Privacy Policy

This privacy policy clarifies the nature, scope and purpose of the processing of personal data (hereinafter referred to as “data”) within our online offer of GRIN Publishing and the websites associated with it:

• grin.com
• unterweisungen.de
• diplomarbeiten24.de
• hausarbeiten.de
• referate24.de and
• x-start.de,

their functions and contents as well as external online presences, such as our social media profiles, (hereinafter collectively referred to as “online offer”).

We attach great importance to data protection, i.e. the protection of your personal data. Therefore, regardless of whether you are a new or long-standing author and/or customer, we ask you to take the time to read our Privacy Policy.

For questions and information, as well as the correction, blocking or deletion of data, please contact the contact address:

GRIN Publishing GmbH
Trappentreustr. 1
80339 Munich
Germany

Tel.: 089/550559-0
E-mail: info@grin.com
Website: www.grin.com

GRIN Publishing GmbH is represented by:
Kirsten-J. Sörries and Dr. Julius Mittenzwei

With regard to the terms used, such as ”processing” or “responsible”, we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR): https://dsgvo-gesetz.de/art-4-dsgvo/.

General information on data processing

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

GRIN Publishing GmbH
Trappentreustr. 1
80339 Munich
Germany

GRIN Publishing GmbH is represented by:
Kirsten-J. Sörries and Dr. Julius Mittenzwei

Data protection supervisor

Any data subject can also contact our data protection officer directly at any time if you have any questions or suggestions regarding data protection:

Michael Vogelbacher
colenio GmbH & Co. KG
Bahnhofstr. 5
53572 Unkel
Germany

E-Mail: datenschutz@grin.com

Legal bases

In accordance with Article 13 GDPR, we shall inform you of the legal bases of our data processing operations. Unless the legal basis is specified in the Privacy Policy, the following applies:

• The legal basis for obtaining consent sits is Article 6(3). 1 lit. a and Art.
• the legal basis for processing for the performance of our services and the implementation of contractual measures as well as answering inquiries is Art. 1 lit. b GDPR,
• the legal basis for processing in order to fulfil our legal obligations is Art. 1 lit. c GDPR,
• and the legal basis for processing in order to safeguard our legitimate interests is Art. 1 lit. f GDPR.
• In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6(p) of the data is used. 1 lit. d GDPR as the legal basis.

Types of data processed

• Inventory data (e.g. names, addresses)
• Contact details (e.g. e-mail, phone numbers)
• Content data (e.g. text input, photographs, videos)
• Usage data (e.g. websites visited, interest in content, access times)
• Meta/communication data (e.g. device information, IP addresses)

In addition, we process the following data from our customers, prospects and business partners for the provision of contractual services, service and customer care, marketing, advertising and market research:

• Contract data (e.g. subject matter, term, customer category)
• Payment details (e.g. bank details, payment history).

Purpose of processing

• Providing the online offer of GRIN Publishing, its functions and contents
• Fulfilment of legal obligations or contracts
• Responding to contact requests and communicating with users
• Security
• Range measurement/marketing

Rights of data subjects

You have the right to request confirmation as to whether the data in question is being processed and for information on such data as well as for further information and copy of the data in accordance with Article 15 GDPR.

In accordance with Article 16 GDPR, you have the right to request the completion of the data concerning you or the correction of the inaccurate data concerning you.

In accordance with Article 17 GDPR, you have the right to request that the data in question be deleted immediately or, alternatively, to require a restriction on the processing of the data in accordance with Article 18 GDPR.

You have the right to request that the relevant data, which you have provided to us, be received in accordance with Article 20 GDPR and to request its transmission to other controllers.

In accordance with Article 77 GDPR, you also have the right to lodge a complaint with the competent supervisory authority.

Withdrawal

You have the right to revoke given consents according to Art. 7 para. 3 DSGVO with effect for the future.

Right of objection in accordance with Article 21 GDPR

You have the right, for reasons arising from your particular situation, at any time against the processing of personal data concerning you, which is subject to Article 6 paragraph. 1 f GDPR (data processing based on a balance of interests) is made to object.

The opposition may be made in particular against the processing for direct marketing purposes.

The opposition can be made without form and should be addressed as far as possible to:

Michael Vogelbacher
colenio GmbH & Co. KG
Bahnhofstr. 5
53572 Unkel
Germany

E-Mail: datenschutz@grin.com

Children and adolescents

Persons under the age of 18 should not provide us with any personal data without the consent of their parents or legal guardians.

Security

We kindly ask you to keep up to know regularly about the content of our privacy policy. We will adjust the Privacy Policy as soon as the changes to the data processing we perform make this necessary. We will inform you as soon as the changes require an act of participation on your part (e.g. consent) or any other individual notification.

Security

You can trust us with your personal data. The data is transmitted to us in encrypted form during the login or ordering process. We secure the online offer of GRIN and your data by technical and organizational measures against damage, destruction, alteration or unauthorized access by unauthorized persons. However, despite regular checks, full protection against all hazards is not possible.

If you register with us as an author or customer, access to your author or customer account is only possible after entering your personal password. You should always keep your credentials confidential and close the browser window when you have finished communicating with us, especially if you share your computer with others.

We also take internal data protection very seriously. Our employees and the service companies commissioned by us have been obliged by us to maintain confidentiality and to comply with data protection regulations.

Cooperation with processors and third parties

If, in the course of our processing, we disclose data to other persons and companies (processors or third parties), transmit them to them or otherwise grant them access to the data, this is only done on the basis of a legal permission (e.g. if a transfer of the data to third parties, such as to payment service providers, in accordance with Art. 6 sec. 1 lit.b GDPR is required for the fulfilment of the contract), you have consented to this, if a legal obligation so provides or on the basis of our legitimate interests (e.g. in the use of agents, web hosts, etc.).

If we entrust third parties with the processing of data on the basis of a so-called “order processing contract”, this is done on the basis of Article 28 GDPR.

Transfers to third countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if we do so in the context of the use of third-party services or disclosure or transfer of data to third parties, this will only be done if it is done in order to fulfil our (pre)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual authorisations, we process or have the data processed in a third country only if the special conditions of Art. 44 e.g. GDPR are met. This means that the processing takes place, for example, on the basis of special guarantees, such as the officially recognized level of data protection corresponding to the EU or compliance with officially recognized special contractual obligations (so-called “standard contractual clauses”).

Cookies

What are cookies?

“Cookies” means small files that are stored on users’ computers. Different information can be stored within the cookies. A cookie is primarily used to store the information about a user (or the device on which the cookie is stored) during or after his visit within an online offer. Temporary cookies, or “session cookies” or “transient cookies”, are cookies that are deleted after a user leaves an online offer and closes their browser. In such a cookie, for example the contents of a shopping cart can be stored in an online shop or a login status. Cookies are called “permanent” or “persistent” and remain stored even after the browser is closed. For example the login status can be saved if the user visits this page after several days. Similarly, such a cookie may store the interests of users who are used for range measurement or marketing purposes. “Third-party cookie” means cookies that are offered by providers other than the person responsible for the online offer (otherwise, if they are only its cookies, they are called “first-party cookies”).

Why do we use cookies?

We may use temporary and permanent cookies and clarify this within the framework of this data protection declaration.

We strive to provide you with the most personalized and user-friendly service possible. For this, and in order to make website improvements, we collect and store information about how you use our offer. We use cookies, small text files that your browser stores on your computer or mobile phone.

A cookie itself does not contain or collect any personal information about you or your internet usage. However, they are important, for example, for analyzing the behaviour of guests on our website, or for showing personalized offers or to have registered users logged in for the duration of their visit. Cookies allow the website to “remember” you, either for the duration of your current visit (“session cookie”) or for multiple visits (“permanent cookie”). The main aim is therefore to enable a more efficient use of our website and to enable certain functions on the website.

How can you control the receipt of cookies?

Most web browsers automatically accept cookies. You can prevent cookies from being stored on your computer or mobile phone by setting your browser to not accept cookies. For the exact instructions on how to change your cookie settings, see the “Help” section of your browser. You can also delete the cookies that are already stored on your device at any time. You can also find helpful information on the info page www.allaboutcookies.org.

If you decide not to accept cookies in general, you can of course still visit our website. However, you may not be able to use all the features and services or certain content that we provide to you may not be available.

A general objection to the use of cookies used for online marketing purposes can be explained by a large number of services, especially in the case of tracking, via the US website www.aboutads.info/choices/ or the EU site www.youronlinechoices.com/.

Deletion of data

The data processed by us will be deleted or restricted in their processing in accordance with Articles 17 and 18 GDPR. Unless expressly stated in the context of this data protection declaration, the data stored by us will be deleted as soon as they are no longer necessary for their purpose and the deletion is not precluded by legal retention obligations. Unless the data is deleted because it is necessary for other and legally permissible purposes, its processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example to data that must be retained for commercial or tax reasons.

According to legal requirements in Germany, the storage is carried out in particular for 6 years in accordance with Section 257 para. 1 HGB (trading books, inventories, opening balance sheets, financial statements, commercial letters, accounting documents, etc.) and for 10 years in accordance with Section 147 para. 1 AO (books, records, management reports, accounting documents, commercial and business letters, documents relevant to taxation, etc.).

Hosting

The hosting services we use are intended to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services that we use for the purpose of operating this online offer.

In doing so, we, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer in accordance with Art. 6 Abs. 1 lit. f GDPR and Art. 28 GDPR (conclusion of order processing contract).

Collection of access data and log files

We, or our hosting provider, collect on the basis of our legitimate interests within the meaning of Art. 1 lit. f. GDPR data about each access to the server on which this service is located (so-called server logfiles). The access data includes the name of the retrieved website, file, date and time of retrieval, amount of data transferred, notification of successful retrieval, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider.

Logfile information is stored for security reasons (e.g. to investigate abuse or fraud) for a maximum period of 7 days and then deleted. Data, the further retention of which is necessary for the purpose of proof, is excluded from deletion until the relevant incident is finally clarified.

Order processing in the online shop and customer account

We process the data of our customers in the course of the ordering processes in our online shop in order to enable them to select and order the selected products and services, as well as their payment and delivery, or execution.

The data processed includes inventory data, communication data, contract data, payment data and data on data affected by the processing include our authors, customers, interested parties and other business partners. The processing is carried out for the purpose of the provision of contractual services within the framework of the operation of an online shop, billing, delivery and customer service. We use session cookies for the storage of the shopping cart content and permanent cookies for the storage of the login status.

The processing is carried out on the basis of Article 6(4) of the European 1 lit. b (Execution of ordering operations) and c (Legally required archiving) GDPR. The information identified as necessary is required for the establishment and performance of the contract. We disclose the data to third parties only within the scope of extradition, payment or within the scope of legal authorisations and obligations towards legal advisers and authorities. The data will only be processed in third countries if this is necessary for the performance of the contract (e.g. upon delivery or payment at the request of the customer).

Users can optionally create a user account in which they can view their orders in particular. As part of the registration process, the required information will be communicated to the users. The user accounts are not public and cannot be indexed by search engines. If users have terminated their user account, their data will be deleted with regard to the user account, subject to their retention, for commercial or tax reasons. Art. 6 Abs. 1 lit. c GDPR. Information in the customer account remains until it is deleted and subsequently archived in the event of a legal obligation. It is the responsibility of the users to secure their data before the end of the contract if they are terminated.

As part of the registration and re-registration as well as the use of our online services, we store the IP address and the time of the respective user action. The storage is based on both our legitimate interests and that of the user against misuse and other unauthorized use. In principle, this data will not be passed on to third parties, unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with this law. Art. 6 Abs. 1 lit. c GDPR.

The deletion takes place after the expiry of legal warranty and comparable obligations, the necessity of the retention of the data is checked every three years; in the case of statutory archiving obligations, the deletion takes place after their expiry (end of commercial law (6 years) and tax law (10 years) retention obligation).

Payment via PayPal:

If you pay for paid services with PayPal (PayPal (Europe) S.A. r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg), data about the purchase will be passed on to PayPal. PayPal’s privacy policy can be found here: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Payment by direct debit or credit card:

For the processing of credit card and direct debit payments we use the service provider PayOne (BS PAYONE GmbH, Lyoner Straße 9, 60528 Frankfurt/Main, Germany). PayOne provides an interface for initiating payment transactions and transmitting data to the PayOne platform. Payments are processed in a separate area (called iframes) by PayOne on our website. Our systems therefore do not come into direct contact with the card data of the buyers.

PayOne’s privacy policy can be found here: https://www.payone.com/datenschutz/.
They are themselves “responsible” for the data processing of payment processing services.

Provision of contractual services

We process inventory data (e.g. names and addresses as well as contact details of users and authors), contract data (e.g. services used, names of contact persons, payment information) in order to fulfil our contractual obligations and services in accordance with Art. 6 Abs. 1 lit b. GDPR. The entries marked as mandatory in online forms are required for the conclusion of the contract.

As part of the use of our online services, we store the IP address and the time of the respective user action. The storage is based on both our legitimate interests and the interests of the users in protection against misuse and other unauthorized use. In principle, this data will not be passed on to third parties, unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with this law. Art. 6 Abs. 1 lit. c GDPR.

We process usage data (e.g. the websites visited by our online offer, interest in our products) and content data (e.g. entries in the contact form or user profile) for advertising purposes in a user profile in order to show the user, e.g. product instructions based on their previously used services.

The data will be deleted after the expiry of legal warranty and comparable obligations, the need for the retention of the data will be checked every three years; in the case of statutory archiving obligations, the deletion shall take place after their expiry. Information in any customer account will remain until it is deleted.

Administration, Financial Accounting, Office Organization, Contact Management

We process data in the context of administrative tasks as well as the organisation of our operations, financial accounting and compliance with legal obligations, such as of archiving. We process the same data that we process as part of the provision of our contractual services. The basis for processing is Art. 1 lit. c. GDPR, Art. 1 lit. f. GDPR. The processing affects customers, prospects, business partners and website visitors. The purpose and interest in the processing lies in the administration, financial accounting, office organization, archiving of data, i.e. tasks that serve the maintenance of our business activities, performance of our tasks and the provision of our services. The erasure of the data with regard to contractual services and contractual communication shall correspond to the information provided for in these processing activities.

We disclose or transmit data to the tax administration, consultants, such as tax advisors or auditors, as well as other fee agencies and payment service providers.

Furthermore, on the basis of our business interests, we store information about suppliers, organizers and other business partners, e.g. for the purpose of contacting them later. We store this majority company-related data permanently.

Business analysis and market research

In order to operate our business economically, to be able to recognize market trends, customer and user wishes, we analyze the data available to us on business transactions, contracts, enquiries, etc. We process inventory data, communication data, contract data, payment data, usage data, metadata based on Art. 6 sec. 1 lit. f. GDPR, whereby the data subjects include customers, interested parties, business partners, visitors and users of the online offer.

The analyses are carried out for the purpose of business evaluations, marketing and market research. In doing so, we can take into account the profiles of registered users with information e.g. about their purchase processes. The analyses serve us to increase user-friendliness, optimize our offer and business efficiency. The analyses are for us alone and are not disclosed externally, unless they are anonymous analyses with summarized values.

If these analyses or profiles are personal, they will be deleted or anonymized upon termination of the users, otherwise after two years from the conclusion of the contract. In addition, the macroeconomic analyses and general trends are, where possible, compiled anonymously.

Privacy notices on the application process and talent pool

We process the applicant data only for the purpose and within the framework of the application process in accordance with the legal requirements. The processing of the applicant’s data is carried out in order to fulfil our (pre)contractual obligations within the framework of the application procedure within the meaning of Art. 1 lit. b. GDPR Art. 1 lit. f. GDPR if data processing e.g. becomes necessary for us in the context of legal proceedings (in Germany, additional s. 26 BDSG applies).

The application process requires applicants to provide us with the applicant data. The necessary applicant data are marked, if we offer an online form, otherwise result from the job descriptions and in principle this includes the information about the person, postal and contact addresses and the documents belonging to the application, such as cover letter, CV and certificates. In addition, applicants may voluntarily provide us with additional information.

By submitting the application to us, the candidates agree to the processing of their data for the purposes of the application process in accordance with the nature and scope set out in this data protection declaration.

Insofar as, in the context of the application process, special categories of personal data within the meaning of Article 9(9) of the Application Process are voluntary. 1 GDPR, their processing shall be additionally carried out in accordance with Article 9(9) of the 2 lit. b GDPR (e.B. health data, such as .B. severely disabled or ethnic origin). Insofar as special categories of personal data within the meaning of Article 9(9) of the application procedure are 1 GDPR is requested from applicants, their processing is additionally carried out in accordance with Article 9(9) of the 2 lit. a GDPR (e.g. health data if required for the practice of the profession).

If provided, applicants can submit their applications to us using an online form on our website. The data is transmitted to us in encrypted form according to the state of the art.

Applicants can also send us their applications via e-mail. However, we kindly ask you to note that e-mails are not sent encrypted and that applicants themselves have to provide encryption. We therefore cannot assume any responsibility for the transmission of the application between the sender and the receipt on our server and therefore recommend to use an online form or the postal mail. Instead of applying via the online form and e-mail, applicants still have the opportunity to send us the application by post.

The data provided by the applicants can be further processed by us in the event of a successful application for the purposes of the employment relationship. Otherwise, if the application for a job offer is not successful, the data of the applicants will be deleted. Applicants’ data will also be deleted if an application is withdrawn, which candidates are entitled to do at any time.

Subject to a justified revocation of the candidates, the deletion takes place after the expiry of a period of six months, so that we can answer any follow-up questions regarding the application and comply with our obligations to prove this under the Equal Treatment Act. Invoices for possible travel expenses are archived in accordance with the tax regulations.

Talent Pool

As part of the application process, we offer applicants the opportunity to enter our “talent pool” for a period of two years on the basis of consent within the meaning of Article 6(3). 1 lit. b. and Art. 7 GDPR.

The application documents in the talent pool will be processed solely in the context of future job advertisements and the search for employees and will be destroyed at the latest after the deadline. Applicants are informed that their consent to admission to the talent pool is voluntary, has no influence on the current application process and that they can revoke this consent at any time for the future and declare opposition within the meaning of Article 21 GDPR.

Registration function

Users can optionally create a user account. As part of the registration process, the required information will be communicated to the users. The data entered during the registration will be used for the purposes of using the offer. Users may be informed by e-mail about information relevant to the offer or registration, such as changes in the scope of the offer or technical circumstances. If users have terminated their user account, their data will be deleted with regard to the user account, subject to their retention, for commercial or tax reasons. Art. 6 Abs. 1 lit. c GDPR. It is the responsibility of the users to secure their data before the end of the contract if they are terminated. We are entitled to permanently delete all data of the user stored during the term of the contract.

As part of the use of our registration and registration functions as well as the use of the user account, we store the IP address and the time of the respective user action. The storage is based on both our legitimate interests and that of the user against misuse and other unauthorized use. In principle, this data will not be passed on to third parties, unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with this law. Art. 6 Abs. 1 lit. c GDPR. The IP addresses will be anonymized or deleted no later than 7 days.

Contact

When contacting us (e.g. via contact form, e-mail, telephone or via social media) the user’s details for processing the contact request and processing it are provided in accordance with the Art. 6 Abs. 1 lit. b) GDPR processed. Users’ information can be stored in a customer relationship management system (“CRM system”) or similar request organization.

We will delete the requests if they are no longer required. We review the necessity every two years; In addition, the statutory archiving obligations apply.

For the management of the e-mails to our contact addresses info@grin.com and premium@grin.com, we use Freshdesk, a service of Freshworks, Inc., 1250 Bayhill Drive, Suite 315, San Bruno, CA 94066, USA as a help center solution. When you make a request, certain personal information, such as your e-mail address collected and stored by Freshdesk. Depending on the type of request you make, further data such as your first and last name or phone number collected and stored. This data is hosted by Freshdesk in a data center in Frankfurt am Main. However, because Freshdesk uses third-party applications, your data may be temporarily processed and stored outside the EU. However, we have entered into contractual agreements with Freshworks, Inc. to ensure a sufficient level of data protection in this respect (EU standard contractual clauses).

There is no comparison of the data collected with data collected by other components of our website.

For more information about Freshworks’ data usage, see the company’s privacy policy: https://www.freshworks.com/privacy/gdpr/.

Comments and posts

When users leave comments or other posts, their IP addresses may be sent on the basis of our legitimate interests within the meaning of Article 6(3). 1 lit. GDPR for 7 days. This is done for our safety if someone leaves illegal content in comments and posts (insults, forbidden political propaganda, etc.). In this case, we ourselves can be prosecuted for commentor or post and are therefore interested in the identity of the author.

Furthermore, we reserve the right, on the basis of our legitimate interests in accordance with the Art. 6 Abs. 1 lit. f. GDPR, to process the information provided by users for spam detection purposes.

Newsletter

With the following information we inform you about the contents of our newsletter as well as the registration, shipping and statistical evaluation procedure and your rights of objection. By subscribing to our newsletter, you agree to the receipt and the procedures described.

Content of the newsletter: We send newsletters, e-mails and other electronic notifications with advertising information (hereinafter “Newsletter”) only with the consent of the recipients or a legal permission. If the contents of the newsletter are specifically described in the context of a registration, they are decisive for the consent of the users. For the rest, our newsletters contain information about our services and us.

Double opt-in and logging: The registration for our newsletter takes place in a so-called double opt-in procedure. I.e. You will receive an e-mail after registration asking you to confirm your registration. This confirmation is necessary so that no one can log in with foreign e-mail addresses. The registrations for the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes storing the login and confirmation time as well as the IP address. The changes to your data stored by the shipping service provider will also be logged.

Registration details: To register for the newsletter, it is sufficient to provide your e-mail address. Optionally, we ask you to include a name in the newsletter for personal address.

Germany: The sending of the newsletter and the success measurement associated with it takes place

• on the basis of the consent of the recipients in accordance with the Art. 6 Abs. 1 lit. a, Art. 7 GDPR i.V.m Section 7 para. 2 No. 3 UWG or on the basis of legal permission in accordance with Section 7 para. 3 UWG.
• or on the basis of our legitimate interests in accordance with the Art. 6 Abs. 1 lit. f GDPR or on the basis of legal permission in accordance with Section 7 para. 3 UWG. Our interest is focused on promoting academic exchange between our users, information on new editions and new scientific developments, as well as new offers in the dissemination of academic publications and direct marketing, i.e. contacting customers and potential authors.

The registration procedure is logged on the basis of our legitimate interests in accordance with the Art. 6 Abs. 1 lit. f GDPR. Our interest is focused on the use of a user-friendly and secure newsletter system that serves our business interests as well as meets the expectations of our users and also allows us to prove consent.

Cancellation/revocation

You can cancel the receipt of our newsletter at any time, i.e. revokeyourd your consents. A link to cancel the newsletter can be found at the end of each newsletter. We may store the e-mail addresses that have been sent out for up to three years on the basis of our legitimate interests before deleting them in order to be able to prove a previously given consent. The processing of this data is limited to the purpose of a possible defense of claims. An individual request for cancellation is possible at any time, provided that the former existence of a consent is confirmed at the same time.

Newsletter – Shipping Service Provider

The newsletters are sent by mail service provider “MailChimp”, a newsletter shipping platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The data protection regulations of the shipping service provider can be viewed here: https://mailchimp.com/legal/privacy/.

The shipping service provider is based on our legitimate interests in accordance with the Art. 6 Abs. 1 lit. f GDPR and an order processing contract in accordance with Article 28(2) 3 p. 1 GDPR.

The shipping service provider may use the data of the recipients in pseudonymous form, i.e. without being assigned to a user, for the optimization or improvement of its own services, e.B. for technical optimization of the shipping and presentation of the newsletters or for statistical purposes. However, the shipping service provider does not use the data of our newsletter recipients to write them down themselves or to pass on the data to third parties.

Newsletter success measurement

The newsletters contain a so-called “web-beacon”, i.e. a pixel-sized file, which is retrieved from our server when opening the newsletter from our server, or if we use a shipping service provider, from its server. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval are collected first.

This information is used to improve the technical requirements of the Services on the basis of the technical data or the target groups and their reading behaviour on the basis of the polling locations (which can be determined by means of the IP address) or the access times. Statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our intention, nor, if used, that of the shipping service provider, to observe individual users. Rather, the evaluations serve us to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

Online social media presences

We maintain online presences within social networks and platforms in order to communicate with the customers, interested parties and users active there and to inform them about our services there. When accessing the respective networks and platforms, the terms and conditions and the data processing guidelines of the respective operators apply.

Unless otherwise stated in our privacy policy, we process the data of the users, provided they communicate with us within the social networks and platforms, e.g. write posts on our online presences or send us messages.

Usage-based advertising

The advertising on this website is optimized for you in part by the anonymous collection and processing of your usage behaviour for predicted interests. For this purpose, cookies are stored on the user’s computer. These allow the recognition of the user, but do not allow a personal identification of the user. In order to optimize advertising for you based on your usage interests, we have allowed the following company to collect and use the aforementioned usage data:

Netpoint Media GmbH
Rheinallee 60
55283 Nierstein

Further information – as well as the possibilities for deactivating usage-based online advertising – can be found in the privacy policy of our marketer: www.netpoint-media.de/technik/datenschutz.

Integration of third-party services and content

Within our online offer, we use third-party content or service offerings based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 sec. 1 lit. f. GDPR) content or service offerings from third parties in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as “Content”).

This always presupposes that the third parties to this content perceive the IP address of the users, since they could not send the content to their browser without the IP address. The IP address is therefore required for the presentation of this content. We make every effort to use only those content whose respective providers use the IP address only for the delivery of the content. Third parties may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user’s device and may include, among other things, technical information about the browser and operating system, referring websites, visiting time and other information on the use of our online offer, as well as such information from other sources.

Amazon Partner Program

We are on the basis of our legitimate interests (i.e. interest in the economic operation of our online offer in the sense of Art. 6 sec. 1 lit. f. GDPR) Participants of the amazon EU partner program (Amazon Europe Core S.A.R.l., Amazon EU S.A.R.l., Amazon Services Europe S.A.R.l. and Amazon Media EU S.A.R.l., all four based at 5, Rue Plaetis, L-2338 Luxembourg), which was designed to provide a medium for websites , by which advertising costs can be earned by placing advertisements and links to Amazon.de (so-called affiliate system). Amazon uses cookies to track the origin of the orders. Among other things, Amazon can recognize that you have clicked the partner link on this website and then purchased a product from Amazon.

For more information about Amazon’s data usage and how to object, see the company’s privacy policy: http://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401.

Facebook Pixels, Custom Audiences and Facebook Conversion

Within our online offering, due to our legitimate interests in the analysis, optimization and economic operation of our online offer and for these purposes, the so-called “Facebook pixel” of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are resident in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”) is used.

With the help of the Facebook pixel, Facebook is able to identify visitors to our online offer as the target group for the display of advertisements (so-called “Facebook ads”). Accordingly, we use the Facebook pixel to display the Facebook ads we serve only to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products determined by the websites visited) that we transmit to Facebook (so-called “Custom Audiences”). With the help of the Facebook pixel, we also want to ensure that our Facebook ads meet the potential interest of users and do not have a harassing effect. With the help of the Facebook pixel, we can also understand the effectiveness of Facebook ads for statistical and market research purposes by seeing if users have been redirected to our website after clicking on a Facebook ad (so-called “conversion”).

The processing of the data by Facebook takes place within the framework of Facebook’s data usage policy. Accordingly, general notes on the presentation of Facebook ads, in Facebook’s data usage policy: https://www.facebook.com/policy.php. For specific information and details about the Facebook pixel and how it works, see the Help section of Facebook: https://www.facebook.com/business/help/651294705016616.

You can object to the collection by the Facebook pixel and the use of your data to display Facebook ads. To set what types of ads you see within Facebook, you can go to the page set up by Facebook and follow the usage-based advertising settings: https://www.facebook.com/settings?tab=ads. The settings are independent of the platform, i.e. they are applied to all devices, such as desktop computers or mobile devices.

You can also object to the use of cookies for range measurement and advertising purposes via the deactivation page of the network advertising initiative (http://optout.networkadvertising.org/) and additionally via the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).

Facebook Social Plugins

Based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 sec. 1 lit. f. GDPR) we use social plugins (“plugins”) of the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plugins can represent interaction elements or content (e.g. videos, graphics or text posts) and are recognizable by one of the Facebook logos (white “f” on blue tile, the terms “Like”, “Like” or a “thumbs up” sign) or are marked with the addition “Facebook Social Plugin”. The list and appearance of the Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/.

When a user calls up a feature of this online offer that contains such a plugin, his device establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to the user’s device and integrated by the user into the online offer. User profiles of the users can be created from the processed data. We therefore have no influence on the extent of the data that Facebook collects with the help of this plugin and therefore inform the users according to our state of knowledge.

By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the online offer. If the user is logged in to Facebook, Facebook can assign the visit to his Facebook account. When users interact with the plugins, for example by pressing the “Like” button or making a comment, the corresponding information is transmitted from your device directly to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will find out and store his IP address. According to Facebook, only an anonymized IP address is stored in Germany.

The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the rights and setting options for the protection of the privacy of users, can be found in Facebook’s privacy policy: https://www.facebook.com/about/privacy/ .

If a user is a Facebook member and does not want Facebook to collect data about him via this online offer and link it to his/her member data stored on Facebook, he must log out of Facebook before using our online offer and delete his cookies. Further settings and contradictions to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.

Google Re/Marketing Services

Based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 sec. 1 lit. f. GDPR), we use the marketing and remarketing services (short “Google Marketing Services”) of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, (“Google”).

Google’s marketing services allow us to display ads for and on our website in a more targeted way to present users only with ads that potentially meet their interests. If a user is shown ads for products that they are interested in on other websites, this is called “remarketing”. For these purposes, when Google calls up our and other websites on which Google marketing services are active, a code from Google is executed directly by Google and so-called (re)marketing tags (invisible graphics or code, also referred to as “web beacons”) are integrated into the website. With the help of these, an individual cookie, i.e. a small file, is stored on the user’s device (instead of cookies, comparable technologies can also be used). Cookies can be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. This file records which websites the user visited, which content he is interested in and which offers he has clicked on, as well as technical information about the browser and operating system, referring websites, visit time as well as further information on the use of the online offer. The IP address of the users is also recorded, whereby we inform google analytics that the IP address is truncated within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional cases is transmitted to a Google server in the USA and shortened there. The IP address will not be merged with the user’s data within other Google offers. The above information may also be linked by Google to such information from other sources. If the user then visits other websites, the ads tailored to him or her may be displayed according to his or her interests.

The data of the users are processed pseudonymously within the framework of the Google marketing services. This means that Google does not store and process the name or e-mail address of the users, for example, but processes the relevant data cookie-related within pseudonymous user profiles. From Google’s point of view, the ads are therefore not managed and displayed for a specific identified person, but for the cookie owner, regardless of who that cookie owner is. This does not apply if a user has expressly allowed Google to process the data without this pseudonymization. The information collected by Google marketing services about users is transmitted to Google and stored on Google’s servers in the United States.

Among the Google marketing services we use is the online advertising program “Google Ads”. In the case of Google Ads, each Ads customer will receive a different “conversion cookie”. Cookies cannot therefore be tracked through the websites of Ads customers. The information collected using the cookie is used to generate conversion statistics for Ads customers who have opted for conversion tracking. Ads customers will learn the total number of users who clicked on their ad and have been redirected to a page with a conversion tracking tag. However, you will not receive any information that can be used to personally identify users.

We may include third-party ads based on Google’s “AdSense” marketing service. AdSense uses cookies to enable Google and its partner websites to display advertisements based on users’ visits to this website or other websites on the Internet.

We may also use the Google Tag Manager to integrate and manage Google Analytics and Marketing Services on our website.

For more information about Google’s use of data for marketing purposes, please visit the overview page: https://www.google.com/policies/technologies/ads , Google’s privacy policy is available at https://www.google.com/policies/privacy.

If you wish to object to interest-based advertising through Google marketing services, you can take advantage of the settings and opt-out options provided by Google: http://www.google.com/ads/preferences.

Google Analytics

Based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 sec. 1 lit. f. GDPR) we use Google Analytics, a web analysis service of Google LLC (“Google”). Google uses cookies. The information generated by the cookie about the use of the online offer by the users is usually transmitted to a Google server in the USA and stored there. For more information about how Google uses data when websites and apps are used by partners, see https://policies.google.com/technologies/partner-sites?hl=de.

Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with other services related to the use of this online offer and the internet usage. Pseudonymous user profiles of the users can be created from the processed data.

We only use Google Analytics with IP anonymization enabled. This means that the IP address of the users is truncated by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.

The IP address transmitted by the user’s browser will not be merged with other data from Google. Users can prevent the storage of cookies by setting their browser software accordingly; Users can also prevent the collection of data generated by the cookie and related to their use of the online offer to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

For more information about Google’s use of data, settings and objections, see Google’s privacy policy (https://policies.google.com/technologies/ads) and the settings for Google’s display of advertisements (https://adssettings.google.com/authenticated).

The personal data of the users will be deleted or anonymized after 14 months.

Google Fonts

We include the fonts (“Google Fonts”) of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

Google Maps

We include the maps of the Google Maps service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The processed data may include in particular IP addresses and location data of the users, which are not collected without their consent (usually carried out within the framework of the settings of their mobile devices). The data can be processed in the United States. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

Intercom

We use third-party analytics services to help understand your usage of our services. In particular, we provide a limited amount of your information (such as sign-up date and some personal information like your email address) to Intercom Inc., 55 2nd Street, San Francisco, California/ USA) (“Intercom”) and utilize Intercom to collect data for analytics purposes when you visit our website or use our product. As a data processor acting on our behalf, Intercom analyzes your use of our website and/or product and tracks our relationship by way of cookies and similar technologies so that we can improve our service to you. For more information on Intercom’s use of cookies, please visit https://www.intercom.com/terms-and-policies#cookie-policy. We may also use Intercom as a medium for communications, either through email, or through messages within our product(s). As part of our service agreements, Intercom collects publicly available contact and social information related to you, such as your email address, gender, company, job title, photos, website URLs, social network handles and physical addresses, to enhance your user experience. For more information on the privacy practices of Intercom, please visit https://www.intercom.com/terms-and-policies#privacy. Intercom’s services are governed by Intercom’s terms of use which can be found at https://www.intercom.com/terms-and-policies#terms.

Trusted Shops Trustbadge

In order to display our Trusted Shops seal of approval and the possibly collected reviews as well as to offer Trusted Shops products to buyers after an order, the Trusted Shops Trustbadge is integrated on this website.

This serves to safeguard our legitimate interests in optimal marketing, which are predominant in the context of a balancing of interests, by enabling secure purchasing in accordance with Art. 6 para. 1 p. 1 lit. f GDPR. The Trustbadge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. The Trustbadge is provided as part of order processing by a CDN provider (Content Delivery Network). Trusted Shops GmbH also uses service providers from the USA. An adequate level of data protection is ensured. Further information on data protection at Trusted Shops GmbH can be found in our privacy policy.

When the Trustbadge is called, the web server automatically stores a so-called server log file, which also contains your IP address, date and time of retrieval, amount of data transferred and the requesting provider (access data) and documents the retrieval. Individual access data is stored in a security database for the analysis of security anomalies. The log files are automatically deleted no later than 90 days after creation.

Further personal data will be transferred to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or have already registered for use. The contractual agreement between you and Trusted Shops applies. For this purpose, an automatic collection of personal data from the order data takes place. Whether you as a buyer are already registered for product use is automatically checked using a neutral parameter, the e-mail address hashed using a one-way cryptological function. The e-mail address is converted into this hash value, which cannot be decrypted by Trusted Shops, before transmission. After checking for a match, the parameter is automatically deleted.

This is necessary for the fulfilment of our and Trusted Shops’ overriding legitimate interests in the provision of the buyer protection linked to the specific order and the transactional valuation services acc. Art. 6 para. 1 p. 1 lit. f GDPR. Further details, including the objection, can be found in the Trusted Shops Privacy Policy linked above and in the Trustbadge.

Twitter

Within our online offer, functions and contents of the Twitter service, offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, can be integrated. This may include, for example, content such as images, videos or texts and buttons with which users can express their approval of the content, subscribe to the author of the content or our contributions. If the users are members of the Twitter platform, Twitter can assign the call of the above-mentioned content and functions to the profiles of the users there. Privacy policy: https://twitter.com/de/privacy , opt out: https://twitter.com/personalization.

Youtube

We include the videos of the platform “YouTube” of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

We use the so-called “Extended Privacy Mode” of the provider Youtube to integrate videos. A cookie is only stored on your computer when the video is played. However, according to Youtube, no personal cookie information is stored for playback of embedded videos with enhanced privacy. For more information on YouTube’s official privacy policy, please visit http://www.youtube.com/t/privacy_at_youtube.

If you want to make sure that no data is stored by you on Youtube, do not click on the embedded videos.

Consent management

We have integrated the consent management tool “consentmanager” (www.consentmanager.net) of Jaohawi AB (H ltgelv gen 1b, 72348 Väster’s, Sweden, info@consentmanager.net) on our website in order to request consents for data processing or the use of cookies or similar functions. You have the option to grant or reject your consent for certain functionalities of our website, e.g. for the purpose of integrating external elements, integration of streaming content, statistical analysis, reach measurement and personalized advertising. They can use consentmanager to grant or reject their consent for all functions, or to give their consent for individual purposes or individual functions. You can also change the settings you have made afterwards. The purpose of the integration of “consentmanager” is to leave the users of our website to decide on the above things and to offer the possibility to change already made settings as part of the further use of our website. In the course of the use of “consentmanager” personal data as well as information of the used terminal devices such as the IP address are processed.

The legal basis for the processing is Article 6(3). 1 p. 1 lit. c) i.V. .m. Art. a) in the .m. 1 GDPR and, in the alternative, lit. f). We help our customers (according to GDPR of the controller) to fulfil their legal obligations (e.g. obligation to provide proof). Our legitimate interests in processing are the storage of user settings and preferences regarding the use of cookies and other functionalities. “Consentmanager” stores your data as long as your user settings are active. After two years after the user settings have been made, the consent will be re-en-searched. The user settings made are then saved again for this period of time.

You can object to the processing. Your right to object exists in the case of reasons arising from your particular situation. For objections, please contact info@consentmanager.net via e-mail.

Third party

The following third-party providers are used on this website:

All possible opt-outs at a glance

Basic deactivation options of cookies: http://www.aboutads.info/choices/ or http://www.youronlinechoices.com/

Disabling Google Analytics: https://tools.google.com/dlpage/gaoptout?hl=de

Deactivation of Google Ads/ Remarketing: https://www.google.com/settings/ads/plugin

Deactivation google analytics/Universal Analytics: http://tools.google.com/dlpage/gaoptout?hl=de or javascript:gaOptout()

Disabling Optimizely: https://www.optimizely.com/de/opt_out/

Deactivation Twitter: https://twitter.com/personalization

Deactivation ONE (AOL)/Oath: optout3.privacy.aol.com/Adapter.aspx?

Deactivation of AppNexus: http://www.appnexus.com/de/plattform-datenschutzrichtlinie#opt_out

Deactivation AudienceScience: http://www.audiencescience.com/de/privacy

Deactivation Of AdEX: http://de.theadex.com/company/consumer-opt-out/

Deactivation Emetriq GmbH: https://www.emetriq.com/en/opt-out-eng/

Deactivation AudienceProject: https://privacy.audienceproject.com/de-DE/for-users/opt-out/

Deactivation of Ströer SSP: http://ih.adscale.de/adscale-ih/oo

Deactivation os Data Solutions: http://www.youronlinechoices.com/de/praferenzmanagement/

Settings and contradictions for the use of data for advertising purposes on Facebook: https://www.facebook.com/settings?tab=ads

Status of the data protection declaration: December 2022