Source: https://www.bookwire.de/en/data-privacy/
Timestamp: 2019-04-19 07:09:59+00:00

Document:
Thank you for visiting our website. Protecting your privacy is very important to us. You will find information below about how we process your personal data on our website. You can visit our website and look through what we have to offer, without providing any personal information.
You can visit our website without providing any personal information.
We collect and store data anonymously for marketing and optimisation purposes, as well as to guarantee system security and to prevent misuse. This data includes, for example, your IP address, the internet browser used, the website from which you reached our site, the offers you have looked at on our website and the date and duration of your visit. A usage profile is created from this data, under a pseudonym. The data is not allocated to a specific person. Cookies can be used for this (see above). The usage profile is not associated with personal data. It is only used for statistical evaluations to optimise what we offer.
We use log files to safeguard legitimate interests, to analyse use of our website and to make the website user-friendly, as well as to guarantee system security and to be able to trace misuse. Data in log files is stored for a maximum of one week, together with full IP addresses that allow specific internet users to be identified. The legal basis for processing is Art. 6(1)(f) GDPR.
Our website uses Google Analytics, a web analysis service from Google Inc. (“Google”). Google Analytics uses “cookies”. Cookies are text files that are saved on your computer and enable your use of the website to be analysed. The information generated by the cookie about your use of this website is normally transferred to a Google server in the USA, where it is saved. However, if IP anonymization has been activated on this website, Google will first abbreviate your IP address within the Member States of the European Union or in other EEA states. Only in exceptional cases is the full IP address transferred to a Google server in the USA and abbreviated there. Google will use this information, on behalf of the operator of this website, to evaluate your use of the website, to compile reports about website activities and to provide the website operator with additional services associated with website and internet use. Google does not associate with other data the IP address sent by your browser as part of Google Analytics. You can prevent cookies from being stored by making the relevant setting in your browser software. However, we would like to point out that you might then not be able to use all of the functions of this website. You can also prevent data generated by the cookie that relates to your use of the website (incl. your IP address) from being sent to Google and from being processed by Google, by downloading and installing the browser plugin available at the following link (https://tools.google.com/dlpage/gaoptout?hl=en).
You can prevent recording by Google Analytics by clicking the following link. An opt-out cookie will be used to prevent your data from being recorded when you visit this website in future: Deactivate Google Analytics You can find more detailed information about conditions of use and privacy at https://www.google.com/analytics/terms/us.html or https://policies.google.com/?hl=en. We would like to draw your attention to the fact that Google Analytics has been expanded on this website with the code “gat._anonymizeIp();” in order to guarantee that IP addresses are recorded anonymously (“IP masking”).
We use Google Analytics to safeguard legitimate interests, to analyse use of our website and to make the website user-friendly. The legal basis for processing is Art. 6(1)(f) GDPR. Google is certified in accordance with the “EU-US Privacy Shield” agreement. This guarantees an appropriate level of privacy.
We process personal data when Bookwire sets up a customer account for you (business customers), if you send us a message using the contact form, or if you redeem a code for downloading an eBook via our website.
If you set up a customer account for using the MACS platform, your name and contact details will be collected. We process this data in order to communicate with you. The legal basis is Art. 6(1)(b) GDPR.
If you contact us by email or using the contact form, we process the data you provide, in order to deal with your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures).
With your consent, we process the data that you have been asked to provide (email address, download code and, if applicable, choice of file format) and the time of redeeming the download code, as well as more voluntary information about you, if applicable. We process the email address in order to send the email containing the personal download link. The legal basis is Art. 6(1)(a) GDPR (consent of the data subject).
We record data for statistical purposes during the download (see 2, above). This data is recorded anonymously and not classified as belonging to you.
We process personal data in the context of the regulatory provisions for safeguarding legitimate interests. This includes customer care and direct marketing, as well as asserting claims. The legal basis is Art. 6(1)(f) GDPR.
We delete your data if it is no longer necessary once your enquiry has been dealt with or the contract has ended. This does not include data that we are not yet permitted to delete because of a statutory obligation (e.g. documents that must be kept pursuant to tax and commercial law), and data that we need in order to safeguard legitimate interests, in particular to assert claims or for direct marketing.
In addition to Google Analytics (see 2.3), we also use the following service providers that are given access to personal data as part of their activity. These service providers work for us in the framework of order data processing and do not process personal data for their own purposes.
• We use the CRM system from “Salesforce” for administration of address data. It is provided by salesforce.com, inc., One Market Street, San Francisco, CA 94105, USA. salesforce.com, inc. is certified in accordance with the “EU-US Privacy Shield” agreement. This guarantees an appropriate level of privacy.
• Our website is hosted by domainfactory GmbH, Oskar-Messter-Str. 33, 85737 Ismaning, Germany.
• If it is necessary for fulfilling our contractual obligations, in particular, disclosure to the instructed bank for invoicing. The legal basis in this case is Art. 6(1)(b) GDPR.
•If it is necessary for safeguarding legitimate interests. Our legitimate interests include, in particular, assertion of claims. The legal basis in this case is Art. 6(1)(f) GDPR.
• To comply with a statutory obligation, e.g. in respect of the tax authorities. The legal basis in this case is Art. 6(1)(c) GDPR.
• You have the right to receive information about the personal data stored about you (Art. 15 GDPR).
• You have the right to request correction of incorrect data (Art. 16 GDPR).
• You have the right to request deletion (Art. 17) or restricted processing (Art. 18 GDPR) of data that is no longer required. If statutory retention obligations exist, e.g. for business correspondence pursuant to commercial and tax law, or if another statutory exemption exists, data will not be deleted, but its processing will be restricted.
• You have the right to data portability (Art. 20 GDPR), i.e. the right to request the data that you have made available to us, in a structured, common and machine-readable format, and to transmit this data to another data controller without obstruction by us. If applicable, you also have the right to request that we transmit data straight to another data controller, providing that this is technically feasible.
You can object at any time to processing of your data for direct advertising. You can also object to other processing of your data for specific reasons (Art. 21 GDPR).
To exercise your rights, please contact the address given under point 1.
If you consider that the processing of your data breaches data protection laws, you can appeal to a regulatory body (Art. 77 GDPR). The regulatory body responsible for our area is: Der Hessische Datenschutzbeauftragte, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Tel.: + 49 (0) 611-1408 0, Fax: + 49 (0) 611-1408 611, email: poststelle@datenschutz.hessen.de.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6