Data protection and privacy

Data protection and privacy

The data protection information provides information about the collection, processing and use (“utilisation”) of your personal data when using our online services and for all other deliveries and services that you wish to obtain from us.
Below, we inform you about the handling of your personal data when you use our website. Personal data is all data with which you can be personally identified.
This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller). You can recognise an encrypted connection by the character string “https://” and the lock symbol in your browser line.

 

I Name and address of the controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is

Deutscher Landwirtschaftsverlag GmbH
Lothstr. 29
80797 Munich, Germany
Germany
Phone: +49 89 12705-0
Email: info[at]dlv.de

 

II Data protection officer

The controller has appointed a data protection officer, who can be contacted as follows:

DataCo GmbH
Dachauer Str. 65
80335 Munich, Germany
Germany
Email: datenschutz[at]dlv.de

 

III General information on data processing

III.1 Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data. When processing personal data that is necessary for the fulfilment of a contract to which the data subject is a party, Art. 6 para 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures. Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para 1 lit. c GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para 1 lit. d GDPR serves as the legal basis. If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para 1 lit. f GDPR serves as the legal basis for the processing.

 

III.2 Deletion of data and storage duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

 

III.3 Data protection application at agri-experts.de

The contents of the agri-EXPERTS panel are closed and can only be viewed with a personal login and are protected with a password.
The data collected is analysed exclusively anonymously and cannot be subsequently attributed to any individual.
Personal participant data will not be passed on to third parties.
After completion of the survey, all personal data of the participants will be deleted.

 

IV Provision of the website and creation of log files

IV.1 Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

We collect the following data:
(1) Information about the browser type and version used
(2) The user's operating system
(3) The user's Internet service provider
(4) The IP address of the user
(5) Date and time of access
(6) Websites from which the user's system accesses our website
(7) Websites that are accessed by the user's system via our website

The data is also stored in the log files of our system. This does not extend to the user's IP addresses or other data that allows the data to be assigned to a user. This data is not stored together with other personal data of the user.

 

IV.2 Legal basis data processing

The legal basis for the temporary storage of data is Art. 6 para 1 lit. f GDPR.

 

IV.3 Purpose of the data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para 1 lit. f GDPR.

 

IV.4 Duration of the storage

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

 

IV.5 Content Delivery Network – AWS CloudFront (Amazon)

On our website, we use the Content Delivery Network (“CDN”) “AWS CloudFront” of the service provider “Amazon” (Amazon EU S.a. r.l., 38 avenue John F. Kennedy, 1855 Luxembourg).
A content delivery network is an online service that is used in particular to deliver large media files (such as graphics, page content or scripts) through a network of regionally distributed servers connected via the Internet. The use of Amazon's content delivery network helps us to optimise the loading speed of our website.
The processing is carried out in accordance with Art. 6 para 1 lit. f GDPR on the basis of our legitimate interest in the secure and efficient provision and improvement of the stability and functionality of our website.
Further information can be found in Amazon's privacy policy at docs.aws.amazon.com/de_de/AmazonCloudFront/latest/DeveloperGuide/data-protection-summary.html

 

V Use of cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted again at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable your browser to be recognised the next time you visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. The duration of the respective cookie storage can be found in the overview of the cookie settings of your web browser.
In some cases, cookies are used to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual shopping basket for a later visit to the website). If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para 1 lit. a GDPR in the case of consent given or in accordance with Art. 6 para 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. These can be found for the respective browsers under the following links:
Internet Explorer: support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: support.google.com/chrome/answer/95647
Safari: support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: help.opera.com/de/latest/web-preferences/
Please note that if you do not accept cookies, the functionality of our website may be restricted.

V.1 Own cookies

V.1.a Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change. The log-in information (IV number 1) is stored and transmitted in the cookies.

 

V.1.b Legal basis of data processing

The legal basis for the processing of personal data using cookies is Art. 6 para 1 lit. f GDPR.

 

V.1.c Purpose of the data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies.

 

V.1.d Duration of storage and restriction of the use of cookies

Cookies are stored on the user's computer and transmitted by it to our website. They are automatically deleted at the end of each session.

As a user, you have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

 

V.2 Use of the website analysis service Google Analytics

V.2.a Description and scope of data processing

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Analytics uses so-called “cookies”, text files that are saved on your computer and which allow an analysis of how the website is used. The information generated by the cookie concerning your use of this website can be transmitted to a Google server in the USA and saved there. However, due to the activation of IP anonymisation on these websites, your IP address will be abbreviated by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and then abbreviated. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and Internet usage. The IP address transmitted from your browser with the framework of Google Analytics will not be linked with any other data from Google. Google Analytics data may not be passed on without the customer's consent, unless there are special circumstances such as legal requirements.

As part of Google Analytics, we also use the Google Signals extension, which enables tracking across multiple end devices. For this purpose, Google uses the data of users who are simultaneously logged into a Google service when visiting websites and have activated the “personalised advertising” option in their Google account settings (https://adssettings.google.com/authenticated). Google Signals is also only used with IP anonymisation activated.

 

V.2.b Legal basis of data processing

The legal basis for the temporary storage of the data and log files is Art. 6 para 1 lit. f GDPR. 

 

V.2.c Purpose of the data processing

The purpose of using the data and analysis with Google Analytics is to optimise our services.

 

V.3 Duration of storage and restriction of the use of cookies

Cookies are stored on the user's computer for a period of up to two years and transmitted by it to our website.

As a user, you have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/
gaoptout?hl=de

You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/
answer/6004245?hl=de

Further information on the collection and use of data by Google and your rights to protect your privacy can be found in the data protection information at www.google.de/intl/de/policies/privacy/.

 

V.4 Use of the Opinary web service

V.4.a Description, scope and purpose of data processing

Opinary GmbH, (Engeldamm 62–64, 10179 Berlin, Germany, privacy@opinary.com) offers a service that allows users to vote on editorial as well as sponsored polls. In this context, the service automatically stores a cookie on the user's computer, which allows Opinary to summarise voting results in a statistically meaningful way and to optimise its service and the information presented in the interests of the user. This cookie is based on a randomised online identifier.

The additional data collected includes the category of content of the website visited, the type of Opinary tools used, language of the content, browser, operating system, device type, location information and whether you vote or click on or interact with other content. This information is summarised together with the identifier to form a user profile. The user profile does not contain any names, postal addresses, telephone numbers, email addresses or similar personal data.

The collected data is used for the following purposes, among others:

To generate, display and provide relevant aggregates (without any reference to personal information) from Opinary Online Surveys and provide them to Opinary Partners

To recommend products, services or other relevant surveys

To improve the Opinary offering

To protect against misuse

Statistics

If you do not want this, you can opt out via the following opt out function: https://compass.pressekompass.net/static/optout.html

Statistical information helps to understand trends and customer needs so that these can be taken into account in new products and services as well as to improve existing products and services. Opinary GmbH does not knowingly collect or store any information that would allow Opinary to determine the actual identity of users and Opinary ensures through regular auditing and encryption mechanisms that this remains impossible in the future.

 

 

 

V.4.b Legal basis of data processing

The legal basis for the collection and use of data is stated in Opinary's published privacy policy https://opinary.com/datenschutz/?lang=de.

In principle, data processing is carried out on the following legal basis:

otherwise, in particular in the case of statistical data and online identifiers, on the basis of Opinary's legitimate interests to optimise and finance its system, Art. 6 para 1 lit. f GDPR

 

 

 

V.4.c Duration of the storage

Opinary stores customer data on the basis of a legitimate interest at most for as long as the customer's interest in deletion or anonymisation does not override it. All PII (“personally identifiable information”) information that Opinary collects is processed after a period of one year in such a way that the personal reference to an original person can no longer be established.

 

V.5 Use of rating and seal of approval graphics – Trusted Shops Trustbadge

The Trusted Shops Trustbadge is integrated on this website to display our Trusted Shops seal of approval and to offer Trusted Shops membership to buyers after placing an order.
This serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in the optimal marketing of our offer, Art. 6 para 1 lit. f GDPR. The Trustbadge and the services advertised with it are an offer from Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany.
When the Trustbadge is called up, the web server automatically saves a so-called server log file, which contains, e.g., your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. This access data is not analysed and is automatically overwritten no later than seven days after the end of your visit to the site.
Further personal data is only transferred to Trusted Shops if you decide to use Trusted Shops products after completing an order or if you have already registered to use them. In this case, the contractual agreement concluded between you and Trusted Shops applies.

 

 

 

V.6 Competitions

If you take part in a competition, you can find further information about the data processing that takes place as part of the competition participation in the data protection policy of the respective competition.

 

 

 

 

V.6.1 Happy Contest

We use Happy Contests to organise interactive competitions, prize draws, quizzes, voting, online games and surveys. Happy Contests collects and stores personal data of users who have agreed to the conditions of participation for the purpose of interacting with the participants in these campaigns and, if applicable, to determine the winners. Further information on the collection and storage of data by Happy Contests can be found at: www.happy-contests.de/datenschutz/.

 

 

 

 

V.6.2 Use of our websites with advertising or a pure subscription

You can use some of our web offers either with the free and ad-financed access or with a paid “pure access”. Access to both formats takes place via a query before visiting the actual website.

If you opt for free access, you consent to us collecting personal data and transferring it to third-party providers who help us to improve and finance our website and offers. This involves processing the information stored on your device – e.g. cookies or personal identifiers such as IP addresses – as well as your individual usage behaviour. You can view the purposes and individual partners at any time in the consent query settings. When reading with advertising and tracking, you consent to the processing of the data stored on your device, such as personal identifiers or IP addresses, for the processing purposes in accordance with § 25 (1) TTDSG (Telecommunications Digital Services Data Protection Act) and Art. 6 para 1 lit. a GDPR. In addition, you expressly consent to your data also being processed in the USA in accordance with Art. 49 para 1 sentence 1 lit. a GDPR. 

 

 

 

 

VI Making contact

<Personal data is collected when you contact us (e.g. via contact form or email). The data collected when using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your enquiry or for contacting you and the associated technical administration. The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6 para 1 lit. f GDPR. If your contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para 1 lit. b GDPR. Your data will be deleted after final processing of your enquiry. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided there are no statutory retention obligations to the contrary./p&g

VI.1 Description and scope of data processing

On our website, it is possible to contact us via the email address provided. In this case, the user's personal data transmitted with the email will be stored.

The data is not passed on to third parties in this context. The data is used exclusively for processing the conversation.

 

VI.2 Legal basis of data processing

The legal basis for the processing of the data transmitted in the course of making contact is Art. 6 para 1 lit f GDPR. If the email contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para 1 lit. b GDPR.

 

VI.3 Purpose of the data processing

This data is stored and used exclusively for the purpose of responding to your enquiry or for contacting you and the associated technical administration.

 

VI.4 Duration of the storage

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected.

If statutory provisions stipulate retention obligations (e.g. six years for commercial letters received, § 257 para 4 HGB), the data will be deleted after the corresponding period has expired.

 

VII Data provided by you when concluding legal transactions

VII.1 Description and scope of data processing

In some areas of the website, you may be asked to provide personal data in order to use the fee-based offers or free functions described in each case or to participate in special promotions (subscription order, placing an advert, creating a personal user profile, ordering editorial and/or advertising newsletters, participating in competitions or other promotions, opening a customer account). You will be informed which information you are required to provide for these offers and which data you can provide voluntarily.

In particular, the following data may be collected: your name, address, bank details, password, date of birth, email address, declarations of consent, information on the concluded legal transaction.

 

VII.2 Legal basis of data processing

If the data collection is aimed at the conclusion of a contract, the legal basis for the processing is Art. 6 para 1 lit. b GDPR. In addition, data is processed on the basis of your consent (Art. 6 para 1 lit. a GDPR).

 

VII.3 Purpose of the data processing

Data processing is carried out for the purpose of enabling the use of the respective offers and functions. If you provide further data voluntarily, we will use it to customise our services.

 

VII.4 Duration of the storage

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. This is regularly the case if the service you have used (e.g. newsletter subscription, creation of a personal user profile) is cancelled.

If statutory provisions stipulate retention obligations (e.g. six years for commercial letters received, § 257 para 4 HGB), the data will be deleted after the corresponding period has expired.

 

VIII Data processing for advertising purposes without consent

VIII.1 Description and scope of data processing

If you have concluded a contract with us for the purchase of goods or services, we will manage you as an existing customer with the data collected for this main purpose. In this case, we will also process your postal contact data (name and address) without your specific consent in order to send you information about new products and services via this channel. If we have received your email address in connection with the sale of a product or service, we process the email address in order to send you information about our own similar products or services even without the presence of specific consent. We use any additional voluntary information provided to select and design any advertising in line with the target group.

 

VIII.2 Legal basis of data processing

The legal basis for the processing of data is Art. 6 para 1 lit. f GDPR.

 

VIII.3 Purpose of the data processing

The data is processed for the purpose of advertising our own similar goods or services.

 

VIII.4 Duration of the storage

The duration of storage is based on the main purpose of the collection (Section VII.4.)

 

VIV Data processing for opening a customer account and for contract processing

In accordance with Art. 6 para 1 lit. b GDPR, personal data will continue to be collected and processed if you provide it to us for the fulfilment of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Your customer account can be deleted at any time by sending a message to the above address of the controller. We store and use the data provided by you to fulfil the contract. After completion of the contract or deletion of your customer account, your data will be blocked taking into account tax and commercial law retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or a legally permitted further use of data has been reserved by us.

 

IX Comment function

IX.1 How the comment function works

As part of the comment function on this website, information about the time the comment was created and the commentator name you have chosen will be saved and published on the website in addition to your comment. Your IP address is also logged and stored. The IP address is stored for security reasons and in case the data subject posts a comment that violates the rights of third parties or that contains illegal content. We need your email address in order to contact you if a third party should object to your published content as unlawful. The legal basis for the storage of your data is Art. 6 para 1 lit. b and f GDPR. We reserve the right to delete comments if they are objected to as unlawful by third parties.

You can subscribe to the follow-up comments as a user. You will receive a confirmation email to ensure that you are the owner of the email address provided (double opt-in procedure). The legal basis for data processing when subscribing to comments is Art. 6 para 1 lit. a GDPR. You can unsubscribe from ongoing comment subscriptions at any time with effect for the future; please refer to the confirmation email for more information on how to unsubscribe.

IX.2 Questions and answers comment function

As part of the questions and answers function on the hetairos.com website, information about the time the contribution was created and the name you have chosen will be saved and published on the website in addition to your contribution. Your IP address is also logged and stored. The IP address is stored for security reasons and in case the data subject posts a comment that violates the rights of third parties or that contains illegal content. We need your email address in order to contact you if a third party should object to your published content as unlawful and to inform you of new responses to your post. The legal basis for the storage of your data is Art. 6 para 1 lit. b and f GDPR. We reserve the right to delete contributions if they are objected to as unlawful by third parties.

If you have written a question or answer, you will be informed by email about new answers to this post. You can unsubscribe from ongoing contribution subscriptions at any time with effect for the future; you will find a link to do so in each of these notification emails.

 

X Scalable centralised measurement method

Our website uses the measurement procedure (“SZMnG”) of INFOnline GmbH(https://www.INFOnline.de) to determine statistical parameters about the use of our offers. The aim of usage measurement is to statistically determine the number of visits to our website, the number of website visitors and their surfing behaviour – on the basis of a uniform standard procedure – and thus to obtain comparable values across the market.
For all digital offerings that are members of the Informationsgemeinschaft zur Feststellung der Verbreitung von Werbeträgern e.V. IVW (German Audit Bureau of Circulation) (https://www.ivw.eu) or participate in the studies of the Arbeitsgemeinschaft Online-Forschung e.V. AGOF (Working Group for Online Media Research) (https://agof.de), the usage statistics are regularly processed by the AGOF and the Arbeitsgemeinschaft Media-Analyse e.V. agma (Working Group Media Analysis agma (https://www.agma-mmc.de) into reach figures and published with the performance value "Unique User" and by the IVW with the performance values “Page Impression” and “Visits”. These reach figures and statistics can be viewed on the respective websites.

X.1. Legal basis of the processing

Measurement using the SZMnG measurement method by INFOnline GmbH is based on legitimate interest in accordance with Art. 6 para 1 lit. f GDPR.
The purpose of processing personal data is to compile statistics and create user categories. The statistics are used to track and document the use of our offer. The user categories form the basis for the interest-based targeting of advertising material and advertising measures. In order to market this website, it is essential to measure usage in order to ensure comparability with other market participants. Our legitimate interest arises from the economic usability of the findings resulting from the statistics and user categories and the market value of our website – also in direct comparison with third-party websites – which can be determined on the basis of the statistics.
In addition, we have a legitimate interest in making the pseudonymised data available to INFOnline, AGOF and IVW for the purposes of market research (AGOF, agma) and for statistical purposes (INFOnline, IVW). Furthermore, we have a legitimate interest in making the pseudonymised data available to INFOnline for the further development and provision of interest-based advertising material.

X.2. Type of data

INFOnline GmbH collects the following data, which is personal data according to the EU GDPR:
IP address: On the Internet, every device requires a unique address, the so-called IP address, to transmit data. The at least short-term storage of the IP address is technically necessary due to the way the Internet works. The IP addresses are shortened by 1 byte before any processing and are only processed further in anonymised form. There is no storage or further processing of the untruncated IP addresses.
A randomly generated client identifier: Reach processing uses either a third-party cookie, a first-party cookie, a “local storage object” or a signature created from various automatically transmitted information from your browser to recognise computer systems. This identifier is unique for a browser as long as the cookie or local storage object is not deleted. Measurement of the data and subsequent assignment to the respective client identifier is therefore also possible if you access other websites that also use the INFOnline GmbH measurement procedure (“SZMnG”).
The validity of the cookie is limited to a maximum of 1 year.

X.3. Use of the data

INFOnline GmbH's measurement method, which is used on this website, determines usage data. This is carried out in order to collect the performance values page impressions, visits and clients and to form further key figures from this (e.g. qualified clients). Furthermore, the measured data is used as follows:
A so-called geolocalisation, i.e. the assignment of a website visit to the location of the visit, is carried out exclusively on the basis of the anonymised IP address and only up to the geographical level of the federal states / regions. Under no circumstances can the geographical information obtained in this way be used to draw conclusions about the specific location of a user.
The usage data of a technical client (e.g. a browser on a device) is collated across websites and stored in a database. This information is used for the technical estimation of the socio-information age and gender and transferred to the AGOF service providers for further reach processing. As part of the AGOF study, sociological characteristics are technically estimated on the basis of a random sample, which can be assigned to the following categories: Age, gender, nationality, occupation, marital status, general household information, household income, place of residence, Internet use, online interests, place of use, user type.

X.4. Duration of data storage

The full IP address is not stored by INFOnline GmbH. The shortened IP address is stored for a maximum of 60 days. The usage data in connection with the unique identifier is stored for a maximum of 6 months.

X.5. Passing on of the data

Neither the IP address nor the shortened IP address are passed on. For the preparation of the AGOF study, data with client identifiers is passed on to the following AGOF service providers:
Kantar Deutschland GmbH (https://www.tns-infratest.com/)
Ankordata GmbH & Co. KG (http://www.ankordata.de/homepage/)
Interrogare GmbH (https://www.interrogare.de/)

X.6. Rights of the data subject

The data subject has the following rights:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to object (Art. 21 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 et seq. GDPR)
Right to data portability (Art. 20 GDPR)

For enquiries of this kind, please contact our data protection officer at datenschutz[at]dlv.de. Please note that we must ensure that we are actually dealing with the data subject for such enquiries.
The data subject has the right to lodge a complaint with a data protection authority.
Further information on data protection in the measurement process can be found on the website of INFOnline GmbH (https://www.infonline.de), which operates the measurement process, the data protection website of AGOF (https://www.agof.de/datenschutz) and the data protection website of IVW (https://www.ivw.eu

X.7 Right to object

If you do not wish to participate in the measurement, you can object at the following link: https://optout.ioam.de

In order to guarantee exclusion from measurement, it is technically necessary to set a cookie. If you delete the cookies in your browser, it is necessary to repeat the opt-out process under the above-mentioned link.

The data subject has the right to lodge a complaint with a data protection authority.

 

 

XI Use of your data for direct advertising purposes

XI.1 Registration for our email newsletter

If you subscribe to our email newsletter, we will send you regular information about our offers. The only mandatory information for sending the newsletter is your email address. The provision of any other data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an email newsletter if you have expressly confirmed to us that you consent to the newsletter being sent. We will then send you a confirmation email asking you to confirm that you wish to receive future newsletters by clicking on a corresponding link.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 para 1 lit. a GDPR. When you register for the newsletter, we store your IP address entered by the Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data collected by us when you register for the newsletter will be used exclusively for the purpose of advertising by means of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the controller named above at the beginning. Once you have unsubscribed, your email address will be deleted from our newsletter mailing list immediately, unless you have expressly consented to further use of your data or we reserve the right to the use of such data beyond this, which is permitted by law and about which we inform you in this declaration.

 

XI.2 Advertising by post

On the basis of our legitimate interest in personalised direct advertising, we reserve the right to store your first and last name, your postal address and – if we have received this additional information from you as part of the contractual relationship – your title, academic degree, year of birth and your professional, industry or business name in accordance with Art. 6 para 1 lit. f GDPR and to use them to send you interesting offers and information about our products by post.

You can object to the storage and use of your data for this purpose at any time by sending a respective message to the controller.

 

XII Data processing for the purpose of order processing

XII.1 Cooperation with service providers

Insofar as necessary for contract processing for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned bank in accordance with Art. 6 para 1 lit. b GDPR.
If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact data (name, address, email address) provided by you when placing the order in order to inform you personally by suitable means of communication (e.g. by post or email) about upcoming updates within the legally prescribed period as part of our statutory information obligations pursuant to Art. 6 para 1 lit. c GDPR. Your contact details will be used strictly for the purpose of notifying you of updates owed by us and will only be processed by us for this purpose to the extent necessary for the respective information.
To process your order, we also work together with the following service provider(s), who support us in whole or in part in the fulfilment of concluded contracts. Certain personal data is transmitted to these service providers as described in the following.

 

XII.2 Use of payment service providers

XII.2.a ConCardis

If you choose to pay by credit card via the payment service provider ConCardis, payment will be processed by the payment service provider ConCardis GmbH, Helfmann-Park 7, 65760 Eschborn, Germany, to whom we will pass on the information you provided during the ordering process together with the information about your order in accordance with Art. 6 para 1 lit. b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider ConCardis and only to the extent that is necessary for this purpose.

XII.2.b PAYONE

If you choose a payment method from the payment service provider PAYONE, payment processing will be carried out via the payment service provider BS PAYONE GmbH, Lyoner Straße 9, 60528 Frankfurt am Main, Germany, to whom we will pass on the information you provided during the ordering process together with the information about your order in accordance with Art. 6 para 1 lit. b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider PAYONE and only to the extent that is necessary for this purpose.

XII.2.c PayPal

When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – “purchase by invoice” or “payment in instalments” via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg (hereinafter “PayPal”), as part of payment processing. The transfer takes place in accordance with Art. 6 para 1 lit. b GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered – “purchase by invoice” or “payment in instalments” via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Further data protection information, including information on the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be authorised to process your personal data if this is necessary for contractual payment processing.

 

XIII Our social media presences

XIII.1 Data processing by social networks

We maintain publicly accessible profiles in social networks. The individual social networks we use are indicated below.

Social networks such as Facebook, X etc. can generally analyse your user behaviour comprehensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presences triggers numerous data protection-relevant processing operations. In detail:

If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, e.g., via cookies that are stored on your end device or by recording your IP address.

By means of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are logged in or have been logged in.

Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection provisions of the respective social media portals.

 

XIII.2 Legal basis

Our social media presences are intended to ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 para 1 lit. f GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 para 1 lit. a GDPR).

 

XIII.3 Controller and assertion of rights

If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. You can assert your rights (information, rectification, erasure, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal (e.g. Facebook).

Please note that, despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing procedures of the social media portals. Our options are largely determined by the company policy of the respective provider.

 

XIII.4 Storage duration

The data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for its storage no longer applies, you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Stored cookies remain on your end device until you delete them. Mandatory statutory provisions – in particular retention periods – remain unaffected.

We have no influence on the storage period of your data that is stored by the operators of social networks for their own purposes. For details, please obtain information directly from the operators of the social networks (e.g. from their privacy policies, see below).

 

XIII.5 Social networks in detail

 

Vimeo

We have a profile on Vimeo. The provider is Vimeo, Inc, 555 West 18th Street, New York, NY 10011, USA. Details on how they handle your personal data can be found in Vimeo's privacy policy: https://vimeo.com/privacy.

 

glomex Content

glomex GmbH, based in Munich, Germany, is a subsidiary (100%) of ProSiebenSat.1 Media SE. “glomex – The Global Media Exchange” is a unique marketplace for premium video content. With its “Media Exchange Service”, glomex offers an intuitive, web-based platform on which licensors of professionally produced videos on the one hand and website operators on the other can easily and smoothly trade content for reach. glomex provides the necessary technical infrastructure in the form of a cloud-based transaction platform. The video content integrated via glomex is subject to its own data protection provisions, which you can view at the following link: www.glomex.com/de/privacy-policy/

 

YouTube videos

This website uses the YouTube embedding function to display and play videos from the provider “YouTube”, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

The extended data protection mode is used here, which, according to the provider, only initiates the storage of user information when the video(s) is/are played. If playback of embedded YouTube videos is started, the provider “YouTube” uses cookies to collect information about user behaviour. According to information from “YouTube”, these are used, among other things, to record video statistics, improve user-friendliness and prevent abusive behaviour. If you are logged in to Google, your data will be assigned directly to your account when you click on a video. If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyses them. Such an evaluation is carried out in particular in accordance with Art. 6 para 1 lit. f GDPR on the basis of Google's legitimate interests in the display of personalised advertising, market research and/or the needs-based design of its website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

Regardless of whether the embedded videos are played, a connection to the Google “DoubleClick” network is established each time this website is accessed, which may trigger further data processing operations without our influence.

Further information on data protection at “YouTube” can be found in the provider's privacy policy at: https://www.google.de/intl/de/policies/privacy

 

Plugins and tools from Spotify

Functions of the Spotify music service are embedded on this website. The provider is Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden. You can recognise the Spotify plugins by the green logo on this website. You can find an overview of the Spotify plugins at: https://developer.spotify.com. This allows a direct connection to be established between your browser and the Spotify server via the plugin when you visit this website. Spotify then receives the information that you have visited this website with your IP address. If you click on the Spotify button while you are logged into your Spotify account, you can link the content of this website to your Spotify profile. This allows Spotify to assign your visit to this website with your user account. We would like to point out that when using Spotify, cookies from Google Analytics are used so that your usage data can also be passed on to Google when using Spotify. Google Analytics is a tool of the Google Group based in the USA for analysing user behaviour. Spotify bears sole responsibility for this integration. We as the website operator have no influence on this processing. The data is stored and analysed on the basis of Art. 6 para 1 lit. f GDPR. The website operator has a legitimate interest in the appealing acoustic design of its website. If respective consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para 1 lit. a GDPR; the consent can be revoked at any time. Further information on this can be found in Spotify's privacy policy: https://www.spotify.com/de/legal/privacy-policy/. If you do not want Spotify to be able to assign your visit to this website with your Spotify user account, please log out of your Spotify user account.

 

XIV Online marketing

XIV.1 Google AdSense

This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google AdSense uses so-called “DoubleClick DART cookies” (“cookies”). These are text files that are stored on your computer and enable your use of the website to be analysed. In addition, Google AdSense also uses so-called “web beacons” (small invisible graphics) to collect information, through the use of which simple actions such as visitor traffic on the website can be recorded, collected and analysed. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website may be transmitted to and stored by Google on servers in the USA.

Google uses the information obtained in this way to evaluate your usage behaviour with regard to the AdSense ads. The IP address transmitted by your browser as part of Google AdSense will not be merged with other Google data. The information collected by Google may be transferred to third parties if this is required by law and/or if third parties process this data on behalf of Google.

The described processing of data is carried out in accordance with Art. 6 para 1 lit. f GDPR for the purpose of targeted advertising to the user by advertising third parties, whose advertisements are displayed on this website based on the evaluated user behaviour. At the same time, the processing serves our financial interest in exploiting the economic potential of our website by displaying personalised third-party advertising content for a fee.

You can find more information about Google's privacy policy at the following Internet address: http://www.google.de/policies/privacy/

You can permanently deactivate cookies for ad preferences by setting your browser software accordingly or by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/plugin?hl=de

Please note that you may not be able to use certain functions of this website, or only to a limited extent, if you have deactivated the use of cookies.

 

XIV.2 Amazon partner programme

Based on legitimate interests (interest in the economic operation of our online offer within the meaning of Art. 6 para 1 lit. f GDPR), we are a participant in the Amazon EU partner programme, which was designed to provide a medium for websites by means of which advertising cost refunds can be earned through the placement of advertisements and links to Amazon.de (so-called affiliate system). This means that as an Amazon partner, we earn money from qualified purchases.

Amazon uses cookies that enable it to trace the origin of the conclusion of the contract.

Further information on the use of data by Amazon and objection options can be found in the company's privacy policy: https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010.

Please note: Amazon and the Amazon logo are trademarks of Amazon.com, Inc., or one of its affiliates.

 

XIV.3 AWIN partner programme

Based on legitimate interests (interest in the economic operation of our online offer within the meaning of Art. 6 para 1 lit. f GDPR), we are a participant in the partner programme of AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany, which was designed to provide a medium for websites by means of which advertising cost refunds can be earned through the placement of advertisements and links to AWIN (so-called affiliate system). AWIN uses cookies that enable it to trace the origin of the conclusion of the contract. Among other things, AWIN can recognise that you have clicked on the partner link on this website and subsequently concluded a contract with or via AWIN.

Further information on the use of data by Awin and how to object can be found in the company's privacy policy: https://www.awin.com/de/rechtliches.

 

XIV.4 ADCELL – partner programme network

Based on legitimate interests (interest in the economic operation of our online offer within the meaning of Art. 6 para 1 lit. f GDPR), we are a participant in the partner programme of ADCELL, Firstlead GmbH, Rosenfelder Str. 15–16, 10315 Berlin, Germany, which was designed to provide a medium for websites by means of which advertising cost refunds can be earned through the placement of advertisements and links to ADCELL (so-called affiliate system). ADCELL uses cookies that enable it to trace the origin of the conclusion of the contract. Among other things, ADCELL can recognise that you have clicked on the partner link on this website and subsequently concluded a contract with or via ADCELL.

Further information on the use of data by ADCWLL and how to object can be found in the company's privacy policy: https://www.adcell.de/agb.

 

XIV.5 communicationAds – partner programme network

Based on legitimate interests (interest in the economic operation of our online offer within the meaning of Art. 6 para 1 lit. f GDPR), we are a participant in the partner programme of communicationAds GmbH & Co. KG, Kaiserstraße 23, 90403 Nuremberg, Germany, which was designed to provide a medium for websites by means of which advertising cost refunds can be earned through the placement of advertisements and links to communicationAds (so-called affiliate system). communicationAds uses cookies that enable it to trace the origin of the conclusion of the contract. Among other things, communicationAds can recognise that you have clicked on the partner link on this website and subsequently concluded a contract with or via communicationAds.

Further information on the use of data by communicationAds and how to object can be found in the company's privacy policy: https://www.communicationads.net/de-de/ueberuns/datenschutz/.

 

XIV.6 retailAds – partner programme network

Based on legitimate interests (interest in the economic operation of our online offer within the meaning of Art. 6 para 1 lit. f GDPR), we are a participant in the partner programme of retailAds GmbH & Co. KG, Kaiserstraße 23, 90403 Nuremberg, Germany, which was designed to provide a medium for websites by means of which advertising cost refunds can be earned through the placement of advertisements and links to retailAds (so-called affiliate system). retailAds uses cookies that enable it to trace the origin of the conclusion of the contract. Among other things, retailAds can recognise that you have clicked on the partner link on this website and subsequently concluded a contract with or via retailAds.

Further information on the use of data by retailAds and how to object can be found in the company's privacy policy: https://www.retailads.net/de-de/ueberuns/datenschutz/.

 

XIV.7 lead alliance GmbH – partner programme network

Based on legitimate interests (interest in the economic operation of our online offer within the meaning of Art. 6 para 1 lit. f GDPR), we are a participant in the partner programme of lead alliance GmbH & Co. KG, Karlstraße 9, 90403 Nuremberg, Germany, which was designed to provide a medium for websites by means of which advertising cost refunds can be earned through the placement of advertisements and links to lead alliance (so-called affiliate system). lead alliance uses cookies that enable it to trace the origin of the conclusion of the contract. Among other things, lead alliance can recognise that you have clicked on the partner link on this website and subsequently concluded a contract with or via lead alliance.

Further information on the use of data by lead alliance and how to object can be found in the company's privacy policy: https://www.lead-alliance.net/dataprotection2.

 

XV Web analysis services

XV.1 Google (Universal) Analytics

- Google Universal Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Analytics uses so-called "cookies", text files that are saved on your computer and which allow an analysis of how the website is used. The information generated by the cookie about your use of this website (including your truncated IP address) can be transmitted to a Google server in the USA and saved there.

This website uses Google Analytics exclusively with the extension “_anonymizeIp()”, which ensures anonymisation of the IP address by shortening it and excludes direct personal references. This extension means that your IP address will first be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and then abbreviated. In these exceptional cases, this processing is carried out in accordance with Art. 6 para 1 lit. f GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes.

Google will use this information on our behalf to analyse your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and Internet usage. The IP address transmitted from your browser with the framework of Google Analytics will not be linked with any other data from Google.

You can refuse the installation of cookies by selecting the appropriate settings on your browser; however please note that if you do this, you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under “My data”, “Personal data”.

You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

 

XV.2 New Relic (New Relic Inc.)

This website uses the web analysis service New Relic, operated by New Relic, Inc, 188 Spear St, San Francisco, CA 94105, USA. With the help of New Relic, pseudonymised visitor data is collected, evaluated and stored on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes in accordance with Art. 6 para 1 lit. f GDPR. Pseudonymised user profiles can be created and evaluated from this data for the same purpose. New Relic uses so-called “cookies”, i.e. small text files that are stored locally in the cache of the website visitor's Internet browser. These cookies serve, among other things, to recognise the browser and thus enable a more precise determination of statistical data. The user's IP address is included in the information collected, but is pseudonymised immediately after collection and before it is stored in order to prevent it from being linked to a specific person.

Under no circumstances will New Relic link your personal data with other New Relic data. If you wish to object to the evaluation of user behaviour via cookies, you can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general.

Alternatively, you can use the deactivation page for consumers from the EU http://www.youronlinechoices.com/uk/your-ad-choices/ to check whether advertising cookies from New Relic are set in your browser and deactivate them.

You can access New Relic's privacy policy at the following Internet address: https://www.newrelic.de/cookie-policy

 

XV.3 Hotjar (Hotjar Limited)

We use Hotjar from Hotjar Limited (Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta) on our website to statistically evaluate visitor data. Hotjar is a service that analyses the behaviour and feedback of you as a user on our website through a combination of analysis and feedback tools. We receive reports and visual representations from Hotjar that show us where and how you “move” on our site. Personal data is automatically anonymised and never reaches Hotjar's servers. This means that you as a website user are not personally identified and we still learn a lot about your user behaviour.

What is Hotjar?

As mentioned in the section above, Hotjar helps us to analyse the behaviour of our website visitors. The tools that Hotjar offers include heat maps, conversion funnels, visitor recording, incoming feedback, feedback polls and surveys (you can find more information about these at https://www.hotjar.com/). Hotjar thus helps us to offer you a better user experience and a better service. On the one hand, it provides a good analysis of online behaviour and, on the other hand, we also receive good feedback on the quality of our website. In addition to all the technical aspects of the analyses, we naturally want to know what you think about our website as well. And the feedback tool allows us to do just that.

Why do we use Hotjar on our website?

In recent years, the importance of user experience on websites has increased significantly. And for good reason. A website should be designed in such a way that you as a visitor feel comfortable and find your way around easily. Thanks to Hotjar's analysis tools and feedback tool, we can make our website and our offering more attractive. Hotjar's heatmaps are particularly valuable to us. Heatmaps are a form of representation for the visualisation of data. Hotjar's heatmaps allow us to see, e.g., exactly what you like to click on, tap on and where you scroll to.

What data is stored by Hotjar?

As you browse our website, Hotjar automatically collects information about your user behaviour. In order to be able to collect this information, we have integrated our own tracking code on our website. The following data can be collected via your computer or browser:
IP address of your computer (collected and stored in an anonymous format)
Screen size
Browser information (which browser, which version, etc.)
Your location (but only the country)
Your preferred language setting
Websites visited (subpages)
Date and time of access to one of our subpages (websites)

In addition, cookies also store data that is placed on your computer (usually in your browser). No personal data is collected in these cookies. As a matter of principle, Hotjar does not pass on any collected data to third parties. However, Hotjar expressly points out that it is sometimes necessary to share data with Amazon Web Services. In such a case, parts of your information are stored on those servers. However, Amazon is bound by a confidentiality obligation not to disclose this data.

Only a limited number of people (Hotjar employees) have access to the stored information. The Hotjar servers are protected by firewalls and IP restrictions (access only to authorised IP addresses). Firewalls are security systems that protect computers from unwanted network access. They are designed to act as a barrier between Hotjar's secure internal network and the Internet. Hotjar also uses third-party companies for its services, such as Google Analytics or Optimizely. These companies may also store information that your browser sends to our website.

The following cookies are used by Hotjar. With reference to the cookie list from Hotjar's privacy policy at https://www.hotjar.com/legal/policies/cookie-information, we point out, among other things, that not for every cookie there is an exemplary value. The list shows examples of Hotjar cookies used and does not claim to be exhaustive.

Name: ajs_anonymous_id
Value: %2258832463-7cee-48ee-b346-a195f18b06c3%22231583920599-5
Purpose: The cookie is normally used for analysis purposes and helps to count visitors to our website by tracking whether they have been to this page before.
Expiry date: after one year 
 
Name: ajs_group_id
Value: 0
Purpose: This cookie collects data about user behaviour. This data can then be assigned to a specific visitor group based on similarities between website visitors.
Expiry date: after one year 
 
Name: _hjid
Value: 699ffb1c-4bfb-483f-bde1-22cfa0b59c6c
Purpose: The cookie is used to retain a Hotjar user ID that is unique to the website in the browser. This allows user behaviour to be assigned to the same user ID on subsequent visits.
Expiry date: after one year 
 
Name: _hjMinimizedPolls
Value: 462568231583920599-8
Purpose: Hotjar sets this cookie whenever you minimise a feedback poll widget. The cookie ensures that the widget actually remains minimised when you surf our site.
Expiry date: after one year 
 
Name: _hjIncludedInSample
Value: 1
Purpose: This session cookie is set to inform Hotjar whether you are part of the selected persons (sample) that are used to generate funnels.
Expiry date: after one year 
 
Name: _hjClosedSurveyInvites
Purpose: This cookie is set when you see an invitation to a feedback survey via a pop-up window. The cookie is used to ensure that this invitation only appears to you once.
Expiry date: after one year 
 
Name: _hjDonePolls
Purpose: This cookie is set in your browsers as soon as you finish a feedback “question round” with the so-called Feedback Poll Widget. This prevents Hotjar from sending you the same polls again in future.
Expiry date: after one year 
 
Name: _hjDoneTestersWidgets
Purpose: This cookie is used as soon as you enter your data in the “Recruit User Tester Widget”. We want to use this widget to recruit you as a tester. The cookie is used so that this form does not appear again and again.
Expiry date: after one year 
 
Name: _hjMinimizedTestersWidgets
Purpose: This cookie is used to ensure that the "Recruit User Tester" remains minimised on all our pages once you have minimised it.
Expiry date: after one year 
 
Name: _hjShownFeedbackMessage
Purpose: This cookie is set if you have minimised or supplemented the incoming feedback. This is done so that the incoming feedback is immediately loaded as minimised when you navigate to another page on which it is to be displayed.
Expiry date: after one year 
 

Where and for how long is the data stored?

We have included a tracking code on our website that is transmitted to the Hotjar servers in Ireland (EU). This tracking code contacts the Hotjar servers and sends a script to your computer or device that you use to access our site. The script collects certain data relating to your interaction with our website. This data is then sent to Hotjar's servers for processing. Hotjar has imposed a 365-day data retention period on itself. This means that all data collected by Hotjar that is older than one year is automatically deleted.

How can I delete my data or prevent data storage?

Hotjar does not store any of your personal data for the analysis. The company even advertises with the slogan “We track behaviour, not individuals” (i.e. “We track user behaviour, but not identifiable, individual data”). You also always have the option of preventing the collection of your data. All you have to do is go to the “Opt-out page” and click on “Deactivate Hotjar”. Please note that deleting cookies, using your browser's private mode or using a different browser will result in data being collected again. You can also activate the “Do Not Track” button in your browser. In the Chrome browser, for example, you need to click on the three bars in the top right-hand corner and go to “Settings”. In the “Privacy” section, you will find the option “Send a 'Do Not Track' request with browser access”. Now simply activate this button and no data will be collected by Hotjar.

You can find more details on the privacy policy and what data is collected by Hotjar and how at https://www.hotjar.com/legal/policies/privacy?tid=231583920599.

 

XV.4 Visual Website Optimizer (VWO)

The DLV uses Visual Website Optimiser, a web analysis service from Wingify, Inc (“VWO”). This is a web analysis service from Wingify, 14th Floor, KLJ Tower North, Netaji Subhash Place, Pitam Pura, Delhi 110034, India. With the help of VWO, pseudonymised data is collected, evaluated and stored on the basis of our legitimate interests. The processing takes place in accordance with Art. 6 para 1 lit. a GDPR. This data can be used to create and analyse pseudonymised user profiles. “VWO” uses cookies for this purpose. The information generated by cookies about your use of our websites and your IP address is transmitted by Wingify to a server in India and stored there. You will find more information on cookies at https://vwo.com/knowledge/what-are-the-cookies-stored-by-vwo/. The IP address of our visitors is part of the information collected, but is pseudonymised immediately after collection before the information is stored in order to exclude any possibility of personalisation. You can delete the cookies in your browser at any time. You also have the option of objecting to participation in the tests altogether. You can object on the following website: https://vwo.com/opt-out/. Further information on data protection can be found here: https://vwo.com/terms/. You have the right to object to this processing at any time.

 

XVI Retargeting/remarketing/recommendation advertising

XVI.1 Facebook Custom Audience via the pixel method

This website uses the “Facebook pixel” of Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”). If explicit consent is given, this allows the behaviour of users to be tracked after they have seen or clicked on a Facebook ad. This process is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help to optimise future advertising measures.

The data collected is anonymous to us, so it does not allow us to draw any conclusions about the identity of users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy (https://www.facebook.com/about/privacy/). You can enable Facebook and its partners to place adverts on and off Facebook. A cookie may also be stored on your computer for these purposes. These processing operations are only carried out with your express consent in accordance with Art. 6 para 1 lit. a GDPR.

Consent to the use of the Facebook pixel may only be given by users over the age of 13. If you are younger, we request that you ask your parent or guardian for permission.

To deactivate the use of cookies on your computer, you can set your Internet browser so that no more cookies can be stored on your computer in the future or cookies that have already been stored are deleted. However, switching off all cookies may mean that some functions on our website can no longer be carried out. You can also deactivate the use of cookies by third-party providers such as Facebook on the following Digital Advertising Alliance website: https://www.aboutads.info/choices/

 

XVI.2 Google AdWords Remarketing

Our website uses the functions of Google AdWords Remarketing, which we use to advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). For this purpose, Google places a cookie in the browser of your end device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you visit. The processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 para 1 lit. f GDPR.

Any further data processing will only take place if you have consented to Google linking your Internet and app browsing history to your Google account and using information from your Google account to personalise ads that you view on the web. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, Google temporarily links your personal data with Google Analytics data to create target groups.

You can permanently deactivate the setting of cookies for ad preferences by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/

Alternatively, you can obtain information from the Digital Advertising Alliance at the Internet address www.aboutads.info about the placement of cookies and make settings for this. Finally, you can set your browser so that you are informed about the placing of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our website may be restricted.

Further information and the data protection provisions regarding advertising and Google can be found here: www.google.com/policies/technologies/ads/

 

XVII Tools and miscellaneous

XVII.1 Google reCAPTCHA

On this website, we also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This function is used primarily to differentiate whether an entry is made by a natural person or abusively by machine and automated processing. The service includes the sending of the IP address and any other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 para 1 lit. f GDPR on the basis of our legitimate interest in determining the individual intent of actions on the Internet and the prevention of misuse and spam.

Further information on Google reCAPTCHA and Google's privacy policy can be found at: www.google.com/intl/de/policies/privacy/

 

XVII.2 Google Maps

We use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) on our website. Google Maps is a web service for displaying interactive maps in order to visualise geographical information. The use of this service will show you our location and make it easier for you to find us.

Information about your use of our website (such as your IP address) may be transmitted to Google servers in the USA and stored there as soon as you access the subpages in which the map from Google Maps is integrated. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be assigned to your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyses them. Such an evaluation is carried out in particular in accordance with Art. 6 para 1 lit. f GDPR on the basis of Google's legitimate interests in the display of personalised advertising, market research and/or the needs-based design of its website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

If you do not agree to the future transmission of your data to Google in connection with the use of Google Maps, you also have the option of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and thus also the map display on this website can then not be used.

You can view Google's terms of use at https://www.google.de/intl/de/policies/
terms/regional.html, the additional terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html

Detailed information on data protection in connection with the use of Google Maps can be found on the Google website (“Google Privacy Policy”): www.google.de/intl/de/policies/
privacy/

 

XVII.3 Trusted Shops Trustbadge

The Trusted Shops Trustbadge is integrated on this website to display our Trusted Shops seal of approval and to offer Trusted Shops membership to buyers after placing an order.

This serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in the optimal marketing of our offer, Art. 6 para 1 lit. f GDPR. The Trustbadge and the services advertised with it are an offer from Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany.

When the Trustbadge is called up, the web server automatically saves a so-called server log file, which contains, e.g., your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. This access data is not analysed and is automatically overwritten no later than seven days after the end of your visit to the site.

Further personal data is only transferred to Trusted Shops if you decide to use Trusted Shops products after completing an order or if you have already registered to use them. In this case, the contractual agreement concluded between you and Trusted Shops applies.

 

XVII.4 Google Web Fonts

This site uses so-called web fonts to display the text. These are provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) (http://www.google.com/webfonts/). To do this, your browser loads the required web font into your browser cache when you visit our site. This is necessary so that your browser can also display a visually improved presentation of our texts. If your browser does not support this function, a standard font will be used by your computer for display.
Further information on Google Web Fonts can be found at developers.google.com/fonts/faq?hl=de-DE&csw=1 
General information on data protection at Google can be found at www.google.com/intl/de-DE/policies/privacy/

 

XVII.5 Ex.Co Quiz plugins (from Playbuzz)

Plugins from the “Ex.Co” service provided by Playbuzz Ltd, 3 Aluf Kalman Magen St., Building A, 1st Floor, Tel Aviv, 6107075, Israel (hereinafter referred to as “Ex.Co”) are integrated on our websites. You can use the Ex.Co plugins to take part in quiz surveys on our website. When you call up a web page that contains such a plugin, your browser establishes a direct connection to the Ex.Co servers in order to retrieve the embedded quiz. We would like to point out that we have no knowledge of the content of the transmitted data or its use by Ex.Co and that we are not responsible for Ex.Co's data collection and processing. Details on data collection, processing and use by Ex.Co can be found in Ex.Co's privacy policy. ex.co/privacy-policy/.

The legal basis for the data processing is Art. 6 para 1 sentence 1 lit. f GDPR. Our legitimate interest arises from the data collection purposes listed above.

 

XVII.6 Firebase Cloud Functions, Firebase Cloud Storage and Firebase Cloud Firestore (Google Ireland Limited)

Firebase Cloud Functions, Firebase Cloud Storage and Firebase Cloud Firestore are web hosting and backend services provided by Google Ireland Limited.

Processed personal data: Usage data and data types mentioned in the privacy policy.

Place of processing: Germany, Ireland – Privacy Policy

 

XVII.7 Firebase Authentication (Google Ireland Limited)

Firebase Authentication uses data (passwords, email addresses, first and last names, user agents and IP addresses) to enable end-user authentication and simplify the management of end-user accounts. It also uses user agent strings and IP addresses to provide additional security and prevent abuse during login and authentication.

Storage: Firebase Authentication stores logged IP addresses for a few weeks. It stores other authentication information until the Firebase customer initiates the deletion of the associated user, after which data is removed from live and backup systems within 180 days. The storage location for the authentication service is the data centre in the USA.

Place of processing: Germany, Ireland, USA – Privacy policy

 

Google uses the applicable standard contractual clauses in accordance with Art 46 paras 2 and 3 GDPR as the basis for data processing for recipients based in third countries or for the transfer of data there, in this case to the United States. Standard contractual clauses are templates provided by the European Commission to ensure an adequate level of data protection when data is transferred to and stored in third countries. By concluding the standard contractual clauses, Google undertakes to comply with the European level of data protection when processing the data.

 

XVII.8 Google Maps widget (Google Ireland Limited)

Google Maps is a map visualisation service provided by Google Ireland Limited that allows this Application to incorporate content of this kind on its pages. Processed personal data: Usage data; tracker

Place of processing: Germany, Ireland – Privacy Policy

 

 

XVIII Advertising

This type of service allows this application to utilise user data for the communication of advertising in the form of banners and other marketing methods, possibly based on the user's interests.

This does not mean that all personal data will be used for this purpose. Further information and terms of use are listed below.

Some of the services listed below may use cookies to identify users or use so-called behavioural retargeting. This method can also be used to identify the interests and surfing behaviour of users who do not use this application, in order to target advertisements accordingly. For more information, please refer to the privacy policies of the respective services.

In addition to any opt-out option offered by the services listed below, the user can opt-out of the use of cookies by third party services by visiting the Network Advertising Initiative opt-out page.

 

XVIII.1 Xandr (Xandr Inc.)

Xandr is an advertising service of Xandr Inc., a company of AT&T Inc.

Personal data collected: Cookie and usage data.

Place of processing: USA

Privacy policy

Opt out

 

XVIII.2 Criteo (Criteo SA)

Criteo is an advertising service of Criteo SA.

Personal data collected: Cookie and usage data.

Place of processing: France

Privacy policy

Opt out

 

XVIII.3 DoubleClick for Publishers (Google Inc.)

DoubleClick for Publishers is an advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) that enables the owner to run advertising campaigns in conjunction with external advertising networks. The owner has no direct relationship with the third parties unless otherwise specified in this document.

To opt out of being tracked by various advertising networks, users can make use of Youronlinechoices. To learn more about Google's data usage, please refer to Google's partner policy.

This service uses the “DoubleClick” cookie to track how this application is used and how users respond to adverts and products and services offered.

Users have the option to disable all DoubleClick cookies by clicking on the following link: www.google.com/settings/ads/onweb/optout?hl=de.

Personal data collected: Cookie and usage data.

Place of processing: Ireland

Privacy policy

 

XVIII.4 Facebook Audience Network (Facebook, Inc.)

Facebook Audience Network is an advertising service provided by Facebook, Inc. Further information on the use of data by Facebook can be found in Facebook's Data policy.

This application uses identifiers for mobile devices (including Android Advertising ID or Advertising Identifier for iOS) and cookie-like technologies to run the Facebook Audience Network service. One of the display options for Audience Network adverts is via the user's advertising preferences. The user can set this in the Facebook ad settings.

Users can opt out of certain Audience Network audiences through the appropriate device settings, such as through the device's advertising settings on mobile phones or by following the instructions in other sections of this Privacy Policy regarding Audience Network, if applicable.

Personal data collected: Cookie, unique device identifier for advertising (Google advertising ID or IDFA, for example) and usage data.

Place of processing: USA

Privacy policy

Opt out

 

XVIII.5 Google AdSense (Google Inc.)

Google AdSense is an advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This service uses the “DoubleClick” cookie to track how this application is used and how users respond to adverts and products and services offered.

Users have the option to disable all DoubleClick cookies by clicking on the following link: www.google.com/settings/ads/onweb/optout?hl=de.

Personal data collected: Cookie and usage data.

Place of processing: Ireland

Privacy policy

Opt out

 

XVIII.6 Ligatus (Ligatus GmbH)

Ligatus is an advertising service of Ligatus GmbH.

Personal data collected: Cookie and usage data.

Place of processing: Germany

Privacy policy

Opt out

 

XVIII.7 OpenX Ad Exchange (OpenX Technologies, Inc.)

OpenX Ad Exchange is an advertising service provided by OpenX Technologies, Inc.

This is an advertising mediation platform that facilitates the optimisation of media advertising investors from multiple advertising networks, which may be third parties with respect to OpenX and the owner.

Personal data collected: Cookie and usage data.

Place of processing: USA

Privacy policy

Opt out

 

XVIII.8 Outbrain (Outbrain Inc.)

Outbrain is an advertising service of Outbrain Inc.

Personal data collected: Cookie and various types of data as described in the service's privacy policy.

Place of processing: USA

Privacy policy

Opt out

 

XVIII.9 PubMatic (PubMatic, Inc.)

PubMatic is an advertising service of PubMatic Inc.

Personal data collected: Cookie and usage data.

Place of processing: USA

Privacy policy

Opt out

 

XVIII.10 Rubicon Project (The Rubicon Project, Inc.)

Rubicon Project is an advertising service of The Rubicon Project, Inc.

Personal data collected: Cookie and usage data.

Place of processing: USA

Privacy policy

Opt out

 

XVIII.11 Taboola Monetize Content (Taboola Inc.)

Taboola is an advertising service of Taboola Inc.

Personal data collected: Cookie and usage data.

Place of processing: USA

Privacy policy

Opt out

 

XVIII.12 iq digital

We receive pseudonymised data from iq digital about the users of our websites for our marketing activities. We then merge this data with clear data if you have given us a corresponding declaration of consent. If data processing is carried out by our partner iq digital, the data is only processed pseudonymously.

iq digital presents its activities below:

iq digital places cookies in a user's browser when websites in its marketing portfolio (portfolio see here) are accessed. In order to avoid waste coverage when displaying advertising material, iq digital also compares its own cookies with cookies that it receives from third parties, e.g. to avoid double targeting of the same user or to increase the accuracy of an advert. In some cases, iq digital also enables third parties to set their own cookies in the iq digital portfolio on the basis of corresponding contracts or makes data segments collected by means of cookies available to third parties.
Users can influence the use of cookies. Most browsers have an option to restrict or completely prevent the storage of cookies. This does not mean that a user receives less advertising, it just means that it is less relevant to them. iq digital also provides the option of blocking or deleting individual cookies. In the following, iq digital presents the cookies used. 
In order to facilitate the overview of the cookies used by iq digital, overviews with general information on the purpose of use can be accessed via www.iqdigital.de/transparenz. For each cookie used, iq digital also uses a software tool to provide detailed information about the general purposes of the cookie – which may go beyond its use by iq digital –, the provider, and the opt-out options. You will find more information here.

The following types of cookies are used by iq digital:

 

Campaign validation cookies: these are cookies that are used to check whether an advertising campaign has been carried out by iq digital for an advertising customer in accordance with the order. These include 
- Cookies of iq digital and iq digital's partners, which determine whether an advertising banner has been placed on a website at all with the agreed frequency
- Cookies of the service provider that technically displays the advertising material for iq digital. This serves to comply with and check the additional campaign specifications agreed with a customer (e.g. agreed time at which advertising material is played out, geographical campaign area, multiple transmission of the same advertising material to a user, or whether the user has called up an underlying format)

 

More detailed information on the individual cookies for campaign validation can be found here.

Cookies to achieve greater targeting accuracy: Cookies only ever transmit pseudonymised data. Identification by gender or areas of interest, e.g., is not possible with a cookie. The cookie does not know which user is currently accessing the browser. Cookies from iq digital are therefore compared with cookies from other service providers in order to increase the probability of a hit in a particular segment (e.g. gender). iq digital uses the following cookies for such a comparison:
- Cookies that are set as part of user surveys
- Cookies that are set by service providers on behalf of iq digital in the context of movement behaviour on the Internet (pages accessed by a user)
- Cookies that iq digital receives from third parties in order to match them with its own segmentations
- Cookies that iq digital's partners set to achieve greater targeting accuracy and compare with their own pseudonymised data

Further information on the individual cookies used to achieve greater targeting accuracy can be found here. here.

The personal – pseudonymous – data is processed by iq digital on the basis of Art. 6 para 1 lit. f GDPR. This authorisation permits the processing of personal data if the controller has a “legitimate interest” and this is not overridden by the interests of a user. Our legitimate interest lies in providing the functions of our websites and apps. Both contain extensively researched information, which we make available free of charge to a considerable extent. The marketing of advertising space on our pages enables us to continue to make these offers available to everyone in this form to a large extent and thus make a significant contribution to knowledge transfer, public information, and the exchange of opinions. In the user-related display of advertising material, we are guided by the usual selections in the print sector. There too, advertising material is booked based on the environment and readership and analysed for perception by the relevant target groups using reader reach analyses. Since, unlike in the print sector, where reader structures are also known to a large extent via subscriptions, only pseudonymised data is available, the cookies are used to validate the playout segments.

OptOut for agrarheute.com
OptOut for forstpraxis.de

 

XVIII.13 Amazon

Amazon (aps.amazon.com) uses technologies to present you with adverts that are relevant to you. The provider of Amazon publishing house services is Amazon publisher services, based in Washington – 410 Terry Ave. North, Seattle, WA 98109-5210. If you do not want Amazon publisher services to continue collecting anonymised data, please click on the opt-out link below. This opt-out cookie deletes the previously stored information and prevents any further collection of information.

The described processing of data is carried out in accordance with Art. 6 para 1 lit. f GDPR for the purpose of targeted advertising to the user by advertising third parties, whose advertisements are displayed on this website based on the evaluated user behaviour. At the same time, the processing serves our financial interest in exploiting the economic potential of our website by displaying personalised third-party advertising content for a fee.

Personal data collected: Cookie and usage data.
Place of processing: USA

Privacy policy: www.amazon.com/gp/help/customer/
display.html/ ref=hp_left_sib?ie=UTF8&nodeId=468496

 

XVIII.14 Improve Digital

Improvedigital International B.V. (improvedigital.com), 1013 AP Amsterdam, Danzigerkade 00215, The Netherlands, ("Improvedigital") offers the auction-based sale of advertising space and stores pseudonyms of users.

The described processing of data is carried out in accordance with Art. 6 para 1 lit. f GDPR for the purpose of targeted advertising to the user by advertising third parties, whose advertisements are displayed on this website based on the evaluated user behaviour. At the same time, the processing serves our financial interest in exploiting the economic potential of our website by displaying personalised third-party advertising content for a fee.

Personal data collected: Cookie and usage data.
Place of processing: The Netherlands

If you do not want Improvedigital to continue collecting data, please click on the following link: https://www.improvedigital.com/platform-privacy-policy/. If you use the opt-out option, the previously stored information will be deleted and further collection of information will be prevented by the use of an opt-out cookie.

 

XIX Rights of the data subject

The applicable data protection law grants you the following data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective exercise requirements:
- Right of access to personal data in accordance with Art. 15 DSGVO;
- Right to rectification in accordance with Art. 16 GDPR;
- Right to erasure in accordance with Art. 17 GDPR;
- Right to restriction of processing in accordance with Art. 18 GDPR;
- Notification obligation regarding rectification or erasure of personal data or restriction of processing in accordance with Art. 19 GDPR;
- Right to data portability in accordance with Art. 20 GDPR;
- Right to withdraw consent given in accordance with Art. 7 para 3 GDPR;
- Right to lodge a complaint in accordance with Art. 77 GDPR.

 

XIX.1 Right of access to personal data

You can request confirmation from the controller as to whether personal data concerning you is being processed by us.

If such processing is taking place, you can request the following information from the controller:

(1) the purposes for which the data is processed;

(2) the categories of personal data which are processed;

(3) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;

(4) the envisaged period for which the personal data concerning you will be stored, or, if specific information on this is not possible, the criteria used to determine that period;

(5) the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;

(6) the existence of a right to lodge a complaint with a supervisory authority;

(7) all available information as to their source if the personal data is not collected from the data subject;

(8) the existence of automated decision-making, including profiling, according to in Art. 22 paras 1 and 4 GDPR and, at least in these cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

 

XIX.2 Duration of the storage of personal data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and – if applicable – additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law).
When processing personal data on the basis of express consent in accordance with Art. 6 para 1 lit. a GDPR, this data is stored until the data subject withdraws their consent.
If there are statutory retention periods for data that is processed within the scope of legal or similar obligations on the basis of Art. 6 para 1 lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for contract fulfilment or contract initiation and/or we no longer have a legitimate interest in further storage.
When processing personal data on the basis of Art. 6 para 1 lit. f GDPR, this data is stored until the data subject exercises their right to object in accordance with Art. 21 para 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, fundamental rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims.
When processing personal data for the purpose of direct advertising on the basis of Art. 6 para 1 lit. f GDPR, this data is stored until the data subject exercises their right to object in accordance with Art. 21 para 2 GDPR.
Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

 

XIX.3 Right to rectification

You have a right to rectification and/or completion vis-à-vis the controller if the processed personal data concerning you is incorrect or incomplete. The controller must make the rectification without undue delay.

 

XIX.4 Right to restriction of processing

You may request the restriction of the processing of personal data concerning you under the following conditions:

(1) the accuracy of the personal data is contested by you, for a period enabling the controller to verify the accuracy of the personal data;

(2) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;

(3) the controller no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims, or

(4) if you have objected to processing in accordance with Art. 21 para 1 GDPR pending the verification whether the legitimate grounds of the controller override yours.

Where processing of your personal data has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If the restriction of the processing is based on the above-mentioned conditions for restriction, you will be informed by the controller before the restriction of processing is lifted.

 

XIX.5 Right to erasure

XIX.5.a Obligation to erase personal data

You have the right to obtain from the controller the erasure of personal data concerning you without undue delay and the controller has the obligation to erase these data without undue delay where one of the following grounds applies:

(1) The personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed.

(2) You withdraw your consent on which the processing is based according to Art. 6 para 1 lit. a, or Article 9 para 2 lit a GDPR, and there is no other legal ground for the processing.

(3) You object to the processing according to Art. 21 para 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing according to Art. 21 para 2 GDPR.

(4) Your personal data have been unlawfully processed.

(5) The personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.

(6) Your personal data have been collected in relation to the offer of information society services referred to in Art. 8 para 1 GDPR.

 

XIX.5.b Information to third parties

Where the controller has made the personal data concerning you public and is obliged pursuant to Art. 17 para 1 GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copies or replications of, those personal data.

 

XIX.5.c Exceptions

There is no right to erasure to the extent that processing is necessary:

(1) for exercising the right of freedom of expression and information;

(2) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

(3) for reasons of public interest in the area of public health in accordance with Art. 9 para 2 lit. h and lit. i and Art. 9 para 3 GDPR;

(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para 1 GDPR in so far as the right referred to in lit. a is likely to render impossible or seriously impair the achievement of the objectives of that processing, or

(5) for the establishment, exercise or defence of legal claims.

 

XIX.6 Right to information

If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right vis-à-vis the controller to be informed about these recipients.

 

XIX.7 Right to data portability

You have the right to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where

(1) the processing is based on consent according to Art. 6 para 1 lit. a GDPR or Art. 9 para 2 lit. a GDPR or on a contract according to Art. 6 para 1 lit. b GDPR and

(2) the processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, to the extent that this is technically feasible. This must not adversely affect the rights and freedoms of others.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

 

XIX.8 Right to object

IF WE PROCESS YOUR PERSONAL DATA AS PART OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS. IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

 

XIX.9 Right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

 

XIX.10 Automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision:

(1) is necessary for entering into, or performance of, a contract between you and the data controller,

(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests or

(3) is based on your explicit consent.

However, these decisions may not be based on special categories of personal data according to Art. 9 para 1 GDPR, unless Art. 9 para 2 lit. a or lit. g applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.

With regard to the cases referred to in (1) and (3), the data controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.

 

XIX.11 Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy according to Art. 78 GDPR.

 

 

XX. Obligation to provide information on procedures pursuant to Art. 13 and Art. 14 GDPR

XX.1 Obligation to provide information on competitions in accordance with Art. 13 and Art. 14 GDPR

The protection of your personal data is very important to us. We comply with applicable law and would like to inform you below about the collection of personal data in individual procedures. Personal data is all data that can be related to you personally (e.g. name, address, email address, telephone number, date of birth, etc.).

1. Contact details of the controller and the data protection officer

The controller according to Art. 4 para 7 GDPR is

Deutscher Landwirtschaftsverlag GmbH represented by Christian Schmidt-Hamkens, Günter Betz, Helmut Brachtendorf
Kabelkamp 6, 30179 Hanover, Germany
info@dlv.de
Phone: +49 511 67806-0
Fax: +49 511 67806-301

The company data protection officer of Deutscher Landwirtschaftsverlag GmbH can be contacted at the above address, for the attention of the data protection officer, or at the following email address: datenschutz@dlv.de

2. Purposes and legal basis of data processing for competitions

Possible consequences of not providing the data are:
The purpose of the data processing cannot be fulfilled.
Consent of the person for one or more purposes can be proven.
Further processing will only take place if you have given your consent or legal authorisation has been granted.

3. Categories and individual recipients of personal data

(1) Within our company, only those departments that require your data to fulfil our contractual or legal obligations will have access to it. These departments have been trained accordingly and are obliged to maintain the confidentiality of your personal data.

(2) We maintain up-to-date technical measures to ensure the protection of personal data. These are always adapted to the current state of the art.

4. Duration of the data storage

We delete your personal data as soon as it is no longer required for the above-mentioned purposes. We would like to point out that personal data will be stored for the period during which claims can be asserted against our company and insofar as we are legally obliged to do so. This includes statutory limitation periods and retention obligations arising from commercial and tax regulations, among others. After these periods have expired, the data collected will be deleted or blocked if deletion is not immediately possible.

Competitions are stored until consent is withdrawn or 3 years after the end of the competition.

5. Data protection rights of the data subject

(1) You have the right to request information about the data stored about you at any time at the above address (Art. 15 GDPR). In addition, you have the right to request rectification under the conditions of Art. 16 GDPR, erasure under the conditions of Art. 17 GDPR, and restriction of processing under the conditions of Art. 18 GDPR. Furthermore, you can request data transfer at any time under the conditions of Art. 20 GDPR if the data is still stored.

(2) If we process your personal data to protect legitimate interests (Art. 6 para 1 sentence 1 lit. f GDPR), you can object to the processing of your personal data at any time with effect for the future. In the event of an objection, we must refrain from any further processing of your data for the aforementioned purposes, unless there are compelling reasons worthy of protection that outweigh your interests, rights and freedoms or are necessary to establish, exercise or defend legal claims.

(3) If the processing of your personal data is based on your consent, you have the right to revoke your consent at any time. This shall not affect the lawfulness of processing based on the consent up to the moment of its revocation (Art. 7 para 3 GDPR).

(4) You also have the option of complaining to the competent supervisory authority about data protection issues. The supervisory authority responsible for our company can be contacted at:
Die Landesbeauftragte für den Datenschutz Niedersachsen [The State Commissioner for Data Protection in Lower Saxony] Prinzenstr. 5, 30159 Hanover, Germany
Phone: +49 511 120-4500, Fax: +49 511 120-4599, Email: poststelle@lfd.niedersachsen.de, Website: www.lfd.niedersachsen.de

(5) Insofar as we carry out an individual automated decision without human intervention, you are informed that you have the right to receive further information and an explanation of this decision and to have it reviewed by an employee under the conditions of Art. 22 para 3 GDPR.

6. Contact and updating of information obligations

All information, requests for information, revocations or objections to data processing should be sent by email to our data protection officer at datenschutz@dlv.de or in writing to the above address for the attention of the data protection officer.

These information obligations may be amended at a later date due to changes, e.g. in the statutory provisions. You can obtain a current version of this information at www.dlv.de