Privacy Policy

Updated as of 12 October 2023.

Our business is built on the trust and confidence you place in us. Naxos Digital Services Limited ("Naxos") respects your privacy and we are committed to safeguarding and protecting any data we collect about you. This Privacy Policy describes the practices that Naxos follows with respect to the privacy of the visitors to NaxosDirect.co.uk (the "Naxos websites" or "our websites"), the type of information collected on the Naxos websites, how we will use it and the rights you have in relation to it.

1.   Data Protection Legislation
We observe the Data Protection Principles of the Personal Data (Privacy) Ordinance of Hong Kong SAR (the "Hong Kong requirements"). In addition, we adhere to the European Data Protection Legislation as described below to the extent it applies to the Personal Data we process about you.
For the purpose of this Privacy Policy, "European Data Protection Legislation" means all applicable legislation relating to data protection, including the EU General Data Protection Regulation 2016/679 ("GDPR") and all legislation implementing or made under or pursuant to or replacing or superseding the GDPR. Where this Privacy Policy uses terms which are defined in the GDPR, then the definitions set out in the GDPR will apply.
"Personal Data" is data relating to you from which you can be reasonably identified. Examples of Personal Data include your full name, postal address, email address and telephone number. Naxos recognises that your Personal Data is valuable and processes your information in accordance with the Hong Kong requirements and European Data Protection Legislation.

2.   Data Protection Officer
Michael Vogelbacher
colenio GmbH & Co. KG (previously consileo GmbH & Co. KG)
Bahnhofstr. 5
D-53572 Unkel
Germany
privacy@naxosmusic.co.uk

3.   Data controller
Naxos is responsible as data controller for the processing of your Personal Data collected on the Naxos websites under the European Data Protection Legislation and the Hong Kong requirements as applicable.
INFORMATION WE COLLECT
We collect Personal Data to allow us to provide you with services and deliver information on the products and/or services offered by us. We make sure that the Personal Data we collect from you is necessary for and directly related to this purpose.
The Personal Data we collect from you includes your email and postal address, telephone and fax number. Credit card information we collect from you will go directly to our bank and no personnel of Naxos will have access to this data. If you choose to purchase a product from us, our third party payment processors will collect your payment information, and none of our personnel will have access to this data.
When you create an account to register for our services, we may collect Personal Data about you such as your full name, email address, username, password, postal address, contact number, country of residence, and other Personal Data such as your profession, birthday, company, etc.
We collect such Personal Data from you in a number of ways, including:
(a) directly from you, such as when you enter your personal details on our websites (for example during registration or application for products and services), when you provide information by phone or in documents such as an application form;
(b) from our affiliated companies;
(c) from your representatives;
(d) from sources where you’ve made your information publicly available;
(e) from credit-reporting and fraud-checking agencies and credit providers for credit related purposes such as credit worthiness, credit rating, credit provision and financing;
(f) from our own records of your dealings with us; or
(g) when legally required to do so.
We make sure that the way we collect data from and about you is lawful and fair in your circumstances.
We take all practical steps to ensure that you are informed of what data you are obliged to provide us, what data you may voluntarily provide us and what we may do if you do not provide us with data which you are obliged to provide.

4.   Information you give us
This is information you give us when you enter your personal details on the Naxos websites (for example during registration or application for products or services) or by contacting us via post, phone, e-mail or otherwise, in the context of your communication with Naxos. We will use your personal information to:
• identify you;
• provide services to you;
• administer and manage those services;
• provide you with information related to the services offered by us;
• undertake risk assessment and management; [and]
• gather data necessary for our organisation's functions including dealings with credit reporting agencies, financial institutions including our own bankers, service providers, our professional advisers and industry groups having a legitimate reason to receive such information;
• respond to your enquiry or provide you with information that you request from us;
• consider how your business could support or work with our business;
• respond to any existing client, supplier or partner of ours in relation to a pre-exiting agreement or relationship;
• carry out obligations arising from any contracts entered into between you and us; and
• ensure that content from the Naxos websites is presented in to the most effective manner for you and your computer;
We will, depending on the nature of your communication with Naxos with respect to your visit to the Naxos websites, use your Personal Data to:
If we do not know you or your role at your business: we may use your Personal Data to confirm your identity and/or the business that you work for and potentially your role at that business. We do this because it is in our legitimate interest to make sure that your enquiry is genuine and is not being made for fraudulent reasons or is spam. We may also do this because we may be subject to legal obligations which require us to confirm the details that you provide us with before entering into a relationship with you.
If you are making an enquiry about our services or requesting further information: we will respond to any enquiry you make and/or provide you with information that you request from us because it is in our legitimate interest to use your Personal Data to communicate with you, to respond to your request and to develop the relationship between us. If you submit Personal Data comprising an email address to Naxos, we may send you service related emails (e.g. transactional emails, service and policy updates) because it is in our legitimate interests to keep you informed of your account activities or service changes.
If you are a member of the public and you are making an enquiry about whether you could work for us: we will use your Personal Data to consider and decide how to respond to your enquiry because it is in our legitimate interests to use your Personal Data to consider whether we have any suitable job vacancies and to contact you about them. It may also be necessary for us to use your Personal Data to comply with a legal obligation relating to how we manage our business.
If you are an existing client, supplier or partner of ours and you are making an enquiry about your agreement or relationship with us: we will use your Personal Data to consider and respond to your enquiry in the context of your business with us because it is in our legitimate interests to use your Personal Data to manage your business' relationship with us. It may also be necessary for us to:
i. use your Personal Data to perform an agreement with your business, where we would be unable to provide those services to or receive them from your business without that information (for example, if a particular service or information is to be provided to you at your business, we would be unable to provide that service or information unless we were able to use your Personal Data for that reason);
ii. use your Personal Data to comply with a legal obligation relating to how we manage our business relationship with you
[If you are making an enquiry about how your business could support or work with our business: we will use your Personal Data to consider and respond to your enquiry in the context of your business because it is in our legitimate interests to use your Personal Data to consider whether it would be beneficial to work with your business.
If you are making an enquiry about Personal Data we may have about you: we will use your Personal Data to check our files and to consider and decide how to respond to your enquiry because it is in our legitimate interests, and in the legitimate interests of our clients, to use your Personal Data to consider how we may have used your Personal Data on behalf of our clients in order to determine how to answer your query. It may also be necessary for us to use your Personal Data to comply with a legal obligation relating to how we manage our business or our relationship with your business.
If you opt-in to receive marketing communications, we will use your Personal Data to contact you to share information about the relevant products, services, news and events. When you enter your contact details for this reason and click "sign up", you will be consenting to us contacting you for these purposes. We will only be able to send you marketing communications if you have provided your consent.
You are entitled to withdraw your consent to us contacting you by emailing privacy@naxosmusic.co.uk with the subject heading "unsubscribe" for any of the above reasons at any time. Otherwise you may request for your account to be deleted or to cancel your subscription. You may also be asked to review or indicate your preference for receiving email newsletters, including promotional materials, and be reminded to keep your account updated in case any of the initial information you submitted later changes.
If you subsequently decide that you do not want to receive correspondence from us about the service we could provide your business, including communications regarding product information, press releases, newsletters, marketing or promotions, and/or other topics please click the "unsubscribe" link provided in that promotional email message. Withdrawing your consent will not affect our use of the Personal Data prior to your withdrawing that consent but it will mean that we will not be able to contact you about the services we may be able to offer you or your business. However, as long as you maintain an account with
us, we may send you informational or service related emails because it is in our legitimate interests to keep you informed of your account activities or service changes.
We will let you know where you must provide us with Personal Data in order to perform an agreement with you or your business or to comply with a legal obligation. If you do not provide us with the Personal Data in these circumstances, we will be unable to respond to your enquiry and/or engage in further communications with you.

5.   Information we automatically collect about you
When you visit the Naxos websites, we may automatically collect information such as your IP address and browser type using cookies , web beacons and log files. This automatic data is primarily used for delivering and optimising services offered by us, such as:
(a) authenticating your identity and confirming whether you are currently logged in;
(b) providing you with relevant, personalised content in order to help us focus on what you are most interested in; and
(c) improving our services., whereby we may occasionally display different versions of content to you and measure your usage of our web site pages.
To the extent this information constitutes Personal Information, we use it to ensure that content from the Naxos websites is presented in the most effective manner for you and your device because it is in our legitimate interest to improve our customers' online experience in relation to the Naxos websites.

Cookies
Cookies are small data files which are placed on your browser and the hard drive of your computer, mobile or other handheld device as your browse the Naxos websites. We use cookies to store information about your visit to the Naxos websites and distinguish you from other users.
The use of cookies helps us to provide you with a good browsing experience when you visit our websites by displaying content effectively and obtaining and analysing statistics about the use of our websites. By continuing to use the Naxos websites you consent to our use of cookies as explained in this Privacy Policy.
The following table sets out the types of cookies used on the Naxos websites and provides detail about what they are used for. When you use the Naxos websites for the first time, cookies which are essential to make the Naxos websites operate (see those identified as "essential cookies" below) will have been set but other cookies will not have been set unless you agreed to those cookies being set at that time. If you have agreed to accept cookies then the Naxos websites will remember this and continue to set cookies each time you visit. If you do not want cookies to be stored, then you may turn off certain cookies listed below individually or you can select the appropriate options on your web browser to delete some or all cookies. Please note, however, that if you block some or all cookies (including essential cookies) you may not be able to use or access all or parts of the Naxos websites, such as being able to log on to member specific areas.

Cookie type	Cookie name	Purpose	Further information
Essential cookie	accepted_policy, PolicyAccepted	Determines consent of the user.	Expires one year from date of creation
Essential cookie	aspxauth, auth	Encrypts the session information and determines user’s permission to browse (licensed) content.	Expires when browsing session ends.
Session cookie	session_id	Created to determine successful login of the user.	Expires on hour after creation.
Tracking cookie	ga, _gid, _utm, _gtag,	Provides information on how visitors are using the website (e.g. page visited, avg. time on page).	This is blocked when cookie consent is not accepted.
Tracking cookie	logout	Determines when a user has logged out from the application.

If you require more information on our use of cookies, you may contact privacy@naxosmusic.co.uk

If you would like to disable cookies, you can set your web browser to reject cookies. However, if you disable the cookie function, you may not be able to access or receive all the information contained on the Naxos websites. How to alter your cookie setting will depend on the type of browser you use. To learn how to disable cookies, we have provided you quick links on the most popular browsers below:

• Google Chrome
• Safari
• Mozilla Firefox
• Opera 6.0 and further
• Microsoft Internet Explorer

Please note that Google and other third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies as a result of you visiting other websites, over which we have no control.

6.   Disclosure of your Personal Data
We do not provide any Personal Data provided by you to any third parties other than to our affiliated companies, where required by law or as set out in this Privacy Policy. We will not sell, trade or rent your Personal Data to others. Your email address will not be distributed to any third party.
We may make certain disclosures in answering your query or providing you with services and by visiting the Naxos website, you agree disclosures to the following third parties:
• advertisers, which may collect aggregated statistics from the Naxos websites;
• payment processors who will collect your payment information if you choose to purchase a product from us;
• other companies and individuals which we employ to provide certain services such as email marketing services (e.g. analysing customer lists, deliverability statistics, opens and clicks), marketing assistance or consulting services. These third parties may have access to information needed to perform their function but can not use that information for any other purpose;
• credit reporting agencies and other financial institutions including our own bankers, service providers; our professional advisers, such as our accountants, auditors and lawyers, insurers and industry groups having a legitimate reason to receive such information.

7.   Records of your Personal Data
We will keep a record of the Personal Data that we receive from you in order to answer your query, respond to a request for more information about the services, or in response to an enquiry from one of our existing suppliers. We will only retain the Personal Data collected from a user for as long as the user’s account is active or has otherwise not been cancelled and the user has not requested that their Personal Data be deleted. We will retain Personal Data to fulfil the purposes for which we have initially collected it, unless otherwise required by law. All Personal Data will be retained only as necessary to comply with our legal obligations.
We will delete our copy of your Personal Data upon request from the end of our contact with you for a minimum of 18 months, although we may retain a record of the existence of the relationship, to the extent and for so long as we are required to do so by law. For example, if you have contacted us to ask us for the processing of your Personal Data to be erased, we will retain a record of your request in order to ensure we comply with your wishes.

8.   Storage and transfer of your Personal Data to Other Countries
If you provide Personal Data to Naxos, it may be transferred to, processed in, stored at or accessible from a destination outside the European Economic Area ("EEA"), in which Naxos or its service providers maintain facilities. All practical steps are taken to ensure that all data is treated confidentially, kept secure and protected against unauthorised or accidental access, processing, erasure or other use and is maintained and kept no longer that is necessary for the purpose for which it is intended.
Naxos is located in Hong Kong. By providing your Personal Data to us in circumstances where our processing of it is subject to European Data Protection Legislation, please note that you are doing so on the basis that you explicitly consent to the transfer of your data outside the EEA. The potential consequence of you explicitly consenting to this are that there is a risk that your Personal Data will not be protected in a manner that complies with European Data Protection Legislation. You can withdraw your consent for any reason at any time by emailing us at privacy@naxosmusic.co.uk. Withdrawing your consent will not affect our use of the Personal Data prior to your withdrawing that consent but it will mean that we will not be able to contact you about the services we may be able to offer you in the future.
Where we pass your Personal Data that is subject to European Data Protection Legislation from a location inside the EEA to parties located outside the EEA that do not offer adequate protection as determined by the European Commission, and if they are not subscribed to an approved data protection framework, such as the EU-US Privacy Shield that permits us to transfer the Personal Data to them from the EEA, we will enter into agreements which enable us to transfer Personal Data to them and that enable you to exercise your rights in accordance with the European Data Protection Legislation. A copy of these terms can be obtained by emailing us at privacy@naxosmusic.co.uk.

9.   Your Rights
With respect to the Personal Data that Naxos collects about you from the Naxos websites, to the extent that you are located in the EEA, under the European Data Protection Legislation you have the right to:
a) request access to that Personal Information;
b) receive a copy of the Personal Data that you have provided to Naxos in a structured, commonly used and machine readable format so that you can share it with others;
c) request the transfer of your Personal Data to another party;
d) ask that Personal Data be erased;
e) object to us possessing your Personal Data by asking for the processing of that Personal Data to be restricted or stopped. For example, if Naxos uses Personal Data for marketing purposes; and
f) make a complaint to a European data protection authority about the manner in which Naxos processes your Personal Information.
Please contact Naxos Customer Service to exercise these rights or for additional information at privacy@naxosmusic.co.uk.
In addition to the above, you have the right to review, update, and correct your account information and preferences at any time by managing your account’s Profile page. If there is any information that you are not able to edit or delete, contact our Customer Service to help you make the amendments.
You have the right to request for your account to be terminated and your information to be deleted when there is no longer a legitimate or legal reason for us to keep your Personal Information.
On the other hand, if you wish to change or use other services affiliated to us, you may request for your data to be transferred or transmitted.

10.   Account Inactivity
Naxos Digital Services Ltd. May terminate your account and delete all your information if your account remains inactive for over 12 months. However, we will make every effort to warn and notify you by email before terminating your account to give you the opportunity to log in and update your account, so that it remains active.

11.   Social Media Presence
11.1.  Note regarding our Facebook Fanpage
Accessing https://www.facebook.com/NaxosUK will take you to our fanpage on the Facebook.com social network of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland (hereinafter referred to as "Facebook"). If you visit our fanpage, Facebook collects data and processes it in the US, if necessary. This also happens if you yourself are not a registered user of Facebook or simply have not logged in to your Facebook account. Facebook will collect the IP address, operating system information, hardware versions and browser type, data collected from Facebook cookies about your user behaviour, and other technical data. Facebook and we will process your data as joint controller within the meaning of Art. 26 UK GDPR. You will find the essence of the joint controller arrangement between Facebook and us here: https://www.facebook.com/legal/controller_addendum. For more information to Facebook, please refer to the Facebook Privacy Policy, which you can access here: https://www.facebook.com/privacy/explanation. You can also find information from Facebook about cookies on https://www.facebook.com/policies/cookies.

11.2.  Note regarding our X account
When you access our X presence, X (X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103 U.S.A.) places cookies on the device you use for this purpose (i.e. your computer or mobile device). This provides X with information about the type of device you are using and your IP address, among other things. If you have an X account and have stored additional information there, such as your email address, telephone number, contacts in your address book and a public profile, X also connects this account data with your visit when you call up our X presence. X Corp. uses this information, among other things, for personalization of advertisements and to display other X users that you can follow.

Please note that cookies are placed when you access our X presence, regardless of whether or not you have a X account.

In addition to any posts you may post, X also analyzes which posts you read, mark as "likes," or repost, as well as other information to determine what topics you are interested in, how old you are, what languages you speak, and other signals to personalize the content that is displayed to you as much as possible. In any case, if you have an X account, X learns which posts you read and thus what you are interested in. As an X account holder, you can set the personalization. You can see what data X has collected about you at https://twitter.com/settings/your_twitter_data.

X may receive log data containing information about the website visited in the case of third-party websites that integrate X content. X states that it does not establish a connection between your web activities and your name, email address, phone number or username and deletes, obscures or aggregates this data after a maximum of 30 days. For browsers that X assumes (based on the IP address) are located in the European Union or European Free Trade Association (EFTA) states, no such log data is collected, according to X.

We ourselves may process data that you provide to X (username, content published in your account, especially posts) when we repost posts published by you, reply to them or link to you in our posts. For more information, see X’s privacy policy at https://twitter.com/en/privacy, at https://help.twitter.com/en/search?q=privacy, and X's explanation of personal information privacy settings at https://help.twitter.com/en/safety-and-security/x-privacy-settings.

11.3.  Note regarding our Instagram Fanpage
We run the Instagram account https://www.instagram.com/naxos_uk/ on the social network Instagram, which is part of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland (hereinafter referred to as "Instagram"). If you visit our account, data will be collected from Instagram and processed in the US, if necessary. This also happens if you yourself are not a registered user of Instagram or have not logged in to your Instagram account. Facebook and we will process your data as joint controller within the meaning of Art. 26 UK GDPR. You will find the essence of the joint controller arrangement between Facebook and us here: https://www.facebook.com/legal/controller_addendum/. For more information to Instagram, please refer to the Facebook Privacy Policy, which you can access here: https://www.facebook.com/privacy/explanation/. Please refer to the Instagram Privacy Policy, which you can access here: https://help.instagram.com/519522125107875?helpref=page_content/.

11.4.  Note regarding our YouTube channel
We operate an own YouTube Channel on the YouTube video platform, which is part of YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066 USA (hereinafter referred to as "YouTube"). If you visit our channel, data will be collected from YouTube and processed in the US, if necessary. This also happens if you yourself are not a registered user of YouTube or have not logged in to your YouTube account. According to information provided by YouTube, the data collected includes, among other things, the IP address, operating system information, hardware versions and browser type, data collected from YouTube cookies about your user behaviour, and other technical data. Please refer to the YouTube Privacy Policy, which you can access here: https://policies.google.com/privacy/.

12.   Zendesk Sell
We use as CRM software Zendesk Sell, a SaaS solution of Zendesk Inc, 989 Market Street #300, San Francisco, CA 94102 to improve our customer management, sales process, better control sales pipeline and increase transparency and productivity. For this purpose, necessary data such as last name, first name, postal address, phone number, email address are collected in the context of customer relationships, For more information on data processing by Zendesk, please refer to Zendesk's privacy policy at: http://www.zendesk.com/company/privacy. If you have any questions, you can also contact Zendesk's data protection officer directly at: privacy@zendesk.com. We have concluded a DPA with Zendesk for data processing and, in addition, standard contractual clauses. The legal basis for processing with Zendesk Sell is Art. 6 (1) lit. b GDPR which applies to the preparation or implementation of a contractual relationship.

13.   Changes to this Privacy Policy
Any changes we make to this Privacy Policy in the future will be posted on this page and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes to this Privacy Policy, which will be effective immediately when posted on this website or notified to you as applicable.