Privacy Policy (Datenschutzerklärung)

Pursuant to the EU General Data Protection Regulation (GDPR/DSGVO) — last updated [03.08.2026]

1.Controller

Responsible for data processing on this website:
Mónica Cárdenas — Sheet music in PDF, Timmendorfer Strand, Germany
Email: pianisimo4@hotmail.com · Phone: +49 1520 426 6404
A data protection officer is not required (fewer than 20 persons processing personal data, Art. 37 GDPR / § 38 BDSG).

2.Contact via email or contact form

When you contact us (e.g. via the contact form, which opens your own email client, or directly by email), the data you provide (name, email address, message content) is processed to handle your request on the basis of Art. 6 (1) (b) and (f) GDPR. Data is deleted once the matter is conclusively resolved, unless statutory retention duties apply.

3.Orders and payment via PayPal

To process purchases we collect your full name and email address (mandatory checkout fields) for delivery of the digital score and for invoicing — legal basis Art. 6 (1) (b) GDPR. Payment is processed exclusively by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. When you pay, PayPal also processes your transaction data as an independent controller; the applicable PayPal privacy notice applies: paypal.com/privacy. PayPal is certified under the EU–U.S. Data Privacy Framework. We receive from PayPal your name, email address, payment status and transaction ID — we do not receive or store bank or card data.

4.Cookies, local storage and consent

This website uses only technically necessary storage (§ 25 (2) TDDDG): a local-storage entry remembering your consent choice, and a local-storage entry for the shopping basket. No tracking, analytics or advertising cookies are used. On first visit, a consent banner offers “Accept all” and “Essential only” — both lead to the same minimal storage. You can reopen the banner at any time via “Cookie settings” in the footer and withdraw consent with effect for the future.

5.WhatsApp button

The floating WhatsApp button is a plain hyperlink. No connection to WhatsApp/Meta is established until you actively click it; only then does your browser transmit data (incl. your IP address) to WhatsApp Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (Meta group), which processes it as an independent controller: whatsapp.com/legal/privacy-policy.

6.Hosting and server log files

The website is hosted by IONOS. The provider automatically records server log data (browser, OS, referrer, time, IP address) to ensure secure operation — legal basis Art. 6 (1) (f) GDPR. Log data is deleted after [7–30] days. A data-processing agreement (Art. 28 GDPR) is in place.

7.Retention periods

Order and invoice data is retained for 10 years pursuant to § 147 AO and § 257 HGB (commercial and tax law retention duties); processing is restricted after contract completion.

8.Your rights

• Right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21);
• Right to withdraw consent at any time with effect for the future (Art. 7 (3) GDPR);
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR), e.g.: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin.

9.Security and changes

This site uses TLS encryption. We revise this policy when processing or legal requirements change; the current version is always available on this page.