Privacy Policy
Cập nhật: 28 September 2026
Bản tiếng Việt đang được chuẩn bị. Dưới đây là bản tiếng Anh; bản tiếng Đức là bản có hiệu lực.
This policy explains which personal data the Klavia Marketplace (marketplace.klavia-piano.com) processes, why, and for how long. In short: no tracking, no advertising, no sale of data.
1. Controller
The controller within the meaning of the GDPR is the operator of Klavia named in our Impressum. Contact for all privacy questions: contact(at)klavia-piano.com.
2. Visiting the marketplace
When you open a page or download a score, your browser or the Klavia app sends technical data (IP address, time, requested address, browser type). Our hosting provider processes this data to deliver the service and to keep it secure (Art. 6(1)(f) GDPR). Our application itself does not store your IP address in plain form:
- Rate limiting (protection against password guessing and spam): a keyed hash of the IP address, deleted after 1 day.
- Download counter: a keyed hash of IP address and browser type, so that repeated downloads are counted only once per day; deleted after 90 days. Only the total number of downloads is kept.
3. Cookies and local storage
We use a single session cookie. It is technically necessary for logging in and for protection against cross-site request forgery, and it is deleted when you close your browser (§ 25(2) TDDDG). Your language choice is stored in your browser’s local storage. We use no analytics, advertising or tracking tools and no third-party content.
4. Creator accounts
To upload scores you need an account. We process your email address, display name, password (stored only as a secure hash), preferred language and the dates of registration and email confirmation (Art. 6(1)(b) GDPR). We send you emails that are necessary for the account: activation link, password reset and a notice if someone tries to register with your address.
5. Uploaded scores
Scores you upload are stored on our server together with the details you enter (title, composer, arranger, description, difficulty, key). Published scores are publicly visible with your display name and can be downloaded by anyone, including through the Klavia apps. Your email address is never shown publicly. The first upload of a new creator is reviewed by an administrator before publication.
6. Reports (notice and takedown)
If you report a score, we process the reason, your description and — if you are not logged in — your email address so that we can review the report and contact you if necessary (Art. 6(1)(c) and (f) GDPR, Digital Services Act). Reports are kept as long as needed to handle them and to document our decision.
7. Security and moderation logs
Administrative actions (for example moderation decisions, account changes, backups) are logged with the acting account, the time and the IP address to ensure the integrity of the service (Art. 6(1)(f) GDPR). These logs are deleted after 365 days.
8. Recipients
The marketplace runs on servers of our hosting provider in Germany, which processes data on our behalf (Art. 28 GDPR). Emails are sent through our mail server. We do not transfer data to countries outside the EU/EEA and we do not sell or share personal data.
9. Storage periods
- Account data and your scores: until you delete your account.
- Activation and password-reset links: 24 hours and 1 hour; used links are removed after 7 days.
- Registrations that were never confirmed by email: deleted after 30 days.
- Rate-limit entries: 1 day. Download events: 90 days. Administrative logs: 365 days.
- Backups of the database and score files: rotated after 14 days.
10. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). In “My Music” → “Account” you can change your details, download all your data as a file and delete your account at any time. For all other requests contact contact(at)klavia-piano.com.
You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority responsible for the operator’s place of residence (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg).
11. Security
All connections are encrypted (HTTPS). Passwords are stored only as hashes, secrets in our settings are encrypted, and uploaded files are checked and cannot be executed on our server.
12. Changes
We update this policy when the marketplace changes; the date above shows the current version. The privacy policy of the Klavia app itself is available at klavia-piano.com.