PRIVACY POLICY
Last updated: September 2026
1. GENERAL INFORMATION
The protection of your personal data is important to us.
This Privacy Policy explains how personal data is collected and processed when you visit the Monolith / Touch Guitars website, contact us, subscribe to our newsletter or use services integrated into this website.
Personal data means any information relating to an identified or identifiable natural person.
We process personal data in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), the Telecommunications Digital Services Data Protection Act (TDDDG) and other applicable data protection laws.
2. CONTROLLER
The controller responsible for data processing on this website is:
Touch Guitars
Stefan Huth
Berger Feld 22
41334 Nettetal
Germany
Phone: +49 (0)152 33659740
Email: info@monolith-instruments.com
The controller is the natural or legal person who determines the purposes and means of processing personal data.
3. HOSTING
This website is hosted by:
STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin
Germany
When you access this website, the hosting provider may process technical information required to deliver and secure the website.
This information may include:
• IP address
• date and time of access
• requested page or file
• amount of data transferred
• browser type and browser version
• operating system
• referrer URL
• HTTP status information
• other technical connection information
The processing of this data is necessary to provide the website, maintain its technical stability, detect errors and protect the website against attacks and misuse.
The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and technically reliable operation of our website.
Where STRATO processes personal data on our behalf, this takes place on the basis of a data processing agreement pursuant to Article 28 GDPR.
4. SSL/TLS ENCRYPTION
This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential information.
You can generally recognise an encrypted connection by the use of “https://” in your browser’s address bar.
Encryption helps prevent information transmitted between your browser and our website from being read by unauthorised third parties.
5. CONTACT FORM AND EMAIL CONTACT
If you contact us using the contact form or by email, we process the information you provide in order to handle and respond to your enquiry.
Depending on the information you provide, this may include:
• your first and last name
• your email address
• the subject of your enquiry
• the contents of your message
• technical information required to transmit the form
If your enquiry relates to entering into or performing a contract, processing is based on Article 6(1)(b) GDPR.
For general enquiries, processing may be based on Article 6(1)(f) GDPR. Our legitimate interest is to process and respond to enquiries addressed to us.
We retain the information only for as long as necessary to deal with your enquiry unless statutory retention obligations require us to retain it for a longer period.
We do not disclose this information to third parties unless this is necessary to process your request, perform a contract, comply with a legal obligation or protect legitimate interests.
6. NEWSLETTER
You may subscribe to our newsletter to receive information about Monolith / Touch Guitars, our instruments, product developments, events and related news.
For this purpose, we process your email address and, where provided, additional information entered during newsletter registration.
The processing is based on your consent pursuant to Article 6(1)(a) GDPR.
We use a double opt-in procedure. After subscribing, you will receive an email asking you to confirm your subscription. This confirmation helps us verify that the owner of the email address actually requested the newsletter.
Information relating to the registration and confirmation process may be stored in order to document that consent was obtained.
You may withdraw your consent at any time with effect for the future by using the unsubscribe link contained in each newsletter or by contacting us.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
7. MAILCHIMP
We use Mailchimp to manage and send our newsletter.
Mailchimp is operated by The Rocket Science Group LLC and is part of Intuit.
When you subscribe to our newsletter, information provided during registration — in particular your email address — is transferred to and processed using Mailchimp.
Mailchimp may also process technical information relating to newsletter delivery and interaction with newsletters, depending on the functions we have activated.
Mailchimp may process personal data in the United States. Consequently, personal data may be transferred to and processed outside the European Union or European Economic Area.
International data transfers are carried out on the basis of the applicable safeguards under the GDPR, including, where applicable, the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses approved by the European Commission.
Newsletter processing itself is based on your consent pursuant to Article 6(1)(a) GDPR.
You may withdraw your newsletter consent at any time with effect for the future.
8. COOKIES AND SIMILAR TECHNOLOGIES
Our website may use cookies and similar technologies.
Cookies are small pieces of information that can be stored on your device when you visit a website.
Some technologies may be technically necessary to provide the website and functions expressly requested by you. Other technologies may be used for functions such as external media, analytics or marketing.
Under Section 25 TDDDG, storing information on a user’s device or accessing information already stored on that device generally requires the user’s consent. Exceptions may apply where storage or access is strictly necessary to provide a digital service expressly requested by the user.
Where consent is required, the relevant services will only be activated after consent has been provided.
Where the subsequent processing of personal data is based on consent, the legal basis is Article 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future through the consent settings provided on this website.
9. YOUTUBE
This website embeds videos from YouTube, a service provided by Google.
We use YouTube to provide audiovisual content relating to our instruments, musicians, products and activities.
Where technically possible, embedded YouTube videos are provided using YouTube’s Privacy Enhanced Mode via the youtube-nocookie.com domain.
When a YouTube video is activated, a connection to Google/YouTube servers may be established. Information such as your IP address and information about the page you are visiting may consequently be transmitted to Google.
Additional processing may occur depending on your browser settings, Google account and interaction with the YouTube player.
Where consent is required, YouTube content will only be activated after you have given your consent.
The legal basis for the processing of personal data is Article 6(1)(a) GDPR. Where information is stored on or accessed from your device, this is based on your consent pursuant to Section 25(1) TDDDG.
You may withdraw your consent at any time with effect for the future through the consent settings provided on this website.
Further information about Google’s processing of personal data can be found in Google’s Privacy Policy.
10. GOOGLE MAPS
This website uses Google Maps to display our location.
Google Maps is a service provided by Google.
When Google Maps is activated, a connection to Google’s servers may be established. Google may receive information including your IP address and information about the page from which Google Maps was accessed.
Depending on the configuration of the service, information may also be stored on or retrieved from your device.
Where consent is legally required, Google Maps will only be loaded after you have given your consent.
The processing of personal data is then based on Article 6(1)(a) GDPR. Storage of or access to information on your device is based on consent pursuant to Section 25(1) TDDDG.
You may withdraw your consent at any time with effect for the future through the consent settings provided on this website.
Further information can be found in Google’s Privacy Policy.
11. LINKS TO SOCIAL MEDIA AND EXTERNAL WEBSITES
Our website may contain links to external websites and social media services, including YouTube, Instagram and Facebook.
If these are implemented solely as normal external links, no connection to the respective external service is established merely because the page containing the link is displayed.
A connection to the external provider is established when you click the relevant link.
Once you leave our website, the processing of personal data is governed by the privacy policies and terms of the respective provider.
If we integrate social media content directly into the website rather than using simple links, additional data processing may occur and this Privacy Policy will be updated accordingly.
12. RECIPIENTS OF PERSONAL DATA
We disclose personal data to third parties only where this is necessary for the purposes described in this Privacy Policy or where we are legally entitled or obliged to do so.
Recipients may include, in particular:
• hosting and IT service providers
• newsletter providers
• communication service providers
• external media providers
• professional advisers where necessary
• public authorities where disclosure is legally required
Where service providers process personal data on our behalf, appropriate data processing agreements are concluded where required by Article 28 GDPR.
13. INTERNATIONAL DATA TRANSFERS
Some of the services used on this website may be provided by companies located outside the European Union or European Economic Area.
Where personal data is transferred to a third country, we ensure that the requirements of Articles 44 et seq. GDPR are observed.
Depending on the recipient and destination country, transfers may be based on an adequacy decision by the European Commission, the EU-U.S. Data Privacy Framework where applicable, Standard Contractual Clauses approved by the European Commission, or another legally recognised transfer mechanism.
Details relating to individual providers are provided in the relevant sections of this Privacy Policy.
14. STORAGE PERIOD
Unless a specific retention period is stated in this Privacy Policy, we retain personal data only for as long as necessary to fulfil the purpose for which it was collected.
If you withdraw consent or validly object to processing, we will delete the relevant personal data unless another legal basis permits or requires continued processing.
Statutory retention obligations remain unaffected.
15. YOUR RIGHTS
Under the GDPR, you have rights concerning the processing of your personal data, subject to the applicable legal requirements.
These may include the right to:
• obtain information about personal data processed concerning you pursuant to Article 15 GDPR
• request rectification of inaccurate personal data pursuant to Article 16 GDPR
• request erasure of personal data pursuant to Article 17 GDPR
• request restriction of processing pursuant to Article 18 GDPR
• receive certain personal data in a structured, commonly used and machine-readable format pursuant to Article 20 GDPR
• object to processing pursuant to Article 21 GDPR
• withdraw consent at any time pursuant to Article 7(3) GDPR
Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
To exercise your rights, please contact:
info@monolith-instruments.com
16. RIGHT TO OBJECT
If personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to such processing on grounds relating to your particular situation in accordance with Article 21 GDPR.
Where personal data is processed for direct marketing purposes, you have the right to object at any time to processing for such marketing.
17. RIGHT TO LODGE A COMPLAINT
You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.
You may in particular contact the supervisory authority responsible for our place of establishment or the supervisory authority responsible for your place of residence.
18. AUTOMATED DECISION-MAKING
We do not use automated decision-making, including profiling within the meaning of Article 22 GDPR, unless expressly stated otherwise in this Privacy Policy.
19. DATA SECURITY
We use appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, destruction, alteration, unauthorised disclosure and unauthorised access.
These measures are adapted where appropriate to reflect technological developments and the nature and risks of the processing.
20. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy where necessary, for example if we modify the website, introduce new services or if applicable legal requirements change.
The version published on this website at the relevant time applies.
Last updated: September 2026