Last updated: September 29, 2026
Paco Hallak (“we”, “us”, or “our”) operates pacohallak.com. This Privacy Policy explains how personal data is collected, used, stored and protected when you visit the website, contact us, subscribe to communications, or purchase digital products such as sheet music.
1. Data Controller
Paco Hallak
Geisberg 49
66132 Saarbrücken-Bischmisheim
Germany
Email: info@pacohallak.com
Website: https://pacohallak.com
Legal notice: Impressum
2. Information We Collect
We may process information that you provide directly, including your name, email address, billing details, contact-form or lesson-enquiry information, order information and other information you voluntarily submit.
When you use the website, technical information may also be processed, such as IP address, browser and device information, date and time of access, pages visited and similar server or security log data.
3. Contact Forms and Enquiries
When you contact us through a form or by email, the information you provide is used to respond to your enquiry, communicate with you and, where applicable, take steps requested by you before entering into a contract.
4. Orders and Digital Downloads
When you purchase digital sheet music or other downloadable products, we process the information necessary to handle the order, payment, invoice, customer communication and delivery of the digital download. Order records may be retained where required for accounting, tax, contractual or legal obligations.
5. Payments
Payments may be processed through payment providers made available at checkout, including WooPayments and PayPal where enabled. Payment providers process payment information under their own privacy terms. We receive the information necessary to confirm and administer the transaction but do not need to store your complete payment-card details on our own website.
6. Cookies and Consent
The website uses cookies and similar technologies that are necessary for functions such as the shopping cart, checkout, security and user preferences. Optional technologies for analytics or marketing are handled through the website’s consent system, including CookieYes, according to the choices available in the cookie banner.
You can change or withdraw optional cookie consent through the consent controls available on the website. Essential cookies may still be required for the website and shop to function.
7. Analytics and Google Services
Where consent is required and has been given, the website may use Google services, including Google Analytics through Site Kit, to understand website usage and improve the site. Depending on the service and your consent choices, technical information such as device, browser and usage data may be processed by Google.
8. Email and Newsletter Services
If you subscribe to a newsletter or other email communication, your email address and related subscription information may be processed through MailPoet. Transactional or website-generated email may be delivered using WP Mail SMTP and the configured email service. You may unsubscribe from marketing communications using the unsubscribe option provided in those messages.
9. External Content and Links
The website may contain links to or embedded content from third-party services. When you interact with external content, the third party may process information according to its own privacy policy. We encourage you to review the privacy information of those providers.
10. Legal Bases for Processing
Depending on the context, personal data is processed because it is necessary to perform a contract or take requested pre-contractual steps, to comply with legal obligations, on the basis of consent, or for legitimate interests such as operating, securing and improving the website, where those interests are not overridden by your rights.
11. Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected and for applicable legal, accounting, tax, contractual or security requirements. Retention periods therefore vary according to the type of information and the reason it is processed.
12. Data Recipients and International Transfers
Personal data may be shared with service providers that are necessary to operate the website, process payments, deliver email, provide hosting, analytics or other requested services. Some providers may process data outside Germany or the European Economic Area. Where required, appropriate legal safeguards for such transfers are used by the relevant provider.
13. Your Rights
Under applicable data-protection law, including the GDPR where applicable, you may have rights to access your personal data, request correction or deletion, restrict or object to processing, receive data in a portable format, and withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
You also have the right to lodge a complaint with a competent data-protection supervisory authority.
14. Security
We use reasonable technical and organisational measures intended to protect personal data. No method of transmission or electronic storage can, however, be guaranteed to be completely secure.
15. Children’s Data
The website is not intended to knowingly collect personal data from children without an appropriate legal basis or, where required, the involvement of a parent or guardian. If you believe a child has provided personal data inappropriately, please contact us.
16. Changes to this Privacy Policy
This Privacy Policy may be updated when the website, services, legal requirements or service providers change. The current version will be published on this page.
17. Contact
For privacy-related questions or requests, contact:
Paco Hallak
Geisberg 49
66132 Saarbrücken-Bischmisheim
Germany
Email: info@pacohallak.com
Website: https://pacohallak.com
Legal notice: Impressum