CREATIVE SPACES EXHIBITION DESIGN BRAND DESIGN STAGE DESIGN NEUE WELTEN
Submit a PLOT
PLOT
deutschenglish
GO

Privacy policy

With this privacy policy we clarify the processing, scope and purpose of personal data (hereinafter referred to as “data”) within the websites, features and content associated with our online presence and external offerings such as our social media channels on Facebook and Instagram (collectively referred to as “online presence”).

Responsible:
Marinescu | Poesch GbR
Reinsburgstr. 114
70197 Stuttgart
Germany

Fon +49.711.4691 5959
Fax +49.711.4691 5958
Mail plot@PLOTmag.com
www.PLOTmag.com

Owner: Sabine Marinescu, Janina Poesch
Link to our imprint: https://www.plotmag.com/blog/impressum/

 

I. General information on data processing and definitions

1. Updates to the Privacy Policy

Adjustments to our privacy policy may be required as a result of changes in the state of the technologies we use or changes in the law Please check regularly our privacy policy and inform yourself. If your participation (e.g. Consent) is necessary, we will contact you.

2. Definitions, cf. Art. 4 GDPR

‘Personal data’ means any information relating to an identified or identifiable natural person (‘the data subject’); a natural person is regarded as identifiable, who can be identified directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, the expression of the physical , physiological, genetic, mental, economic, cultural or social identity of this natural person.

“Processing” means any process or series of operations performed with or without the aid of automated processes, such as collecting, collecting, organizing, organizing, storing, adapting or modifying, reading out, querying Use, disclosure by transmission, dissemination or other means of provision, matching or linking, restriction, erasure or destruction;

‘Controller’ means the natural or legal person, public authority, body or body that, alone or in concert with others, decides on the purposes and means of processing personal data; where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria of his appointment may be provided for under Union or national law;

Further explanations of terms can be found in Art. 4 GDPR.

3. Scope of processing of personal data

In principle, we process personal data of our users only insofar as this is necessary for the provision of a functional website as well as our content and services (ie also for the fulfillment of the contract).Otherwise, we process personal data of our users regularly only with the consent of the user. An exception applies to cases in which prior consent is not possible for reasons of fact and the processing of the data is permitted by law.

4. Legal basis for the processing of personal data
According to Art. 13 GDPR, we name the legal basis of our data processing. If no legal basis is stated in the privacy policy, the following applies:

Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 lit. a and Art. 7 EU General Data Protection Regulation (GDPR) as legal basis.

In the processing of personal data necessary for the performance of a contract of which the data subject is a party, Art. 6 para. 1 lit. b GDPR as legal basis. This also applies to processing operations required to carry out pre-contractual measures.

Insofar as the processing of personal data is required to fulfill a legal obligation that our company is subject to, Art. 6 para. 1 lit. c GDPR as legal basis.

If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interest, fundamental rights and fundamental freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR as legal basis for processing.

In the event that vital interests of the data subject or any other natural person require the processing of personal data, Art. 6 (1) lit. d GDPR as legal basis.

5. Transfers to third countries
If we process data outside the European Union or the European Economic Area (“third country”) or if third parties whose services we use process data in a third country or if this happens in the course of disclosure or transmission of data to third parties, this is only for Fulfillment of our (pre) contractual obligations, based on your consent, due to a legal obligation or based on our legitimate interests.

Basically, we leave the data processing in a third country only on the basis of the conditions of Art. 44 ff. GDPR, exceptions may apply to legal or pre-contractual permissions. If processing takes place in a third country, then on the basis of guarantees such as an officially certified determination of a data protection level that corresponds to that of the EU (e.g.The US Privacy Shield) or on contractual obligations that are officially recognized (“Standard Contractual Clauses”).

6. Cooperation with third parties
If we process data to third parties, disclose data or grant access to data to third parties, it ist on the basis of Art. 28 GDPR: a so-called “data processing agreement”, your consent, a legal obligation or because of our legitimate interests.

 

II. Hosting of the website and creation of logfiles

a) Description and scope of data processing

To be able to provide this website, we use hosting services. Here we or our hosting service provider collect and process the following data:

  • Information about the browser type and version used
  • The operating system of the user
  • The Internet service provider of the user
  • The IP address of the user
  • Date and time of access
  • Websites from which the system of the user comes to our website
  • Websites that are accessed by the user’s system through our website

This data processing by a third party (the hosting provider) is based on an “data processing agreement” in accordance with Art. 28 GDPR. Our hosting provider is the HostEurope GmbH, based in Hansestrasse 111, 51149 Cologne, Germany. Further information about the log files can be found here: https://www.hosteurope.de/faq/webhosting/webhosting-logfiles/ . You can access the privacy policy of Host Europe here: https://www.hosteurope.de/AGB/Datenschutzerklaerung/ .

b) Legal basis
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.

c) Purpose of the data processing
The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user’s IP address must be kept for the duration of the session.

Storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

In the listed purposes, our legitimate interest in the processing of data according to Art. 6 para. 1 lit. f GDPR.

d) Duration of storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. In the case of collecting the data for providing the website, this is the case when the respective session is completed.

In the case of storing the data in log files, this is the case after no more than seven days. An additional storage is possible. Then the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible. This applies for example, for visits to our website that are stored for 60 days.

e) Objection and data deletions options
The collection of the data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no contradiction on the part of the user.

 

III. Cookies

a) Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or the Internet browser on the computer system of the user. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is reopened.

The following data are stored and transmitted in the cookies:

  • User decision on cookies
  • language settings
  • entered search terms
  • Control (e.g. forward and backward scrolling)
  • Recall form data for later retrieval and filling in forms (Autofill)

We use on our website beyond that

  • Cookies that allow an analysis of the surfing behavior of the users. These will be treated separately in the context of this privacy policy (s. Google Analytics).
  • Cookies used for analysis to protect our website from external attacks.These are also dealt with separately in this privacy policy (s. Wordfence).

b) Legal basis for data processing

The legal basis for the processing of personal data using cookies is your consent Art. 6 para. 1 lit. a GDPR.

If this data arises in the course of an agreement (in the case of form data), the legal basis is Art. 6 para. 1 lit. b GDPR.

c) Purpose of the data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some features of our website can not be offered without the use of cookies. For these, it is necessary that the browser is recognized even after the user left a certain site and returns.

d) Duration of storage

The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. Most of the cookies we use are “session cookies”. These will be deleted automatically at the end of your visit. When you visit our website you will be asked if you agree with our use of cookies, this decision will also be stored in a cookie that is valid for a week. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser on your next visit. In addition, it may be stored if provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. A blocking or deletion of the data takes place even if a storage period prescribed by the mentioned standards expires, unless there is a need for further storage of the data for a conclusion of contract or a fulfillment of the contract.

e) Objection and data deletions options
Your decision to consent to the use of our site using cookies will be stored for one week. If you change your mind before the end of this time, you can delete the cookies stored on your computer from our site: Cookies are stored on the user’s computer and transmitted to our site. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically.

If cookies are disabled for our website, it may not be possible to use all the functions of the website to the full.

The transmission of flash cookies can not be prevented by the settings of the browser, but by changing the settings of the flash player.

 

IV. Contact and E-mail Conversations

a) Description and scope of data processing
When contacting the provided e-mail address, by telephone or via social media, the user’s data provided and transmitted by the user for the purpose of processing the contact request and processing it are stored and processed. We use the transmitted data exclusively for the processing of the conversation. We expressly point out that the transfer of data on the Internet (e.g. in communication via e-mail) may have security flaws. A complete protection of the data from access by third parties is not possible.

The data sent by e-mail or generated when sending an e-mail is stored on the server of our e-mail service provider in the USA. We use Google Suite, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google’s privacy policy can be found here: https://policies.google.com/privacy .

Google is certified under the Privacy Shield Agreement and guarantees to comply with European data protection law. Google Privacy Shield Certificate can be viewed here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI

b) Legal basis for data processing
The legal basis for the processing of the data transmitted in the course of sending a contact is Art. 6 (1) lit. f GDPR. If the conclusion of a contract is the target of establishing contact, Art. 6 para. 1 lit. b GDPR additional legal basis for processing.

c) Purpose of the data processing
The processing of personal data from a contact serves us to process the same. At the same time this is the necessary legitimate interest in the processing of the data.

d) Duration of storage
The data will be deleted as soon as they are no longer necessary for the purpose of their collection and if the deletion does not conflict with any legal archiving requirements. For personal data sent when you contact us, this is the case when the respective conversation with the user has ended. The conversation ends when it can be inferred from the circumstances that the facts are finally clarified. We check the necessity of storage every two years.

e) Objection and data deletions options
The user has the opportunity to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he may object to the storage of his personal data at any time by e-mail or in writing. In such a case, the conversation can not continue.

All personal data stored in the course of contacting will be deleted in this case.

 

V. Order forms and order processing

a) Description and scope of data processing
In the shop of our website there are order forms to select products and services and to order or complete subscriptions and allow execution. If a user realizes this option, the data entered in the input mask will be transmitted to us and saved. Inventory data, communication data and contract data are processed here:

  • Salutation
  • First given name
  • Surname
  • Street
  • House number
  • Country
  • City
  • Post Code
  • E-mail address
  • Telephone number (no compulsory)
  • Occupation (no compulsory information)
  • Company (no compulsory information)
  • Date of birth (no compulsory information)
  • Information about the ordered product
  • Comments on the order
  • Requesting permission to be included in the newsletter distributor (no compulsory choice)
  • At the time the message is sent, the following metadata is also stored:
    • The IP address of the user
      Internet service provider of the user
    • Date and time
    • The page where the form was completed
    • Device information and browser information

This data will be provided to us by e-mail, therefore, as well as for the alternative order option via e-mail item IV. Contact and e-mail conversations of this privacy policy.

b) Legal basis for data processing
The legal basis for the processing of data is Art. 6 para. 1 lit. b (execution of order transactions) and lit. c (legally required archiving) GDPR. Required information is marked as such if it is necessary to justify and fulfill the contract. Third parties will only disclose this information for the purpose of delivery, payment or within the scope of the legal permissions and obligations to legal advisers and authorities. Processing in third countries will only take place if necessary to fulfill the contract (e.g.Delivery or payment).

c) Purpose of the data processing
The processing of personal data from the input mask is used to provide contractual services in the context of the operation of an online shop, billing, delivery and customer service. In the case of an order by e-mail, this applies accordingly.

The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

d) Duration of storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. For the personal data from the input form of the order form and the data sent with the e-mail, this is the case if the order based on the order is fulfilled and the statutory warranty (expires after 2 years) and comparable Obligations and legal archiving periods (commercial law (6 years) and tax law (10 years) retention obligation) have expired.The necessity of keeping the data is checked every three years.

The additional personal data collected during the sending process will be deleted at the latest after a period of seven days.

e) Objection and data deletions options
The collection of data for ordering via an order form on our website is required for order processing. There is consequently no contradiction on the part of the user. Alternatively, users can also order by e-mail. In this case, the user’s personal data transmitted by e-mail will be stored.

 

VI. Contact forms for submitting and publishing your projects

a) Description and scope of data processing
We offer you the opportunity to publish your projects: On the one hand via “SUBMIT A PLOT” as part of our online presence on our website and our social media channels as well as after consultation with the submitter for our print magazine On the other hand via the submission form for the trade fair design Yearbook (“ENTRY FORM”) in the fair design yearbook (avedition) published by us. For the submission, we collect personal data in the respective forms:

  • (Company) name (submitting company, author, client, client, designer, project participant, photographer, customer, supplier, project data)
  • Contact Person
  • Contact details of the contact persons (submitter, author, client, photographer)
  • IP address
  • Date and time of submission of the form

If necessary, data of third parties (author, clients – in the latter case the provision of personal data is voluntary) are processed. As a submitter, please ensure that these individuals agree to the submission and disclosure of your submission data. The third parties whose personal data were provided by the submitter will be informed by us in accordance with the statutory requirement pursuant to Art. 12 para 1, 14 GDPR concerning the data processing, the persons responsible and their contact details, the legal basis and purpose of the data processing, storage duration and data subject rights.

b) Legal basis for data processing
The legal basis for the processing of data from these forms is the fulfillment of the contract or pre-contractual measures, Art. 6 para 1 lit. b GDPR.

c) Purpose of the data processing
Purpose of the data processing is the selection of projects for the publication on our website and our social media channels or in the fair design yearbook published by us. As part of the selection process, it comes to queries to submitter, author and client, so we need the contact details of the respective contact persons. If the project is selected and published by us, the author and the client are named, but not the contact persons with their contact details.

d) passing on to third parties

Possible recipient categories:

  • publishing company
  • payment service
  • Shipping service
  • Inventory management system
  • Suppliers

In the case of a project publication, we give the publisher avedition (av edition GmbH, publisher of architecture and design, Senefelderstr. 109, 70176 Stuttgart , Germany, Phone: +49 (0) 711/220 22 79-0, Fax: +49 (0) 711/220 22 79-15, Web: www.avedition.de, E-Mail: sales @ avedition.de , privacy policy: https://www.avedition.de/en/datenschutz ) the data given in the form for further fulfillment of the contract on. av edition is responsible for this further data processing.

e) Duration of storage
The data is deleted if it is no longer needed for the purpose – selection and publication of projects. In the event of non-selection of a project, the data is no longer required after decision-making and communication hereof. If a project is selected, the data will be needed for possible questions until it is published. Since the sending of the form is qualified as a business letter in the sense of commercial law, we are obliged to keep the form data for six years. If no other legal storage requirements are met then the data will be deleted. In all cases, the necessity of storage is checked every two years at the end of the year.

 

VII. Amazon Affiliate Program
With our website, we participate in the Amazon EU Partner Program. On our pages are links (“affiliate links”) to the side of Amazon.de involved, where we can earn money on advertising reimbursement. Amazon uses cookies to track the origin of the orders. This will allow Amazon to track down that you have clicked the partner link on our website.

The storage of “Amazon cookies” is based on Art. 6 lit. f GDPR. The website operator has a legitimate interest in the economic operation of its online presence. Only through the use of cookies, the amount of an affiliate fee can be determined.

For more information about Amazon’s data usage, please refer to the Amazon Privacy Policy: https://www.amazon.com/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401

 

VIII. Newsletter – service provider

a) Description and scope of data processing
On our website you can subscribe to free newsletters. Here, the so-called double-opt-in procedure is used: After registering you will receive an e-mail with a link, with which you can confirm their registration by clicking.

This procedure is designed to prevent anyone from logging in with a foreign email address. Registration and confirmation of the registration for the newsletter are recorded, so that we can fulfill our legal obligation to prove the registration process.

By registering and activating the subscription you agree to the receipt and the described procedures. We send newsletters, e-mails and other electronic notifications exclusively with the consent of the recipient or a legal permission. Contents, which are described with the registration to the newsletter are decisive for the user consent. Otherwise, our electronic mailings contain information about our (service) services and us.

When registering for the newsletter, the data will be transmitted from the input mask. In terms of data economy at this point is only the input of your

  • E-mail address

required.

In addition, the following data is processed when the registration is submitted:

  • IP address of the calling computer
  • Date and time of registration

After registration, you will receive an e-mail with a confirmation link. If you click on this link, the following data will be processed:

  • IP address of the calling computer
    Date and time of activation

For the processing of the data, your consent is obtained during the registration process and reference is made to this privacy policy.

If you purchase goods or services on our website and deposit your e-mail address here, this can subsequently be used by us for the newsletter dispatch.

We use Rapidmail to send our newsletter. Your data will therefore be transmitted to Rapidmail GmbH. It is the Rapidmail GmbH prohibited to use your data for purposes other than sending the newsletter. A transfer or sale of your data is not allowed to Rapidmail GmbH. Rapidmail is a German, certified newsletter software provider, which was carefully selected according to the requirements of the GDPR and the BDSG. Rapidmail is based on our legitimate interests within the meaning of Art. 6 para. 1 lit. DSGO and a contract processing contract in accordance with Article 28 para 3 sentence 1 GDPR. You can see the privacy policy of Rapidmail here: https://www.rapidmail.de/datenschutzbestimmungen

Rapidmail may use pseudonymized data (without assignment to a user) to technically optimize the delivery or to improve the newsletter presentation or to use for statistical purposes. The data are not used by rapidmail to write to the newsletter recipients themselves or to pass the data on to third parties.

b) Legal basis for data processing
When registering for the newsletter by the user, the legal basis for the processing of the data in the presence of the consent of the user Art. 6 para. 1 lit. a GDPR in conjunction with § 7 Abs. 2 no. 3 UWG. The legal basis for the dispatch of the newsletter as a result of the sale of goods or services is § 7 Abs. 3 UWG. Other personal data that are collected in the context of the registration process, serve to prevent misuse of the services and / or the e-mail address used, as well as our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR, to be able to prove the registration procedure by double-opt-in.

c) Purpose of the data processing
Collecting the e-mail address of the user serves to deliver the newsletter and to inform about us, our offer and our services. In addition, data processing serves to prevent abuse and to ensure the demonstrable double-opt-in procedure.

d) Duration of storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. The user’s e-mail address will be saved as long as the subscription to the newsletter is active.

e) Objection and data deletions options
Subscription to the newsletter may be terminated at any time by the user concerned. For this purpose, there is a corresponding link in each newsletter. You can revoke your consent to the storage of the data and its use for newsletter dispatch at any time by unsubscribing from the newsletter, e.g. via the unsubscribe link in the newsletter or via informal e-mail plot@PLOTmag.com .

Based on our legitimate interest in being able to prove that the use of the e-mail address for the newsletter has been made on the basis of a given consent, we may save the e-mail address that has been submitted up to three years before the final deletion.These data are used exclusively for a possible attack defense.

Alternatively, you can submit a request for cancellation, which we are happy to comply with in the event of confirmation of a previously existing consent.

 

IX. Newsletter – Success Analysis

a) Description and scope of data processing
Our e-mails sent with rapidmail contain a pixel-sized file (“tracking pixel”), which connects to Rapidmail’s servers when the e-mail is opened, allowing us to see if a newsletter message was opened. All links contained in a newsletter e-mail are so-called “tracking links”, with which the clicks of the users can be counted. For more information about the analysis features of Rapidmail, see: https://de.rapidmail.wiki/ categories / statistics . Please note that we do not use the advanced analysis tool, only the standard analysis.

Data collected:

  • technical information (browser, system, not to be assigned to the individual user)
  • IP address, from which a location country is derived
  • Date and time of receipt of the newsletter message
  • Opening the newsletter
  • Information on whether one of the links in the message was clicked (not which one)

b) Legal basis for data processing

The data processing takes place on the basis of your consent (Art. 6 para 1 lit. a GDPR). You can revoke this consent at any time. The legality of the already completed data processing operations remains unaffected by the revocation.

c) Purpose of the data processing
For technical reasons, the information, whether a newsletter e-mail was opened and links were clicked (not which, but only if that happened) can be assigned to the individual recipient of our newsletter news, but do not serve us, the individual user but to adapt our content to the reading habits of our users or to create user segments and to send different content according to the interests.

d) Duration of storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. The user’s e-mail address will be saved as long as the subscription to the newsletter is active.

You can also find out more about the data security information from Rapidmail: https://www.rapidmail.de/datensicherheit .

e) Objection and data deletions options

Subscription to the newsletter may be terminated at any time by the user concerned. You can revoke your newsletter subscription and your consent to the storage of the data and their future use for newsletter distribution at any time by unsubscribing from the newsletter, e.g. via the unsubscribe link in the newsletter or via informal e- mail to plot@PLOTmag.com .The termination of the newsletter also ends the success analysis of the newsletter sent to you for the future.

Based on our legitimate interest in being able to prove that the use of the e-mail address for the newsletter has been made on the basis of a given consent, we may save the e-mail address that has been submitted up to three years before the final deletion. These data are processed exclusively for a potential attack defense. Alternatively, you can file a request for cancellation, which we will gladly comply with when confirming formerly existing consent. Data from the newsletters analysis for messages sent during the active subscription is currently still available for technical reasons.

 

X. Google Analytics

a) Description and scope of data processing
We use Google Analytics as part of our online presence. Google Analytics is a web analytics service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google uses cookies which generate information about the use of the online presence by our users and transmit it to a server of Google with location in the USA and store there. The privacy policy of Google can be found here: https://policies.google.com/privacy .

Google is certified under the Privacy Shield Agreement and guarantees to comply with European data protection law. Google Privacy Shield Certificate can be viewed here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI

The following data can be processed:

  • Areas where the user clicks the most (heatmap)
  • Session duration / length of stay on a website
  • Bounce rate – If someone comes to one side and leaves without interaction, that counts as a jump
  • Viewing contact information
  • Watching reviews
  • Play media
  • Updating the page
  • Add to favorites
  • Sharing Content (Social Media)
  • Campaign tracking – analysis of the origin of the user (e.g.E-mail, search engine, social media)

Google Analytics tracks our websites only after active acceptance of the cookies by the visitors/users of the website and is only used with activated IP anonymization. The IP addresses of our users are shortened by Google within the European Union or other parties to the Agreement on the European Economic Area and transferred only in exceptional cases in full length to a Google server in the US and only then shortened. A combination of the transmitted IP addresses with other data from Google does not take place.

This data processing by Google takes place on the basis of a “order processing contract” in accordance with Art. 28 GDPR.

b) Legal basis for data processing
Our use of Google Analytics is based on our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR.

c) Purpose of the data processing
The purpose of Google’s data processing is to receive reports on the use of our online presence, in order to be able to analyze and optimize our offer and its acceptance by users in order to be able to provide content and (service) services to users’ interests as well as our interest in the economic operation of our online presence. These reports come about through the evaluation of the use of our online presence and the activities within it. From the data processed by Google, pseudonymous usage profiles can be created within the scope of the evaluation.

d) Duration of storage
After 14 months the personal data will be deleted or anonymised.

e) Objection and data deletions options
With a corresponding setting in the browser, the storage of cookies can be prevented. If necessary, please inform yourself how and where you make the settings in the browser you are using.

With the installation of the Google Analytics Optout browser plug-in (available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de) you can capture the data generated by the cookie and information about your use of our online presence.

See the Google Privacy Policy ( https://policies.google.com/technologies/ads ) for more information about Google’s data usage, opt-out, and settings.

 

XI. Online presence in social networks

a) Description and scope of data processing
Our online presence include communication channels in the social networks about which we communicate with our customers, prospects and business partners and inform about us and our services.

When using these networks and platforms, the respective terms and conditions and privacy policy of the operator. These can be found here:

b) Legal basis for data processing
The legal basis for the processing of the data transmitted in the course of making contact via social media is Article 6 (1) lit. f GDPR. If the establishment of contact aims at the conclusion of a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

c) Purpose of the data processing
When users communicate with us through these channels (writing posts and comments, or sending messages to us), we process users’ information to process that contact.

d) Duration of storage
The data will be deleted as soon as they are no longer necessary for the purpose of their collection and if the deletion does not conflict with any legal archiving requirements. For personal data sent when you contact us, this is the case when the respective conversation with the user has ended. The conversation ends when it can be inferred from the circumstances that the facts are finally clarified. We check the necessity of storage every two years. For the handling of the data by the respective social network, we refer to the above-mentioned documents of the respective platform.

e) Objection and data deletions options
The user has the opportunity to revoke his consent to the processing of personal data at any time. If the user contacts us via a social network, he may object to the storage of his personal data with us at any time with a message via the same communication channel, by e-mail or in writing. In such a case, the conversation can not be continued. All personal data stored in the course of contacting will be deleted in this case. If it is a comment or other reaction to Platform, he or she may remove it from their account.

 

XII. Integration of videos via Vimeo

a) Description and scope of data processing
For the integration of videos we use among others the provider Vimeo. Vimeo is operated by Vimeo, LLC, with headquarters at 555 West 18th Street, New York, New York 10011.

When you play the Vimeo-linked videos on our pages, you will be connected to the Vimeo servers and data will be sent to the Vimeo server. This happens on our pages only if you actively play the video by clicking on the play button. The following data is then transmitted:

  • IP addresses
  • Browser type and operating system (pseudonymized)
  • language
  • Date and time of access
  • Content of non-deleted Vimeo cookies stored on your device
  • Website from which you access a Vimeo video

Vimeo may associate this information with your personal user account at Vimeo if you are logged in while playing. You can prevent this assignment by logging out of your Vimeo user account before using our website and by deleting the corresponding cookies stored on your computer from Vimeo. For more information about data processing and privacy by Vimeo, see https://vimeo.com/privacy .

b) Legal basis for data processing
The legal basis for this are our legitimate interests (analysis, optimization and economic operation of our online services) in accordance with Art. 6 para. 1 lit. f GDPR.

c) Purpose of the data processing
In order for the video content to be sent to the users’ browsers, the third-party vendors, here Vimeo, must use the IP address of the caller, so it is necessary for the presentation of the content.

 

XIII. Integration of videos via Youtube

a) Description and scope of data processing
For the integration of videos we use among others the provider Youtube. YouTube is powered by YouTube LLC, headquartered at 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When you play the Youtube-linked videos on our pages, you will be connected to the YouTube servers and data will be sent to the YouTube server. This happens on our pages only if you actively play the video by clicking on the play button. The following data is then transmitted:

  • IP addresses
  • Browser type and operating system (pseudonymized)
  • language
  • Date and time of access
  • Content of non-deleted YouTube cookies stored on your device
  • Website from which you access a YouTube video

YouTube may associate this information with your personal user account on YouTube if you are logged in while playing. You can prevent this association by logging out of your YouTube user account and other user accounts of the companies YouTube LLC and Google Inc. before using our website and deleting the corresponding company cookies stored on your computer.

Please see https://policies.google.com/privacy for more information about data processing and privacy by YouTube (Google) . Opt-out: https://adssettings.google.com/authenticated .

b) Legal basis for data processing
The legal basis for this are our legitimate interests (analysis, optimization and economic operation of our online services) in accordance with Art. 6 para. 1 lit. F GDPR.

c) Purpose of the data processing
In order to be able to send the content to the users’ browser, the third party providers, here YouTube, have to use the IP address of the caller, so it is necessary for the presentation of the content.

 

XIV. Rights of the data subject
If personal data is processed by you, you are a data subjectaccording to the GDPR and you have the following rights to the responsible person:

1. Consent and right of withdrawal
Your consent as the basis for our data processing can be withdrawn at any time with effect for the future. For this, an informal message to us is enough. You can use the contact details above.

2. Right to object
You may object to the processing of your personal data insofar as the processing pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR (“legitimate interests”) (Art. 21 GDPR). However, according to Art. 21 para 1 sentence 1 GDPR, an obligation to implement your objection only exists if you give us reasons of overriding importance that result from your particular situation. Your personal data will no longer be processed unless there are compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if processing is required by law or in connection with legal claims.

3. Other data subject rights
You can also claim the following rights, provided that the legal requirements are met:

Right to information about your personal data stored with us, in particular regarding the processing purposes, the categories of the data and their origin, if the data were not collected directly from you, the categories of the recipients of your data, the planned storage period and your data subject rights (Art. 15 GDPR),

Right to correction of incorrect or incomplete personal data (Art. 16 GDPR),

Right to delete your personal data, especially if the data is no longer necessary for the purposes for which it was collected and we are not obliged to retain the data due to legal or contractual requirements (Art. 17 GDPR),

Right to restriction of the processing of your personal data (Art. 18 GDPR),

Right to data portability with regard to the personal data provided by you in a common, machine-readable format (Article 20 GDPR).

4. Right of appeal
Pursuant to Art. 77 GDPR, you have the right to complain to a supervisory authority if you have come to the conclusion that the processing of the data concerning you violates the requirements of the GDPR.

 

XV. data security
The data entrusted to us and the protection of it are important to us, therefore we take appropriate technical security measures to protect your data against loss, destruction, disclosure and access by unauthorized persons and adapt these always to the technical advancements. We expressly point out that data transfer on the Internet does not allow complete protection of the data.

 

XVI. Links to websites of third parties
Links to other providers not affiliated with us are beyond our control and responsibility. We do not have any information as to what data will be processed by these providers if you click on these links. It is beyond our control how and what data is processed, so we assume no responsibility for it. To find out about the data processing practices of these providers, please use their respective information for data processing and data protection.

 

As of: February 2019