Information on the protection of your data
For contract customers / subscribers / buyer
DVV Media Group GmbH and DVV Media GmbH (hereinafter referred to as DVV Media), Heidenkampsweg 73-79, 20097 Hamburg, e-mail address: firstname.lastname@example.org take the protection of your personal data as a user of the services of DVV Media (this includes www.dvvmedia-shop.de, www.dvvmedia.com; hereinafter referred to as services) seriously as a service provider and responsible body. In the following, you will be informed about the collection, processing and use of your data as well as the rights to which you are entitled.
The Data Protection Officer can be contacted as follows:
DVV Media Group GmbH
Phone: +49 (0)40/23714-100
A. General part
§ 1 General information
Personal data is individual information about your personal or factual circumstances, i.e. data that identifies you or that can be used to establish your identity. This includes, for example, your correct name, address, telephone number or date of birth. Personal data also includes data that can be related to a person, i.e. data without a direct reference from which a person can be derived, such as the IP address.
Personal data includes data that is generated in connection with the retrieval of www.dvvmedia-shop.de and stored in so-called log files on the servers of DVV Media and its technical service providers.
On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation and security of our services) within the meaning of Art. 6 para 1 lit. f GDPR, we collect data about each access to the server on which the service is located (so-called server log files).
These are the name of the accessed website, file, your IP number, date and time, browser type and the requesting provider.
Log file information is stored for security reasons (e.g. for the clarification of abuse or fraud) for a maximum of seven days and then deleted. Data whose further storage is necessary for evidentiary purposes are excluded from deletion until the final clarification of the respective incident.
During your visits to the pages of DVV Media, personal data is also processed automatically in anonymous form. This includes usage data such as the beginning and end of your visit, the pages you call up or the time you spend on the portal. There is no personal use of this data.
DVV Media collects, processes or uses personal data only in compliance with the relevant data protection regulations. This means that user data will only be processed if a legal permission exists. This means, in particular, if the data processing is necessary or legally required for the provision of our contractual services as well as online services, a consent of the users is available, or also due to our legitimate interests (i.e. interest in the analysis, optimization and economic operation and security of our services within the meaning of Art. 6 para.1 lit. f GDPR, especially in the case of coverage measurement, creation of profiles for advertising and marketing purposes as well as the collection of access data and the use of third-party services.
We would like to point out that the legal basis for the consents is Art. 6 para.1 lit. a and Art. 7 GDPR, the legal basis for the processing for the fulfillment of our services and implementation of contractual measures is Art. 6 para.1 lit. b GDPR, the legal basis for the processing for the fulfillment of our legal obligations is Art. 6 para.1 lit. c GDPR and the legal basis for the processing for the protection of our legitimate interests is Art. 6 para.1 lit. f GDPR.
§ 2 Security measures
We take organizational and technical security measures in accordance with the state of the art to ensure that the provisions of data protection laws are complied with and thus to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons.
§ 3 Disclosure of data to third parties and third-party providers
Data is only passed on to third parties within the framework of legal requirements in accordance with Art. 6 Para. 1 GDPR.
If we use subcontractors to provide our services, we take appropriate legal precautions as well as corresponding technical and organizational measures to ensure the protection of personal data in accordance with the relevant legal requirements.
If content, tools or other means from other providers (hereinafter "third party providers") are used within the scope of this data protection declaration and their named registered office is located in a third country, it is to be assumed that a data transfer to the third party providers' countries of domicile takes place. Third countries are countries in which the GDPR is not directly applicable law, i.e. basically countries outside the EU or the European Economic Area. The transfer of data to third countries takes place either when there is an adequate level of data protection, user consent or legal permission.
§ 4 Single application/SSO procedure/consent / revocation
- DVV Media uses the single sign-on (SSO for short) procedure. SSO procedure means that each user can use various offers and services (across portals) after a one-time registration with his access data without having to register and log in again. This saves the user from having to repeatedly enter data manually.
During registration, we collect and store the following data: User name, password, e-mail address. This inventory data is processed for the purpose of fulfilling our contractual obligations and services in accordance with Art. 6 para.1 lit. b GDPR.
Within the scope of your registration for the SSO, you consent to the use of your personal data for advertising purposes on our own behalf by DVV Media. These advertising emails inform you at irregular intervals about interesting offers for the book and subscription, content/company licenses, advertisements, events, customer surveys and competitions. The newsletter is sent via Inxmail GmbH, Wentzingerstr. 17 79106 Freiburg. This consent is voluntary and is not related to your ability to use the services.
- After registration for the newsletter/advertising emails, you will receive a confirmation email from us.
The registration will only become effective after you have clicked on the link in the confirmation email. This confirmation is necessary so that no one can register with other e-mail addresses. The registrations for the advertising emails are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes the storage of the registration and confirmation time as well as the IP address.
You can unsubscribe from the promotional emails at any time via a unique link contained in all promotional emails. Your e-mail address will then be deleted from the distribution system immediately. Any processing of the data that has taken place up to that point remains lawful.
The advertising emails contain a so-called "web beacon", i.e. a pixel-sized file that is retrieved from the Inxmail server when the newsletter is opened. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and the time of the retrieval are initially collected. This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behaviour based on their retrieval locations (which can be determined with the help of the IP address) or the access times.
The statistical surveys also include the determination of whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor that of Inxmail to observe individual users. The analyses serve us much more to identify the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
If DVV Media intends to collect or use personal data for further purposes, you will be informed of this at the appropriate point on www.dvvmedia-shop.de and asked for your express consent. Consent given in this context can also be revoked at any time by sending an e-mail to email@example.com.
§ 5 Contacting us
When contacting us (via contact form or e-mail), the user's details are processed for the purpose of handling the contact request and its processing pursuant to Art. 6 para.1 lit. f GDPR.
§ 6 Google Fonts
DVV Media uses Google Web Fonts (https://www.google.com/webfonts/) on the basis of its legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f GDPR), in particular to display the content correctly and graphically appealing across browsers. Google Webfonts are transferred to the cache of your browser to avoid multiple loading. If the browser does not support Google Web Fonts or prevents access, content is displayed in a standard font.
Cookies are small amounts of data that are transmitted from the Internet to your computer together with the data actually requested. This data is stored there and kept ready for later retrieval. DVV Media uses the following types of cookies for www.dvvmedia-shop.de:
These are cookies that are only stored on your computer for the duration of an Internet session. These cookies are deleted after the session ends, i.e. after you leave the website or when you close the browser window.
- Login cookies:
In addition, a cookie is also used for user authentication. Different cookies can be used for this purpose: By default, cookies are used that are generated only for the respective session. They store information about the user name, user rights and the validity of the session.
- Google-Re/Marketing Services:
We use the marketing and remarketing services (hereinafter "Google Marketing Services") of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google"). The legal basis for the processing is Art. 6 para.1 lit. a GDPR (consent).
The Google Marketing Services allow us to display advertisements for and on our website in a more targeted manner in order to present users only with ads that potentially match their interests. If, for example, a user is shown ads for products he or she was interested in on other websites, this is referred to as "remarketing". For these purposes, when our website and other websites on which Google Marketing Services are active are called up, a code is executed directly by Google and so-called (re)marketing tags (invisible graphics or code, also referred to as "web beacons") are integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on the user's device (comparable technologies can also be used instead of cookies). The cookies can be set by various domains, including google.com, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. This file records which websites the user has visited, which content he is interested in and which offers he has clicked on, as well as technical information on the browser and operating system, referring websites, time of visit and other information on the use of the online offer. The IP address of the user is also recorded, whereby we inform Google Analytics that the IP address is shortened within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional cases is transferred in full to a Google server in the USA and shortened there. The IP address is not merged with user data within other Google offerings. The aforementioned information may also be linked on the part of Google with such information from other sources. If the user subsequently visits other websites, he can be shown ads tailored to his interests.
The user's data is processed pseudonymously within the framework of Google Marketing Services. This means that Google does not store and process the name or e-mail address of the user, for example, but processes the relevant data on a cookie basis within pseudonymous user profiles. This means that from Google's point of view, the ads are not managed and displayed for a specifically identified person, but for the cookie holder regardless of who this cookie holder is. This does not apply if a user has explicitly allowed Google to process the data without this pseudonymization. The data collected by Google Marketing Services about users is transmitted to Google and stored on Google servers in the USA.
We may also use Google Tag Manager to integrate and manage Google's analytics and marketing services on our websites.
- Google Analytics Cookies (data collection for optimization purposes):
The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, since we have activated IP anonymization on this website, your IP address will be truncated by Google beforehand within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and only shortened there.
As an alternative to the browser add-on or within browsers on mobile devices, please click here to prevent the collection by Google Analytics within this website in the future (the opt-out only works in this browser and only for this domain). This will place an opt-out cookie on your device. If you delete your cookies in this browser, you must click the above link again.
For more information about Google's use of data, settings and opt-out options, please visit Google's websites: policies.google.com/technologies/partner-sites?hl=en, policies.google.com/technologies/ads?hl=en, adssettings.google.com/anonymous
The information transmitted by the cookies will be used exclusively for advertising presenting products distributed by DVV Media.
§ 8 Google Re-Captcha
In order to ensure sufficient data security when submitting forms (legal basis are our legitimate interests pursuant to Art. 6 para.1 p.1 lit. f) GDPR), we use in certain cases the service reCAPTCHA of the company Google Inc. This serves primarily to distinguish whether the input is made by a natural person or abusively by machine and automated processing. The service includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google. The deviating data protection regulations of Google Inc. apply here. Further information on the data protection guidelines of Google Inc. can be found at policies.google.com/privacy.
§ 9 Usage-based online advertising
The advertising spaces on this website are marketed by ourselves. Some of the advertising on this portal is optimized for you by anonymously collecting and processing your usage behavior based on predicted interests. Cookies are stored on your computer for this purpose. So-called "ad servers" are used to deliver those advertising materials that are booked by advertisers on the publisher media.
- Google Ireland Limited (google.co.uk), Gordon House, Barrow St Dublin 4, Ireland, ("Google") provides an ad server. If you do not want Google to display personalized advertising to you, please click on the following link tools.google.com/dlpage/gaoptout. This opt-out cookie will delete the previously stored information and prevent further collection of information.
A list of our partners is stored in the cookie settings. You can access these here.
The legal basis for the processing is Art. 6 para.1 lit. a GDPR (consent). You have the option at any time to change the decision made and to subsequently grant or revoke your consent. For this purpose, you can access the settings options.
§ 10 Facebook-Pixel
§ 11 Webinare
For the implementation of webinars, DVV Media uses the software GoToWebinar of the provider LogMeIn Ireland Limited (order processor). Within the scope of the registration on the infrastructure of the company LogMeIn (Bloodstone Building Block C70 Sir John Rogerson's Quay Dublin 2, Ireland), personal data is collected/stored. In particular, this involves the name, first name, company, function, industry, address and e-mail address. The legal basis for the data processing is Art. 6 (1) lit. b of the General Data Protection Regulation.
The processing of the data by the company LogMeIn (as processor) is based on Article 28 of the General Data Protection Regulation. The data is processed to the extent permitted by law in Germany, the European Union and the USA. For data processing in the USA, an appropriate level of protection has been established by agreeing to the EU standard contractual clauses. In this context, please also note the data protection regulations of LogMeIn: https://www.logmeininc.com/de/gdpr/gdpr-compliance.
The deletion of the data is carried out in accordance with the statutory retention periods.
A use of the data for a purpose other than the aforementioned contract performance purpose or a transfer to other third parties will only take place on the part of DVV Media if this is legally permissible or the user has expressly consented.
§ 12 Trusted Shops
For the display of our Trusted Shops seal of approval and the possibly collected ratings as well as for the offer of Trusted Shops products for buyers after an order, the Trusted Shops trust badge is integrated on this website.
This serves to protect our legitimate interests in an optimal marketing by enabling a safe purchase in accordance with Art. 6 para. 1 p. 1 lit. f GDPR, which prevail in the context of a balancing of interests. The Trustbadge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. Further information on the data protection of Trusted Shops GmbH can be found at https://www.trustedshops.de/impressum/#datenschutz.
When the Trustbadge is called up, the web server automatically saves a so-called server log file, which also contains your IP address, the date and time of the call-up, the amount of data transferred and the requesting provider (access data) and documents the call-up.
Further personal data is transferred to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or if you have already registered to use them. The contractual agreement between you and Trusted Shops applies. For this purpose, personal data is automatically collected from the order data.
§ 13 Paypal
If you pay via PayPal, we will pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing.
The legal basis for the data processing is Art. 6 (1) b) GDPR, as the processing of the data is necessary for the payment with PayPal and thus for the performance of the contract.
§ 14 User rights
You have the right, upon request and free of charge, to receive information about the personal data that we have stored about you.
In addition, you have the right to correct incorrect data, restrict processing and object to the processing and deletion of their personal data, and to assert your rights to data portability in accordance with Article 20 GDPR and, in the event of the assumption of unlawful data processing, to file a complaint with the competent supervisory authority.
Likewise, you can revoke consents, in principle with effect for the future.
§ 15 Deletion of data
The data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory retention obligations. If the user data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to user data that must be retained for reasons of commercial or tax law.
§ 16 Right of objection
Users may object to the future processing of their personal data in accordance with the legal requirements at any time. The objection can be made in particular against processing for direct advertising purposes.
B. Special Section
We process inventory data as well as contractual data for the purpose of fulfilling our contractual obligations and services, Art.6 para.1 lit. b GDPR.
§ 1 Information on subscriptions
For subscription customers, the following data is processed as inventory data: Identifier, password, name (business, if applicable), address (business, if applicable), e-mail address (business, if applicable), subscription start date and end date, if applicable, payment frequency, payment method and account details. This data is necessary for the processing of the subscription contract.
§ 2 Information on apps
For subscription customers, the following data is also processed as inventory data (personal data): Identifier, password, name (business, if applicable), e-mail address (business, if applicable), start date and end date of the subscription, if applicable. These data are necessary for the processing of the subscription contract.
The following non-personal data is processed via Google Analytics: Usage behavior of the app as well as calling up individual issues and articles.
§ 3 Registration for the use of paid content
During registration, we collect and store the following data: Identifier, password, name (business, if applicable), email address (business, if applicable), start date and end date of the subscription, if applicable. This inventory data is processed for the purpose of fulfilling our contractual obligations and services in accordance with Art. 6 para.1 lit. b GDPR.
§ 4 Information on participation in a webinar
For registration and participation in a webinar, the following data is collected, stored and processed: Name, first name, company, function, industry, address and e-mail address. These data are necessary for the implementation of the webinar.
C. Final regulations