Privacy Notice

1. Name and contact details of the Data Controllers and the Data Protection Officer

Data Controllers:

Burmester Audiosysteme GmbH

Wilhelm-Kabus-Straße 47

10829 Berlin, Germany

Burmester Home Audio GmbH

Wilhelm-Kabus-Straße 47

10829 Berlin, Germany

Burmester Automotive Audio GmbH

Wilhelm-Kabus-Straße 47

10829 Berlin, Germany

(hereinafter collectively referred to as „Burmester“)

Contact Details of the Data Protection Officer:

Mr Thomas Cedzich

c/o Vater Solution GmbH

Boschstr. 5

24118 Kiel, Germany

Email: privacy@burmester.de

2. Collection and processing of your data when visiting our Website

When you use our website solely for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server.

When you access our website, we collect the following data, which is technically necessary to display the website to you and to ensure its stability and security:

  • IP address
  • Date and time of the request
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (specific page accessed)
  • Access status / HTTP status code
  • Volume of data transferred in each case
  • Website from which the request originates
  • Browser type
  • Operating system and user interface
  • Language and version of the browser software

The retention period for this data is 14 days.

The legal basis for processing is Article 6 (1) (f) GDPR. Our legitimate interest is to ensure the stability and security of our systems.

In addition to the above-mentioned data, cookies are stored on your device when you use our website. Cookies are small text files stored on your hard drive and assigned to the browser you use. They enable the entity setting the cookie to receive certain information.

3. Use of Cookies

Our website uses cookies. Cookies are small text files stored on your device and saved by your browser. They help make our website more user-friendly, efficient, and secure.

Types of Cookies

We use the following categories of cookies:

  • Technically Necessary Cookies

These cookies are essential for the operation of the website and enable core functions such as page navigation and access to secure areas of the website. Without these cookies, the website cannot function properly.

  • Functional Cookies

These cookies allow us to provide enhanced functionality and personalisation, such as saving your preferences and settings.

  • Analytics and Statistics Cookies

These cookies help us understand how visitors use our website by collecting and evaluating information anonymously.

  • Marketing and Tracking Cookies

These cookies are used to track visitors across websites and to display relevant, interest-based advertising.

  • Consent

Where cookies are not technically necessary, we only use them with your explicit consent in accordance with Article 6 (1) (a) GDPR.

When you visit our website for the first time, you will be asked to provide your consent via a cookie banner.

You may withdraw or modify your consent at any time with effect for the future.

  • Retention Period

Cookies are either stored only for the duration of a session (session cookies) and automatically deleted when you leave the website, or they remain stored on your device until you delete them or a specified retention period expires.

  • Managing Cookies

You can configure your browser so that you are informed whenever cookies are set, allow cookies only in individual cases, exclude the acceptance of cookies altogether, or activate the automatic deletion of cookies when the browser is closed.

Disabling cookies may limit the functionality of this website.

  • Third-Party Cookies

Where third-party cookies are used on our website (e.g. for analytics or marketing services), you will be informed separately in this Privacy Notice.

4. Newsletter Subscription

Provided that you have expressly consented in accordance with Article 6 (1) (a) GDPR, Burmester will use your email address to send you its newsletter on a regular basis.

Providing an email address is sufficient for receiving the newsletter.

You may unsubscribe at any time, for example by using the unsubscribe link included at the end of every newsletter. Alternatively, you may send your unsubscribe request at any time by email to mail@burmester.de.

The newsletter is distributed via HubSpot. Further information can be found in section 6.3.

4.1 Use of Our Contact Form

If you have any questions, Burmester offers you the opportunity to contact us via a form provided on our website.

Providing a valid email address is required so that Burmester knows who submitted the enquiry and can respond accordingly. Additional information may be provided voluntarily.

The processing of data for the purpose of contacting Burmester is carried out on the basis of your voluntarily given consent pursuant to Article 6 (1) (a) GDPR.

The personal data collected by Burmester through the contact form will be automatically deleted once your enquiry has been processed.

The contact form process is implemented through HubSpot. Further information can be found in section 6.3.

4.2 Disclosure of Personal Data

As a general principle, your personal data will only be disclosed to third parties where this is necessary for the fulfilment of our contractual obligations, where you have expressly consented, or where we are legally required to do so.

Disclosure to Data Processors

We engage external service providers (called data processors) to support us in the operation of our website and related processes, for example in the areas of hosting, IT support, or analytics.

These service providers process your data solely on our instructions and are contractually obligated to comply with the data protection requirements of Article 28 GDPR.

Disclosure for Legal Reasons

Your personal data may be disclosed where:

  • disclosure is necessary to comply with a legal obligation pursuant to Article 6 (1) (c) GDPR;
  • disclosure is necessary for the establishment, exercise, or defence of legal claims pursuant to Article 6 (1) (f) GDPR; or
  • a statutory obligation to disclose data exists.

Transfers to Third Countries

Where we transfer personal data to service providers or partners located outside the European Union (EU) or the European Economic Area (EEA), such transfers will only take place if an adequate level of data protection exists in the relevant third country or if appropriate safeguards (e.g. EU Standard Contractual Clauses) are in place.

Disclosure Based on Your Consent

Any further disclosure of your personal data will only take place if you have provided your explicit consent beforehand Article 6 (1) (a) GDPR.

4.3 Events and Live Communication

As part of events, interested individuals have the opportunity to submit their personal data to us via a form in order to be contacted subsequently by Burmester Audiosysteme GmbH or an authorised specialist dealer in their area regarding the selected topic of interest.

To enable communication in the appropriate language and to connect you with a suitable dealer near your location, providing your country of residence is mandatory.

Your personal data is processed on the basis of your consent and the communication preferences you have expressly selected.

The form processing is carried out by our processor, HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA, which is contractually bound to process data in accordance with Article 28 GDPR.

Prior to any contact, the contact details provided are verified through a double opt-in procedure. Once your verification has been successfully completed, you may object to further processing at any time by clicking the unsubscribe option, which will automatically trigger the deletion of your data.

5. Cookies

Burmester uses so-called cookies on this website. Cookies are small files that are automatically created by your browser and stored on your device (e.g. laptop, tablet, smartphone) when you visit the website. Cookies do not cause any damage to your device and do not contain viruses, trojans, or other malicious software.

Information is stored within the cookie that relates to the specific device being used. However, this does not mean that Burmester obtains direct knowledge of your identity.

The use of cookies serves, on the one hand, to make the use of Burmester’s website and services more convenient for you. For example, so-called session cookies are used to recognise that you have already visited individual pages of our website. These session cookies are automatically deleted when you leave the website.

In addition, Burmester uses temporary cookies to improve user-friendliness. These cookies remain stored on your device for a specified period of time. When you revisit the website, it is automatically recognised that you have previously visited the site and which entries and settings you made, so that you do not have to enter them again.

Finally, Burmester uses cookies to statistically record the use of the website and to evaluate it for the purpose of optimising our services for you (see Section 6). These cookies make it possible to automatically recognise that you have previously visited our website when you return. These cookies are automatically deleted after a defined period of time.

The data processed through cookies is required for the purposes described above in order to safeguard the legitimate interests of Burmester and third parties pursuant to Article 6 (1) (f) GDPR.

Most internet browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your device or so that a notification is displayed before a new cookie is created. Please note, however, that completely disabling cookies may result in you being unable to use all functions of the Burmester website.

6. Analytics Tools / Tracking

The tracking measures listed below and used by Burmester are carried out on the basis of Article 6 (1) (f) GDPR. By using these tracking measures, Burmester aims to ensure a needs-based design and the continuous optimisation of its website. Furthermore, the tracking measures are used to statistically record the use of the website and to evaluate it for the purpose of improving our services for you.

These interests are considered legitimate interests within the meaning of the aforementioned provision.

The specific purposes of processing and the categories of data processed can be found in the descriptions of the respective tracking tools.

6.1 Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables us to analyse how visitors use our website. In doing so, we receive various types of usage data, such as page views, time spent on individual pages, operating systems used, and the geographic origin of users. This data is associated with your device but is not directly linked to a specific user ID.

IP Anonymisation

We have activated the IP anonymisation feature on this website. As a result, your IP address is truncated by Google within Member States of the European Union or in other states that are party to the Agreement on the European Economic Area (EEA) before being transferred to the United States.

Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and shortened there.

Legal Basis for Processing

Google Analytics is used exclusively on the basis of your consent pursuant to Article 6 (1) (a) GDPR and § 25 TTDSG, where cookies are set or information is stored on your device.

You may withdraw your consent at any time with effect for the future.

Data Processing Agreement

We have entered into a Data Processing Agreement (DPA) with Google in accordance with the requirements of the GDPR.

Transfers to Third Countries

Personal data may be transferred to the United States on the basis of the EU Standard Contractual Clauses (SCCs) and, where applicable, additional safeguards.

It cannot be ruled out that U.S. authorities may gain access to the transferred data.

Further information is available at:

https://privacy.google.com/businesses/gdprcontrollerterms/

https://privacy.google.com/businesses/gdprcontrollerterms/sccs/

Retention Period

User-level and event-level data stored by Google is automatically deleted after a retention period defined by us (e.g. 14 months).

Objecting to Data Collection

You can prevent the collection of your data by Google Analytics in several ways:

  • By configuring your browser to block cookies;
  • By withdrawing your consent via our cookie consent tool;
  • By installing the Google Analytics opt-out browser add-on: https://tools.google.com/dlpage/gaoptout

Further information on how Google processes user data can be found in Google’s Privacy Policy: https://policies.google.com/privacy/

6.2 Google Ads Conversion Tracking

This website uses Google Ads Conversion Tracking, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

As part of our use of Google Ads, we utilize so-called conversion tracking. When you click on an advertisement placed by Google, a conversion tracking cookie is stored on your device. These cookies expire after a limited period of time and are not used to personally identify users.

If you visit certain pages of this website while the cookie is still valid, Google and we can recognize that you clicked on the advertisement and were redirected to the corresponding page.

Each Google Ads customer receives a unique cookie. Therefore, cookies cannot be tracked across the websites of different Google Ads customers.

The information collected through the conversion cookie is used to generate conversion statistics. We receive information about the total number of users who clicked on our advertisement and were redirected to a page that has been tagged for conversion tracking. However, we do not receive any information that would allow us to personally identify individual users.

Legal Basis

Google Ads Conversion Tracking is used exclusively on the basis of your consent pursuant to Article 6 (1) (a) GDPR and § 25 TTDSG, insofar as such consent includes the storage of cookies or access to information stored on the user’s device.

You may withdraw your consent at any time with effect for the future.

Transfers to Third Countries

As part of the use of Google Ads, personal data may also be transferred to Google’s servers in the United States.

Such data transfers are carried out on the basis of the EU Standard Contractual Clauses (SCCs).

It cannot be ruled out that U.S. authorities may gain access to the transferred data.

Further information is available at:

https://policies.google.com/privacy

https://privacy.google.com/businesses/gdprcontrollerterms/

Retention Period and Cookie Management

Conversion tracking cookies are stored only for a limited period and are deleted automatically once they expire.

You can prevent the storage of cookies at any time through your browser settings or delete cookies that have already been stored on your device.

In addition, you may withdraw your consent at any time via your cookie consent management tool.

6.3 HubSpot

Our website uses HubSpot, a software solution provided by HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA (hereinafter referred to as „HubSpot“).

HubSpot is an integrated software platform that enables us to manage various aspects of our online marketing activities, including:

  • Email marketing (e.g. sending newsletters)
  • Marketing automation
  • Contact management (CRM)
  • Website usage analytics
  • Provision of contact forms

Scope of Data Processing

When using HubSpot, personal data may be processed, including in particular:

  • IP address
  • Geographic location
  • Browser type and version
  • Operating system
  • Referring URL and accessed URLs
  • Date and time of access
  • Pages visited

If you submit data to us via a form (e.g. your name or email address), this information will also be stored and processed through HubSpot.

Purpose of Processing

The processing of your data is carried out in order to:

  • Respond to and process contact enquiries
  • Efficiently manage and optimize marketing activities

Cookies and Tracking

HubSpot uses cookies and similar technologies to analyse user behaviour and recognise returning visitors.

Cookies are stored on the basis of your consent pursuant to Article 6 (1) (a) GDPR and, where applicable, § 25 TTDSG, provided such consent has been requested.

You may withdraw your consent or adjust your cookie preferences at any time.

HubSpot may also process data in the United States. HubSpot is certified under the EU-U.S. Data Privacy Framework. In addition, we have entered into Standard Contractual Clauses (SCCs) with HubSpot to ensure an adequate level of data protection.

Personal data is retained only for as long as necessary to fulfil the purposes described above or where required by statutory retention obligations.

Data Processing Agreement

We have concluded a Data Processing Agreement (DPA) with HubSpot in accordance with Article 28 GDPR to ensure that your personal data is processed solely in accordance with our instructions.

Further information regarding HubSpot’s privacy practices can be found at: https://legal.hubspot.com/privacy-policy

7. Social Media Plugins and Social Media Presences

Functions and content from the social networks Facebook, Instagram, YouTube, and LinkedIn are integrated into this website.

7.1 Facebook and Instagram

Provider:

Meta Platforms Ireland Limited

4 Grand Canal Square

Dublin 2, Ireland

Data Processing Through Social Plugins

When you visit a page that contains a social media plugin, no direct connection to the provider’s servers will initially be established unless you have expressly given your consent.

Only after you have provided your consent will a connection to the servers of the respective provider be established. In particular, the following data may be transmitted:

  • IP address
  • Browser information
  • Operating system
  • Date and time of the page visit
  • Pages visited

If you are logged into your respective social media account at the same time, this data may be associated with your profile.

Purpose of Processing

The use of social media services serves to:

  • increase the reach of our website;
  • share and promote content; and
  • interact with users.

Legal Basis

Processing is carried out exclusively on the basis of your consent pursuant to Article 6 (1) (a) GDPR in conjunction with § 25 TTDSG, provided that you have given such consent.

You may withdraw your consent at any time with effect for the future.

Data Transfers to Third Countries

It cannot be ruled out that data may be transferred to the United States or other third countries. Such transfers are carried out on the basis of the EU Standard Contractual Clauses and, where applicable, other appropriate safeguards.

Joint Controllership (Facebook & Instagram)

For certain processing activities (e.g. when visiting our social media pages), we and Meta act as joint controllers within the meaning of Article 26 GDPR.

The joint controller arrangement can be viewed here: https://www.facebook.com/legal/controller_addendum

Further Information

Further information regarding data processing can be found in the privacy policies of the respective providers:

Facebook: https://www.facebook.com/privacy/policy/

Instagram: https://privacycenter.instagram.com/policy/

7.2 YouTube

We have embedded videos from the YouTube platform on our website.

Provider:

Google Ireland Limited

Gordon House, Barrow Street

Dublin 4, Ireland

Nature and Purpose of Processing

We use YouTube in order to display videos directly on our website.

Depending on the type of integration used, accessing a page may establish a connection to YouTube’s servers. In this process, the YouTube server is informed which of our pages you have visited.

If you are simultaneously logged into your YouTube or Google account, YouTube may directly associate your browsing behaviour with your personal profile.

Consent / Legal Basis

YouTube content is only embedded after you have provided your consent pursuant to Article 6 (1) (a) GDPR (via the cookie consent manager).

Without your consent, no data will be transmitted to YouTube.

Data Transfers to Third Countries

Personal data may be transferred to the United States. Such transfers are carried out on the basis of appropriate safeguards pursuant to Articles 44 et seq. GDPR (e.g. EU Standard Contractual Clauses).

Further information regarding YouTube’s data processing practices can be found at: https://policies.google.com/privacy

7.3 LinkedIn

Our website uses functions and content from the LinkedIn network.

Provider:

LinkedIn Ireland Unlimited Company

Wilton Place

Dublin 2, Ireland

Nature and Purpose of Processing

We use LinkedIn, for example, to present company information, analyse the use of our website, and integrate social media plugins.

When visiting a page containing LinkedIn components, a direct connection to LinkedIn’s servers may be established. LinkedIn thereby receives information that you have visited our website.

If you are logged into LinkedIn, LinkedIn may associate your visit to our website with your user account.

Consent / Legal Basis

LinkedIn functions are used only with your consent pursuant to Article 6 (1) (a) GDPR (via the cookie consent manager).

Where LinkedIn analytics functions are used, processing may additionally be based on our legitimate interest pursuant to Article 6 (1) (f) GDPR (e.g. to optimise our online offering), provided that no consent is required.

Data Transfers to Third Countries

LinkedIn may transfer data to the United States. Such transfers are carried out on the basis of appropriate safeguards pursuant to Articles 44 et seq. GDPR, particularly the EU Standard Contractual Clauses.

Further information regarding LinkedIn’s processing of personal data can be found at: https://www.linkedin.com/legal/privacy-policy

7.4 Google Maps

This website uses the Google Maps mapping service.

Provider:

Google Ireland Limited

Gordon House, Barrow Street

Dublin 4, Ireland

To use the functions of Google Maps, it is necessary to store your IP address. This information is generally transmitted to a Google server and stored there. The operator of this website has no influence over this data transfer.

The use of Google Maps is in the interest of presenting our online services attractively and facilitating the easy location of the places indicated on our website. This constitutes a legitimate interest within the meaning of Article 6 (1) (f) GDPR.

If consent has been requested, processing is carried out exclusively on the basis of Article 6 (1) (a) GDPR in conjunction with Section 25 TTDSG insofar as the consent includes the storage of cookies or access to information stored on the user’s device. Consent may be withdrawn at any time.

Data transfers to the United States are based on the European Commission’s Standard Contractual Clauses. Further details can be found at:

https://privacy.google.com/businesses/gdprcontrollerterms/

and

https://privacy.google.com/businesses/gdprcontrollerterms/sccs/

Further information on the handling of user data can be found in Google’s Privacy Policy:

https://policies.google.com/privacy

7.5 Use of Google reCAPTCHA

This website uses Google reCAPTCHA, a service provided by:

Google Ireland Limited

Gordon House, Barrow Street

Dublin 4, Ireland

reCAPTCHA is used to verify whether data entered on this website (e.g. in a contact form) is entered by a human being or by an automated program.

For this purpose, reCAPTCHA analyses the behaviour of website visitors based on various characteristics. This analysis begins automatically as soon as you enter a website with reCAPTCHA enabled.

For the analysis, various information is evaluated, including:

  • IP address
  • Time spent on the website
  • Mouse movements and user interactions
  • Browser and device settings
  • Cookies, where applicable

The data collected during the analysis is transmitted to Google.

Purpose and Legitimate Interest

Google reCAPTCHA is used to ensure the security of our website and to protect against misuse and automated access attempts (spam and bots).

This constitutes a legitimate interest within the meaning of Article 6 (1) (f) GDPR.

Where consent is requested (e.g. via a consent management tool), processing is additionally based on Article 6 (1) (a) GDPR in conjunction with § 25 TTDSG. Consent may be withdrawn at any time.

Data Transfers to Third Countries

The use of Google reCAPTCHA may result in the transfer of personal data to the United States.

Such transfers are carried out on the basis of the EU Standard Contractual Clauses and, where applicable, other appropriate safeguards.

It cannot be ruled out that U.S. authorities may gain access to the transferred data.

Further information can be found at:

https://policies.google.com/privacy

https://privacy.google.com/businesses/gdprcontrollerterms/

Retention Period

The retention period of the processed data is determined by Google and is outside our control.

8. Shopify

We use Shopify to operate our online store.

Provider:

Shopify International Limited

Victoria Buildings, 2nd Floor

Haddington Road

Dublin 4, D04 XN32

Ireland

Nature and Purpose of Processing

Shopify provides the e-commerce platform through which we offer our products and services.

In this context, personal data that you provide during the ordering process is processed, in particular:

  • Name, address, and contact details
  • Payment information
  • Order data
  • IP address and technical usage data

This data is required in order to:

  • process orders;
  • process payments;
  • arrange deliveries;
  • handle customer enquiries; and
  • ensure the security and functionality of the online store.

Server Location and Data Processing

Data processing is carried out via Shopify servers, which may also be located outside the European Union (particularly in Canada and the United States).

As Shopify is a globally operating provider, it cannot be ruled out that data may be processed outside the EEA.

Legal Basis

Your data is processed on the basis of:

  • Article 6 (1) (b) GDPR (performance of a contract) for processing orders;
  • Article 6 (1) (c) GDPR (compliance with a legal obligation); and
  • Article 6 (1) (f) GDPR (legitimate interests) for the secure and efficient provision of our online services.

Data Transfers to Third Countries

  • Shopify may transfer personal data to third countries (e.g. Canada and the United States). Canada benefits from an adequacy decision issued by the European Commission.
  • For transfers of data to other third countries, appropriate safeguards pursuant to Articles 44 et seq. GDPR are applied, in particular the EU Standard Contractual Clauses.

Payment Processing

Depending on the payment method selected by you, your payment data will be transmitted to the relevant payment service providers.

These providers act as independent controllers within the meaning of the GDPR.

Retention Period

Your personal data will be stored only for as long as necessary to fulfil the purposes described above or as required by statutory retention obligations.

Further information on Shopify’s processing of personal data can be found at:

https://www.shopify.com/legal/privacy

9. Data Subject Rights

You have the following rights with regard to your personal data:

  • Right of access;
  • Right to rectification or erasure;
  • Right to restriction of processing;
  • Right to object to processing;
  • Right to withdraw consent where processing is based on consent; and
  • Right to data portability.

You also have the right to lodge a complaint with a data protection supervisory authority of your choice regarding our processing of your personal data.

Contact details of the German data protection authorities can be found at:

https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

If you wish to exercise your right to withdraw consent or your right to object, simply send an email to:

mail@burmester.de

10. Data Security

During your visit to our website, Burmester uses the widely adopted SSL (Secure Socket Layer) encryption technology in conjunction with the highest level of encryption supported by your browser.

As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, a 128-bit v3 technology connection will be used instead.

You can determine whether an individual page of the Burmester website is transmitted in encrypted form by checking for the closed key or padlock symbol displayed in your browser’s status or address bar.

Furthermore, Burmester employs appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access by third parties.

Our security measures are continuously improved in line with technological developments.

11. Liability for External Links and Third-Party Content

Our website contains links to external third-party websites whose content is beyond our control. Therefore, we cannot assume any liability for such external content.

The respective provider or operator of the linked website is always responsible for the content of the linked pages.

The linked pages were reviewed for possible legal violations at the time the links were created. No unlawful content was identifiable at that time.

However, permanent monitoring of the content of linked pages is not reasonable without concrete indications of a legal infringement. If we become aware of any such violations, we will remove the relevant links immediately.

We likewise accept no liability for content provided by third parties or for services to which we merely refer. The use of external content is at the user’s own responsibility.

12. Currency and Amendments to this Privacy Notice

This Privacy Notice is currently valid and reflects the status of May 2026.

As a result of the ongoing development of our website and the services offered through it, or due to changes in legal or regulatory requirements, it may become necessary to amend this Privacy Notice.

The latest version of this Privacy Notice can be accessed and printed at any time from our website.