Source: https://www.sonopress.de/en/data-protection/
Timestamp: 2019-04-18 18:24:27+00:00

Document:
is responsible for processing your data on this website (hereinafter referred to as the “Company”). The Company processes personal data in compliance with the provisions of the GDPR and the German Federal Data Protection Act (Bundesdatenschutzgesetz [BDSG]).
You can reach the Company’s data protection officer at the postal address listed above. Please state “For the attention of the data protection officer”, or, alternatively, send an email to: datenschutz(at)bertelsmann.de.
When you visit this website, information is automatically collected from the accessing computer (“access data”). This access data contains server log files that generally consist of the browser type and version, operating system, internet service provider, date and time the website was used, the websites visited prior to your visit to our site, the website you access from our website, and your computer’s IP address. With the exception of your IP address, server log files do not constitute personal data. An IP address is considered personal data if it is permanently assigned when using the internet connection and the internet provider can attribute this to a person.
Some of the website’s functionalities require you to share personal data with the Company. In this case, the data you share is used to enable us to provide the service you require or process your request (e.g. search terms, forms or contracting, click data).
Generally speaking, cookies are only used to recognise you online, but not to identify you. Cookies only serve to identify you if other data is linked to the information generated by the cookies. Here, we can distinguish between cookies that are necessary to provide the website and cookies that are necessary for other purposes, such as analysing user behaviour or for advertising.
•cookies that store data to ensure smooth playback of video or audio content.
The cookies necessary for other purposes include analytics cookies that record our users’ usage behaviour and allow us to analyse this in statistical form (e.g. banners clicked, sub-pages visited, search queries).
4. What data are collected for what purposes?
The purposes of data processing may be based on technical, contractual or statutory requirements, or may be based on consent.
•for communication, entering into contracts and customer service.
More information on the purposes for data processing are available in the following sections of this Privacy Notice.
As a component of the incoming access data from the computer system accessing the website when the website is being used as described under Section 2, the server log files are automatically collected and temporarily stored to ensure the functionality of the website, to carry out security analyses and to guard against attacks. The server log files are categorically not stored together with other data. The Company uses server log files for statistical analysis in order to analyse and rectify technical faults, to guard against attempted attacks and fraud and to optimize the functionality of the website.
The legal basis for collecting the server log files is Art. 6 Para. 1(f) GDPR. The Company’s legitimate interests are in the functionality of the website, conducting security analyses and guarding against danger.
After accessing the website, server log files are stored on the web server and the IP address contained in those files is erased after no more than seven days. This data is only analysed in the event of an attack.
You are entitled to object to the processing of your data as part of server log files, provided there are reasons for this based on your particular situation. If you would like to exercise your right to object, please contact us at the contact address specified in Section 1.
On the website, you have the option of contacting the Company via a contact form, email address or telephone number. If you use this option, the data you enter in the contact form, including your email address and/or telephone number and your request, are transmitted to the Company. Depending on your request (e.g. questions about the Company’s products and services, exercising your rights as a data subject, such as your right to information), your contact details may be processed on a continuing basis (using service providers). If necessary to process your request, your contact details may be passed on to third parties (e.g. partner companies).
The legal basis for processing your contact details is Art. 6 Para. 1(f) GDPR. Our legitimate interests are based on processing your request and further communication with you. If the aim of you contacting the Company is to enter into a contract with the Company, the legal basis for processing your contact details is Art. 6 Para. 1(b) GDPR.
After processing your request and terminating further communication, your contact details are erased. This is not the case if the aim of you contacting the Company is to enter into a contract with the Company, or if you exercise your rights as a data subject, such as your right to information. In this case, data are stored until the contractual and/or statutory obligations have been met, provided no statutory retention periods (currently six to ten years) prevent erasure.
You are entitled to object to the processing of your contact details, provided there are reasons for this based on your particular situation. If you would like to exercise your right to object, please contact us at the contact address specified in Section 1. If you object, we will be unable to continue communicating with you. This is not the case if it is necessary to store your contact details in order to enter into a contract with you, to execute a contract or to exercise your rights as a data subject.
This website uses Google Tag Manager to ensure its functionalities. This service is operated by Google, Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google, Inc.”). Google Tag Manager allows us to administer the web tracking services embedded in this website (see Section 4.4) and other services using what are known as “tags” (placeholders for a website code). Google Tag Manager merely implements these tags. No cookies are used and no personal data is specifically collected by Google Tag Manager. Google Tag Manager merely deploys other tags, which, in turn, may collect data. However, Google Tag Manager has no access to this data.
This website uses the Google Analytics service. The provider of Google Analytics is Google, Inc. Google Analytics creates a pseudonymised usage profile in order to optimise the website’s user friendliness. In the process, your access data (see Section 2) is collected and usage behaviour is analysed using the analysis cookies listed in Section 3. In general, it is not necessary to personally identify you for web tracking purposes. This means that when your access data is collected, the IP address stored is truncated before it is sent to Google, Inc., and it is then not possible to identify you individually. Once transmitted, this pseudonymised usage profile is analysed to optimise the user friendliness of this website. This data is not linked to other data by Google, Inc. The Company uses a processing contract to ensure that Google, Inc. only processes data according to its instructions.
The legal basis for collecting and analysing pseudonymised usage profiles is Art. 6 Para. 1(f) GDPR/Sec. 15 Para. 3 of the German Telemedia Act (Telemediengesetz [TMG]). The Company’s legitimate interests lie in optimising the user-friendliness of the website and measuring its reach.
The data collected and analysed when using Google Analytics is generally stored until you object to its use. The retention period for analysis cookies is a maximum of 24 months.
This website contains links to websites run by other operators. By clicking links, you will be directed to the respective website (e.g. subsidiaries, Facebook, Twitter). With the exception of your credentials to provide the respective external website, none of your data is transmitted to the website operator.
This Privacy Notice solely extends to the Company’s website. The Company is not responsible for privacy notices on other websites. Because of this, we recommend that you carefully read the privacy notices when visiting linked websites.
Within the Company, the persons or departments with access to your data are those who need it for the purposes listed in Section 4. Service providers hired by the Company may also receive access to your data (known as “processors”; e.g. data centres, web tracking). We ensure these service providers follow our instructions and securely and confidentially handle your data by entering into processing contracts with them.
As a matter of principle, we do not disclose your data to other recipients, such as advertising partners, providers of social media services or banks (known as “third parties”).
6. Is my data processed outside of the EU or EEA (transfer to third countries)?
Your data is transferred to third countries because we use Google Analytics (see Section 4.4), since Google, Inc.’s data centres are located outside of the European Union (EU) and European Economic Area (EEA). This kind of transfer to third countries may lead to your data being transmitted to a country that does not guarantee the same data protection standard as the EU or EEA. However, by getting certified under the EU-US Privacy Shield, Google, Inc., ensures that the European level of data protection is maintained when data are transferred to third countries. You can request a copy of these guarantees using the contact details listed in Section 1.
7. What are my rights in terms of data protection?
You are entitled to request and receive information about your personal data stored by us. If data about you are incorrect or no longer up to date, you are entitled to request their rectification. You are also entitled to request the erasure of your data or the restriction of the processing of your data according to Art. 17 and Art. 18 GDPR. You may also be entitled to request the data you have given to be provided in a standard, machine-readable format (right to data portability).
If you have granted your content to your personal data being processed for specific purposes, you are entitled to revoke your consent at any time with future effect. Please state your objection to the Company using the contact address listed in Section 1.
According to Art. 21 GDPR, you are also entitled to lodge an objection to the processing of personal data relating to you for reasons relating to your particular situation where this is done on the basis of Art. 6 Para. 1(f) GDPR. You also have the right to object to the processing of your personal data for direct advertising purposes at any time. The same applies to automated processes when using individual cookies if these are not absolutely necessary for the provision of the website.
However, you may also contact the data protection authority responsible for your place of residence.
8. To what extent is automated desision-making used?
We do not engage in any automated decision-making for the purposes listed under Section 4.
9. Do you engage in profiling?
We do not engage in profiling for the purposes listed under Section 4.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 17
 Art. 18
 Art. 21
 Art. 6