Privacy

1. Who is responsible for processing my data?

The

Mohn Media Mohndruck GmbH

Carl-Bertelsmann-Straße 161 M
33311 Gütersloh

Phone: +49 (0) 5241-80- 40410
Email: mohnmedia(at)bertelsmann.de

is responsible for processing your data on this website (hereinafter referred to as the “Company”). The Company processes personal data in accordance with the provisions of the GDPR and the German Federal Data Protection Act (hereinafter referred to as the “BDSG”).

You can contact the company's Data Protection Officer at the postal address provided above, adding “For the attention of the Data Protection Officer,” or by email at: datenschutz@bertelsmann.de.

2. What data is collected?

When you visit the website, information is automatically collected from the device accessing it (hereinafter referred to as “access data”). This access data includes server log files, which generally contain information about the browser type and version, the operating system, the internet service provider, the date and time the website was used, the websites previously visited, the pages subsequently accessed via the website, and the device’s IP address. With the exception of the IP address, the server log files cannot be linked to an individual. An IP address can be linked to an individual if it is permanently assigned when the internet connection is used and the internet service provider can associate it with a specific person.

If you continue to use the website's services, pseudonymous usage profiles and/or the data you enter on the website (e.g. search terms, login details, reviews, information entered in forms or contracts, and click data) will be processed.

Some services on the website require you to provide the company with personal data. In such cases, the data you provide will be used to deliver the requested service or process the relevant request. The following personal data is processed on the website: address details; contact details.

3. Which cookies are used

Cookies are used on the website. Cookies are small text files that are stored on your computer when you visit a website. The stored cookies are associated with the browser you are using. When you visit the website again, the web browser sends back the contents of the cookies, thereby enabling the user to be recognized. Certain cookies are deleted when you log out or end the browser session (known as “transient cookies”). Other cookies are stored for a specified period or permanently (known as “temporary cookies” or “persistent cookies”). These cookies are deleted automatically once the specified period has expired. You can also delete cookies at any time in your browser’s security settings and configure the use of cookies according to your preferences. However, the company would like to point out that you may not be able to use all of the website’s features.

In principle, cookies are merely online identifiers that are not linked to an individual. Cookies become personal data when the information they generate is combined with other data. A distinction can be made between cookies that are necessary for providing the website and cookies used for other purposes, such as analyzing user behavior or advertising.

The cookies required to provide the website include, in particular, the following:

Cookies used to identify or authenticate users.

Cookies that temporarily store certain user inputs (e.g. the contents of a shopping cart or an online form).

Cookies that store certain user preferences (e.g. search or language settings).

Cookies that store data to ensure the uninterrupted playback of video and audio content.

The cookies required for additional purposes include, in particular, the following:

Analytics cookies to record our users' behavior (e.g., advertising banners clicked, subpages visited, and search queries submitted) and evaluate it in statistical form.

Tracking cookies associated with social plugins.

3.1 Functional Cookies

To obtain and store your consent under data protection law, we use the consent management platform provided by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter “Cookie First”). It sets a technically necessary cookie to retrieve your consent status and display the corresponding content. Usage analysis to measure how the consent collection process works is carried out on the basis of our legitimate interest (Art. 6(1), sentence 1, point (f) GDPR).

The cookie will be stored until you withdraw your consent and will be deleted after 13 months at the latest. You can find Cookie First's privacy policy at: Privacy Policy - CookieFirst - Cookie Consent Management

3.2. Consent-Based Cookies

Information about cookies that collect and process your data based on the consent you have given can be found in Sections 4.3, 4.7, and 4.8. Privacy settings

Under Data Protection Settings or Privacy Center, you can decide whether to consent to the storage of information on your device and to the collection and processing of such information and other data by the operator of this site and its partners for the personalization, delivery, and measurement of advertising and content within and outside this service, as well as for analyses of how this service is used.

4. What data is collected and for what purposes?

The purposes of data processing may arise from technical, contractual, or legal requirements and, where applicable, from consent.

We use the data specified in Section 2 for the following purposes:

to provide the website and ensure technical security, particularly to resolve technical errors and ensure that unauthorized persons do not gain access to the website's systems;

for audience measurement and web analytics, in order to make the website more efficient and engaging for you and to conduct market research;

for communication, contract initiation, and customer relationship management;

to connect with us or share our posts across various social media platforms

for the use of the services on the website in accordance with the Terms and Conditions

Provision of free downloads.

Further information on these purposes of data processing can be found in the following sections of this Privacy Notice.

4.1 Technical Provision of the Website

4.1.1 Description and Scope of Data Processing

To ensure the website functions properly, to conduct security analyses, and to defend against attacks, server log files, as part of the access data generated in accordance with Section 2, are automatically collected from the computer system of the accessing device when the website is entered and while it is being used, and are stored for a short period. The server log files are not stored together with any other data. The company uses the server log files for statistical analyses in order to analyze and resolve technical issues, prevent attempted attacks and fraud, and optimize the functionality of the website.

4.1.2 Purposes and Legal Basis of Data Processing

The legal basis for collecting server log files is Art. 6(1)(f) GDPR. The company has legitimate interests in ensuring the functionality of the website, conducting security analyses, and preventing threats.

4.1.3 Storage period or criteria for determining this period

When the websites are accessed, the server log files are stored on the web server, and the IP address contained in them is deleted after no more than 7 days. During this retention period, the data is analyzed only in the event of an attack.

4.1.4 Right to Object and Request Erasure

You have the right to object to the processing of your data in connection with server log files on grounds relating to your particular situation. If you wish to exercise your right to object, please contact us at the address provided in Section 1.

4.2 Contact Form, Email and Telephone Contact

4.2.1 Description and Scope of Data Processing

The website allows you to contact the company via a contact form, email address, or telephone number. If you choose to do so, the information entered in the contact form, your email address and/or telephone number, and the details of your inquiry will be transmitted to the company. Depending on the nature of your inquiry (e.g., questions about the company’s products and services or the exercise of your data subject rights, such as the right of access), your contact details will be processed further (with the assistance of service providers). Where necessary to handle your inquiry, your contact details may be forwarded to third parties (e.g., partner companies).

4.2.2 Purposes and Legal Basis of Data Processing

The legal basis for processing your contact details is Art. 6(1)(f) GDPR. The legitimate interests lie in handling your inquiry and in any subsequent communication. If you contact us with a view to entering into a contract with the company, the legal basis for processing your contact details is Art. 6(1)(b) GDPR.

4.2.3 Storage period or criteria for determining this period

Once your request has been processed and any subsequent communication has concluded, your contact details will be deleted. This does not apply if you contact us with the intention of entering into a contract with the company or if you exercise your rights as a data subject, such as requesting access to your data. In such cases, the data will be stored until the contractual and/or legal obligations have been fulfilled and statutory retention periods no longer prevent its deletion.

4.2.4 Options for Objection and Removal

You have the right to object to the processing of your contact details on grounds arising from your particular situation. If you wish to exercise your right to object, please contact us at the address specified in Section 1. If you object, communication cannot continue. This does not apply if storing your contact details is necessary to initiate or perform a contract or to exercise your rights as a data subject.

4.3 Web Tracking

The website incorporates services that optimize user-friendliness and measure the website’s reach. In the process, your access data (see Section 2) is collected, and your usage behavior is analyzed using analytics cookies (see Section 3). Personal identification is generally not required for web tracking. Therefore, when your access data is collected, the stored IP address is either not used or is used only in truncated form, and pseudonymous usage profiles are created. These profiles are not combined with other data, and you may withdraw your consent at any time. Personal usage profiles are created only in exceptional cases and only if you have given your consent.

Web tracking services are generally provided by service providers that process the data solely on the instructions of the controller and not for their own purposes, acting as so-called processors. This is ensured by means of data processing agreements. If the service providers process your data outside the European Union or the European Economic Area (hereinafter referred to as the “EU or EEA”), this constitutes a so-called third-country transfer. Such a transfer is permitted if you have consented to it, the company has put safeguards in place to ensure a level of data protection appropriate to European standards, or the European Commission has classified the third country in question as a safe third country. Any third-country transfer associated with the respective service is indicated below. Further information about the recipients of your data can be found in Section 4.3.1.

The website's individual web tracking services are described in more detail below.

4.3.1 Cookie Table:

This cookie table was created and updated by Consent Management - CookieFirst

4.3.2 Google Tag Manager

This website uses Google Tag Manager. This service is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google Inc.). Google Tag Manager enables the web tracking services and other services integrated into this website to be managed using so-called “tags” (placeholders for website code). Google Tag Manager merely implements these tags. Google Tag Manager does not specifically collect any personal data. It merely triggers other tags, which may in turn collect data. However, Google Tag Manager does not access this data. For more information about Google Tag Manager, please visit: http://www.google.de/tagmanager/use-policy.html.

4.3.3 Google Analytics

This website uses Google Analytics, a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics creates a pseudonymous user profile to improve the website’s user-friendliness. Pseudonymity is ensured by truncating your IP address before your data is transmitted to Google, making it impossible to identify you personally. Through IP anonymization on this website, Google truncates your IP address within EU member states or other countries that are parties to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage. This information is not combined with other Google data. Through a data processing agreement, the company ensures that Google processes the data only in accordance with its instructions.

4.3.4 Purposes and legal basis of data processing:

The legal basis for collecting and analyzing your pseudonymous usage profile is Article 6(1)(a) of the GDPR. By giving your consent to data processing through our cookie consent tool, you authorize us to process your data in the manner and for the purposes specified.

4.3.5 Storage period or criteria used to determine that period:

The data collected and analyzed through the use of web tracking services is generally stored until you withdraw your consent. Analytics cookies remain valid for no more than one year.

Options for objection and removal:

You can opt out of the use of web tracking services at any time by changing your browser settings or clicking the following link to download and install the available browser plug-ins:

You can find the browser plug-in for disabling Google Analytics on Google's website at https://tools.google.com/dlpage/gaoptout?hl=de

4.3.6 Options for Objection and Removal:

You may also withdraw your consent at any time with future effect by changing the relevant privacy setting in our cookie consent tool under Privacy Settings or Privacy Center.

4.5 Business Customer Survey

4.5.1 Description and Scope of Data Processing

As part of our business customer relationships, we occasionally conduct customer surveys to assess satisfaction and improve our services. The customer survey is intended for our business customers; however, we generally store your contact details in our customer database if you act as a contact person. We use your contact details to invite you to participate in the customer survey. Participation is voluntary, and you may inform us at any time that you no longer wish to receive invitations to participate in customer surveys in the future. As a rule, your contact details are no longer required for the analysis, meaning that the survey results consist solely of statistical information. It is then no longer possible to identify you personally.

4.5.2 Purpose and Legal Basis of Data Processing

The legal basis for processing your contact details is Article 6(1)(f) of the GDPR. Our legitimate interests lie in maintaining and strengthening customer relationships and improving our services.

4.5.3 Storage Period or Criteria for Determining the Period

As a general rule, the survey results are stored for the duration of the business relationship. This does not apply if the survey results consist solely of statistical data.

4.5.4 Options for Objection and Remediation

You have the right to object to the processing of your contact details on grounds relating to your particular situation. If you wish to exercise your right to object, please contact us at the address provided in Section 1.

4.6. Downloading free content (e.g., studies, white papers)

4.6.1 Description and Scope of Data Processing

You can use the website to download content we provide, such as studies or white papers on current topics from our business areas. To enable the download, your contact details are submitted to us via the registration form and stored. We also record the date and time of your download. The download is voluntary, free of charge, and generally independent of any other services offered on the website. Further details can be found in the contractual terms and conditions (General Terms and Conditions).

4.6.2 Purposes and Legal Basis of Data Processing

The download of free content constitutes an online service that we provide to you. The legal basis for processing the data collected from you in this context is the performance of a contract pursuant to Article 6(1)(b) GDPR.

4.6.3 Storage period or criteria for determining this period

Your data will be stored for as long as necessary to perform the contract for downloading free content. The contract automatically terminates once the download has been successfully completed. After the contract has ended, your data will be stored until the contractual and/or statutory retention periods (currently 6 to 10 years) have expired.

4.6.4 Options for Objection and Removal

The processing of your data is necessary for the performance of the contract concerning the download of free content. Therefore, you do not have the right to object.

4.7 Social Media Plugins

Social media plugins are used on the website. When social media plugins are used, your access data (see Section 2) is collected and user profiles are created only after you have given your consent, with the aid of tracking cookies (see Section 3). These user profiles are transmitted to social networks such as Facebook, YouTube and Instagram and used for advertising, reach measurement and tailoring the website to users’ needs. Such use initially takes place regardless of whether you have a user account with the relevant social network or are logged into your account while visiting the website. Depending on how the relevant social media plugin works, it may also be possible to identify you personally, for example if you have an account with the social network and/or your access data is combined with other data. The company therefore recommends that you regularly log out after using a social network, as this can prevent you from being identified in this way.

When using social media plugins, the company has no or only limited influence over the processing of data once it has been transmitted to the respective social network. Furthermore, the company has no or only partial knowledge of the purposes for which the data is processed or how long it is retained.

If social networks process your data outside the EU or EEA, this constitutes what is known as a third-country transfer. Such a transfer is permitted if you have consented to it, the company has put safeguards in place to ensure a level of data protection equivalent to European standards, or the European Commission has classified the third country in question as safe. Transfers to third countries involving the respective social network are identified below. Further information about the recipients of your data can be found in Sections 5 and 6.

The individual social media plugins are described in more detail below.

4.7.1.1 LinkedIn

Our website incorporates features and content from the LinkedIn service, provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. This may include content such as images, videos, or text, as well as buttons that allow users to share content from this website on LinkedIn. By integrating the plugin, LinkedIn is informed that your browser has accessed the relevant page of our website, even if you do not have a LinkedIn account or are not currently logged in to LinkedIn. In addition to this information, other data, such as your IP address, is also transmitted to and stored by LinkedIn. If you are logged in to LinkedIn while visiting the website, the data collected about you on the website will be directly combined with other data held by LinkedIn and associated with your user account.

We have no influence over the data collected by Twitter or its data processing activities, nor are we aware of the full extent of the data collection, the purposes of the processing, or the retention periods. We also have no information regarding the deletion of the collected data by Instagram.

For more information about data processing on LinkedIn, please refer to the following privacy policy: https://www.linkedin.com/legal/privacy-policy. You can change the data processing permissions you have granted in your user profile settings: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

4.7.1.2 YouTube

Our website incorporates features and content from the service YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. This may include content such as images, videos, text, and buttons that allow users to share content from this online service on LinkedIn. By integrating the plugin, YouTube is informed that your browser has accessed the relevant page of our website, even if you do not have a YouTube account or are not currently logged in to YouTube. In addition to this information, other data, such as your IP address, is also transmitted to and stored by YouTube. If you are logged in to YouTube while visiting the website, the data collected about you on the website will be directly combined with other YouTube data and associated with your user account. We have no control over the data collected by YouTube or its data-processing activities, nor are we aware of the full extent of the data collection, the purposes of the processing, or the retention periods. We also have no information regarding the deletion of the collected data by YouTube.

For further information about the purpose and scope of the collection and processing of your data, please refer to YouTube's privacy policy: https://policies.google.com/privacy?hl=en. You can change the data processing permissions you have granted in your user profile settings. Opt out: https://adssettings.google.com/authenticated

4.7.1.3 Instagram

This website uses Instagram's social media plugin. The provider of this social media plugin is Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA. When you visit the website, no data is initially transmitted to Instagram. You can consent to enable the social media button. Once enabled, you can share content from the website with Instagram and other users. By integrating the plugin, Instagram is informed that your browser has accessed the relevant page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. In addition to this information, other data, such as your IP address, is also transmitted to and stored by Instagram. If you are logged in to Instagram while visiting the website, the data collected about you on the website will be directly combined with other data held by Instagram and associated with your user account. We have no control over the data collected or the data processing operations carried out by Instagram, nor are we aware of the full extent of the data collection, the purposes of processing, or the retention periods. We also have no information regarding the deletion of the collected data by Instagram.

The transmission of data to Instagram involves a transfer to a third country (see Section 4.9). This is permitted provided that you have consented to it. Please note that transferring data outside the European Union may result in your data being sent to a country that does not provide the same level of data protection as the European Union.

For information about the purpose and scope of data collection, the further processing and use of the data by Instagram, as well as your rights in this regard and the settings available to protect your privacy, please refer to Instagram's privacy policy: help.instagram.com/155833707900388/ . If you do not want Instagram to directly associate the data collected through our website with your Instagram account, you must log out of Instagram before giving your consent on our website.

4.7.2 Purpose and Legal Basis of Data Processing

The purposes of data processing when using social media plugins are advertising, reach measurement, and the needs-based design of the website. You also have the option of sharing the website’s content with social networks and other users and receiving advertising tailored to your interests. The legal basis for data processing is consent pursuant to Art. 6(1)(a) GDPR.

4.7.3 Storage period or criteria for determining this period

Your data will be processed until you withdraw your consent. Once you withdraw your consent, the company will delete the data collected from you on the website and notify the relevant social network of your withdrawal and, consequently, your request for deletion.

4.7.4 Options for Objection and Removal

You can withdraw your consent at any time with effect for the future, for example via the relevant link on the website or the corresponding privacy setting in our cookie consent tool.

4.8. Retention period or criteria for determining this period

Your data will be processed until you withdraw your consent. Once you withdraw your consent, the company will delete the data collected from you on the website.

4.8.1 Options for Objection and Remediation

You may withdraw your consent at any time with future effect via the relevant privacy setting in our cookie consent tool.

5. Who receives my data?

Within the company, access to your data is granted to those departments that require it to fulfill the purposes set out in Section 4. Service providers engaged by the company may also be given access to your data (so-called “processors,” e.g. data centers, newsletter distribution providers, or customer service providers). Data processing agreements ensure that these service providers act only on instructions, maintain data security, and handle your data confidentially.

Your data will be disclosed to other recipients, such as advertising partners, social media service providers, or financial institutions (so-called “third parties”), where required by law or where you have given your consent. The following third parties are covered by this disclosure:

Providers of measurement and web analytics services that measure website reach and create user profiles for their own purposes.

Further information on the disclosure of data to the respective third party can be found under the individual purposes set out in Section 4.

6. Will my data be processed outside the EU or the EEA (third-country transfer)?

Where the service providers and/or third parties referred to in Section 5 process your data outside the EU or EEA for the purposes specified in Section 4, this may result in your data being transferred to a country where a level of data protection equivalent to that of the EU or EEA cannot be guaranteed. However, an adequate level of data protection can be ensured through appropriate safeguards. Such safeguards may include, for example, standard contractual clauses provided by the European Commission. You may request a copy of these safeguards using the contact details provided in Section 1. In exceptional cases, safeguards may not be required, for example if you consent or if the transfer to a third country is necessary for the performance of your contract with the company. The European Commission has also recognized certain third countries as safe third countries, in which case the company may likewise dispense with appropriate safeguards.

The following service providers process your data outside the EU or the EEA:

Where possible, Google uses servers located in the EU for its Analytics services. However, it cannot be ruled out that data may also be transferred to the USA. In this case, we ensure that the service providers guarantee an equivalent level of data protection, either contractually or by other means. For example, this may involve entering into a data protection agreement prescribed by the European Commission (known as the EU Standard Contractual Clauses). You can request a copy of the relevant safeguards using the contact details provided above under section 1.

Some or most of the social media providers referred to in Section 4 are located outside the EU. Data is therefore transferred to third countries, particularly the USA. This transfer to third countries is permitted on the basis of your prior consent. Please note that transferring data outside the European Union may result in your data being sent to a country that does not provide the same level of data protection as the European Union. We have no influence over the data collected by Instagram or its data processing activities, nor are we aware of the full extent of the data collection, the purposes of the processing, or the retention periods. We also have no information regarding the deletion of the data collected by Instagram.

7. What data protection rights do I have?

You have the right at any time to obtain information about the personal data we have stored about you. If any of your personal data is inaccurate or no longer up to date, you have the right to request that it be corrected. You also have the right to request the erasure or restriction of the processing of your data in accordance with Article 17 or Article 18 of the GDPR. You may also have the right to receive the data you have provided in a commonly used, machine-readable format (right to data portability).

If you have consented to the processing of personal data for specific purposes, you may withdraw your consent at any time with effect for the future. The withdrawal must be sent to the company using the contact details specified in Section 1. You may also withdraw consent given on the website by emailing info@campaign-services.de.

Pursuant to Art. 21 GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your data based on Art. 6(1)(f) GDPR. You also have the right to object at any time to the processing of your personal data for direct marketing purposes. The same applies to automated processes involving the use of individual cookies, unless they are strictly necessary for providing the website.

You also have the option of contacting a data protection authority and lodging a complaint. The authority responsible for the company is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2-4, 40102 Düsseldorf. However, you may also contact the data protection authority responsible for your place of residence.

8. To what extent is automated decision-making used?

We do not use fully automated decision-making for the purposes specified in Section 4.

9. Does profiling take place?

No, automated decision-making, including profiling, within the meaning of Article 22(1) and (4) of the GDPR does not take place.

10. Conclusion/Version Information

As we continue to develop the website and implement new technologies to improve our service for you, it may become necessary to amend this Privacy Notice. We therefore recommend that you review this Privacy Notice from time to time.