Version: October 2025

This privacy policy applies to the websites of Sennheiser electronic SE & Co. KG (hereinafter referred to as "Sennheiser"). Different privacy policies texts may apply on other third-party servers and websites. 

With this privacy policy, we want to inform you about data processing in connection with our website and related services. The processing of personal data is carried out exclusively within the framework of the applicable legal data protection regulations, in particular the General Data Protection Regulation GDPR.

1. General Information

1.1. Personal Data

According to Art. 4 No. 1 GDPR, “personal data” means any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”); A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

2. Controller

Sennheiser electronic SE & Co. KG
Am Labor 1
30900 Wedemark
Germany

Tel .: +49 (0) 5130 600 0
Fax: +49 (0) 5130 600 1300

E-Mail: datenschutz@sennheiser.com

Further details can be found in the imprint.

Please note that there may also be marked third-party content on our websites for which Sennheiser is not responsible in terms of data protection and additional data protection information from the respective provider applies.

3. Data Protection Officer

If you have any questions about data protection and this privacy policy, you can also contact Sennheiser's data protection officer:

DS EXTERN GmbH
Dipl.-Kfm. Marc Althaus
Frapanweg 22
D-22589 Hamburg

4. Data collected, purposes of data processing, and legal basis

4.1 Description of data processing

Every time a user accesses a Sennheiser website and every time a file is called up, data about this process is stored in a log file. Depending on the access log used, the log data record contains information with the following content:

• IP address of the requesting computer
• Name of the requested file
• Date and time of the request
• Access methods/functions desired by the requesting computer
• Access status of the web server
• the URL from which the file was requested
• Operating system and browser type or browser settings.

No usage profiles are created in which IP addresses and personal data are linked. Something else only applies if this is presented separately in this privacy policy.

4.2 Legal basis for data processing

The legal basis results from the legitimate interest according to Article 6 Paragraph 1 Letter f GDPR and, if applicable, from the fulfilment of legal obligations according to Article 6 Paragraph 1 Letter c GDPR. Sennheiser's legitimate interest lies in the uninterrupted provision of website content and the prevention of unauthorized access.

4.3. Purpose of data processing

The personal data is used exclusively for the purpose of providing the content technically, identifying and tracking unauthorized access attempts/access to the web server, and for statistical evaluations such as visitor numbers and page popularity. The evaluation is only carried out by authorized personnel.

4.4. Duration of data storage

Your personal data will be deleted as soon as the purpose required for processing has been achieved. Different retention periods may arise due to legal requirements.

Regarding the use of the website, your data will be deleted after the end of the session, unless otherwise specified.

4.5 Use of Apollo (B2B Analytics)

We use the analytics and business intelligence tool “Apollo”, provided by Apollo.io, Inc., 440 N Barranca Ave #4733, Covina, CA 91723, USA, to help us identify and analyze visits from corporate networks to our landing pages. This enables us to understand which companies show interest in our products and to optimize our B2B communications. Apollo may process technical data such as IP addresses and company-related information. The use of Apollo only takes place if you have given your consent via the cookie settings. You can withdraw your consent at any time with effect for the future by adjusting your preferences in the cookie settings.

5. Contact, comment function, chat function, e-mails

5.1. Description of Data Processing

5.2 Legal basis for data processing

The legal basis results from the legitimate interest according to Art. 6 Para. 1 lit. f GDPR. The legitimate interest in the proper processing of the contact.

5.3 Purpose of data processing

The personal data is processed exclusively for the purpose of processing and answering contacts.

5.4 Duration of data storage

Your personal data will be deleted as soon as the purpose required for processing has been fulfilled. Different retention periods may arise due to legal requirements.

6. Use of Sprout Social to manage personal data

6.1. Description of data processing

We use Sprout Social's social media management tool to manage and process your concerns that reach us publicly and/or via private messages via our social media channels (in particular Facebook, Instagram and LinkedIn). Sprout Social presents posts and messages relevant to us from all social media channels we use clearly and effectively for analysis and processing. At least your IP address is transmitted to Sprout Social. In addition, we process the data that you share with us via your social media accounts, in some cases according to your individual privacy settings, among other things

• Master data (e.g. first name, surname)
• Contact details (e.g. telephone number, e-mail address)
• dates of birth
• social media name
• number of followers
• profile picture and other publicly available pictures and/or
• interests and other personal information.

Data processing takes place on Sprout Social servers in the USA. In this respect, we have concluded an order processing contract in accordance with Art. 28 GDPR with Sprout Social, who process your personal data on our behalf, whereby the data transfer to the USA as a third country is based on the current standard contractual clauses. In addition, Sprout Social provides the essential information on the type and scope of data processing at https://sproutsocial.com/privacy-policy/. This is fully referenced.

6.2 Legal basis for data processing

The legal basis results from our legitimate interest according to Art. 6 Para. 1 lit. f GDPR.

6.3 Duration of data retention

Your personal data will be deleted as soon as the purpose required for processing has been achieved. Different retention periods may arise due to legal requirements.

6.4 Joint controllership

We determine the means and purposes of this data processing through our social media channels together with SCA. In this respect, we process your personal data together with SCA as joint controllers within the meaning of Art. 4 No. 7 Var. 2, 26 GDPR, whereby the personal data is processed by both persons responsible for the same purposes. No anonymous usage statistics are provided to SCA. We have concluded an agreement on joint responsibility with SCA. In particular, the agreement specifies in a transparent form which controller fulfils which obligation under the GDPR, in particular regarding exercising the rights of the data subject, and who meets which information obligations under Art. 13 and 14 GDPR.

In detail:

• If a data subject contacts one of the parties to assert their rights as a data subject within the meaning of Art. 15 to 22 GDPR, this party undertakes to fulfil these rights in accordance with the requirements of the GDPR.
• If a data subject contacts one of the parties with a request for information about the data processing, this party undertakes to provide the data subject with the information required under Articles 13 and 14 GDPR free of charge in a precise, transparent, understandable, and easy manner accessible form in plain language free of charge. The parties agree on the content of the information on the joint processing activities that will be made available to the data subjects.
• The parties will provide each other with the necessary information about their activities according to the above regulations, which are necessary for the fulfilment of their data protection obligations, in a reasonable manner and without unreasonable delay. The parties undertake to use their best efforts to assist each other in fulfilling the rights and wishes of the data subject, regardless of the responsibility for the respective data subject.
• If personal data is to be deleted, the parties shall inform each other in advance. The other contracting party can object to the deletion for a legitimate reason, e.g., if they are legally obliged to store the data.

The essential content of this agreement, in particular regarding the purpose and scope of data processing, data categories, data subjects and the legal basis for data processing, is also derived from this section of the privacy policy. We would be happy to provide you with the full content of the agreement on joint responsibility upon request.

In addition, if we provide a company website, we process your personal data with the operator of the respective social media platform as joint controllers within the meaning of Art. 4 No. 7 Var. 2, 26 GDPR. We process your personal data within the scope set out above. We do not have access to the usage data that the respective social media platform collects to create these statistics. For this purpose, we have concluded an agreement on joint responsibility with the operators of the respective social media platform, the contents of which we will be happy to make comprehensively available to you on request.

7.  Data processing of personal data using social media platforms

7.1. Description of data processing

a) Use of corporate websites
We maintain publicly accessible profiles on various social networks. As the operator of a company presence on the social media platforms, in the form of a social media fan page or a comparable design (“corporate presence”), we can only view the information stored in your public profile, and only if you have such a profile and are logged into it while you access our company website. In addition, we can see the information that you actively share with us via private messages and other direct communication channels. This includes, depending on your individual privacy settings, among others

• Master data (e.g. first name, surname)
• Contact details (e.g. telephone number, e-mail address)
• dates of birth
• social media name
• number of followers
• profile picture and other publicly available pictures and/or
• interests and other personal information.

When you visit our profiles, your personal data is not only collected, used, and stored by us, but also by the operators of the respective social media platform. This also happens if you do not have a profile on the respective social media platform yourself. The individual data processing operations and their scope differ depending on the operator of the respective social media platform and are not necessarily comprehensible for us. How the social media platforms use the data from the visit for their own purposes, to what extent activities on the respective pages are assigned to individual users, how long the social media platforms store personal data and whether data from a visit Third parties are not named conclusively and clearly by the social media platforms and are not known to us.

In addition, anonymous usage statistics are made available to us by the social media platforms, which we use to improve the user experience when visiting our company website. For details on the collection and storage of your personal data and the type, scope, and purpose of their use by the operator of the respective social media platform, please refer to the privacy policies of the respective operator. This is extensively referenced:

• Facebook
• LinkedIn
• Instagram
• YouTube
• Twitter
• TikTok
• Reddit

b) Contact via social media

You can use our profiles on social media platforms to contact us (e.g. by creating your own posts, responding to one of our posts or by privately messaging us). The personal data you provide to us (see above) will be processed by us exclusively for the purpose of being able to contact you.

7.2.    Legal basis for data processing

The legal basis in relation to our data processing results from

our legitimate interest according to Art. 6 Para. 1 lit. f GDPR (Use of corporate websites) or
Your consent to being contacted or required to fulfil a contract/implement pre-contractual measure in accordance with Art. 6 (1) lit. a) and b) GDPR (contact via social media platforms)

7.3.    Duration of data retention

Your personal data will be deleted as soon as the purpose required for processing has been achieved. Different retention periods may arise due to legal requirements.

7.4.    Joint controllership

We determine the means and purposes of this data processing through our social media channels together with SCA. In this respect, we process your personal data together with SCA as joint controllers within the meaning of Art. 4 No. 7 Var. 2, 26 GDPR, whereby the personal data is processed by both persons responsible for the same purposes. No anonymous usage statistics are provided to SCA. We have concluded an agreement on joint responsibility with SCA. In particular, the agreement specifies in a transparent form which controller fulfils which obligation under the GDPR, in particular regarding exercising the rights of the data subject, and who meets which information obligations under Art. 13 and 14 GDPR.

In detail:

• If a data subject contacts one of the parties to assert their rights as a data subject within the meaning of Art. 15 to 22 GDPR, this party undertakes to fulfil these rights in accordance with the requirements of the GDPR.
• If a data subject contacts one of the parties with a request for information about the data processing, this party undertakes to provide the data subject with the information required under Articles 13 and 14 GDPR free of charge in a precise, transparent, understandable, and easy manner accessible form in plain language free of charge. The parties agree on the content of the information on the joint processing activities that will be made available to the data subjects.
• The parties will provide each other with the necessary information about their activities according to the above regulations, which are necessary for the fulfilment of their data protection obligations, in a reasonable manner and without unreasonable delay. The parties undertake to use their best efforts to assist each other in fulfilling the rights and wishes of the data subject, regardless of the responsibility for the respective data subject.
• If personal data is to be deleted, the parties shall inform each other in advance. The other contracting party can object to the deletion for a legitimate reason, e.g., if they are legally obliged to store the data.

In addition, if we provide a company website, we process your personal data with the operator of the respective social media platform as joint controllers within the meaning of Art. 4 No. 7 Var. 2, 26 GDPR. We process your personal data within the scope set out above. We do not have access to the usage data that the respective social media platform collects to create these statistics. For this purpose, we have concluded an agreement on joint responsibility with the operators of the respective social media platform, the contents of which we will be happy to make comprehensively available to you on request.

8. Newsletters

8.1. Description of data processing

Since Sennheiser's website may undergo changes, it may be necessary to update the privacy policy in individual cases. Sennheiser reserves the right to change this privacy policy at any time. The current version of the privacy policy and information can be accessed on the Sennheiser website at https://en-de.sennheiser.com/privacy.