Privacy policy

Data protection information in accordance with Article 13 GDPR

The protection of personal data is a valuable asset. With this data protection declaration, we inform you about the processing that takes place in our company, the purposes and legal basis for processing and your rights as a data subject.

Responsible body:
Gebr. Alexander,
Rhein. Musikinstrumentenfabrik GmbH
Robert-Koch-Straße 10
55129 Mainz

Phone: +49 61 31 28 80 80
E-Mail: mail(at)gebr-alexander.de

Managing Director: Philipp Alexander

1. The purposes of the processing of personal data and the legal basis for the processing

1.1 Automatic data collection when visiting our website

When you access our website, data is necessarily collected automatically. This data (also known as server log files) includes the type of web browser you are using, the operating system you are using, the domain name of your Internet service provider and the time of the server request. This information is technically necessary data in order to correctly display the contents of Internet pages and contents you have called up. In addition, we try to detect, ward off and trace hacker attacks by storing IP addresses for a short time.

Legal basis
Article 6 paragraph (1) lit. f) GDPR: Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Storage period
We only store personal data for as long as we have a legitimate purpose and a valid legal basis for storing it or are required to store it due to a statutory retention period or other legal obligation. IP addresses are automatically deleted after 7 days.

1.2 Initiation, execution, administration and invoicing of customer orders

In order to initiate, execute, manage and invoice customer orders, as well as for any credit checks that may be required, we require personal data that is processed and stored by us for these purposes. We also process personal data to fulfill legal obligations to provide evidence to authorities and authorized external bodies.

Data categories
Personal data contained in offers, contact requests, order confirmations, delivery bills, invoices, letters and emails, as well as in our software programs such as our merchandise management system, email program, for customer data and order management and for the legally required documentation and archiving of business transactions.

These are
Surnames and first names of customers and contact persons
Address (country, zip code, city, street, house number)
Telephone number
E-mail address
Phone No.
Contracts
Repair bills
Delivery bills
Customs documents
Information on instruments
Company
Payment data
Billing address
Delivery address
Functions / roles of persons
Tax ID / VAT ID
Bank account details (e.g., IBAN, BIC, SWIFT, account holder) for processing payments, direct debits, and refunds.
Credit information

Legal bases
Article 6 paragraph (1) lit. b) GDPR: Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract

Article 6 paragraph (1) lit. c) GDPR: Processing is necessary for compliance with a legal obligation to which the controller is subject

1.3 Track and Trace (shipment tracking)

In order to enable you to track the delivery of your parcel and to enable the transport service provider/deliverer to notify you by email about the delivery status of your order, we will pass on your email address to the transport service provider. If you do not wish this, please let us know.

Data category
E-mail address

Legal basis
Article 6(1)(f) GDPR

2. Application procedures and employment relationships

If you apply for an apprenticeship or job with us and send us your application documents by e-mail or post, we will process your personal data as part of the normal application process. We will confirm receipt of your application by e-mail or post to the contact details you have provided.

We process the personal data required for the initiation, implementation and termination of employment relationships.

Applicant pool: If we would like to store your application documents for longer so that we can come back to you at a later date if necessary, we will obtain your prior consent under data protection law.

Data categories
Surname and first name
Place of residence
Telephone number
E-mail address
Curriculum vitae, certificates, references
Hobbies
Health data
Data on religious beliefs
Data on racial or ethnic origin
Other information voluntarily disclosed to us with your application
Certificates

Legal basis for the processing
Section 26 BDSG in conjunction with Article 88, Article 9 GDPR
Article 5(1)(c) GDPR

3. Automated decision-making

A decision based solely on automated processing within the meaning of Article 22 and including profiling does not take place.

4. Use of processors / transfer to third countries

We also transfer personal data to external service providers for the production of instruments, the provision of our services and services, and the provision and operation of our required IT infrastructure.

Insofar as service providers process personal data, this is done on our instructions and exclusively under the legally prescribed conditions and requirements of the GDPR by means of an order processing contract in accordance with Article 28 GDPR.

Through an appropriate selection process, we ensure that only service providers who guarantee us an adequate level of data protection for the task assigned to us work on our behalf.

Insofar as processors or service providers in third countries outside the European Union process personal data, this is done in accordance with the requirements and provisions of the GDPR.

If the transfer of data to a third country involves a risk for data subjects or if we cannot rule out the possibility that a data recipient may process personal data for other purposes or for its own purposes, we will obtain your consent before processing your personal data.

Legal bases for the processing
(Article 28 GDPR)
(Article 44 GDPR)
Article 6(1)(a) GDPR
Article 6(1)(f) GDPR

5. Contact options offered on our website

We have provided various service forms for you in order to meet regular customer requests in the best possible way. The personal data collected via these forms is processed by us exclusively for the purpose agreed in the form.

Contact us
How old is my instrument
Repairs
Dealer search
Frequently asked questions
Request a quote for an instrument
Banking Details

Except for the process "Request a quote for an instrument", the forms were created with 'Shopify Forms Powered by HulkApps'. All information provided by you in the forms created with 'Shopify Forms Powered by HulkApps' is also transmitted to our processor Shopify by sending the forms. We have concluded a contract with Shopify in accordance with Article 28 GDPR.

Data categories
First name, surname (customer name)
Company
Email address
Telephone number
Street and house number
Postcode and city
Country
Delivery address
Billing address
Model name of an instrument
Serial number of an instrument
Pictures of instruments and engravings uploaded by you
Data entered voluntarily by you in the message field
Bank account details (e.g., IBAN, BIC, SWIFT, account holder) for processing payments, direct debits, and refunds.

Legal bases
Article 6 paragraph (1) lit. f) GDPR: Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Article 6 paragraph (1) lit. b) GDPR: Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract

Storage period
We only store personal data in the online store for as long as we have a legitimate purpose and a valid legal basis for storing it or are obliged to store it due to a statutory retention period or other legal obligation.

5.1 Forwarding inquiries to our local dealers

In order to respond as effectively as possible to requests that you submit to us via the contact options on our website, as a company that also fulfills services and product requests via an international dealer network as described, we may forward your request to a dealer listed on our website at https://gebr-alexander.de/en/pages/handlersuche.

Data categories
First name, surname (customer, interested party)
Company name
e-mail address
telephone number
Street and house number
Zip code and town
Country
Content of your request
Data voluntarily entered by you in the message field

Storage period
We store personal data for as long as we have a legitimate purpose and a valid legal basis for storing it or are required to store it due to a statutory retention period or other legal obligation.

6. SSL - Encryption

Our SSL encryption (SSL = Secure Sockets Layer) ensures good protection during the transmission of data against access and misuse by third parties. Article 32(1) GDPR requires measures for the secure transmission of data. As the operator of this website, we follow the recommendation of the German Federal Office for Information Security (BSI) and have implemented SSL encryption in order to transmit personal data securely on the internet.

With the implemented SSL encryption, we achieve secure data transmission for downloads and for the use and transmission of data via our contact and order forms.

You can also recognize the use of this technology by our URL, which begins with "https".

7. Google maps

We have integrated Google Maps as a service within our website. We would like to offer interested parties the opportunity to locate us and quickly plan their route.

Google Maps is a service of the service provider

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4 / Ireland

Google records every activity that Internet visitors undertake via Google Maps. These can be places, routes, companies and institutions that users view via Google Maps (maps integrated into our website). If the settings on your end device (e.g. smartphone, PC, tablet, laptop, etc.) allow your location to be determined, Google will determine your location. This data is collected, stored and processed by Google. Google also stores data when Internet visitors do not surf directly on our Google Maps offer, because we have integrated Google via a so-called API (Application Programming Interfaces). Google places a cookie in the browser to collect personal data from Internet visitors. We have no influence on the processing or transfer of personal data to other companies by Google.

For this reason, we obtain your consent (OptIN) before using Google (Maps).

Legal basis for the use of Google Maps
Article 6(1)(a) GDPR. The data subject has given their consent to the processing of their personal data for one or more specific purposes.

8. Google OptOUT

If you wish to withdraw your Google consent on our website, you can do so at any time using the Google OptOut function in our Cookie Consent Manager.

In principle, you can also use your individual browser settings to influence the acceptance or rejection of cookies.

9. Our webshop offer with the service provider Shopify

We use the store system of the service provider

Shopify international Limited
Victoria Buildings, 2nd floor
1-2 Haddington Road
Dublin 4 DO4 XN32 Ireland

We have concluded an order processing contract with Shopify international Limited in accordance with Article 28 GDPR. By using our webshop, your personal customer data is transmitted to Shopify. As part of Shopify's services, Shopify uses other companies to provide its services. These are Shopify Inc, 150 Elgin St, Ottawa, ON K2P 1L4 in Canada, Shopify Data Processing (USA) Inc, Shopify Payments (USA) Inc or Shopify (USA) Inc. For more information, please refer to Shopify's data protection information, e.g. at https://www.shopify.com/de/legal/privacy/customers . Our processor Shopify international Limited assures to process personal data exclusively in compliance with the GDPR.

Data categories
First name, surname (customer name)
Company
Email address
Street and house number
Postcode and town
Country
Delivery address
Billing address
Payment data
Model designation of an instrument
Serial number of an instrument
Pictures of instruments and engravings uploaded by you
Data entered voluntarily by you in the message field

10. Payment options

We offer you various payment options for processing a purchase in our online store.

PayPal
By selecting PayPal to register and process the payment via your personal PayPal account, you will be forwarded directly to PayPal. The company PayPal (Europe) S.à r.l. et Cie, S.C.A. is based in Luxembourg. We have no influence on the processing of personal data by PayPal. Please inform yourself on the website of the payment service, e.g. at https://www.paypal.com/ or https://www.paypal.com/myaccount/privacy/privacyhub, about the processing of personal data.

Legal basis for the option offered by us to pay via PayPal
Article 6 paragraph (1) lit. f) GDPR: Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

G Pay
By selecting G Pay, you will be forwarded directly to Google to register and process the payment via your personal G Pay account. The company Google Ireland Limited is based in Ireland. We have no influence on the processing or transfer of personal data to other companies by Google. Please refer to the payment service's website, e.g. https://policies.google.com/privacy or https://policies.google.com/terms, for information on the processing of personal data.

Legal basis for the option offered by us to pay via G Pay
Article 6 paragraph (1) lit. f) GDPR: Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Apple Pay
We also offer the use of Apple Pay as a payment option on our website. The provider of this payment service is Apple Inc, Infinite Loop, Cupertino, CA 95014, represented in the EU by Apple Distribution International Ltd, Hollyhill Industrial Estate, Hollyhill, Cork, Republic of Ireland. Registration number: 470672 / Commercial Register in Ireland, VAT ID No.: DE 27946362. If you select Apple Pay for payment processing, the payment data you enter will be transmitted to Apple Pay. The data protection information on the processing of your personal data by the payment service provider Apple Pay can be found at https://www.apple.com/legal/privacy/data/en/apple-pay/

Legal basis for the option offered by us to pay via Apple Pay
Article 6 paragraph (1) lit. f) GDPR: Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Shopify Shop Pay
The provider of the Shop Pay payment service is a subsidiary of Shopify International Limited, c/o Intertrust Ireland, 2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32 in Ireland. If you have selected the Shopify Shop Pay payment option, the personal data you provide to process the payment will be transmitted to Shopify. The data protection information on the processing of your personal data by the payment service provider Shop Pay can be found at: https://shop.app/privacy

Legal basis for the option offered by us to pay via Shop Pay
Article 6 paragraph (1) lit. f) GDPR: Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Credit card payment
If you select the option "Payment by credit card", the data you enter will be transmitted to our store operator Shopify. We have concluded an order processing contract with Shopify.

Your data will also be transmitted to your credit card provider / bank for verification and payment processing. Please refer directly to the data protection information of your bank or credit card institution.

Data categories
Email address
Country
Surname and first name of the credit card holder
Company
Billing/delivery address
Street and house number
Postcode and town
Card number/security code
Validity period of the card used for payment

11. Shopify geolocation

We sell our products internationally. People interested in our products come from all over the world. For this reason, we use a Shopify geolocation tool. When you enter the website, the tool determines the country from which you are visiting our website. This is done in order to show you the correct prices of our products in the store. Tracking of the IP address and transmission to Shopify begins when you land on our website.

We have concluded an order processing contract with Shopify in accordance with Article 28 GDPR. You can find Shopify's data protection information at https://www.shopify.com/de/legal/privacy/customers

Data categories
IP address

Storage duration
IP addresses are deleted by Shopify after closing your customer account with Shopify.

Shopify itself offers the possibility to find out which personal data is stored by Shopify at https://privacy.shopify.com/en. You can exercise your rights as a data subject at any time vis-à-vis us as the controller as the seller. See point 15 of this statement: Your rights as a data subject.

12. Withdrawal Form & Electronic Withdrawal Function

If you wish to withdraw from a distance contract, please use either the model withdrawal form (PDF) provided on our website or our digital withdrawal function via the website.

Data Categories
Name (first and last name)
Email address (for identification and delivery of the legally required confirmation of receipt)
Order number (to identify the contract being withdrawn)
Timestamp (date and time of the withdrawal declaration and confirmation)
Withdrawal status (processing status of the request)
Browser language data (for automatic language selection of the form)
Email metadata (delivery status and timestamp of the confirmation email)
Additionally, when using the PDF form: Customer number, address (street, house number, zip code, city, country) and your personal signature.

Order Processing
For the provision and operation of the "EU Withdrawal Button" app, we use the service provider Jonas Busch (Sole Proprietorship) as a processor. Processing is carried out on the basis of a contract pursuant to Art. 28 GDPR. The primary data infrastructure is located within the EU (Germany and the Netherlands). Since the app accesses order data from our e-commerce platform Shopify, data is transferred to Shopify Inc. (Canada), which is secured by an adequacy decision of the EU Commission.

Legal Basis
Art. 6 (1) (b) GDPR: Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Art. 6 (1) (c) GDPR: Processing is necessary for compliance with a legal obligation (in particular the obligation to immediately confirm a withdrawal declared by electronic means pursuant to § 356a BGB).

Storage Period
We only store personal data as long as we have a legitimate purpose and a valid legal basis for storage, or are forced to store it due to a statutory retention period or another legal obligation. When using the electronic withdrawal function, data is automatically deleted after 30 days, depending on the selected scope of functions. Upon termination of the use of the app, all data will be deleted within 30 days, provided there are no conflicting statutory retention obligations.

13. Exhibitions and dates / links to third-party websites

Here you will find information on events and dates that we would like to inform you about. As soon as you click on the "LEARN MORE" button there, you will leave our website and go to the website of a third party. We are not responsible for the processing of personal data by third parties.

Legal basis for the storage of third-party links
Article 6 paragraph (1) lit. f) GDPR: Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

14. Taking photos and videos at events and trade fairs

As part of appropriate public relations work, photos and videos are taken by our photographers and videographers at events and trade fairs, approved by an internal editorial team and subsequently published by us or kept as a reminder and documentation of such events and for the creation of chronicles as a review of past events.

When taking photos and videos, the principles of data protection law and the personal rights of data subjects are observed and appropriately weighed up against our interests in effective public relations work before publication. We will only store and publish
photos and videos that make
you identifiable
as an individual person,
for example through a portrait shot, with your express consent.

No express consent is required from the persons photographed for recordings that are designed in such a way that individual persons only appear as accessories and background to the event. The creation of such photos and videos is justified by our legitimate interest in effective public relations work.

However, if you do not wish to be included in such recordings, please inform either the photographer, videographer or our employees directly at the event or trade fair so that we can take your wishes into account.

Data categories
Images
Videos

Article 6(1)(a) GDPR. The data subject has given their consent to the processing of their personal data for one or more specific purposes.

Deletion periods
Images or video recordings that are not required for the stated purposes will be deleted. We delete images and video recordings in every case in which we are legally obliged to do so. For example, if the data subject has not given their consent under data protection law, or if consent has been withdrawn, or if there is an objection to processing.

Insofar as recordings are published on the Internet / social media, we have no possibility to delete them on the Internet insofar as they are no longer published only on systems to which we have access, but have been shared by third parties in the community, for example.

15. Your rights as a data subject

Right to information (Art. 15 GDPR) You can request information at any time as to whether and which personal data concerning you is processed by us, for what purposes the processing is carried out, where the data originates from, to which recipients the data may be transmitted and how long such data is stored by us.

Right to rectification (Art. 16 GDPR) If you discover that personal data concerning you is incorrect, you can request the rectification of this data at any time. If you believe that data is incomplete, you can also request that it be completed.

Right to erasure (Art. 17 GDPR) If you believe that the processing of your personal data is no longer necessary or is carried out without a sufficient legal basis or is unlawful for other reasons, you can request the erasure of this data.

Right to restriction of processing (Art. 18 GDPR) Instead of the erasure of data, you can also request the restriction of the use of data if data is being used unlawfully. In particular, you can also request such a restriction on the use of data if you dispute the accuracy of data or have objected to the use of data.

Right to data portability (Art. 20 GDPR) With regard to the personal data that you have provided yourself and which is used on the basis of a contract or consent, you can request that this data be made available to you in a structured, common and machine-readable format. You may also request that this data be transmitted directly to another controller.

Revocation and objection (Art. 21, Art. 7 para. (3) GDPR You have the right to revoke your consent or to object to the processing of your personal data at any time.

Exercising your rights as a data subject

To exercise a data subject right, please simply contact us.

Gebr. Alexander, Rhein. Musikinstrumentenfabrik GmbH
Robert-Koch-Straße 10
55129 Mainz

Phone: +49 61 31 28 80 80
E-Mail: mail(at)gebr-alexander.de

Right to lodge a complaint (Art. 77 GDPR) If you believe that your rights in relation to the personal data concerning you have been violated, you have the right to lodge a complaint with the supervisory authority at any time.

Responsible official body:

The State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate
Hintere Bleiche 34
55116 Mainz

Phone: +49 (0) 6131 8920-0

16. Amendment of this privacy policy

Since changes in the law or changes to our internal company processes may make it necessary to adapt this data protection declaration, which we must reserve the right to do for this reason, we ask you to consider this data protection declaration regularly with regard to adjustments and changes relevant to you, thank you!

References to third-party links are current at the time of publication of this information obligation. We have no influence on changes made by other responsible parties. If we discover that links to third parties mentioned by us are no longer current, we will update them.

Status: June 2025

-------------------------

Accessibility Statement

Gebr. Alexander, Rhein. Musikinstrumentenfabrik GmbH is committed to making its website gebr-alexander.de accessible in accordance with the German Accessibility Strengthening Act (Barrierefreiheitsstärkungsgesetz, BFSG). This statement applies to the domain gebr-alexander.de and gebr-alexander.com.

Status of Compliance with Accessibility Requirements
This website is currently partially compliant with the accessibility requirements.

Content that is not or only partially accessible

The following barriers are currently known to us:

Page structure / navigation
The structure and navigation of the website are not yet fully implemented in an accessible way.
Keyboard accessibility
Not all functions of the online shop can be used without restriction via keyboard.
Contrast
In some cases, texts, buttons, or icons are displayed without sufficient color contrast.
Design and controls
A few buttons are too small or placed too close together.
Time restrictions
Automatic logouts or time limits are not always announced.
PDF documents
Not all provided PDF documents are accessible.

We are continuously working to gradually reduce these barriers.

Creation of this statement
This statement was created on 28 June 2025 and last updated on 03 September 2025.

Feedback and Contact
If you notice any further barriers or need assistance in using our online shop, please contact us at:

Gebr. Alexander, Rhein. Musikinstrumentenfabrik GmbH
Robert-Koch-Straße 10
55129 Mainz

Email: mail(a)gebr-alexander.de

Enforcement Procedure
If your inquiry is not answered within a reasonable period of time, you may contact the enforcement body of the State Commissioner for Matters relating to Persons with Disabilities in Rhineland-Palatinate:

State Commissioner for Matters relating to Persons with Disabilities
Ministry of Labour, Social Affairs, Transformation and Digitalization (MASTD)
Bauhofstraße 9, 55116 Mainz
Phone: +49 6131 16-5342
Fax: +49 6131 16 17 5342
Email: durchsetzungsstelle@mastd.rlp.de
Web: https://mastd.rlp.de/themen/soziales/teilhabe-und-inklusion

Privacy policy

Data protection information in accordance with Article 13 GDPR

Accessibility Statement

Shop the look

Choose Options

Edit Option