Privacy Policy
Yamaha Music Europe GmbH (“Yamaha”) believe that protecting the personal data of each customer (a “customer” or “you”) is Yamaha’s obligation under laws and ordinances as well as an essential social responsibility. Yamaha sets forth this “Privacy Policy” as follows (this “Privacy Policy”), respects rights regarding your personal data, and protects such rights.
Contact details of the Controller
Responsible of the data processing is:Yamaha Music Europe GmbH,
Siemensstrasse 22-34, D-25462 Rellingen,
Phone: +49 (0) 4101/ 303-0,
Fax: +49 (0) 4101/ 303-333
Contact details of the data protection officer
Attn. Data protection officerYamaha Music Europe GmbH,
Siemensstrasse 22-34, D-25462 Rellingen
Or via E-Mail: dataprotection@contact.europe.yamaha.com.
1.1 Collection of personal data when you visit our website
If you only use the website for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect following technical information (log file data):
–IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, the amount of data transferred, website which sent the request, browser, operating system and desktop, language and version of browser software.
The collection of this data is technically necessary in order to display our website to you and to guarantee stability and security. We regularly do not know who is hiding behind an IP address. We do not combine the data listed above with other data.
The legal basis is Art. 6 para. 1f GDPR. Since the collection of data for the provision of the website and the storage in log files are absolutely necessary for the operation of the website and for protection against misuse, our legitimate interest in data processing prevails at this point.
1.2 Contacting us by email or using the contact form
When you contact us by email or via one of the contact forms, we will store the data submitted by you (your email address, your name and telephone number, if provided) for the purpose of responding to your inquiries. In as far as our contact form requests information that is not necessary to get in contact with you, the respective fields are always marked as optional. This data allows us to substantiate your inquiry and to improve our handling of your request. This data is explicitly disclosed on a voluntary basis and on the basis of our legitimate interests pursuant to Article 6 para. 1f GDPR. In as far as the data concern communication channels (e.g. email address, telephone number), you also consent to us contacting you via such communication channels for the purpose of responding to your inquiry. You are free to object at any time with effect for the future.
1.3 Subscribing to our Newsletter
By giving your consent, you can subscribe to our newsletter, which informs you about our current offers and services.
To subscribe to our email newsletter, we use the so-called double opt-in procedure. This means that after your registration we will send you an e-mail to the given e-mail address in which we will ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month.
Legal basis is your consent pursuant to Article 6 para. 1a GDPR. You can withdraw your consent at any time with effect for the future.
You can unsubscribe and revoke your consent to receive the newsletter at any time. You can withdraw your consent by clicking on the link provided in every newsletter e-mail or by sending a contact request to the data protection officer listed above.
1.4 Newsletter-Tracking
We would like to point out that we evaluate your user behaviour when sending the newsletter. For this evaluation, the e-mails sent contain so-called web beacons or tracking pixels which are stored on our website. For the evaluations we link the mentioned data and the web beacons with your e-mail address and an individual ID.
With the data obtained in this way, we create a user profile in order to tailor the newsletter to your individual interests. We record when you read our newsletter, which links you click in it and infer your personal interests from this. We link this data with the actions you take on our website.
Legal basis is your consent pursuant to Article 6 para. 1a GDPR. You can withdraw your consent any time with effect for the future.
You may object to this tracking at any time by clicking on the separate link provided in each email. The information is stored as long as you have subscribed to the newsletter. After you have unsubscribed, we store the data purely statistically and anonymously.
Dotdigital
This website uses the services of DotDigital, a cloud-based marketing service provided by dotdigital EMEA Ltd, No. 1 London Bridge, London, SE1 9BG, UK.
DotDigital allows various marketing activities to be controlled and synchronised via a central user interface. DotDigital enables lead generation, centralised email and newsletter marketing and effective contact management in the form of user segmentation.
To fulfil the various functions, Dotdigital uses cookies, small text files that are stored locally in the cache of your web browser on your terminal device and enable an analysis of your use of the website by us. The cookies collect certain information such as the IP address, the location, the time of the page view, etc. Information collected by DotDigital is stored on DotDigital's servers and analysed on our behalf.
If personal data is processed in this way, the data is processed for statistical analysis of user behaviour for optimisation and marketing purposes in accordance with Art. 6 Para. 1 lit. f DSGVO. Other legal bases for data processing that intervene in the context of specific DotDigital services (such as, for example, the express consent pursuant to Art.6 para. 1 lit. a DSGVO when sending newsletters) remain unaffected by this.
We have concluded an order processing contract with DotDigital, by which we oblige DotDigital to protect our customers' data and not to pass it on to third parties.
You can permanently object to the collection of data by DotDigital by means of cookies and the setting of cookies by preventing the storage of cookies accordingly through your browser settings.
You can find more information about DotDigital's privacy policy at the following website address: https://dotdigital.com/terms/privacy-policy/.
As far as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future. In order to exercise your revocation, please follow the option described above for making an objection.
Qualtrics
Our customer surveys use the services of Qualtrics CX Digital, a cloud-based customer experience management software provided by Qualtrics LLC, 333 West River Park Drive Provo, UT 84604, US, to conduct customer, product, and brand satisfaction surveys. We conduct the satisfaction surveys in order to continuously develop and improve our products and services.
Qualtrics CX Digital efficiently measures and visualizes the customer experience, leading to company-wide improvement activities.
To manage the status of surveys, Qualtrics uses cookies, small text files that are stored locally in the cache of your web browser on your terminal device. The cookies collect certain information such as the IP address, the browser, the progress of survey, etc. Information collected by Qualtrics is stored on Qualtrics' servers and analyzed on our behalf.
If personal data is processed in this way, the data is processed for statistical analysis of user behavior for optimization and marketing purposes in accordance with Article 6 para. 1a GDPR.
You can reject the storage of cookies through your browser settings, but you will not be able to respond to surveys if your browser completely disables the use of cookies.
We have concluded a DPA (Data Processing Agreement) with Qualtrics, by which we oblige Qualtrics to protect our customers’ data and not to pass it on to third parties.
You can find more information about Qualtrics' privacy statement at the following website address: https://www.qualtrics.com/privacy-statement/.
As far as legally required, we have obtained your consent for the processing of your data as described above in accordance with Article 6 para. 1a GDPR.
You can revoke your consent at any time with effect for the future. In order to exercise your revocation, please follow the option described above for making an objection.
1.5 Registration on Yamaha Music ID
When you registrate to our platform, we collect and store your data to provide you our services for registered user. We will use your email address to confirm your opening of an account, to send you notice of payments, to send you information about changes to our products and services, and to send notices and other disclosures as required by law. These notifications are required for the relevant business relationship and not marketing-related in nature. Legal basis is the fulfilment of our contractual obligations pursuant to Article 6 para. 1b GDPR.
We use the so-called double-opt-in procedure to verify your registration. Therefore, your registration is not complete until you have confirmed by clicking on the link contained in a confirmation e-mail. If you do not confirm within 24 hours, your registration will be automatically deleted.
If we ask for information that is not necessary to fulfil our contractual obligations, we mark this as optional information. When you provide these information to us, we store and use them pursuant to our legitimate interests according Article 6 para. 1f GDPR. You can also registrate to our platform via social-log-in. In this case, your Facebook-Account or Google-Account will be connected to our platform, allowing you an easy access and optimizing your account organization. Your data can be ransferred to the provider. You can only use this option when you have given us your prior consent in the processing of your personal data throughout the social-log-in provider. The legal basis is your consent pursuant to Article 6 para. 1a GDPR. You can withdraw your consent any time with effect for the future.
1.6 Enrolment in prize draws and participation on campaigns
Within the purposes of implementing a prize draw or participation in a campaign, we process your personal data e.g. your name, email address and address to record your participation details, to notify the winner and hand over the prize. Regularly, the participation also involves an individual competition entry e.g. a comment or photo. We may pass on your data in order to send you the prize. The data processing and data transfer may differ from contest to contest and is therefore described in detail in the respective conditions of participation.
To enter into the contract, e.g. participation in the prize draw, it is necessary to provide the data marked as mandatory in our registration form. Legal basis is the fulfilment of our contractual obligations pursuant to Article 6 para. 1b GDPR.
1.7 Social PlugIns/Links to Social-Media Platforms
The functions of social media plugins are deactivated by default to prevent any automatic disclosure of the user data to the provider. We implemented social media plugins or links to social.media platforms in a way that they only send data once they have been clicked by the user. Your Internet browser then sends the log files (including your IP address) directly to the provider’s server where they may be stored. The server may be located outside the EU or the EEA (e.g. in the United States of America).
If you want to prevent a data exchange between your system and social media plugins, you should log out of the social media before using our Website. You should also activate the private mode in your browser’s data privacy settings. It also helps to deactivate or limit cookies in your browser settings so that third parties cannot track your browsing behavior. You can also prevent social media plugins from loading altogether by using a script blocker as an add-on in your browser.
Any comments or activity arising from persons using social media plugins is not controlled or endorsed by us. Persons who share our content via social media are not authorized to speak for or represent us. Their views and opinions must be strictly regarded as their own.
Please see more information in the privacy policies of the providers.
1.8 Apply for a Job
You can apply to our company in several ways via e-mail or web forms. We use your personal data exclusively for processing your application. We do not pass them on to third parties. Please note that that your e-mail is not protected when you send it to us unencrypted.
You can also apply via our online application portal. Your online application will be forwarded directly to the personnel department via an encrypted connection and will of course be treated confidentially. You can find further information on data processing within the application procedure in the data protection declaration of our application portal.
If you have applied for a specific position and it has already been filled or if we consider you equally or even better suited for another position, we would like to forward your application within the company. We only do that with your prior consent and ask you before keeping your data.
Your personal data will be deleted immediately after completion of the application process, or after a maximum of 6 months, unless you have given us your consent to store your data for a longer period of time or a contract has been concluded. The legal basis is Art. 6 para. 1a and b GDPR.
2. Safety management of personal data
Yamaha implements appropriate technical, physical and organizational measures to prevent unauthorized access to personal data and loss, destruction, falsification, divulgence, and the like of personal data and endeavors to protect your personal data through the establishment of a safety management system. Our security procedures are regularly reviewed and adapted to technological progress.
3. Recipients of personal data
Yamaha may entrust to a third party, service provider or partnerall or part of its operations regarding the processing of your personal data. Your information will be shared with service providers who work on behalf of Yamaha. In these cases, however, the amount of data transmitted is limited to the required minimum. As far as our service providers come into contact with your personal data, we ensure within the scope of order processing in accordance with Art. 28 GDPR that they comply with the regulations of the data protection laws in the same way.
Yamaha may also share personal data with partner and third partys if it is necessary to fulfil its services or if Yamaha is legally obliged to disclose data.
Yamaha shares data among group corporations as follows.
Yamaha may share all personal data among the following group corporation:
- Yamaha Corporation
When responding to your inquiries, requests for brochures, or any other requests, etc., Yamaha may transfer to the following group corporations the details of your requests (including personal data) transmitted through a “contact us” page on Yamaha websites to the extent deemed necessary for responding to your requests, and the group corporations may use such details in order to respond to your requests.
Japan: https://www.yamaha.com/en/about/locations/group_companies_japan/ and Yamaha Music Foundation
Outside Japan: https://www.yamaha.com/en/about/locations/group_companies_worldwide/
Yamaha may otherwise share personal data with a third party if permitted by applicable laws and ordinances.
4. Transfer of personal data to third countries
GDPR is applicable (e.g. European citizen or processing activities within the EU):
Yamaha takes great care to ensure your data is processed within the EU / EEC. From time to time, it may be necessary for Yamaha to transfer personal data outside of the EU / EEC. In these cases, Yamaha ensures that an adequate level of data protection is afforded by the recipient prior to disclosing your personal data. This means that a data protection level comparable to the standards within the EU is achieved by way of entering into EU standard contract clauses or an adequacy decision. For Japan the European Commission has issued an adequacy decision.
GDPR is not applicable:
Yamaha may transmit your personal data from a country where you reside to other countries (including Japan) and store your personal data in those countries (that combined process, a “Transfer”). Privacy protection laws equivalent to that of the country where you reside might not be enforced in a country that receives a Transfer of your personal data. However, Yamaha processes your personal data in accordance with applicable laws and ordinances and this Privacy Policy.
5. Storage period for personal data
Yamaha stores and uses personal data obtained from customers only for the period necessary to perform the purposes of use. Afterwards personal dats is deleted except statutory retention periods prevent deletion. Storage can therefore take place if this is required by European or national legislation, in Union regulations, laws or other regulations to which Yamaha is subject. If the data are not deleted because they are required for other and legally permissible purposes, their processing will be limited, i.e. the data will be locked and not processed for other purposes.
6. Processing of children’s personal data
With respect to a child’s personal data, Yamaha obtains consent from statutory agents, such as a person with parental authority over that child, and takes other necessary steps in accordance with applicable laws, ordinances, and the like.
7. Cookies
Yamaha may generate cookies and use other similar technologies on Yamaha ’s websites. These enable Yamaha to provide each customer with more customized services and advertisements. For more details, please refer to the policy regarding cookies, etc.: https://europe.yamaha.com/en/cookie_policy/
8. Customer rights regarding personal data
You have the following rights in relation to your personal data:
8.1 General rights
You have a right of access, rectification, erasure, restriction of data processing, to object against the data processing and to data portability. To the extent a data processing is based on your declaration of consent, you have the right to revoke such consent with effect for the future.
8.2 Rights concerning data processing conducted on the basis of a legitimate interest
Article 21 para. 1 GDPR gives you the right to object against the processing of your personal data on the basis of Article 6 para. 1e GDPR (data processing in the public interest) or Article 6 para. 1f GDPR (data processing to safeguard a legitimate interest) for reasons resulting from your personal circumstances at any time, including against a profiling based on the same provision. We will cease to process your personal data if you object against it, unless we demonstrate compelling legitimate reasons for the data processing that prevail over your interests, rights and freedoms, or if the data processing serves the purpose of asserting, exercising or defending legal interests.
8.3 Rights concerning direct advertising
In as far as we process your personal data for direct advertising purposes, Article 21 para. 2 GDPR gives you the right to object against the processing of your personal data for the purpose of such advertising, including profiling to the extent it is related to direct advertising.
We will cease processing your personal data for direct advertising purposes if you object against such use of your personal data.
8.4 Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint about the processing of your personal data by us with the relevant data protection supervisory authority.
Is there an obligation to provide your personal data
In order to enter into a business relationship, you must provide us with the personal data that is required for the execution of the contractual relationship or which we must collect due to legal requirements. If you do not provide us with this data, we will not be able to carry out and process the contractual relationship.
9. Compliance with laws and ordinances
Yamaha complies with applicable laws, ordinances, and guidelines regarding personal data and performs its social responsibilities as a company.
10. Continuous improvement
Yamaha continually reviews and improves its compliance program (its program for complying with laws, ordinances, and the like) in order to ensure reliable performance of personal data protection.
11. Contact information
For inquiries regarding this Privacy Policy, please inquire using the following contact details.
Dataprotection@contact.europe.yamaha.com
12. Revision of this Privacy Policy
Yamaha may amend, revise, add to, or delete the contents of this Privacy Policy in accordance with Yamaha’s internal policies, technological developments, or applicable laws and ordinances. If any material amendment is made to this Privacy Policy, Yamaha will notify you of that amendment as necessary in a recognizable manner.
Last modified: 17.03.2021