Source: https://www.goldmedia.com/en/privacy-policy/
Timestamp: 2019-04-20 20:54:28+00:00

Document:
Since May 25, 2018, the requirements of the General Data Protection Regulation (hereinafter GDPR) apply throughout Europe. Below we would like to inform you about the processing of personal data carried out by Goldmedia GmbH within the framework of the GDPR (§ 13 GDPR). Personal data is information that can be directly or indirectly attributed to your person.
For the purpose of contract execution, all data required for the performance of the contract with Goldmedia will be processed. Are external service providers involved in the execution of the contract, e.g. logistics companies and payment service providers, your data will be passed on to the extent required.
By opening the website/application of Goldmedia different information between your device and our server are exchanged. This can also be personal data. The information collected in this way will i.a. used to optimize our website or to display advertisements in the browser of your device.
In principle, we collect and use personal data of our users only to the extent necessary for a functional website and our content and services. The collection and use of personal data of our users takes place regularly only with the consent of the user. An exception applies to cases in which prior consent can not be obtained for reasons of fact and the processing of the data is permitted by law.
Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6(1) GDPR, as the legal basis for the processing of personal data. In the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6(1) DSGVO is the legal basis. This also applies to processing operations required to carry out pre-contractual measures. Insofar as processing of personal data is required to fulfill a legal obligation that is subject to our company, Art. 6 para. 1 lit. c DSGVO as legal basis. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6(1) GDPR is the legal basis. If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the data subject do not prevail over the first interest, Art. 6(1) GDPR is the legal basis for processing.
Each time our website is accessed, our system automatically collects data and information from the computer system of the viewed computer.
The legal basis for processing the IP address is Article 6 (1) (f) GDPR.
For these purposes, our legitimate interest is in the processing of data according to Art. 6(1)(f) GDPR.
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of the collection of the data for the provision of the website this is the case, if the respective meeting is finished and in the case of the storage in log files after no more than seven days. An additional storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the called client is no longer possible.
The collection of data forproviding the website and the storage of the data in log files is essential for the operation of the website. There is consequently no contradiction on the side of the user.
Goldmedia offers a login area for certain products (www.vod-ratings.de) and services. For this you have to enter a self-chosen password. This serves together with your e-mail address for access to the login area. Please treat your personal access data confidentially and in particular do not make it accessible to unauthorized third parties. We can not accept liability for misused passwords unless we are responsible for the abuse. Please note that even after leaving our website, you will automatically be logged in, unless you actively log out.
Legal basis for the processing of the data is in the presence of the consent of the user Art. 6 (1a) GDPR. If the registration serves the fulfillment of a contract of which the user is a party, then additional legal basis of the data is Art. 6 (1b) GDPR.
User registration is required for the provision of certain content and services on our website. In the case of a purchase contract, the registration is required to fulfill the contract.
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. This is the case for the data collected during the registration process when the registration on our website is canceled or modified. In the case of a contract, after the conclusion of the contract. Even after the conclusion of the contract, there may be a need to store personal data in order to comply with contractual or legal obligations.
The legal basis for this is Article 6 (1) (b) GDPR, i. You provide us with the data based on the contractual relationship between you and us. To process your e-mail address, we are also obliged to send an electronic order confirmation due to a requirement in the Civil Code (BGB) (Article 6 (1) (c) GDPR. Insofar as we do not use your contact data for advertising purposes, we store the data collected for the execution of the contract until the end of the statutory or potential contractual warranty and guarantee rights. After expiry of this period, we retain the information required by commercial and tax law of the contractual relationship for the statutory periods. For this period (usually ten years from the conclusion of the contract), the data will be reprocessed in the event of a review by the tax authorities. If you have selected a different payment method than prepayment or cash on delivery, we will pass on the required payment data to a payment service provider commissioned by us.
The deployment is based on Article 6 (1) (f) GDPR.
Our interest in optimizing our website is considered to be justified in the sense of the aforementioned provision.
The following statements refer to the processing of personal data for advertising purposes. GDPR declares such data processing on the basis of Article 6 (1) (f) as fundamentally conceivable and as a legitimate interest. The duration of data storage for advertising purposes does not follow any rigid principles and is based on the question of whether the storage is required for the promotional approach. As in the case of an objection, we will inform you below.
As far as you have concluded a contract with us, we will keep you as an existing customer. In this case, we will process your postal contact details outside the scope of a specific consent in order to provide you with information about new products and services in this way. From time to time, we will send your postal contact details to selected contractors from the areas of mail order and telecommunication, who will be able to inform you about their products. We process your e-mail address in order to provide you with information for your own, similar products outside of the availability of a specific consent.
If you order the Goldmedia Newsletter, we will collect and save your e-mail address, the time of the order and the date of the order confirmation. The storage and use of this data is exclusively for the sending of the newsletter.
Legal basis for the processing of the data after registration for the newsletter by the user is in the presence of a consent of the user Art. 6 (1) (a) GDPR.
The collection of the user's e-mail address serves to deliver the newsletter. The collection of other personal data in the context of the registration process is intended to prevent misuse of the services or used e-mail address.
On our website, contact via the provided e-mail address is possible. In this case, the user's personal data transmitted by e-mail will be stored. In this context, it does not pass on the data to third parties. The data is used exclusively for processing the conversation.
The legal basis for the processing of the data transmitted in the course of sending an e-mail is Article 6 (1) (f) GDPR. If the e-mail contact aims to conclude a contract, then additional legal basis for the processing is Art. 6 (1) (b) GDPR.
In the case of contact via e-mail, this also includes the required legitimate interest in the processing of the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
The user has the possibility at any time to revoke his consent to the processing of the personal data. If the user contacts us by e-mail, he may object to the storage of his personal data at any time. In such a case, the conversation can not continue. You can declare the revocation of the consent and the revocation of the storage at any time electronically by mail or in writing. All personal data stored in the course of contacting will be deleted in this case.
You can prevent the installation of cookies by setting the browser software accordingly; however, we point out that in this case not all features of this website may be fully exploited. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing this browser add-on.
As an alternative to the browser add-on or within browsers on mobile devices, please click this link to prevent the collection by Google Analytics within this website in the future (the opt-out works only in this browser and only for this domain). An opt-out cookie is stored on your device. If you delete your cookies in this browser, you must click this link again.
For more information about privacy in connection with Google Analytics, visit the website of Google Analytics.
We do not share your information with recipients based outside the European Union or the European Economic Area, except for the procedures described in the Social Plug-ins and Google Analytics. The processing operations, described here in paragraph 10.1., cause the data to be transmitted to the servers of the providers of tracking or targeting technologies commissioned by us. These servers are located in the USA. The data are transmitted according to the principles of the so-called Pricavy Shield and on the basis of so-called standard contractual clauses of the European Commission.
All personally transmitted data, including your payment data, will be transmitted using the common and secure SSL (Secure Socket Layer) standard. SSL is a secure and proven standard, e.g. is also used in online banking. You will see a secure SSL connection, including the attached s at the http (ie ...) in the address bar of your browser or the lock icon at the bottom of your browser.
We use appropriate technical and organizational security measures to protect your personal data stored against us against manipulation, partial or complete loss and against unauthorized access by third parties. Our safety measures are constantly being improved in line with technological developments and are certified.
(2) You revoke your consent, to which the processing acc. Art. 6 (1)(a) or (9) (2) GDPR and there is no other legal basis for processing.
(3) According to Art. 21 (1) GDPR objection to the processing and there are no prior justifiable reasons for the processing, or you appeal to processing acc. Art. 21 (2) GDPR.
(5) The deletion of personal data concerning you shall be required to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject. (6) The personal data concerning you were collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.
You have the right at any time, for reasons that arise from your particular situation, against the processing of your personal data, which pursuant to Art. 6 (1) (e or f) GDPF takes an objection; this also applies to profiling based on these provisions.
(3) with your express consent. However, these decisions must not be based on special categories of personal data under Art. 9 (1) GDPR, unless Art. 9 (2) (a or g) and reasonable measures have been taken to protect the rights and freedoms and your legitimate interests.
The website uses newsletter tracking. Here is simply stored, how many and which links / contents were clicked in the newsletter. In bounce handling (management of returns), e-mail addresses and - if available and entered in the data sets - name of the unreachable recipients in our bounce mailbox and in TYPO3 are collected and listed. The data is deleted regularly.
We use a blog (www.goldmedia.com/blog) with comments. Here additional personal data (example: pseudonyms) are stored. You have the option to subscribe to and submit comments. By writing comments on our blog, you consent to us processing your personal information in this context. The legal basis is in Art. 6 (1) (a) GDPR. Your comment may be deleted if you let us know.
The search function on the website www.Goldmedia.com also logs IP addresses. Currently, the data can not be technically anonymized. If you do not agree, please do not use the search function on www.Goldmedia.com.
We use social plug-ins from Facebook, Linked-In, Google+ and Xing on our website based on Article 6 (1) (f) of the GDPR to make our company better known. The commercial purpose is to be regarded as a legitimate interest within the meaning of the GDPR. Responsibility for the operation compliant with data protection is to be guaranteed by their respective providers. The integration of these plug-ins by us takes place in the way of the so-called two-click method, in order to protect visitors of our website in the best possible way.
On our website so-called plug-ins of the social network Facebook are used, which is offered by the Facebook Inc. The Facebook plug-ins are marked with a Facebook logo or the addition "Like" or "Share". An overview of the Facebook plug-ins and their appearance can be found at the following link. If you activate such a plug-in (first click), your browser connects directly to the Facebook servers. The content of the plug-in is transmitted by Facebook directly to your browser and integrated into the page. By this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are currently not logged in to Facebook. This information (including your IP address) will be transmitted from your browser directly to a Facebook server in the US and stored there. If you are logged in to Facebook, Facebook can immediately assign the visit to our website to your Facebook profile. If you interact with the plug-ins, for example by clicking the "Like" button, this information will also be transmitted directly to a Facebook server and stored there. The information will also be posted on your Facebook profile and displayed to your Facebook friends.
Our website uses plug-ins from the social network Twitter, which Twitter Inc. is offered. The Twitter plug-ins are marked with a Twitter logo. The Twitter logo is a blue or white bird on a white or blue background. If you activate such a plug-in (first click), your browser connects directly to the servers of Twitter. The content of the plug-in is transmitted by Twitter directly to your browser and integrated into the site. By this integration, Twitter receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Twitter profile or are currently not logged in to Twitter. This information (including your IP address) is sent from your browser directly to a Twitter server in the United States and stored there. If you are logged in to Twitter, Twitter can immediately assign the visit to our website to your Twitter profile. When you interact with the plug-ins, this information is also sent directly to a Twitter server and stored there. The information will also be posted on your Twitter profile and displayed to your Twitter contacts.
On our website so-called plug-ins of the social network Google Plus are used, which is offered by Google Inc. The plug-ins are for example on buttons with the sign "+1" on white or colored background recognizable. An overview of the Google plug-ins and their appearance can be found here.
If you enable the plug-in (first click), your browser connects directly to Google's servers. The content of the plug-in is transmitted by Google directly to your browser and integrated into the site. The integration gives Google the information that your browser has accessed the corresponding page of our website, even if you do not have a profile on Google Plus or are currently not logged in to Google Plus. This information (including your IP address) is transmitted from your browser directly to a Google server in the United States and stored there. If you are logged in to Google Plus, Google may immediately associate your visit to our website with your Google Plus profile. If you interact with the plug-ins, for example, pressing the "+1" button, the corresponding information is also transmitted directly to a Google server and stored there. The information will also be published on Google Plus and displayed there to your contacts.
The purpose and scope of the data collection and the further processing and use of the data by Google, as well as your rights in this regard and setting options for the protection of your privacy, can be found in the data protection information provided by Google.
If you do not want Google to immediately associate information collected about your visit to our site with Google Plus, you must log out of Google Plus before visiting our website. You can completely prevent the Google plug-ins from loading even with add-ons for your browser, such as: Eg with the script blocker "NoScript".
Our website uses plug-ins from the LinkedIn social network, which is offered by LinkedIn Corporation. The plug-ins are z. B. on buttons with the character "in" recognizable on a white or colored background.
For information on the purpose and scope of the data collection and the further processing and use of the data by LinkedIn, as well as your rights in this regard and setting options for the protection of your privacy, please refer to the data protection information provided by LinkedIn.
If you do not want LinkedIn to directly associate information collected about your visit to our website with LinkedIn, you'll need to log out of LinkedIn before visiting our website.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 21
 Art. 8
 Art. 6
 Art. 9
 Art. 9
 Art. 6