Source: https://www.grin.com/en/privacy-en/
Timestamp: 2019-04-25 23:40:01+00:00

Document:
their functions and contents as well as external online presences, like e.g. our social media profiles (collectively referred to as “online offer”).
“Personal data” means any information relating to an identified or identifiable natural person (hereinafter the “data subject”); a natural person is considered as identifiable, which can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, to an identification number, to location data, to an online identifier (e. g. cookie) or to one or more special features, that express the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.
Providing the online offer of GRIN Verlag, its functions and contents.
Fulfillment of legal obligations or contracts.
You can trust us with your personal data. The data is encrypted and transmitted to us during the login or order process. We secure the online offer of GRIN Verlag and your data through technical and organizational measures against damage, destruction, alteration or unauthorized access by unauthorized persons. Despite regular checks, complete protection against all dangers is not possible.
If you register with us as author or customer, access to your author or customer account is only possible after entering your personal password. You should always treat your access data confidentially and close the browser window when you have finished communicating with us, especially if you share the computer with others.
and the legal basis for processing for the protection of our legitimate interests is Article 6 (1) lit. f GDPR.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR applies as legal basis.
If, in the context of our processing, we disclose data to other persons and companies (contract processors or third parties), transmit them to them or otherwise grant access to the data, this will only be done on the basis of a legal permission (e.g. if a transmission of the data to third parties, as required by payment service providers, is pursuant to Art. 6 (1) (b) GDPR to fulfill the contract), if you have consented to a legal obligation or based on our legitimate interests (e.g. the use of agents, webhosters, etc.).
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or in the context of the use of third party services or disclosure or transmission of data to third parties, this will only be done if it is to fulfill our (pre) contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only in the presence of the special conditions of Art. 44 et seq. GDPR. That the processing is e.g. on the basis of specific guarantees, such as the officially recognized level of data protection (e.g. for the US through the Privacy Shield) or compliance with officially recognized special contractual obligations (so-called “standard contractual clauses”).
A cookie itself does not contain or collect any personal information about you or your internet usage. However, they are important, for example, for analyzing the behavior of guests on our website, or for showing personalized offers or for registering registered users for the duration of their visit. Cookies allow the website to “remember” you either for the duration of your current visit (“session cookie”) or for multiple visits (“persistent cookie”). First and foremost, they should allow you to use our website more efficiently and activate certain functions on the website.
How can you control the receipt of cookies?
Most web browsers accept cookies automatically. You can prevent cookies from being stored on your computer or mobile phone by setting your browser to not accept cookies. For detailed instructions on how to change your cookie settings, see the “Help” section of your browser. You can also at any time delete the cookies that are already stored on your device. Helpful information can be found on the information page allaboutcookies.org.
If you decide to generally not accept cookies, you can of course visit our website anyway. However, it may happen that you will not be able to use all the features and services or that certain content we offer will be unavailable.
A general contradiction against the use of the cookies used for the purpose of online marketing can be explained in a variety of services, in particular in the case of tracking, via the US side www.aboutads.info/choices/ or the EU page www.youronlinechoices.com/.
According to legal requirements in Germany, the storage takes place in particular for 6 years pursuant to § 257 paragraph 1 HGB (trading books, inventories, opening balance sheets, annual accounts, trade letters, accounting documents, etc.) and for 10 years in accordance with § 147 Abs. 1 AO (books, records, Management reports, accounting documents, trade and business letters, documents relevant to taxation, etc.).
Contract data (e.g. contract, period of validity, customer category).
We, or our hosting provider, collect on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. GDPR data on every access to the server on which this service is located (so-called server log files). The access data includes the name of the retrieved web page, file, date and time of retrieval, amount of data transferred, message about successful retrieval, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider.
The processed data includes inventory data, communication data, contract data, payment data and the persons affected by the processing include our authors, customers, prospects and other business partners. Processing is for the purpose of providing contractual services in the context of the operation of an online shop, billing, delivery and customer service. Here we use session cookies for the storage of the shopping cart contents and permanent cookies for the storage of the login status.
Users can optionally create a user account in which they can in particular view their orders. As part of the registration, the necessary mandatory information will be communicated to the users. The user accounts are not public and cannot be indexed by search engines. If users have terminated their user account, their data regarding the user account will be deleted, subject to their retention is necessary for commercial or tax law reasons according to Art. 6 para. 1 lit. c GDPR.
Information in the customer account remains until its deletion with subsequent archiving in case of a legal obligation. It is the responsibility of the users to secure their data upon termination before the end of the contract.
As part of the registration and re-registration and use of our online services, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as the user’s protection against misuse and other unauthorized use. A transfer of these data to third parties does not take place, unless it is necessary for the prosecution of our claims or there is a legal obligation in accordance with Art. 6 para. 1 lit. c GDPR.
For the processing of credit card and direct debit payments, we use the service provider PayOne (BS PAYONE GmbH, Lyoner Strasse 9, 60528 Frankfurt / Main, Germany). PayOne provides an interface for initiating payment transactions and submitting data to the PayOne platform. Payments are made in a separate area (iframes) by PayOne on our website. Our systems are therefore not in direct contact with the buyer’s card data.
For the data processing of the payment processing services, they are “responsible” themselves.
We process inventory data (e.g., names and addresses as well as user and author contact information), contract data (e.g., services used, contact names, billing information) for the purpose of fulfilling our contractual obligations and services in accordance with Art. 6 para. 1 lit b. GDPR. The entries marked as obligatory in online forms are required for the conclusion of the contract.
As part of the use of our online services, we store the IP address and the time of each user action. The storage is based on our legitimate interests, as well as the interests of users against abuse and other unauthorized use. A transfer of these data to third parties does not take place, unless it is necessary for the prosecution of our claims or there is a legal obligation in accordance with Art. 6 para. 1 lit. c GDPR.
We process usage data (e.g. the visited web pages of our online offering or interest in our products) and content data (e.g. entries in the contact form or user profile) for advertising purposes in a user profile to inform the user e.g. about product instructions based on their previously used services.
We process data in the context of administrative tasks and organization of our business, financial accounting and compliance with legal obligations, such as archiving. We process the same data that we process in the course of rendering our contractual services. The processing principles are Art. 6 para. 1 lit. c. GDPR, Art. 6 para. 1 lit. f. GDPR. The processing affects customers, prospects, business partners and website visitors. The purpose and interest in processing lies in administration, financial accounting, office organization and data archiving, which are tasks that serve to maintain our business, perform our duties and provide our services. The deletion of the data in terms of contractual performance and contractual communication corresponds to the information provided in these processing activities.
Furthermore, based on our business interests, we store information about suppliers, promoters and other business partners, e.g. for later contact. We generally store this, mostly company-related data permanently.
In order to operate our business economically, to be able to recognize market trends and customer and user requirements, we analyze the data we have on business transactions, contracts, inquiries, etc. We process stock data, communication data, contract data, payment data, usage data, metadata on the basis of Art. 6 para. 1 lit. f. GDPR, whereby the persons affected include customers, prospects, business partners, visitors and users of the online offer.
The analyses are carried out for the purpose of business analysis, marketing and market research. In doing so, we can display the profiles of the registered users with indications e.g. to consider their purchase transactions. The analyses serve to increase the user-friendliness, the optimization of our offer and the business economics. The analyses are for us alone and will not be disclosed externally unless they are anonymous, aggregated value analyses.
If these analyses or profiles are personal, they will be deleted or anonymized upon termination of the users, otherwise after two years from the conclusion of the contract. Incidentally, the overall business analyzes and general trend provisions are created anonymously if possible.
We process the applicant data only for the purpose and in the context of the application process in accordance with all legal requirements. The processing of the applicant data takes place in order to fulfill our (pre-) contractual obligations in the context of the application process within the meaning of Art. 6 para. 1 lit. b. GDPR Art. 6 para. 1 lit. f. GDPR if the data processing e.g. is required for us in the context of legal proceedings (in Germany, § 26 BDSG applies additionally).
The application process requires applicants to provide us with the applicant data. The necessary applicant data are, as far as we offer an online form, marked or otherwise result from the job descriptions and basically include the information on the person, postal and contact addresses and the application documents, such as cover letter, CV and the certificates. In addition, applicants can voluntarily provide us with additional information.
The deletion takes place, subject to a legitimate revocation of the candidate, after the expiration of a period of six months, so that we can answer any follow-up questions to the application and meet our obligations under the Equal Treatment Act. Invoices for any reimbursement of travel expenses are archived in accordance with the tax regulations.
As part of the application, we offer applicants the opportunity to be in our “Talent Pool” for a period of two years on the basis of a consent in accordance with Art. 6 para. 1 lit. b. and Art. 7 GDPR.
Users can optionally create a user account. As part of the registration, the necessary mandatory information is communicated to the users. The data entered during registration will be used for the purpose of using the offer. Users may be informed by e-mail about offer or registration-related information, such as changes in the scope of the offer or technical circumstances. If users have terminated their user account, their data regarding the user account will be deleted, subject to their retention is necessary for commercial or tax law reasons according to Art. 6 para. 1 lit. c GDPR. It is the responsibility of the users to secure their data upon termination before the end of the contract. We are entitled to irretrievably delete all user data stored during the term of the contract.
In the context of the use of our registration and registration functions as well as the use of the user account, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as the user’s protection against misuse and other unauthorized use. A transfer of these data to third parties does not take place, unless it is necessary for the prosecution of our claims or there is a legal obligation in accordance with Art. 6 para. 1 lit. c GDPR. The IP addresses will be anonymized or deleted after 7 days at the latest.
When contacting us (for example, by contact form, e-mail, telephone or via social media) the information of the user to process the contact request is processed in accordance with Art. 6 para. 1 lit. b) GDPR. User information can be stored in a Customer Relationship Management System (“CRM System”) or comparable request organization.
To manage the e-mails to our contact info@grin.com, we use Freshdesk, a service of Freshworks, Inc., 1250 Bayhill Drive, Suite 315, San Bruno, CA 94066, USA as a Help Center solution. When you submit a request, certain personal information in connection with your support request, such as your e-mail address, will be collected and stored by Freshdesk. Depending on the nature of your request, further data such as your first and last name or phone number is collected and stored. These data are hosted by Freshdesk in a data center in Frankfurt am Main. However, because Freshdesk uses third-party applications, your data may occasionally be processed and stored outside the EU. However, we have entered into contractual agreements with Freshworks, Inc. to ensure sufficient levels of data protection (EU standard contract clauses).
There will be no reconciliation of the data collected with data collected from other components of our website.
If users leave comments or other contributions, their IP addresses may, based on our legitimate interests within the meaning of Art. 6 para. 1 lit. f. GDPR, be stored for 7 days. This is for our own safety, if someone leaves illegal content in comments and contributions (insults, prohibited political propaganda, etc.). In this case, we ourselves can be prosecuted for the comment or post and are therefore interested in the identity of the author.
We use the “Scalable Central Measurement Method” (SZM) of INFOnline GmbH (INFOnline GmbH, Brühler Str. 9, D-53119 Bonn) for the determination of statistical parameters for determining the copy probability of texts. Anonymous measurements are taken. Alternatively, traffic metering uses a session cookie or signature created from various automatically transmitted information from your browser to recognize computer systems. IP addresses are only processed in anonymous form. The procedure was developed in compliance with data protection. The only goal of the procedure is to determine the copy probability of individual texts. At no time individual users are identified. Your identity always remains protected. You will not receive advertising through the system.
Usage data and metadata of the users are processed here, whereby the IP addresses are being shortened and the measuring methods are pseudonymous. The shortened IP address is stored for a maximum of 60 days. The usage data in connection with a pseudonymous assignment value (“Identifier”) are stored for a maximum of 6 months.
Users are also provided with an opt-out in order to disagree with the collection for the aforementioned purposes: https://optout.ioam.de. Further information can be found in the data protection statement of INFOnline https://www.infonline.de/datenschutz/benutzer.
Login details: To subscribe to the newsletter, it is sufficient to provide your e-mail address. Optionally, we ask you to provide a name in order to be able to address you personally in the newsletter.
based on the consent of the recipients acc. Art. 6 para. 1 lit. a, Art. 7 GDPR in connection with § 7 Abs. 2 Nr. 3 UWG or on the basis of the legal permission according to Art. § 7 Abs. 3 UWG.
or based on our legitimate interests Art. 6 para. 1 lit. f GDPR or on the basis of the legal permission according to para. 7 Abs. 3 UWG. We are interested in promoting the academic exchange between our users, information on new editions and new scientific developments as well as new offerings in the dissemination of academic publications and on direct marketing, i.e. the contact with customers and potential authors.
The logging of the registration process is based on our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR. Our interest lies in the use of a user-friendly and secure newsletter system, which serves both our business interests and the expectations of the users and also allows us to prove our consent.
You can terminate the receipt of our newsletter at any time, i.e. revoke your consent. A link to cancel the newsletter can be found at the end of each newsletter. We may save the submitted e-mail addresses for up to three years, based on our legitimate interests, before we delete them to provide prior consent. The processing of this data is limited to the purpose of a possible defense against claims. An individual request for cancellation is possible at any time, provided that at the same time the former existence of a consent is confirmed.
The shipping service provider is based on our legitimate interests acc. Art. 6 para. 1 lit. f GDPR and a contract processing agreement acc. Art. 28 (3) sentence 1 GDPR.
The newsletters contain a so-called “web-beacon”, i.e. a pixel-sized file that is retrieved from the server when opening the newsletter from our server, or if we use a shipping service provider whose server is called. This call will initially collect technical information, such as information about the browser and your system, as well as your IP address and time of retrieval.
This information is used to improve the technical performance of services based on their specifications or audience and their reading habits, based on their locations (which can be determined using the IP address) or access times. Statistical surveys also include determining if the newsletters will be opened, when they will be opened and which links will be clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our goal nor, if used, that of the shipping service provider to observe individual users. The evaluations rather serve us to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
You can disable Optimizely tracking at any time by following the instructions at http://www.optimizely.com/opt_out.
Google is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European privacy legislation: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
The IP address submitted by the user’s browser will not be merged with other data provided by Google. Users can prevent the storage of cookies by setting their browser software accordingly; Users may also prevent the collection by Google of the data generated by the cookie and related to its use of the online offer and the processing of such data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 (1) lit. GDPR) we use the marketing and remarketing services (“Google Marketing Services “), LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, (“Google”).
Google Marketing Services allows us to better target advertisements for and on our website so that we only present ads to users that potentially match their interests. If a user e.g. is being shown ads for products he’s been interested in on other websites, this is called remarketing. For these purposes, when Google and our other websites accessing Google Marketing Services are directly accessed by Google, a code will be executed by Google and so-called (re) marketing tags (invisible graphics or code, also called “Web Beacons “) are being incorporated into the website. With their help, the user is provided with an individual cookie, i.e. a small file is saved (instead of cookies, comparable technologies can also be used). The cookies can be set by different domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. In this file is noted which web pages the user visited, in what content he is interested and what offers he has clicked, as well as technical information about the browser and operating system, referring web pages, visiting time and other information on the use of the online offer. The IP address of the users is also recorded, whereby in the context of Google Analytics we announce that the IP address is shortened within member states of the European Union or other parties to the Agreement on the European Economic Area and is only in exceptional cases being transmitted to one Google server in the US and shortened there. The IP address will not be merged with data of the user within other offers from Google. The above information may also be linked by Google with such information from other sources. If the user then visits other websites, ads tailored to him can be displayed according to his interests.
The data of the users are pseudonymously processed in the context of the Google marketing services. I.e. Google stores and processes e.g. not the name or e-mail address of the users, but processes the relevant data cookie-related within pseudonymous user profiles. I.e. from the perspective of Google, the ads are not managed and displayed to a specifically identified person, but to the cookie owner, regardless of who that cookie owner is. This does not apply if a user has explicitly allowed Google to process the data without this pseudonymization. The information collected about users through Google Marketing Services is transmitted to Google and stored on Google’s servers in the United States.
Among the Google marketing services we use is the online advertising program “Google AdWords”. In the case of Google AdWords, each advertiser receives a different “conversion cookie”. Cookies cannot be tracked through AdWords advertisers’ websites. The information collected through the cookie is used to generate conversion statistics for AdWords advertisers who have opted for conversion tracking. Advertisers will see the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, they do not receive information that personally identifies users.
If you wish to object the interest-based advertising through Google Marketing Services, you can take advantage of Google’s setting and opt-out options: http://www.google.com/ads/preferences.
Within our online offer the so-called “Facebook pixel” of the social network Facebook, by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are located in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland (“Facebook”) is used due to our legitimate interests in the analysis, optimization and economic operation of our online offer and for these purposes.
With the help of the Facebook pixel, it is on the one hand possible for Facebook to determine the visitors to our online offer as a target group for the display of advertisements (so-called “Facebook ads”). Accordingly, we use the Facebook Pixel to display the Facebook Ads we operate only to those Facebook users who have shown an interest in our online offer or who show certain features (e.g. interests in certain topics or products which are determined on the basis of visited websites), which we transmit to Facebook (so-called “Custom Audiences”). With the help of the Facebook pixel, we also want to make sure that our Facebook ads are in line with the potential interest of users and are not annoying. With the help of the Facebook pixel we can also understand the effectiveness of the Facebook ads for statistical and market research purposes, in which we see whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion”).
You may object to the capture by the Facebook Pixel and use of your data to display Facebook Ads. To set which types of ads you see within Facebook, you can go to the page set up by Facebook and follow the instructions for the usage-based advertising settings: https://www.facebook.com/settings?tab=ads. The settings are platform independent, i.e. they are adopted for all devices, such as desktop computers or mobile devices.
When you visit our website, your interests (e.g. clicked advertising banners, visited subpages, anonymised questionnaires, etc.) are being held in a cookie by means of an anonymous user number on behalf of Ströer Digital Publishing. Cookies are small text files that are stored on the hard disk of your computer and enable recognition. This data is used for the purpose of displaying content and advertising in accordance with your interests. In no case personal data such as name, address, e-mail address or IP address are stored in the cookies.
The delivery of usage-based online advertising is operated by the digital advertising marketer www.stroeer.de/digitale-werbung.html.
Due to the pseudonymous or anonymous nature of the data, we and the aforementioned third party companies do not require separate consent to use-based online advertising (§ 15 (3) Telemedia Act).
On the website www.youronlinechoices.com/ you can read more about cookies and the individual providers. There you also have the opportunity to object to the usage-based online advertising by individual or by all companies. To go directly to the preference manager, please click here: http://www.youronlinechoices.com/uk/your-ad-choices.
If you want to be sure that no data is being saved on YouTube, do not click on the embedded videos.
Based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 (1) f. GDPR) we use social plugins (“plugins”) of the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland (“Facebook”). The plugins can represent interaction elements or content (e.g. videos, graphics or text contributions) and can be recognized by one of the Facebook logos (white “f” on blue tile, the term “Like” or a “thumbs up” sign ) or are marked with the addition “Facebook Social Plugin”. The list and appearance of Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/.
Facebook is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European privacy legislation (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the online offer. If the user is logged in to Facebook, Facebook can assign the visit to his Facebook account. If users interact with the plugins, for example press the “Like” button or leave a comment, the information is transmitted from your device directly to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will find out and save their IP address. According to Facebook, only an anonymous IP address is stored in Germany.

References: Art. 6
 Art. 6
 Art. 44
 § 257
 § 147
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 § 26
 Art. 6
 Art. 7
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 7
 § 7
 § 7
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 6
 Art. 6