Updated: 13 October 2026. This privacy policy explains how personal data is processed when you visit analog-lounge.net or contact Analog Lounge.
1. Controller and contact details
Analog Lounge GmbH
Hauptstraße 30
04668 Parthenstein, Germany
Represented by managing director Mike Werner
Email for privacy enquiries: direkt@analog-lounge.net
2. Website access and technical operation
Visiting this website involves processing connection data needed to deliver its pages. This includes your IP address, the requested address, the time of access and device, browser and, where supplied, referral information. These data support page delivery, troubleshooting and protection against attacks. Hosting and technical support providers may receive data for these purposes.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to operate a reliable and secure website. Technical logs are deleted after the period needed for operation, troubleshooting and investigation of security incidents. Longer retention may be necessary to preserve evidence of a specific incident or meet legal obligations.
3. Enquiries, equipment assessments and contracts
If you contact us by email, telephone, post or WhatsApp, we process your contact details and the information you send. Equipment purchase enquiries may include equipment lists, photographs, condition descriptions, price expectations and handover arrangements. If a contract is concluded, we also process the contract, address and payment information needed to fulfil it.
Processing required to take steps towards or perform a contract is based on Article 6(1)(b) GDPR. Other enquiries are handled under Article 6(1)(f) GDPR; our legitimate interest is to respond to your message. Mandatory record keeping is based on Article 6(1)(c) GDPR. Please send only relevant information and avoid unnecessary information about other people or sensitive documents.
Depending on the transaction, relevant data may be shared with IT and communications providers and, where needed, payment, delivery or professional advisory services. Tax authorities or other competent bodies may receive data where legally required. Without the information necessary for a particular enquiry or contract, we may be unable to handle it or complete the transaction.
4. WhatsApp
You may choose to contact us on WhatsApp at +49 177 6929695. WhatsApp Ireland Limited provides the service for users in the European Economic Area. We process the messages, files, telephone number and displayed profile information you send us to handle your enquiry, on the legal bases described in section 3.
WhatsApp also processes data for its own purposes, including account, device and connection information. Processing outside the European Economic Area is possible. See the WhatsApp privacy policy. You do not have to use WhatsApp: you can contact us by email or post instead.
5. Cookies and consent
Cookies and similar technologies can store information on your device or access information already stored there. Section 25 of Germany’s Telecommunications Digital Services Data Protection Act (TDDDG) generally requires consent. Exceptions include operations solely needed to transmit a communication and operations strictly necessary to provide a digital service you expressly request. Processing personal data also requires a legal basis under the GDPR.
You can allow or reject statistics, external reviews and videos separately in the consent banner. These optional services remain blocked until you choose to allow them. Use “Privacy settings” in the footer at any time to change your choice or withdraw consent for future processing. Withdrawing permission reloads the page.
Your choice is stored in your browser’s local storage as “al_consent_v1”, including categories, time, language and version. It is valid for up to 180 days, after which the next visit prompts a new choice. This storage implements and records your decision on this device; it is not sent to a banner provider as a visitor identifier. Necessary device access is based on section 25(2)(2) TDDDG. Personal data needed to demonstrate consent is processed under Article 6(1)(c) in conjunction with Article 7(1) GDPR.
6. Google Analytics
We use Google Analytics 4 to analyse page visits and website use. For users in the European Economic Area, the provider is Google Ireland Limited, Ireland. After you consent, technical device and connection information and usage events may be transmitted to Google, and Analytics cookies may be stored. Google companies outside the European Economic Area may also participate in processing.
The Google Analytics tag loads only after you allow the “Statistics” category. If you reject it, the tag remains blocked. This statistics permission does not allow advertising storage, advertising personalisation or the use of user data for advertising. Logged-in website users are excluded from Analytics tracking.
The legal basis for the analytics you allow is your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG for corresponding access to your device. You can withdraw consent through “Privacy settings” in the footer. Analytics cookies accessible to our website are then deleted. Further information: Google privacy policy.
7. Website security with Wordfence
We use Wordfence, provided by Defiant, Inc., USA, to protect the website against unauthorised access and malicious requests. This may involve processing IP addresses and technical characteristics of requests. Security-related data may be transmitted to the provider. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is to protect this website and its users. See the Wordfence privacy policy and Wordfence data processing terms for information about processing and international transfers.
8. Reviews: Trustami and Trustindex
Parts of this website display reviews from Trustami GmbH, Germany, and Trustindex Ltd, Hungary. External review resources load only after you allow the “External reviews” category. Their providers may then receive your IP address and technical request information. Review text already stored on our server may remain visible without an external connection. A simple review link takes you to its destination only when you follow it.
Displaying published reviews, including the reviewer names and review content shown, helps visitors learn about experiences with our company. Our legitimate interest in providing this information is the basis under Article 6(1)(f) GDPR, unless overridden by the interests of the people concerned. This does not justify device access or additional analytics that requires consent; separate consent is needed for that processing. Further information: Trustami privacy policy and Trustindex privacy policy.
9. Videos and external links
Some pages contain YouTube videos or links to them. External YouTube players load only after you allow the “Videos” category. This can disclose your IP address, device information and the page visited to YouTube or Google. Playing a video may generate additional usage data; if you are signed in, activity may be associated with your account. The legal bases are Article 6(1)(a) GDPR and, where applicable, section 25(1) TDDDG. See the Google privacy policy.
We also link to services such as eBay, Google Maps and social networks. Following these links takes you away from our website. The destination’s operator is generally responsible for processing on its own service, under its own privacy information. A simple link differs from external content that loads automatically.
10. Comments
Where comments are available, we process the details entered and the comment for publication and moderation. Your chosen display name and comment may become public. An email address provided is used to handle the comment and is not published as part of it. The legal basis is Article 6(1)(f) GDPR; our legitimate interests are relevant discussion and prevention of misuse. Contact us at the address above with any enquiry about a published comment.
11. Retention and international processing
We retain personal data for as long as it is needed for its purpose. For enquiries, this generally means until the matter has been resolved. Contract records may be subject to additional commercial and tax retention requirements. Unresolved claims may require further retention to establish or defend legal rights. Data is then deleted or anonymised unless another legal basis permits continued retention. Independent external providers also explain their retention practices in their own policies.
The international providers mentioned above may process data outside the EU or European Economic Area, particularly in the United States. Such transfers must meet the requirements of Articles 44 onwards GDPR, for example through an applicable adequacy decision or appropriate safeguards such as EU standard contractual clauses. Mentioning these mechanisms is not a general assurance that every provider holds a particular certification. You can contact us for information about recipients and any applicable safeguards.
12. Your rights
Subject to the applicable legal conditions, you have rights of access to your personal data (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). You may withdraw consent at any time for future processing. Withdrawal does not affect the lawfulness of processing carried out before it.
Right to object: Where processing relies on Article 6(1)(f) GDPR, you may object under Article 21 GDPR for reasons relating to your particular situation. You may object to processing for direct marketing at any time without giving such reasons. Please send requests to direkt@analog-lounge.net.
You may also complain to a data protection supervisory authority, particularly in the country of your habitual residence, workplace or the suspected infringement. The authority responsible for our company is the Saxon Data Protection and Transparency Commissioner in Germany.