Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

2. Hosting & Server Log Files

This website is hosted on a private server. The hosting provider automatically collects and stores information in server log files that your browser transmits to us. This includes: browser type and version, operating system, referrer URL, IP address, date and time of the request, and the pages accessed.

This data is not merged with other data sources. Processing is based on Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient operation of the website). Log files are retained for a maximum of 30 days.

3. Cookies

This website uses cookies. Cookies are small text files stored on your device. We use the following types:

• Technically necessary cookies: Required for the basic functioning of the website (e.g. remembering your cookie consent choice). Legal basis: Art. 6(1)(f) GDPR.
• Newsletter preference cookies: If you subscribe to our newsletter, a cookie may be set to prevent duplicate subscription prompts. Legal basis: Art. 6(1)(a) GDPR (your consent).

You can configure or disable cookies in your browser settings at any time. Please note that disabling cookies may affect the functionality of this website.

4. Newsletter

If you subscribe to our newsletter, we process your email address for the purpose of sending you product updates and news. We use a double opt-in procedure: after you submit your address, you will receive a confirmation email containing a verification link. Your address is only added to our list once you click that link.

Subscriber data (email address, signup timestamp, IP address and browser at the time of consent) is stored on our own server inside the European Union. We do not use any third-party email-marketing service such as Mailchimp, Brevo or similar — your data is not transferred to any processor outside our infrastructure.

The IP address and browser information are stored as proof of consent in accordance with Art. 7(1) GDPR and are not used for any other purpose.

Product launch notices: If you use a product's “Notify me at launch” form, you subscribe to our newsletter in the same way (double opt-in) and we additionally note which product you are interested in, so we can tell you when it becomes available. This note is deleted when you unsubscribe.

Subscribing at checkout: If you tick the newsletter checkbox when ordering in our online shop (shop.janus-audio.com), the shop passes your email address, IP address and browser information to this newsletter system, which is operated by us. You then receive the same confirmation email and are only added after confirming.

Legal basis: Art. 6(1)(a) GDPR (consent). You may unsubscribe at any time by clicking the unsubscribe link in any newsletter email or by contacting us at hello@janus-audio.com. Withdrawal of consent does not affect the lawfulness of processing prior to the withdrawal.

5. Online Shop

Our online shop at shop.janus-audio.com runs on our own server (WordPress with WooCommerce). The controller is the same as named in section 1.

Orders

When you order, we process the data you enter in checkout (name, billing and delivery address, email address, phone number if given, an order note if given), the products ordered, the payment method and the order history. We need this data to conclude and carry out the contract: to process, ship and invoice your order, and to handle withdrawals, returns and warranty claims. Legal basis: Art. 6(1)(b) GDPR. You also receive emails about your order (order confirmation, shipping notice, invoice).

We keep order and invoice data for as long as tax and commercial law require: invoices and accounting records for 10 years, business letters for 6 years (§ 147 AO, § 257 HGB). Legal basis: Art. 6(1)(c) GDPR. After that, the data is deleted.

Customer account

You can order as a guest or create a customer account. With an account, we store your login, your addresses and your orders, so you can see them under “My account”. Legal basis: Art. 6(1)(b) GDPR. You can ask us to delete your account at any time; order data we must keep (see above) is then kept until the retention period ends.

Payment

Depending on the payment method you choose, we pass the data needed for the payment to the payment provider (e.g. name, billing address, email address, order amount, and your payment details). Legal basis: Art. 6(1)(b) GDPR, and Art. 6(1)(f) GDPR for fraud prevention.

• Card, Apple Pay, Google Pay and Amazon Pay are processed through WooPayments, a service of Automattic Inc., with Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, as payment processor. To prevent fraud, Stripe's script loads on the shop pages and collects information about your device and browser (see “Cookies in the shop”). Stripe and Automattic may also process data in the USA; both are certified under the EU-US Data Privacy Framework. If you use Apple Pay, Google Pay or Amazon Pay, the privacy policy of Apple, Google or Amazon (Amazon Payments Europe S.C.A., Luxembourg) also applies. Details: stripe.com/privacy, automattic.com/privacy.
• SEPA direct debit: we store the account holder and IBAN you enter and pass them to our bank to collect the payment.
• PayPal (if offered in checkout): if you pay with PayPal, including “Pay Later” and instalments, you are passed to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. We pass PayPal your name, address, email address and the order details. For “Pay Later” and instalments, PayPal may run a credit check, also through credit agencies (legal basis: Art. 6(1)(b) and (f) GDPR). PayPal may also process data outside the EU, including in the USA, under its Binding Corporate Rules. Details: paypal.com/de/legalhub/privacy-full.

Shipping

We pass your name and delivery address to DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany) so it can deliver your order. Legal basis: Art. 6(1)(b) GDPR.

Withdrawal form

If you withdraw from a contract using our online withdrawal form, we process the data you enter (order number, name, email address) to handle your withdrawal and send you a confirmation of receipt. Legal basis: Art. 6(1)(c) GDPR.

Product reviews

If you write a product review, we store your name, email address, the review and your IP address. Your name and the review are shown publicly; your email address is not. Legal basis: Art. 6(1)(f) GDPR (our interest in showing customer reviews and preventing abuse). You can ask us to delete your review at any time.

Cookies in the shop

The shop only uses cookies that it needs to work:

• Shopping cart and session (WooCommerce: woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_…): remember your cart. Deleted when you close the browser or after 2 days.
• Login (WordPress: wordpress_logged_in_… and similar): keep you logged in to your customer account.
• Payment security (Stripe: __stripe_mid, __stripe_sid): fraud prevention for card payments. Up to 1 year.
• PayPal (if offered): where the shop shows PayPal buttons (product page, cart, checkout), PayPal's script loads from paypal.com and may set cookies for fraud prevention and to show the buttons. Your IP address is passed to PayPal when the script loads.
• Review form: only if you tick “Save my name, email…”, your name and email are saved in your browser for your next review.

These cookies are strictly necessary to provide the shop you requested (§ 25(2) no. 2 TDDDG). Legal basis for the related processing: Art. 6(1)(b) and (f) GDPR. The shop does not use analytics or advertising cookies.

6. Social Media

This website contains links to our profiles on SoundCloud and Instagram. These are standard hyperlinks only — no third-party scripts, tracking pixels or embeds are loaded on this page. When you click a link and visit those platforms, their own privacy policies apply.

7. Your Rights

Under GDPR you have the following rights regarding your personal data:

• Right of access (Art. 15) — you may request confirmation of whether we process your data and obtain a copy.
• Right to rectification (Art. 16) — you may request correction of inaccurate data.
• Right to erasure (Art. 17) — you may request deletion of your data where it is no longer necessary.
• Right to restriction (Art. 18) — you may request restricted processing in certain circumstances.
• Right to data portability (Art. 20) — you may receive your data in a structured, machine-readable format.
• Right to object (Art. 21) — you may object to processing based on legitimate interests.
• Right to withdraw consent (Art. 7(3)) — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at hello@janus-audio.com. You also have the right to lodge a complaint with your local data protection authority. In Germany, this is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (www.datenschutz-berlin.de).

8. Changes to This Privacy Policy

We may update this privacy policy from time to time. The date at the top of this page indicates when it was last revised. We encourage you to review this page periodically.