Source: https://www.united-internet-media.de/en/data-privacy-guidelines/
Timestamp: 2019-04-25 23:49:45+00:00

Document:
At United Internet Media GmbH in Montabaur, Germany, protecting your personal information is our top priority. Of course, we operate in line with all relevant data protection laws. The following data privacy guidelines are designed to explain just how we use your data.
We collect and process personally identifiable information of our users basically only where this is necessary for providing a functional website as well as our content and services. The periodical collection and use of personal data of our users is effected only with the user's consent except where prior obtaining of consent is not possible and the processing of data is permitted by legal regulations.
Insofar as we obtain consent for processing operations of the data subject's personal data, Art. 6 (1)(a) GDPR serves as the legal basis.
For the processing of personal data required for the performance of a contract the contractual party of which is the data subject, Art. 6 (1)(b) GDPR serves as the legal basis. This also applies to processing operations required for the performance of precontractual measures. Insofar as processing of personal data is required for the fulfilment of a legal obligation applying to our company, Art. 6 (1)(c) GDPR serves as the legal basis.
If the processing is necessary to protect the vital interests of the data subject or another natural person, Art. 6 (1)(d) GDPR serves as the legal basis.
If the processing is necessary for the preservation of the legitimate interests pursued by our company or a third party and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6 (1)(f) GDPR serves as the legal basis for the processing.
The personal data of the data subject will be deleted or blocked once the purpose of storing no longer exists. Nonetheless, the data may be stored if this is stipulated by European or national legislature, union regulations, laws or other provisions to which the controller is subject. Blocking or deletion of data may also occur when a stipulated data retention period defined in the said regulations expires, except, the continued data storage is needed for the conclusion or performance of a contract.
However, none of the information stored in our log files, including but not limited to IP addresses, is linked to personally identifiable information or added together with other personal data of the user.
Art. 6 (1)(f) GDPR serves as the legal basis for the temporary storage of data.
The log files are stored in order to ensure the functionality of the website. In addition, the data is used for optimising the website and safeguarding the security of our IT systems. The data is not analysed for marketing purposes in this context.
These purposes also constitute our legitimate interest in the data processing according to Art. 6 (1)(f) GDPR.
The data is deleted once it is no longer required for attaining the purpose of its collection. With regard to the collection of data for the provision of the website, this is the case when the respective session has been finished.
A pseudonymous cookie ID may be transmitted this way.
It is not possible to attribute the data to the visiting user. The data is not stored together with other personal data of the users.
Art. 6 (1)(f) GDPR serves as the legal basis for the processing of personal data by using cookies.
The purpose of using analysis cookies is to improve the quality of our website and its content. Using analysis cookies gives us information on how the website is used so that we can continuously improve our services.
These purposes also constitute our legitimate interest in processing personal data according to Art. 6 (1)(f) GDPR.
Users have the option to subscribe to a free newsletter on our website. When registering for our newsletter, typed-in data from the input mask will be transferred to us (mandatory fields: Title, First Name, Last Name, E-Mail Address and Company). Furthermore, the time and date of your registration will be recorded.
We obtain your consent for the processing your data within the scope of the registration process by means of a confirmation E-Mail and referring to this Data Privacy Statement.
There is no data transfer to third parties associated with the data processing for the delivery of newsletters. The data is used exclusively for the delivery of our newsletters.
After having obtained the user's consent, Art. 6 (1)(a) GDPR serves as the legal basis for the data processing following the user's registration.
The user’s E-Mail address is collected to ensure the delivery of the newsletter.
The collection of other personal data within the scope of the registration process serves to personalise the newsletter and prevent misuse of the services or the used E-Mail address.
The data is deleted once it is no longer required for attaining the purpose of its collection. Therefore, the user's E-Mail address is stored as long as the subscription to the newsletter is active.
The newsletter subscription may be cancelled by the affected user (data subject) at any time. Every newsletter contains an unsubscribe link for this purpose.
This also allows the withdrawing of consent to the storage of personal data collected during the registration process.
Our website includes a contact form, which may be used to contact us electronically. When a user takes advantage of this possibility, the data entered into the input mask is transmitted to us and stored. This includes at least your first and last name as well as your E-Mail address. The time and date of your contact request will also be recorded.
We obtain your consent for processing the data within the scope of the sending process by asking you and referring to this Data Privacy Statement.
Alternatively, you may contact us via the E-Mail address or telephone number provided. In this case, the user's personal data sent via E-Mail will be stored.
The data is not transferred to third parties in this context but rather used exclusively for the handling of the conversation.
Art. 6 (1)(a) GDPR serves as the legal basis for the processing of data after the user's consent has been obtained.
Art. 6 (1)(f) GDPR serves as the legal basis for the processing of data that is transferred in line with sending an E-Mail.
The sole purpose of processing personal data from the input mask is to process the contact request. When contacting us via E-Mail, this also constitutes the required legitimate interest in the processing of the data.
The data is deleted once it is no longer required for attaining the purpose of its collection. For personal data from the input mask of the contact form and data submitted via E-Mail, this rule applies if the respective conversation with the user has ended. The conversation is considered completed when the circumstances indicate that the subject matter has been conclusively clarified.
The user may withdraw his or her consent to the processing of personal data at any time. This right of withdrawal also applies to the storage of his or her personal data when contacting us via E-Mail. In that case, the conversation can not be continued and all personal data stored in the course of contacting us will be deleted.
We use an internal solution to analyse the traffic data of our website. Data that we analyse for the design of products and websites will not be transferred to third parties. The data is stored exclusively on our servers in Germany.
Due to the software configuration the IP addresses are anonymised meaning that it is not possible to attribute the shortened IP address to the visitor’s computer.
Those log files are stored for seven days and pseudonymized analysis data for two months.
Art. 6 (1)(f) GDPR serves as the legal basis for processing the users' personal data.
The processing of our user’s personal data allows us to analyse our users' browsing behaviour. Evaluating the collected data allows us to compile information on the usage of our website's unique components. This helps us in continuously improving our website and its user-friendliness. Upon these purposes we constitute our legitimate interest in processing personal data according to Art. 6 (1)(f) GDPR. The anonymization of the IP address sufficiently takes into account the users' interest in safeguarding their personal data.
The data is deleted once it is no longer required for attaining the purpose of its collection.
We offer our users the option to opt-out from the analysis process on our website. To do so please follow the corresponding link: www.united-internet-media.de/en/services/opt-inopt-out/ and the instructions on above webpage. While doing so another cookie is set in your system that signalizes our system to not store your data. If the user deletes the respective cookie earlier from his or her own system in the meantime, the opt-out cookie must be set once again.
You are entitled to request information about whether personal data concerning you is transferred to a third country or an international organisation. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 GDPR relating to the transfer.
You are entitled to rectification and/or completion towards the controller insofar as the processed data concerning you is incorrect or incomplete. The controller is obligated to perform the rectification without delay.
(4) you have objected to the processing pursuant to Art. 21 (1) GDPR pending verification of whether the legitimate reasons of the controller override your reasons.
Where the processing of personal data concerning you has been restricted, this data – with the exception of its storage – may be processed only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.
If the processing was restricted according to the aforementioned conditions, you will be informed by the controller before the restriction is lifted.
(6) personal data concerning you has been collected in relation to services offered by information society services according to Article 8(1) GDPR.
Where the controller has made the personal data concerning you public and is obligated pursuant to Art. 17 (1) to delete this data, the controller will take into account available technology and cost of implementation and reasonable technical measures to inform any controllers processing personal data concerning you to delete any links to this personal data including copies or replications of this personal data on your request.
Insofar as you have enforced your right to rectification, deletion or restriction of processing towards the controller, the controller is obligated to communicate such rectification, deletion or restriction of processing to each recipient to whom the personal data concerning you has been disclosed unless this proves impossible or involves disproportionate effort.
You are entitled to be notified by the controller about those recipients.
(2) the processing is carried out by automated methods.
In exercising this right, you are also entitled to have the personal data transmitted directly from one controller to another controller insofar as this is technically feasible. The rights and freedoms of other persons must not be affected by this.
This right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority that has been vested in the controller.
On grounds arising from your particular situation, you are entitled to object at any time to the processing of personal data concerning you that is based on Art. 6 (1)(e) or (f) GDPR.
If the personal data concerning you is processed for direct marketing purposes, you are entitled to object at any time to the processing of personal data concerning you for the purposes of such marketing.
You are entitled to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the legality of the performed processing based on the consent up to its withdrawal.
Without prejudice to any other administrative or judicial remedy, you are entitled to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you believe that the processing of personal data relating to you infringes the provisions of the GDPR.
The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6

Art. 6
 Art. 6

Art. 6
 Art. 6
 Art. 6

Art. 6

Art. 6

Art. 6
 Art. 6
 Art. 46
 Art. 21
 Art. 17
 Art. 6
 Art. 78