Privacy Policy

1. Who is responsible

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Katharina Baker
Lisbrine
Gort, County Galway
Ireland
E-mail: info@pinkpetalmusic.com

2. Visiting this website

Our website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you visit a page, the server automatically records technical information: your IP address, date and time, the page requested, the referring page and your browser type. This is necessary to deliver the website and to keep it secure. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). The log files are deleted after [7 days – please check with STRATO]. We have a data processing agreement with STRATO.

3. Cookies

We use one technically necessary cookie: a session cookie that keeps your shopping cart and, if you sign in, your login. It is deleted when you close your browser. We do not use cookies for tracking, statistics or advertising, and we do not embed content from social networks or other third parties.

4. Orders

When you place an order, we process your e-mail address, your name (optional), your country, the editions ordered, the order number, the date, your IP address at the time of ordering and the payment status. We also count how often each download link is used, to protect against misuse.

We need this data to conclude and fulfil the contract and to deliver your downloads (Art. 6(1)(b) GDPR) and to meet our legal accounting and tax obligations (Art. 6(1)(c) GDPR). Order data is kept for [six years, as required by Irish tax law – please check] and then deleted.

5. Payment with Stripe

Payments are processed by Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. You enter your payment details directly on Stripe's payment page – they never reach our server. We only receive the payment status, the amount and a payment reference. Stripe also uses the data to prevent fraud. Stripe may transfer data to Stripe, Inc. in the USA; such transfers are based on the EU-U.S. Data Privacy Framework and the EU standard contractual clauses. More information: https://stripe.com/privacy

6. Customer account

If you create a customer account, we store your e-mail address, your name and your password – the password only in encrypted form, so that nobody, not even we, can read it. We also store the time of your last login. Your account remains until you ask us to delete it; order data is then kept only as long as the law requires.

7. E-mails

We send you an order confirmation with your download links. Our e-mails are sent through our e-mail provider STRATO. We do not send newsletters or advertising.

8. Contact form and e-mail

If you write to us via the contact form or by e-mail, we process your name, e-mail address, order number (if given) and your message in order to answer you (Art. 6(1)(b) or (f) GDPR). We delete these messages when they are no longer needed, at the latest after [two years], unless the law requires us to keep them longer.

9. Recipients

We share data only with the service providers named above (STRATO for hosting and e-mail, Stripe for payments) and only to the extent necessary. We never sell your data.

10. Your rights

You have the right to access the data we hold about you, to have it corrected or deleted, to restrict its processing, to receive it in a portable format, and to object to processing based on our legitimate interests. To exercise these rights, simply write to info@pinkpetalmusic.com.

You also have the right to lodge a complaint with a supervisory authority. In Ireland this is the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, https://www.dataprotection.ie

11. Security

All pages are transmitted in encrypted form (HTTPS). Download links contain a random key that cannot be guessed, and passwords are stored only in encrypted form.

12. Changes

We update this privacy policy when our website or the law changes. The current version always applies.

Last updated: [date]