • we are subject to a statutory obligation to such disclosure pursuant to Art. 6(1) sentence 1(c) and
  • this is permitted by law and necessary in connection with implementing contractual relations with you pursuant to Art. 6(1) sentence 1(b) GDPR.

5. Ninja Firewall

To protect our website against unauthorized access, malware, automated attacks (such as brute-force attacks), and other security-related threats, we use the NinjaFirewall security software.

The provider is NinTechNet Limited, Unit 1603, 16th Floor, The L. Plaza, 367–375 Queen’s Road Central, Sheung Wan, Hong Kong.

NinjaFirewall is operated exclusively on our own web server and is used solely to detect and prevent security threats. No personal data is transmitted to the provider or to any other third party.

For the purpose of detecting and preventing attacks, the following technical information may be processed:

  • IP address
  • Date and time of access
  • Requested URL
  • HTTP header information
  • Referrer URL
  • Information about the browser and operating system used

Where technically possible, IP addresses are stored only in truncated or anonymized form.

The processing is carried out on the basis of our legitimate interest in ensuring the security, integrity, and availability of our website pursuant to Article 6(1)(f) GDPR.

Further information on NinTechNet’s processing of personal data is available at:

https://nintechnet.com/privacy-policy/

6. Polylang
We use the “Polylang” plugin on our website to provide multilingual content. The provider is WP SYNTEX, 28, rue Jean Sébastien Bach, 38090 Villefontaine, France.
Polylang processes technically necessary information, in particular language settings and, where applicable, cookies, in order to provide and store the language version of our website selected by you.
The processing is carried out on the basis of Section 25 para. 2 TTDSG and Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in the user-friendly and technically reliable provision of a multilingual website.
Further information on data processing by Polylang can be found at:
https://polylang.pro/privacy-policy/

7. Cookies

We use cookies and similar technologies on our website. Cookies are small text files that are automatically created by your browser and stored on your device (e.g. laptop, tablet or smartphone) when you visit our website. Cookies do not cause any damage to your device and do not contain viruses, trojans or other malicious software.

Information stored in cookies relates to the specific device used in each case. However, this does not mean that we obtain direct knowledge of your identity.

The use of cookies serves, on the one hand, to technically provide our website and to make the use of our services more user-friendly. For this purpose, we use so-called session cookies to recognize that you have already visited individual pages of our website. These cookies are automatically deleted after you leave our website.

In addition, we use temporary cookies that are stored on your device for a specified period of time. If you visit our website again, it may automatically be recognized that you have previously visited our website and which settings you selected in order to facilitate your use of our website.

Technically necessary cookies are used on the basis of Section 25 (2) TTDSG and Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in the technically error-free and optimized provision of our website.

Insofar as we use cookies for analytics, statistics or marketing purposes, this is done exclusively on the basis of your explicit consent pursuant to Section 25 (1) TTDSG and Art. 6 para. 1 sentence 1 lit. a GDPR. You may withdraw or amend your consent at any time with effect for the future via the cookie settings.

Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your device or so that a notice always appears before a new cookie is created. Please note that completely disabling cookies may result in certain functions of our website no longer being available or only being available to a limited extent.

In addition to technically necessary cookies, we may also use third-party cookies that help us analyze user behavior on our website, optimize our services and display content and advertising tailored to users’ interests.

Via our cookie banner, you have the option to consent to or reject the use of non-essential cookies. You may change or withdraw your selection at any time via the “Cookie Settings”.

Information on Data Transfers to Third Countries

If you consent to the use of certain cookies and services, personal data may also be transferred to recipients located in countries outside the European Union or the European Economic Area, in particular to the United States. In such countries, an adequate level of data protection comparable to that within the European Union may not exist.

In particular, there is a risk that government authorities may access the transferred data without you having effective legal remedies available against such access.

Any transfer of personal data to third countries is carried out exclusively on the basis of your explicit consent pursuant to Art. 49 para. 1 sentence 1 lit. a GDPR.

8. GA4 Google Analytics

Depending on your consent, Google Analytics 4, a web analysis service of Google LLC, is used on our website. The controller for visitors within EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

The service is implemented in “basic consent mode” – if you do not consent to the data processing, only aggregated data is collected and processed and no cookies are stored. Nevertheless, tags can communicate the consent status and user activity by sending the following types of pings or signals to the Google server:

  1. pings for Google Ads and Floodlight tags: they communicate the default consent status as well as the updated status.
  2. conversion pings: indicate that a conversion has taken place
  3. google analytics pings: when loading and logging events.

In all cases, the pings may contain the following:

– Functional information (such as headers that are passively added by the browser):

– Timestamp

– User agent (web only)

– Referrer

– Aggregated/non-identifying information: An indication of whether or not the current page or a previous page in the user’s navigation on the website contained ad click information in the URL (e.g. GCLID / DCLID)

– Boolean information about the consent status

– Random number generated each time the page is loaded

– Information about the consent platform used by the website owner (e.g. developer ID)

Google compiles detailed information in an overview https://support.google.com/google-ads/answer/10000067?hl=en.

Scope of the processing

Google Analytics uses cookies that enable us to analyze your use of our website. The information collected by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.

In Google Analytics 4, the anonymization of IP addresses is activated by default. Due to IP anonymization, your IP address will be truncated by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

During your website visit, your user behavior is recorded in the form of “events”. Events can be:
– Page views
– First visit to the website
– Start of session
– Your “click path”, interaction with the website
– Scrolls (whenever a user scrolls to the bottom of the page (90%))
– clicks on external links
– internal search queries
– interaction with videos
– file downloads
– seen / clicked ads
– language settings

Also recorded:
– Your approximate location (region)
– your IP address (in shortened form)
– technical information about your browser and the end devices you use (e.g.
language setting, screen resolution)
– your internet service provider
– the referrer URL (via which website/advertising medium you came to this website)

Google Signals
Google Signals is used on this website as an extension to Google Analytics. You can find detailed information about Google Signals here https://support.google.com/analytics/answer/7532985?hl=de. The Google Signals extension is used to create cross-device reports and collect information. Google can thus analyze the behavior of website users across devices and create database models, including cross-device conversions. Google Analytics is used to generate statistics on user behavior, which can be viewed by the website operator. We have no influence on data processing by Google Signals. If you wish to stop the cross-device analysis, you can deactivate the “Personalized advertising” function in the settings of your Google account (https://support.google.com/ads/answer/2662922?hl=de)

Purposes of processing
On behalf of the operator of this website, Google will use this information for the purpose of evaluating your pseudonymous use of the website and compiling reports on website activity. The reports provided by Google Analytics serve to analyze the performance of our website as well as the possible playout of personalized ads by Google.

Recipients
Recipients of the data are/may be
– Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as a processor pursuant to Art. 28 DSGVO).
– Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
– Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
It cannot be ruled out that US authorities may access the data stored by Google.

Third country transfer
Insofar as data is processed outside the EU/EEA and there is no level of data protection corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider to establish an appropriate level of data protection. The parent company of Google Ireland, Google LLC, is based in California, USA. A transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out. The USA is currently considered a third country from a data protection perspective. You do not have the same rights there as within the EU/EEA. You may not be entitled to any legal remedies against access by authorities.

Storage period
The data sent by us and linked to cookies are automatically deleted after 2 months. Data whose retention period has been reached is automatically deleted once a month.

Legal basis
The legal basis for this data processing is your consent pursuant to Art.6 para.1 p.1 lit.a DSGVO.

Revocation
You can revoke your consent at any time with effect for the future by calling up the cookie settings and changing your selection there:

The lawfulness of the processing carried out on the basis of the consent until revocation remains unaffected.

You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may result in a restriction of functionalities on this and other websites. In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google, by
a. Not giving your consent to the setting of the cookie or
b. downloading the browser add-on to disable Google Analytics (install at https://tools.google.com/dlpage/gaoptout?hl=de . For more information on Google Analytics terms of use and Google’s privacy policy, please visit https://marketingplatform.google.com/about/analytics/terms/de/ and https://policies.google.com/?hl=en.

Reference to data processing in the USA by Google

By clicking on the button “I accept all cookies”, you also agree according to Art. 49 para. 1 p. 1 lit. a DSGVO that your data will be transmitted to the USA and processed there. According to the assessment of the European Court of Justice, the USA does not guarantee a level of data protection that meets the European GDPR standards. In particular, it is easier and more extensive for US authorities to access personal data compared to authorities in the EU. There is thus a risk that your data collected in connection with your visit to our website may be processed by US authorities for control and monitoring purposes, possibly even without any legal remedy.

9. Google Tag Manager

This website uses the “Google Tag Manager” service. Google Tag Manager is a solution that allows website tags to be managed via an interface. The tool itself processes personal data only for technically necessary purposes. The Google Tag Manager takes care of loading other components, which in turn may collect data. The Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.

Reference to data processing in the USA by Google

By clicking on the button “I accept all cookies”, you consent at the same time according to Art. 49 para. 1 p. 1 lit. a DSGVO that your data will be transmitted to the USA and processed there. According to the assessment of the European Court of Justice, the USA does not guarantee a level of data protection that meets the European GDPR standards. In particular, it is easier and more extensive for US authorities to access personal data compared to authorities in the EU. There is thus a risk that your data collected in connection with your visit to our website may be processed by U.S. authorities for control and monitoring purposes, possibly even without any legal remedy.

10. Data protection information for license agreements

The following information provides an overview of the processing of the contract partner’s personal data by Edel, i.e. Edel SE & Co. KGaA or companies affiliated with it, as stated in the respective contract heading (data controller), as well as the rights resulting from the EU General Data Protection Regulation (GDPR) for the contractual partner.

10.1 Data protection officer

Edel’s data protection officer can be reached at datenschutz@edel.com.

10.2 Type, scope, purpose and legal basis of data processing

In connection with the conclusion of a license agreement, Edel regularly processes personal data of the contractual partner such as name, address and gender.

Further information on the purposes and the scope of the contractual services for which personal data of the contractual partner are processed can be found in the content of the contract agreed with the contractual partner as well as in the possibly included general terms and conditions.

Edel processes the personal data of the contractual partner on the basis of Art. 6 para. 1 lit. b) DSGVO only to the extent and to the extent that this is absolutely necessary for the fulfillment of the license agreement concluded with the contractual partner. If the contractual partner provides Edel with personal data within the framework of the contractual relationship, the processing of which is not absolutely necessary for the execution of the contract, but is nevertheless helpful because this facilitates business communication between the contractual parties, for example (e.g. telephone number or e-mail address), Edel will process this data on the basis of the consent granted by the contractual partner pursuant to Art. 6 (1) a) DSGVO, which the contractual partner may, however, revoke at any time with effect for the future.

10.3 Data transfer

A transfer of the personal data of the contractual partner shall only take place insofar as this is necessary for the fulfillment of the contractual and legal obligations.

A transfer of the data to a recipient outside of the EU or the EEA shall only take place in compliance with the legal requirements of the GDPR, i.e. if the transfer is necessary for the fulfillment of the license agreement concluded with the contractual partner (Art. 49 para. 1 lit. b) and c) GDPR) or an adequate level of data protection can be ensured due to the existence of an adequacy decision of the Commission (Art. 45 GDPR) or suitable guarantees (Art. 46 GDPR).

10.4 Storage period

Personal data of the contractual partner will only be processed and stored by Edel as long as this is necessary for the fulfillment of Edel’s contractual and legal obligations. After the contractual and legal obligations have been fulfilled, the contractual partner’s personal data will be deleted, unless Edel is obliged to store the data for a longer period of time due to retention periods under commercial and tax law (periods of two to ten years) or is entitled to store the data for a longer period of time for other reasons (e.g. enforcement of legal claims) (regular limitation period: three years until the end of the year). However, in the event of longer storage, Edel restricts the processing of the data.

10.5 Rights of the contracting party

According to the GDPR, the contractual partner has the following rights:

– If personal data of the contractual partner is processed, the contractual partner has the right to receive information about the data stored about him (Art. 15 DSGVO).

– If incorrect personal data is processed, the contractual partner has the right to rectification (Art. 16 DSGVO).

– If the legal requirements are met, the contractual partner may request the deletion or restriction of processing as well as object to the processing (Art. 17, 18 and 21 DSGVO).

– If the legal requirements are met, the contractual partner also has a right to data portability (Art. 20 DSGVO).

To exercise the aforementioned rights, the contractual partner must contact datenschutz@edel.com.

Finally, the contractual partner has the right to complain to a data protection supervisory authority about the processing of his/her personal data by Edel.

11. Your rights

a) Information, rectification, erasure, restriction of processing, data transferability, revocation, complaints 

You have the right:

  • to receive, pursuant to Art. 15 GDPR, information on your personal data processed by us. You can, in particular, receive information on the purposes of processing, the categories of personal data, the categories of recipient to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request rectification, erasure, restriction of processing of personal data or the right to lodge a complaint, where the personal data are not collected from us, any available information as to their source, the existence of automated decision-making, including profiling, and meaningful information about the corresponding details, if applicable;
  • to obtain, pursuant to Art. 16 GDPR, without undue delay the rectification of inaccurate or incomplete personal data stored by us;
  • to obtain, pursuant to Art. 17 GDPR, the erasure of your personal data stored by us, provided processing is not required in order to exercise the right of freedom of expression and information, for compliance with a legal obligation, for the performance of a task carried out in the public interest or for the establishment, exercise or defence of legal claims;
  • to obtain, pursuant to Art. 21 GDPR, restriction of processing, where you contest the accuracy of the personal data, the processing is unlawful, you oppose the erasure of the personal data and we no longer need the personal data, but they are required by you for the establishment, exercise or defence of legal claims pursuant to Art. 18 GDPR or you have exercised your right to object;
  • to receive, pursuant to Art. 20 GDPR, the personal data concerning you, which you provided, in a structured, commonly used and machine-readable format and to demand transmission of those data to another controller; 
  • to withdraw your consent at any time pursuant to Art. 7(3) GDPR by making a corresponding statement to us.  This means that we are not permitted to continue to process the data to which this consent applied in future; and
  • to lodge a complaint with a supervisory authority, pursuant to Art. 77 GDPR.  You can generally lodge such complaint with the supervisory authority in the place of your habitual residence, place of work or our branch, e.g. the competent supervisory authority for Edel. The competent data protection supervisory authority for Edel SE & Co. KGaA is:The Hamburg Commissioner for Data Protection and Freedom of Information
    Ludwig-Erhard-Str. 22
    20459 Hamburg
    Germany

    Phone: +49 40 42854-4040
    E-mail: mailbox@datenschutz.hamburg.de

    Further information is available at:

    https://datenschutz-hamburg.de

b) Right to object

If your personal data are processed on the basis of legitimate interests pursuant to Art. 6(1) sentence 1(f) GDPR, you have the right to object to the processing of your personal data, pursuant to Art. 21 GDPR, on grounds relating to your particular situation or the objection relates to direct marketing.  In the latter case, you have a general right to object which will be implemented by us without you having to specify grounds.

If you wish to make use of your right to object, an e-mail to the following address will suffice:

datenschutz@edel.com.

12. Data security

We use SSL or TLS encryption during your visit to our website in order to ensure secure data transmission and protect confidential content. An encrypted connection can usually be identified by the lock symbol in your browser’s address bar and by the use of “https://” in the website address.

In addition, we implement appropriate technical and organizational security measures to protect your personal data against accidental or intentional manipulation, loss, destruction, or unauthorized access by third parties.

Our security measures are continuously reviewed and improved in line with technological developments.

13. Validity and amendments to this Privacy Notice

This Privacy Notice is up to date and is the valid version dated 27 May 2026.

We may be required to update this Privacy Notice as a result of developments to our website and services or due to amendments made to statutory or official requirements. The valid version of the Privacy Notice is available for inspection and printout at all times on our website at https://www.edel.com/en/privacy-policy/. 

Edel - Music, Books & Entertainment