Thank you for visiting our website. At Rock the Speakerbox, a label of Smartsound LLC, we take the privacy of our clients and visitors to our website very seriously.
This Privacy Policy outlines how we handle your data with transparency and in compliance with both the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). Please carefully read this Privacy Policy before using our website or entering your personal information in our online store or registration fields. By using our website, you agree to be bound by this Privacy Policy, which may be modified by Rock the Speakerbox at any time.
1. Scope of This Privacy Policy
This Privacy Policy applies to all personal information collected by Rock the Speakerbox, a label of Smartsound LLC, through our website and online services.
It does not apply to third-party websites, even if they are linked to from our site.
We are not responsible for the privacy practices or content on these third-party sites.
2. Your Rights Under GDPR and CCPA
GDPR (For EU Residents):
You have the following rights regarding your personal data under the GDPR:
Right of Access: Obtain information about the data we have stored about you and how it is processed (Art. 15 GDPR).
Right to Rectification: Request correction of inaccurate personal data (Art. 16 GDPR).
Right to Erasure: Request the deletion of your data stored with us (Art.
17 GDPR).
Right to Restrict Processing: Restrict processing of your data where we are not yet allowed to delete it due to legal obligations (Art. 18 GDPR).
Right to Object: Object to the processing of your data (Art. 21 GDPR).
Right to Data Portability: Request the transfer of your data to another service provider (Art. 20 GDPR).
CCPA (For California Residents):You have the following rights regarding your personal data under the CCPA:
Right to Know: Request disclosure of the categories and specific pieces of personal data we have collected about you, the categories of sources from which the personal data is collected, the business purpose for collecting or selling personal data, and the categories of third parties with whom we share personal data.
Right to Delete: Request the deletion of your personal data that we have collected.
Right to Opt-Out: Opt-out of the sale of your personal data. Rock the Speakerbox does not sell personal information. Sharing data with Meta for advertising may count as "sharing" under California law; you can opt out at any time via "Cookie settings" or Global Privacy Control.
Right to Non-Discrimination: You will not be discriminated against for exercising your CCPA rights.
To exercise any of these rights, you can contact us at service@rockthespeakerbox.com.
3. Information Rock the Speakerbox Collects
1. Newsletter Signup
Purpose: To send newsletters and monthly royalty-free sounds.
Personal Data: Email address.
Involved Third Parties:
MailChimp Atlanta, Georgia 30308, USA. Your email address is submitted to be entered into our newsletter list.
2. User Account Creation
Purpose: To allow users to use additional site features and save personal information. Free sound packs (freebies) also come with an account: they are added to it and downloaded from there, like purchased libraries.
Personal Data: Name, email address, company name, billing address and VAT or tax ID (if given). We do not collect a shipping address or phone number, and we store no payment details: you pay on PayPal's pages (section 11).
3. Browsing Our Website
Purpose: To log browser sessions, analyze how visitors use our website, and improve user experience.
Personal Data: Internet Protocol (IP) address.
Involved Third Parties:
Hetzner Online GmbH Industriestr. 25, 91710 Gunzenhausen, Germany.
Google LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
IONOS SE - Elgendorfer Str. 57, 56410 Montabaur, Germany
4. Remarketing
We use Meta (Facebook, Instagram) to show ads to previous visitors of our site. Meta uses the Meta Pixel and its cookies for this (see "Marketing" in section 11). We do not use Google Ads.
Opt-Out Mechanisms:
On our site: "Cookie settings" at the bottom of every page. With Meta: https://www.facebook.com/adpreferences
4. Use and Disclosure of Personal Data
By providing Rock the Speakerbox with your personal data, you authorize us to use it for the following purposes:
Processing registrations, and newsletters.
Running raffles, polls, and contests.
Customer support inquiries.
Market research to improve our products and services.
Generally, Rock the Speakerbox does not disclose your personal data to third parties. However, your data may be shared where necessary, such as to process orders, payments, and deliveries that involve third parties (e.g., payment providers, parcel services), to protect the rights, safety, and property of Rock the Speakerbox, our partners, clients, users, and the public, and in accordance with legal and regulatory requirements.
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements. The specific retention periods for different types of personal data are outlined in our internal data retention policies.
6. Cookies and Tracking
Our website uses cookies and similar tracking technologies to enhance user experience, analyze website traffic, and for advertising purposes.
Types of Cookies Session Cookies: These are erased when you close your browser.
First-Party Cookies: Set by our web server and share the same domain.
Third-Party Cookies: Stored by a different domain, such as those used for analytics and social media integrations.
Cookie Consent: Visitors from the EU, the EEA, the United Kingdom, Switzerland, Brazil, Canada, South Korea, Turkey, China and India see a cookie banner on their first visit; marketing cookies are only set after you agree. Everywhere else, marketing cookies are on by default and you can turn them off at any time via "Cookie settings" at the bottom of every page. We treat the Global Privacy Control (GPC) signal of your browser as an opt-out. We use your IP address to determine your country; for this purpose it is not stored. You can also manage or delete cookies through your browser settings.
Cloudflare Web Analytics: To count page views and see which pages are visited, we use Cloudflare Web Analytics (Cloudflare, Inc., USA). It sets no cookies, stores nothing on your device and does not build visitor profiles. It records the page visited, the referring page, the browser type, the country and loading times. Because nothing is stored on or read from your device, it runs without consent.
Opt-Out Options:
We do not use Google Analytics.
For personalized ads: "Cookie settings" at the bottom of every page, or Facebook's ad preferences (https://www.facebook.com/adpreferences).
7. Data Security
We take the security of your data seriously and implement reasonable technical and organizational measures to protect it from unauthorized access, alteration, or disclosure. However, please note that no method of transmission over the Internet or method of electronic storage is 100% secure.
8. International Data Transfers
For users in the EU, your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States.
We ensure that such transfers are conducted in compliance with GDPR requirements, using appropriate safeguards like Standard Contractual Clauses.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other reasons. When we make significant changes, we will notify you by updating the date at the top of this policy and, where necessary, seek your consent.
10. Contact Information
If you have any questions about this Privacy Policy or if you wish to exercise any of your privacy rights, please contact us at:
Rock the Speakerbox Smartsound LLC Email: info@rockthespeakerbox.com
11. Shop, payments and downloads
When you buy from us, we process your name, email address, company name, billing address (street, postal code, city, state or province, country), VAT ID (if given), the time you confirmed buying as a business and accepted our terms, your orders, invoices and downloads to fulfil the contract (Art. 6(1)(b) GDPR). Invoices are kept as long as tax law requires.
Hosting and database: Cloudflare, Inc. (content delivery and servers worldwide, EU Standard Contractual Clauses). Free packs (freebies) are delivered from Cloudflare R2 storage.
Downloads of purchased libraries: delivered through the content delivery network of Gcore (G-Core Labs S.A., Luxembourg) from storage at Hetzner Online GmbH (Germany). Each download link is personal and valid for a few hours. When you download, Gcore and Hetzner process your IP address and browser data to deliver the file.
Bot protection: sign-in, sign-up, password reset, checkout without an account, freebies and the newsletter form are protected by Cloudflare Turnstile (Cloudflare, Inc., USA). To tell people from bots it checks signals from your browser and your IP address; Cloudflare does not use this data for advertising (Art. 6(1)(f) GDPR, our legitimate interest in protecting the shop and its customers).
Payments: PayPal – you pay on PayPal's own pages with your PayPal account or the payment methods PayPal offers there (for example card); we never see your card or bank details. PayPal tells us whether the payment succeeded, your PayPal account's email address and its country. For subscriptions, PayPal also handles the recurring payments.
Emails (order confirmation, password reset, freebies added to your account, newsletter confirmation): sent through our email service provider.
Taxes: our shop is aimed at business customers and does not charge VAT or sales tax (see our terms, section A4). We therefore collect no evidence of where you live: we store the billing address and company name you enter at checkout and, if you enter it, your VAT ID or tax ID, as given, for the invoice. We do not check them with any tax authority.
Sign in with Google (optional): if you choose it, Google tells us your name, your confirmed email address and an anonymous Google account ID, which we store with your account to recognise you next time. We receive no password and no other Google data (Art. 6(1)(b) GDPR).
Newsletter: only after you confirm the link in our email (double opt-in). You can unsubscribe at any time.
Trailer videos load from YouTube (Google) only when you press play.
Fonts are served from our own server; no connection to Google Fonts is made.
Marketing (Meta Pixel by Meta Platforms Ireland Ltd. and Meta Platforms, Inc.): the Pixel shares the pages you view and what you buy with Meta so we can measure our ads. When you buy, our server also sends Meta the order (products and amount) together with your email address and customer number in hashed form, your IP address, your browser (user agent) and, if present, the Meta cookie IDs (_fbp, _fbc) (Meta Conversions API). We store these details with the order for this purpose. In the countries listed under Cookie Consent this only happens with your consent (Art. 6(1)(a) GDPR), everywhere else unless you object via "Cookie settings" or Global Privacy Control. You can change your choice at any time via "Cookie settings" at the bottom of every page.