Privacy Policy
This Privacy Policy (“Privacy Policy” or “Policy”) describes the practices of the website audio-booster.com (“Company,” “we,” or “us”) with respect to information, including personal data (i.e., any information relating to an identified or identifiable natural person), that we obtain from and about individuals who interact with us and our websites, mobile applications, products, and services (collectively, “Services”).
This Privacy Policy applies only to the data processing activities of audio-booster.com. It does not apply to services, websites, or mobile applications offered by third parties, even if this website contains links to those services or third parties. We encourage you to review the privacy policies of all third-party websites that collect your personal data. We are not responsible for and assume no liability for third-party websites.
Please read the following information to learn what information, including personal data, is collected about you and how it is used. Please note that there are separate terms of use, which you can find by clicking on the hyperlink at the bottom of our website. If we make any material changes to this statement, we will notify you by email if you have registered before the change takes effect. You can view the most recent version of the statement by clicking on the “Privacy Policy” link at the bottom of our website.
1. Information we collect.
The type of data we collect, including personal data, depends on how you use our services or interact with us. Data, including personal data, is collected directly from you when you:
· register for an account;
· communicate with us, e.g. to provide feedback, request support or request additional information;
· subscribe to newsletters, purchase goods or services;
Categories of personal data
The personal data collected (electronically, in writing or by telephone) includes:
· contact details (such as first name, last name and email address);
· Login details for your account;
· The IP address of your location;
Data collected using technologies when you visit our website (Disclosure on “Do Not Track” (automatically collected data)).
· Like most website operators, we collect information that web browsers and servers typically make available. This includes, for example, your browser type, information about your Internet service provider (IP address) or the type of device you use to access this website, your language settings, the pages you visit, and the date and time of each page request. Some of this information may be considered as personal data under applicable law.
· We may collect information about your activities on this website through the use of cookies. We refer to these technologies collectively as data technologies. We use data technologies to identify and track visitors, their usage of our services, and their preferences when accessing the website.
· You can restrict the use of certain data technologies, such as cookies, by changing your browser settings. For example, you can refuse the use of cookies in your web browser. If you restrict the use of data technologies, certain features of our services may not function properly or at all.
· We generally use this data to improve the presentation of our website on various devices and to optimize our services.
2. Data protection for children and use of the services by minors
This website and our services are not intended for minors under the age of 18. If you are under the age of 18, you should not use this website or our services and should not submit any personal data to us. If you believe that a person under the age of 18 has submitted personal data to us, please contact us using the contact form. Please select the topic “Dataprotection for children” and provide us with the person's details: first name, last name, and email address. If this information matches the data in our system, we will suspend the account and initiate further investigative proceedings.
3. How we use the data we collect or receive
We may process information we collect or receive about you, including personal data, to operate our business, including our services, and to improve them as necessary. We process your information to:
· provide, manage, and improve the services, products, and features we offer to you and others—this is necessary for the performance of a contract with you or for our legitimate interests;
· comply with applicable laws or our policies – this is necessary for compliance with our legal obligations or for our legitimate interests in defending our interests and claims;
· resolve disputes, prevent fraud, theft or harm to you, us or others, and enforce our agreements with you, including our Terms of Use – this is necessary for our legitimate interests in defending our interests and claims;
· To contact you to respond to you, including by telephone, fax, SMS, email, or chat – this is necessary for our legitimate interests as set out above or based on your consent given to us when you accepted his privacy policy;
· To send you administrative notices to inform you of important changes to our contractual relationship – this is necessary for the performance of a contract with you or based on our legitimate interest in doing so;
· To inform you about our products, services, and special offers that may be of interest to you; to analyze the use of the website statistically improving our product and service offering; and improving the content, layout, and services of our services—this is necessary for our legitimate interests as set out herein or based on your consent, which you give us by accepting this privacy policy.
Data storage details (what will be stored in the databases (not log files)).
What do we store.
The information you provide during the registration process: first name, last name, your email address and password. Your password will be stored as hash and never as plain text. Since we don't know the password, we can't offer you any assistance when you forget it. The only safe way is to reset your password. The email address is stored in a 256-bit encrypted format. Even if our system were to be compromised, it would be unusable.
We automatically assign a login ID and unique customer number (UUID (Universally Unique Identifier), version 4 (UUIDv4) — a 128-bit identifier) to this information, which is needed after your login to the system.
Security considerations: We require your email address for potential two-factor authentication or communication purpose.
Additionally, we generate a 32-bit TOTP code that is assigned to your account. This code is likewise stored in encrypted form and may be required if you want to log in to the website, supposing you and have choosen the modern TOTP-Format as potential two-factor authentication. If you would like to learn more about this please use any AI of your choice and drop the question about TOTP.
What else do we store?
During payment transactions, information is exchanged between our system and the payment provider (i. e. PayPal, Stripe, or PayNow for crypto payments (currently still in development)). The information we transmit consists solely of data required for the payment transaction: item description, quantity, and price. No stored customer data is transmitted.
If the payment is processed successfully, we store the amount paid, any fees we are responsible for, and the transaction number for tax purposes. As a result, your private data actually stored in our system is limited to: first name, last name, a password hash, your encrypted email address (256-bit), and transaction numbers.
When is the data permanently deleted?
From the system immediately, as soon as the deletion process you initiated has been started and successfully completed. Administratively, after three days. Why? Because we use a three-day rolling data backup system. Since this backup data is overwritten on a rolling three-day cycle, your data is permanently deleted after three days. Please note: We cannot use backup data for individual cases. Once your account has been deleted from the system, it cannot be restored.
When will the data not be deleted?
In cases of misuse of email addresses or fraud during a payment transaction, and/or if criminal proceedings have been initiated in connection with such an incident.
How will I find out?
The authorities will notify you in due course. Or if you try to delete your account but there is already information indicating that an official investigation has been initiated. In this case, the deletion process will proceed as usual. However, at the end, you will receive a message stating that your account could not be deleted for the reasons described above in order to preserve evidence for authorities.
4.How we share information
Your data will never be shared, even not in anonymized or aggregated form. If we are requested by law enforcement agencies or other public authorities, as well as judicial authorities, courts, or tribunals, to disclose personal data to them or other parties, we will only disclose personal data after receiving a court order, subpoena, search warrant, or other legal process. This includes parties involved in proceedings and their external legal advisors. We also reserve the right to report to law enforcement authorities any activities that we believe in good faith to be illegal.
5. Your data protection rights
You have the right to receive a copy of all information we hold about youin a standardised format. You can make such a request using the contact form. The information will be sent to you by email.
6. Retention of personal data
We store your data, including personal data, only for as long as is necessary to fulfill the purposes stated here and to fulfill the contract between you and us, if any, and to fulfill legal and regulatory obligations, such as tax, commercial, and corporate obligations. As we are not a payment service provider, we do not store credit card numbers or credit card security codes after the card details have been used to process a credit card transaction. This data is only stored by the payment service provider you have selected to pay for a service. Before each payment, you will be redirected to the payment service provider's website. Please note that in this case, the terms and conditions and privacy policies of the respective service provider apply. If we no longer need your personal data for our purposes, we will delete it immediately after the transaction has been completed.
7. Data security
We take reasonable steps to protect your data, including personal data in our possession, from loss, misuse, unauthorized access, disclosure, alteration, and destruction. To do this, we take security measures such as securing and monitoring our network and controlling access to our files, devices, and premises.
8. Your choices
Subject to the provisions in paragraph 6, you can access your personal data and correct, supplement, or delete any personal data you have provided to us on this website. You will find the relevant functions under the menu item [User].
· You may be denied access to your personal data or you may not be able to delete all of your personal data. Access may be denied, for example, if: access by one person would adversely affect the personal rights of another person;
· disclosure is likely to adversely affect national security, defense, or public safety;
· disclosure could interfere with law enforcement or legal proceedings;
· These are only examples, and access may be denied in other situations in accordance with applicable laws.
9. Additional data protection rights
When you use our services, you can exercise the following rights with regard to your personal data:
· Access
You have the right to obtain confirmation from us as to whether your personal data is being processed, as well as certain information about it.
·Rectification
You have the right to request the rectification of inaccurate personal data and the completion of incomplete data.
· Objection
You have the right to object to the processing of your personal data on compelling legitimate grounds relating to your particular situation, if we process it on the basis of legitimate interests, unless legal provisions expressly provide for such processing.
· Portability
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit this data to another data controller. This right only applies if the processing is based on your consent or a contract and the processing is carried out using automated procedures.
· Restriction
You may request the restriction of the processing of your personal data if:
· you dispute the accuracy of the data – for a period enabling us to verify your request;
· the processing is unlawful and you oppose the erasure of the data and request restriction instead;
· we no longer need the data, but you request that it be retained forthe establishment, exercising, or defense of legal claims;
· or you object to the processing of your personal data for reasons that are not related to us, but to your particular situation arising from the exercise or exercise of a right you have under applicable law regarding the exercise of your rights, such as the right to erasure, restriction, or objection.
· Erasure
You may request the deletion of your personal data if it is no longer necessary for the purposes for which we collected it, you have withdrawn your consent and there is no other legal basis for processing, you have objected and there are no overriding legitimate grounds for processing, the processing is unlawful, or the deletion is necessary to comply with a legal obligation.
· Right to lodge a complaint
You also have the right to lodge a complaint with a supervisory authority, in particular in the state in which you have your residence or in which the circumstances giving rise to the complaint originate.
· Right to refuse or withdraw consent
Please note that you are free to refuse your consent to a specific processing operation when we ask for your consent, and that you may withdraw your consent at any time without adverse consequences. This does not affect the lawfulness of the processing of your personal data carried out prior to the withdrawal of your consent. If you have any questions about exercising these rights or their applicability to any of our specific processing activities, if you have any questions about a data transfer procedure or would like a copy of it, you can request this data via the contact form.
10. Rights of EEA Residents
If you are a resident of the European Economic Area (EEA) and/or UK, you have certain rights regarding our processing of your personal data (in addition to those discussed elsewhere in this Privacy Notice):
1. Access: You have the right to receive a copy of your information that we process.
2. Portability: You have the right to request that we transfer your data in an easily readable format to another company.
3. Restriction of processing to storage only: You have the right to require us to stop processing the personal information we hold about you, other than for storage purposes, in certain circumstances.
4. Objection: You have the right to object to our processing of your personal information in certain circumstances.
5. Withdrawal of consent: Where we rely on consent to process your personal information, you have the right to withdraw this consent.
6. Complaints: If you have complaints about how we process your personal data, please contact us and we will respond to your request as soon as possible. If you think we have infringed data protection laws, you have the right to file a complaint with the data protection supervisory authority in the EEA country in which you live or work or where you think we have infringed data protection laws, or with the UK Information Commissioner’s Office, as applicable to you.
11. Conclusion
Unless otherwise specified, audio-booster.com is the data controller under applicable law for the processing of personal data covered by this statement. If you have any questions about this statement or believe that your personal data has been processed or disclosed in violation of this statement, please contact us using the contact form. We will investigate all complaints or disputes relating to the processing of your personal data and will attempt to resolve them.