Privacy Policy (UK)

1. General Information

We take the protection of your personal data very seriously. This Privacy Policy explains how we process personal data when you visit our website and informs you about your rights under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

Personal data is any information that can be used to identify you personally.


2. Data Controller

The data controller responsible for processing personal data within the meaning of the UK GDPR is:

Audiorooms GmbH
represented by Christoph Dubbel and Jan Dugge
Auerstraße 18
34121 Kassel
Germany

Email: info@audiorooms.co.uk


3. Use of a Consent Management Tool

To manage cookies and similar technologies (such as tracking pixels, web beacons, and scripts) and the related consents, we use the consent management tool “Real Cookie Banner”.

This tool helps us to obtain, manage, and document user consent in compliance with the UK GDPR and the Privacy and Electronic Communications Regulations (PECR).

Further information on how Real Cookie Banner processes data can be found at:
https://devowl.io/rcb/data-processing/

Legal Basis

The processing of personal data in connection with the consent management tool is based on:

  • Article 6(1)(c) UK GDPR (compliance with a legal obligation), and

  • Article 6(1)(f) UK GDPR (legitimate interest in lawful and transparent consent management).

Providing personal data is neither legally nor contractually required. You are not obliged to provide personal data. If you do not provide personal data, we will not be able to manage your cookie preferences.


4. Your Rights as a Data Subject

Under the UK GDPR, you have the following rights at any time:

  • Right of access to your personal data (Article 15 UK GDPR)

  • Right to rectification of inaccurate or incomplete data (Article 16 UK GDPR)

  • Right to erasure (“right to be forgotten”) (Article 17 UK GDPR)

  • Right to restriction of processing (Article 18 UK GDPR)

  • Right to data portability (Article 20 UK GDPR)

  • Right to object to processing based on legitimate interests (Article 21 UK GDPR)

If processing is based on your consent, you may withdraw this consent at any time with effect for the future.

Right to Lodge a Complaint

You also have the right to lodge a complaint with the competent supervisory authority in the United Kingdom:

Information Commissioner’s Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom
https://ico.org.uk/


5. Collection of General Information When Visiting Our Website

Type and Purpose of Processing

When you access our website, general technical information is automatically collected by our servers (server log files). This may include:

  • Browser type and version

  • Operating system

  • Referrer URL

  • Internet service provider

  • IP address

  • Date and time of access

This data is processed for the following purposes:

  • Ensuring a smooth connection to the website

  • Ensuring optimal usability

  • Ensuring system security and stability

  • Improving and optimising our website

The data is analysed in a pseudonymised or anonymised form and does not allow us to draw direct conclusions about your identity.

Legal Basis

Processing is based on our legitimate interests under Article 6(1)(f) UK GDPR.

Storage Duration

Server log files are stored for a maximum of 14 days. IP addresses are anonymised where technically possible.


6. Cookies

Our website uses cookies. Cookies are small text files that are stored on your device and help us to improve the usability and functionality of our website.

You can delete cookies at any time using your browser settings.

Technically Necessary Cookies

These cookies are required for the operation of the website and cannot be disabled. They are used, for example, to:

  • Store language preferences

  • Remember cookie consent settings

  • Ensure basic website functionality

Legal basis: Article 6(1)(f) UK GDPR (legitimate interests) in conjunction with Regulation 6 of PECR.

Non-Essential Cookies

Non-essential cookies are used for analytics, marketing, and optimisation purposes.

These cookies are only set with your explicit consent.

Legal basis: Article 6(1)(a) UK GDPR (consent) in conjunction with Regulation 6 of PECR.

You may withdraw your consent at any time via the cookie consent tool.


7. Contact Form

When you contact us via the contact form, the data you provide will be processed for the purpose of responding to your enquiry.

Legal Basis

  • Article 6(1)(f) UK GDPR (legitimate interest in responding to enquiries)

  • Article 6(1)(b) UK GDPR (pre-contractual measures, where applicable)

Storage Duration

Contact form data is stored for up to 6 months unless statutory retention obligations apply.


8. Google Services

Our website uses services provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Web Fonts

Google Web Fonts are used to ensure consistent and appealing typography.

Privacy Policy: https://policies.google.com/privacy

Google Maps

Google Maps is used to display interactive maps.

Privacy Policy: https://policies.google.com/privacy

YouTube

Embedded YouTube videos may collect user data when played.

Privacy Policy: https://policies.google.com/privacy

Google Tag Manager

Google Tag Manager is used to manage website tags and tracking tools.

Legal basis: Article 6(1)(f) UK GDPR or consent under Article 6(1)(a) UK GDPR, depending on configuration.

Google Ads, Remarketing and Conversion Tracking

These services are used for advertising and performance measurement.

Legal basis: Article 6(1)(a) UK GDPR (consent).

Google is certified under the UK Extension to the EU–US Data Privacy Framework. Where applicable, data transfers are additionally safeguarded by appropriate measures pursuant to Article 46 UK GDPR.


9. Data Security (SSL Encryption)

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” prefix in your browser’s address bar.


10. Right to Object

If your personal data is processed on the basis of legitimate interests, you have the right to object to this processing at any time on grounds relating to your particular situation.


11. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy to ensure ongoing compliance with legal requirements or to reflect changes to our services or data processing activities.


12. Contact

If you have any questions regarding data protection or the processing of your personal data, please contact us using the details provided above.

This Privacy Policy was created with the assistance of activeMind