Source: https://www.arvato.com/en/about/privacy-policy.html
Timestamp: 2019-04-19 07:02:45+00:00

Document:
01. Who is accountable for processing my personal data?
02. What data is collected?
03. What cookies are used?
04. What data is collected and for what purpose?
05. Who comes into possession of my personal data?
06. Is my personal data processed outside of the EU or EEA (‘transfer to a third country’)?
07. What data privacy rights do I have?
08. To what extent does automated decision-making take place?
Who is accountable for processing my personal data?
The subsidiary companies are responsible for the processing of your personal data on these subdomains. Detailed information on the subsidiary companies can be found in the website credits.
When you visit our website, the data of the computer you use to access our website is automatically logged (“access data”). This access data includes server log files that generally consist of information pertaining to your web browser type and version, your operating system, your internet service provider (ISP), the date and time you used the website, the websites previously visited by you and the websites you accessed from our website, in addition to the IP address of your computer. With the exception of your IP address, the information contained in the server log files is not personally identifiable. An IP address is personally identifiable when it is static (permanently allocated when using internet access) and the ISP is able to attribute it to a specific person.
As a general principle, cookies enable online recognition without reference to a specific person. Cookies may become personally identifiable when the information they contain is merged with other information apart from the information generated by the cookies themselves. Here a distinction is made between cookies that are necessary for the provision of website features, and cookies that are required for other purposes, e.g. analysis of user behaviour or displaying advertising-related content.
Cookies that are needed for other purposes of the website include analytics cookies to record the usage behaviour of our users and evaluate it in the form of statistics (e.g. advertising banners clicked, sub-pages visited, search queries conducted).
What data is collected and for what purpose?
The purpose of data processing may be based on technical, contractual or statutory requirements or result from consent having been given by the user.
In order to enable the proper functioning of our website, security analyses to be conducted, and denial-of-service attacks to be prevented and stopped, server log files are automatically collected and saved on a short-term basis as an integral part of access data that is created by the system of the visiting computer upon accessing our website and while using it (see section 2). The content of the server log files is not merged with other data. We use the server log files for statistical analyses to troubleshoot and remedy technical issues, prevent and defend against denial-of-service attacks and attempted fraud, and to optimize the proper functioning of our website.
The legal basis for the creation of server log files follows from Art. 6(1)(f) GDPR. Our legitimate interests lie in the proper functioning of our website, conducting security analyses and defending against threats.
On our website you have the option of contacting us by way of a contact form, by email, by telephone or by chat using the designated email address and phone number. If you take advantage of this option, the information you enter in the contact form, your email address and/or your phone number are disclosed to us. Depending on the reason you are contacting us (questions about our products and services, pursuing your rights as a data subject, e.g. submitting a request for information) your contact details are processed (with the assistance of service providers). If necessary for processing your request, this information may be shared with third parties (e.g. partner companies).
Your contact details are deleted once your request has been processed and further communication has been discontinued. This does not apply if the purpose of your establishing contact with us is to conclude a contract or you wish to exercise your right as a data subject (e.g. request information). In this case your details are stored until all contractual and/or statutory obligations have been fulfilled and statutory retention periods (currently 6 to 10 years) do not prevent this information from being deleted.
You have the right to lodge an objection to the processing of your contact information provided that there are cogent reasons that arise from your specific situation. If you would like to exercise your right to lodge an objection, please write to the contact address in section 1. If you lodge an objection, communication with you cannot be continued. This does not apply if the storage of your contact details is necessary for completing precontractual procedures, fulfilling a contract or exercising your rights as a data subject.
On the website you have the possibility of asserting your rights as a data subject, e.g. request information on your personal information that is currently stored by us. In order to assert your rights as a data subject, it may be necessary that you provide information to Bertelsmann and/or its subsidiaries pertaining to your person and the specific information that has been processed. Without providing this information, Bertelsmann and/or its subsidiaries are not able to cater to your rights as a data subject.
The legal basis for processing your personal information in asserting your rights as a data subject follows from Art. 6 (1) point c GDPR, “Complying with a legal obligation”.
Bertelsmann and/or its subsidiaries store(s) the correspondence exchanged with you in relation to your asserting your rights as a data subject for a period of three years. This does not apply to information obtained to clarify your identity, e.g. by way of a labeled photocopy of your personal identity card, where Bertelsmann and/or its subsidiaries have been provided one. It will be deleted within one week at the latest of establishing your identity.
The processing of your information is required for complying with your rights as a data subject, and to that extent you have no right to revoke your consent to its processing.
Our website uses features to measure and evaluate user behavior and interaction. These features will utilize your access data (see section 2 above) and analyze your interactions with our website by means of tracking cookies (see section 3 above). This kind of analysis does usually not require personal data. Your IP address will therefore be shortened for the last octet what leads to anonymous user profiles which will not be combined with other data we store. Identifiable user profiles will only be created if you have consented to it.
Web tracking is usually conducted by involvement of external providers (Processors). With such processors we have concluded data processing agreements; contracts, which strictly bind them to our instructions and oblige them to process the collected data on our behalf and in a substantially limited way only. Where such a Processor is established outside of the EU, there might occur a so-called third country transfer. This is lawful, if the Processor offers an adequate level of data protection, which can be achieved by different means (additional safeguards). We ensure that every Processor provides at the time of his involvement such a level. Which additional safeguard is applicable respectively, is indicated below.
This website uses Adobe Tag Manager, a service provided by Adobe Systems Software Irland Limited, 6 Riverwalk Naas Road Dublin 24, Ireland (Adobe). Adobe Tag Manager managers „tags“ (placeholder for website code). Adobe Tag Manager does not collect data and data collected by the tags cannot be accessed by the Adobe Tool Manager.
This website uses Google Analytics,a service provided by Google Inc. Google Analytics causes a usage profile to be created in order to optimize the user-friendliness of our website. A pseudonym is assigned to this profile. In so doing, your access data is collected as described in section 2 and your usage behaviour analyzed using analytics cookies as described in section 3. Personal identification is not necessary for web tracking: when collecting your access data your IP address is shortened before being transmitted to Google Inc., meaning no information can be attributed to you. These usage profiles to which pseudonyms are assigned are analyzed for the purpose of optimizing user-friendliness. This data is not merged with other data by Google Inc. We ensure that Google Inc. only uses this data as instructed by us under a contract data processing agreement we have concluded with Google Inc.
This website uses Adobe Analytics, a service provided by Adobe Systems Software Irland Limited, 6 Riverwalk Naas Road Dublin 24, Ireland (Adobe). Adobe Analytics causes a usage profile to be created in order to optimize the user-friendliness of our website. A pseudonym is assigned to this profile. In so doing, your access data is collected as described in section 2 and your usage behaviour analyzed using analytics cookies as described in section 3. Personal identification is not necessary for web tracking: when collecting your access data your IP address is shortened before being transmitted to Adobe meaning no information can be attributed to you. These usage profiles to which pseudonyms are assigned are analyzed for the purpose of optimizing user-friendliness. This data is not merged with other data by Adobe. We ensure that Adobe only uses this data as instructed by us under a contract data processing contract we have concluded with Adobe.
This website uses Adobe Audience Manager, a service provided by Adobe Systems Software Irland Limited, 6 Riverwalk Naas Road Dublin 24, Ireland (Adobe). Adobe Analytics causes the creation of a multi-channel target audience profile, to address the visitors interests. A pseudonym is assigned to this profile. In so doing, your access data is collected as described in section 2 and your usage behaviour analyzed using analytics cookies as described in section 3. Personal identification is not necessary for web tracking: when collecting your access data your IP address is shortened before being transmitted to Adobe meaning no information can be attributed to you. These usage profiles to which pseudonyms are assigned are analyzed for the purpose of catering to the visitors interests. We ensure that Adobe only uses this data as instructed by us under a contract data processing contract we have concluded with Adobe.
The legal basis for collecting and analyzing pseudonym usage profiles follows from Art. 6(1)(f) GDPR / Section 15(3) German Telemedia Act (TMG). We have a legitimate interest in optimizing the user-friendliness of our website and performing marketing reach measurements.
As a general rule, the data that is collected and analyzed in association with Google and Adobe Analytics is retained until you raise an objection to it being used in this manner. Analytics cookies are stored for a maximum of 24 months.
Who comes into possession of my personal data?
No sharing of information with other recipients such as advertising partners, providers of social media services or credit institutions (“third parties”) takes place.
Is my personal data processed outside of the EU or EEA (‘transfer to a third country’)?
You have the right to request access to your personal data that is currently stored by us. If this data is incorrect or not up to date, you have the right to request rectification. You also have the right to have your personal data erased and/or its processing restricted as provided for in Art. 17 and Art. 18 GDPR. You also have the right to request a copy of the personal data provided by you in a structured, commonly-used, machine-readable format (right to data portability).
Pursuant to Art. 21 GDPR, you also have the right for reasons relating to your specific situation to raise an objection to the processing of your data that is done on the basis of Art. 6(1)(f) GDPR. You also have the right to lodge an objection to the processing of your personal information for direct marketing purposes. The same applies to automated processes involving the use of individual cookies, unless they are required for providing the functionality of our website.
To what extent does automated decision-making take place?

References: Art. 6
 Art. 6
 Art. 6
 Art. 17
 Art. 18
 Art. 21
 Art. 6