Privacy Policy

This Privacy Policy explains the basis upon which we collect and use your personal data when visiting our website.

Personal data means any information which relates to an identified or identifiable natural person (“Personal Data”).

We take the protection of Personal Data very seriously and are committed to respect the privacy of all individuals who use our websites. We handle the Personal Data of users of our website in accordance with the relevant legislation, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) and the German Telemedia Act (Telemediengesetz, TMG).

This policy sets out the basis on which any Personal Data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your Personal Data and how we will treat it.s

1. Controller and Data Protection Officer

CROCODILE Music Management GmbH, Oelmüllerstraße 2a, 82166 Gräfelfing, info@enigmaspace.com acts as controller within the meaning of GDPR and is responsible for the processing of your Personal Data.

2. Collection and Processing of Personal Data

2.1. Using our website for information purposes

When you are using our website for information purposes only, we only collect and use the data that your Internet browser automatically transmits to us, such as for example:

• date and time of access to one of our Internet pages
• your browser type
• the browser settings
• the operating system used
• your last visited page
• the amount of data transferred and the access status (file transferred, file not found etc.)
• the loading times of our website and
• your IP address.

We collect and use this data to enable the use of our website, to improve our internet offer and for statistical and marketing purposes.

Processing of your Personal Data for the aforementioned purposes is carried out for legitimate interest (Article 6 (1) (f) GDPR). Additionally, the processing of this Data serves to provide you with the service requested (Art. 6 (1) (b) GDPR).

2.2. Creating Moments

On our website you can publish comments expressing your ideas, thoughts and feelings in connection with the music project “Enigma” by using the electronic form we provide to you (create “Moments”). When creating a Moment by using our form we collect and process the following Personal Data:

• the Enigma Song or Album that your Moment relates to,
• the information or story which makes up your Moment,
• a picture that your Moment relates to,
• the date on which your Moment happened,
• the place where your Moment happened,
• your Name or Nickname.

By submitting Moments to our website, the aforementioned information will be made publicity available to all other users of the website.

We collect and process the aforementioned Personal Data on the basis of Article 6 (1) (b) GDPR in order to provide you with the services you requested, namely to provide to you a platform on which you can share your Moments regarding the music project “Enigma” with other fans of this music project.

2.3. E-Mail contact

You can communicate with us by mail. In this case we collect and process the Personal Data you provide to us during the communication. This usually involves your mail-address, your name and the content of your mail.

We collect and process the aforementioned Personal Data in order to answer your questions. Collecting and Processing of Personal Data for this purpose is carried out for legitimate interest (Art. 6 (1) (f) GDPR). Regarding business related communication the legal basis is Art. 6 (1) (b) GDPR.

3. Cookies

Our website uses cookies. Cookies are text files that are sent to your browser during your visit of our website and stored on your device for later retrieval. By the next time you visit our website on the same device, the information saved in the Cookies will be transmitted either to our website (“First Party Cookie”) or to another website to which the cookie belongs (“Third Party Cookie”).

Some of the Cookies we use are “Session Cookies” that will be automatically deleted when terminating the session, e.g. after closing the browser window. Other Cookies we use, are persistent and remain stored on your device until you delete them.

We use Cookies to improve the user experience on our website and to optimize the functionality of our website. The use of Cookies is carried out for legitimate interest (Article 6 (1) (f) GDPR). We also use some Cookies for analysing user behaviour for statistical purposes. For further information on the use of Cookies for analysing purposes please see further number 4 and 5.

You can determine whether Cookies can be set and retrieved using the settings in your browser. For example, you can completely deactivate the storage of Cookies in your browser, restrict it to certain web pages or configure your browser in such a way that it automatically notifies you as soon as a Cookie is to be set and asks you for feedback. You can block or delete individual Cookies. For technical reasons, however, this may result in some of the functions of our website being impaired and no longer functioning completely.

4. Web Analytics and Advertising

4.1. Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

We use Google Analytics to analyse how you use our website. This helps us to improve the functionality and attractiveness of our website. Therefore, the use of Google Analytics constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. In addition, we use Google Analytics based on your consent according to Article 6 (1) (a) GDPR.

How Google Analytics works

Google Analytics uses a specific form of Cookie, which is stored on your computer and enables analysis of your use of our website. The information about your use of our website generated by the Cookie is generally transmitted to a Google server in the USA and stored there. Google has submitted itself to the EU-US Privacy Shield. You can retrieve detailed certificate information under: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI.

IP anonymisation has been activated on our website so your IP address is shortened by Google within the territory of the EU and the Treaty States of the European Economic Area. Only in exceptional cases the full IP address is transmitted to a Google server in the USA and shortened there.

Google uses this information on our behalf to analyse your use of this website in order to compile reports on website activities and provide additional services related to website and internet use. Google may also transfer this information to third parties as required by law or if said third parties process this data on behalf of Google. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.

How you can prevent the use of Google Analytics

You can prevent the storage of Cookies by making the proper setting using your browser software (see above number 3).

In addition, you can prevent Google from recording the data related to your use of the website generated by the Cookie (including your IP address) and from processing this data by downloading and installing the browser plugin available at https://tools.google.com/dlpage/gaoptout?hl=en.

You can also prevent Google from recording the data related to your use of our website by clicking here. In this case, a special opt-out cookie will be set, that prevents Google Analytics from the collection of your user data when visiting our website in the future.

Further information about Google’s privacy policy may be obtained at http://www.google.com/privacy.html.

4.2. Facebook Pixel

This website uses “Facebook Pixel” of Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA.

Facebook Pixel enables the tracking of your user behavior after you have been redirected to our website by clicking on our Facebook ad. Thereby Facebook Inc. collects information about your use of our website after the redirection, f.e. if you add a product displayed in our Facebook ad to the shopping cart provided on our website. Facebook Pixel is designed to evaluate the impact of our ads for statistical and market research purposes. Therefore, Facebook Pixel helps us to make our ads more effective by improving the quality of our ads and the targeting of people, which constitutes a legitimate interest in the meaning of Article 6 (1) (f) GDPR. In addition, we use Facebook Pixel based on your consent according to Article 6 (1) (a) GDPR.

When visiting our website, your browser automatically establishes a direct connection to Facebook’s servers. We have no influence on the extent and further use of the data collected by Facebook using Facebook Pixel and therefore inform you according to our level of knowledge: Facebook receives the information that you have visited our website or clicked on an advertisement from us. If you are registered with a Facebook service, Facebook can associate your visit with your account. Even if you are not registered with Facebook or have not logged in, it is possible that the provider may obtain and store your IP address and other identifying information.

Facebook Inc. is certified for the EU-US data protection agreement “Privacy Shield”: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

You prevent Facebook from tracking of your user behavior by making the proper setting using your browser software (see above number 3). For logged in users the “Facebook Pixel” function can be deactivated at https://www.facebook.com/settings/?tab=ads#_.

You can also prevent Facebook Pixel from recording the data related to your use of our website by clicking here. In this case, a special opt-out cookie will be set, that prevents Facebook Pixel from the collection of your user data when visiting our website in the future.

5. Social Plugins

This website uses “Plugins” of the social networks Facebook Inc. (1601 S California Ave, Palo Alto, California 94304, USA) and Twitter, Inc. (1355 Market St, Suite 900, San Francisco, California 94103, USA) based on Article 6 (1) (f) DSGVO . By providing Plugins we enable you to communicate with others, which increases the attractiveness of our website. In addition, we use Plugins to promote ours website.

We integrated the Plugins by using the “Shariff” solution, which means that there is no automatic data transmission to the social networks once you access our website. Your data will be transmitted to the social networks only if you actively click on the respective social network button. By clicking on the social network button your web browser establishes a connection to the server of the respective social network provider and the social network provider receives the information that you have visited our website. Such data is transferred regardless of whether you have an account with the social network providers and are logged in there. If you are logged in with the social network providers, your data might be directly assigned to your existing account. In addition, data will be transmitted to the social network providers if you click on the respective social network button. If you have an account with the social networks providers, they store this information in your user account and share it publicly with your contacts.

We have no influence on the nature and extent of data that is gathered by the social network providers. The social network providers may store the data collected about you as user profiles, use such data for advertising, market research and/or demand-orientated design of their websites.

Both social network providers, Facebook Inc. and Twitter Inc., have submitted themselves to the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active, https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active).

For further information on the purpose and scope of data collection and its processing by the social network providers, your rights in this regard and setting options to protect your privacy, please refer to the data protection declarations of these providers as notified below: Facebook Inc.: https://www.facebook.com/privacy/explanation Twitter Inc.: https://twitter.com/en/privacy

6. Tools

6.1. YouTube and DoubleClick

We integrated YouTube videos on our website for the purpose of an appealing layout of our website and to enable our users to watch videos related to the music project “Enigma” based on Article 6 (1) (f) GDPR. Thereby we enable our users to share their thoughts on the music project with other fans, with comprehensive information on the same.

The respective YouTube videos are stored on http://www.youtube.coms, a website that is operated by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google, that has submitted itself to the EU-US Privacy Shield (See further above 4.1). The integrated YouTube videos can be played directly from our website. All videos are integrated in the “extended data protection mode”. As a result, no data will be transmitted to YouTube, if you do not click on the videos to start playing them. Only when you play the videos data will be transmitted to YouTube.

By visiting our website, YouTube receives the information that you have visited the corresponding subpage of our website. In addition, the data we specified under number 2.1 of this Privacy Policy will be transferred. The data is transferred regardless of whether you have an account with YouTube and are logged in there. If you are logged in with YouTube, your data might be directly assigned to your existing account. YouTube stores your data as user profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website.

For further information, please see YouTube’s privacy policy at https://policies.google.com/privacy?hl=en-GB&gl=de.

Also, when playing the YouTube videos integrated on our website a connection between your browser and DoubleClick by Google will be established. DoubleClick uses a cookie ID to track which ads are displayed in which browser. We have no influence on the extent and the further use of the data collected by Google using this tool and therefore inform you according to our level of knowledge: By integrating DoubleClick, Google receives the information that you have visited the corresponding part of our website or clicked on our advertisement. If you are registered with a Google service, Google may associate your visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.

DoubleClick uses the collected information about your visits to our website to display personalized product recommendation via advertisement banners. Also, DoubleClick supports the improvement of campaign performances and prevents users from seeing the same ad more than once. The use of DoubleClick therefore, constitutes a legitimate interest of Google within the meaning of Article 6 (1) (f) GDPR.

You can prevent the storage of Cookies by making the proper setting using your browser software (see above number 3).

In addition, you can prevent Google from recording the data related to your use our the website generated by the cookie (including your IP address) and from processing this data by downloading and installing the browser plugin available under https://support.google.com/ads/answer/7395996.

Further information about DoubleClick can be obtained at https://www.doubleclickbygoogle.com/en-gb/ and https://support.google.com/dfp_premium/answer/2839090?hl=en, as well as for data protection in general at https://policies.google.com/privacy?hl=en&gl=de.

6.2. Music streaming

We integrated functions of the music-streaming-service providers (“Streaming-Providers”) Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden and SoundCloud Limited, Berners House, 47-48 Berners Street, London W1T 3NF, UK, into our website. We integrated these functions to enable you to listen to music of the music project Enigma and thereby support the exchange of Moments created via our website based on Article 6 (1) (f) DSGVO. In addition, this serves to increase the attractiveness of our website.

By visiting our website, a direct connection will be established between your browser and the servers hosted by Streaming-Providers. Thereby the Streaming-Providers receive the information that you have visited the corresponding subpage of our website. In addition, your IP-address will be transmitted to the Streaming Providers. The data is transferred regardless of whether you have an account with the Streaming-Providers and are logged in there. If you are logged in with the Streaming-Providers, your data might be directly assigned to your existing account.

For further information on the purpose and scope of data collection and its processing by the Streaming-Providers, your rights in this regard and setting options to protect your privacy, please refer to the data protection declarations of the Streaming-Providers as notified below:

Spotify AB:https://www.spotify.com/uk/legal/privacy-policy/
SoundCloud Limited:https://soundcloud.com/pages/privacy

7. Involvement of Service Providers and Transfer to Third Parties

For the provision of this website and for the purposes, your data will be transferred to technical service providers (e. g. website hosting, support, quality assurance or mailing service), which we have of course carefully selected and commissioned in writing. These service providers are bound to our instructions and are regularly monitored by us.

CROCODILE may, in the future, transfer its business activity to another company or merge with another company. In this case the stored Personal Data will be transferred to that new company who may use the data in accordance with purposes that we have mentioned above.

In addition, unless this has been indicated elsewhere within this Pricacy Policy we transfer your Personal Data to Third Parties only with your prior consent.

8. Storage of Personal Data

We will keep your Personal Data for the length of time required for the specific purposes for which it was collected, which are set out in this Privacy Policy.

9. Data Security

We have established reasonable precautions to protect collected Personal Data from loss, misuse, unauthorized access, disclosure, alteration or destruction, which include contractual, administrative, physical, and technical steps. Technical measures include use of firewall protection and encryption technology where appropriate.

For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption programme. You can recognise an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line. If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.

However, no data transmission via the Internet or other network can be guaranteed to be 100% secure. As a result, while we strive to protect information transmitted on or through the Properties or services, we cannot and do not guarantee the security of any information you transmit on or through the Properties or services, and you do so at your own risk.

10. Your Rights

You have the right to request access to (Art. 15 GDPR) and rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR) of your Personal Data or to restrict (Art. 18 GDPR) processing of your Personal Data or to object (Art. 21 GDPR) to processing as well as the right to data portability (Art. 20 GDPR). You can revoke any consent granted to us under data protection law at any time with effect for the future.

For asserting your rights, please use the contact information provided to you under number 1.

Further, you have the right to lodge a complaint with a supervisory authority.