Source: https://www.sz-archiv.de/diz-muenchen/privacy
Timestamp: 2019-04-26 01:50:13+00:00

Document:
1.	Contact form by post, Email etc.
If you use an offer of DIZ München GmbH (archive and content service provider of SZ and SWMH), we process personal data. This may be when using our websites or databases, when ordering our products or when we communicate with each other. At this point we would like to explain how we protect your data.
The data will remain confidential and will only be processed for the purpose that we inform you of when collecting the data. Your data will only be processed in accordance with the legal data protection regulations. The provisions of the General Data Protection Regulation (GDPR) are the benchmark. We protect your data with the help of technical and organizational measures against manipulation, loss, destruction or access by unauthorized persons. These measures are regularly reviewed and adjusted.
In principle, we process personal data if this is necessary for the provision of a functioning service or offer.
For a more uniform and transparent depiction, we have presented the information on the type, scope and purpose of data processing in the respective chapters. You will also find the legal basis and information on the storage period. If a transfer to third parties or to so-called third countries takes place, we mention such a transfer in the respective chapter.
When data is transferred outside the European Union, the high European level of data protection does not exist in principle. In the case of a transmission, it may be that there is currently no adequacy resolution of the EU Commission within the meaning of Art. 45 para. 1, 3 GDPR.
You can use our digital offers at any time with or without registration, depending on the offer. This applies to our websites and the databases of our company. For special offers such as SZ AboArchiv, SZ Archiv for schools, Onlinearchiv Stuttgart, LibraryNet, medienport.de, Corporate E-Paper, SZ Photo or Timeline Images a registration is required.
Used operating system Evaluation of devices to ensure optimized presentation of the website Contract initiation or contract according to Art. 6 Par. 1 P.1 lit. b GDPR. The data will be deleted if they are no longer necessary to ensure proper operation. The IP address is deleted after 10 days.
Information about the type of browser and the version used Evaluation of the browsers used to optimize our websites for this purpose Contract initiation or contract according to Art. 6 Par. 1 P.1 lit. b GDPR. The data will be deleted if they are no longer necessary to ensure proper operation. The IP address is deleted after 10 days.
Internet service provider of the user Evaluation of the internet service provider Contract initiation or contract according to Art. 6 Par. 1 P.1 lit. b GDPR. The data will be deleted if they are no longer necessary to ensure proper operation. The IP address is deleted after 50 days.
IP address Display of the website on the respective device Contract initiation or contract according to Art. 6 Par. 1 P.1 lit. b GDPR. The data will be deleted if they are no longer necessary to ensure proper operation. The IP address is deleted after 10 days.
Date and time of access Ensuring the proper operation of the website. Contract initiation or contract according to Art. 6 Par. 1 P.1 lit. b GDPR. The data will be deleted if they are no longer necessary to ensure proper operation. The IP address is deleted after 10 days.
If applicable, manufacturer and type designation of the smartphone, tablet or other devices Evaluation of the device manufacturers and types of mobile terminals for statistical purposes Contract initiation or contract according to Art. 6 Par. 1 P.1 lit. b GDPR. The data will be deleted if they are no longer necessary to ensure proper operation. The IP address is deleted after 10 days.
Log files Ensuring the proper operation of the website Contract initiation or contract according to Art. 6 Par. 1 P.1 lit. b GDPR. The data will be deleted if they are no longer necessary to ensure proper operation. The IP address is deleted after 10 days.
This data is technically necessary for us to display our websites to you and to ensure stability and security. Since we can thus offer protection against misuse in particular, we have come to the conclusion that this data can be processed – with a guarantee of data security oriented to the state of the art – whereby your interest in data protection-compliant processing is appropriately taken into account. The data is also stored in the log files of our system. This data is not stored together with other personal data of yours.
The data is deleted when it is no longer necessary to ensure proper operation. The IP addresses are usually deleted after ten days. Since the collection of data for the provision of the websites and databases and the storage of data in log files is absolutely essential for the operation of the website, you have no possibility of objection.
A distinction is made: (i) technically necessary cookies, (ii) cookies for range measurement, (iii) tracking tools for usage analysis, (iv) tracking tools for usage-based online advertising (OBA).
Technically necessary cookies are not absolutely necessary to display the website. However, some functions, such as lightbox, contact form, use of databases, etc. cannot be used properly or not at all without these cookies. Consequently, there is no possibility for the user to object; these cookies can be deactivated by setting the respective browser.
In the usage analysis, we collect information about how our website is used, e.g. website visits.
We use market-standard technology to further develop our site and offers according to your usage habits. For example, Google Analytics – with this service we can see which topics on our site are relevant for you or how, for example, you feel about our navigation.
We use Google Analytics. Google evaluates the use of the website in order to compile reports on the website activities for us.
We do not store any information that allows the user to be identified. The information collected is exclusively aggregated and thus evaluated anonymously.
Our database service providers Picturemaxx AG and APA-IT Informations Technology GmbH record your downloads / content retrievals if you are logged in to ensure correct billing.
The same applies to your search queries and the use of the database interfaces. We use this information to improve metadata and to expand our database stock with searched content and to optimize the database interfaces.
We use Embeds, i.e. embeddings of content, for example from OpenStreetMap, to show you maps. Technically, this is done by framing, a playback frame in which the content is displayed by simply inserting a provided HTML link into the code of our websites. Once the site is accessed, Embeds providers may send tracking information and set cookies.
You can register via the registration form on our website to get access to the respective archive database. Registration is required for both free and paid subscriptions.
The legal basis for the processing of all data that you deposit in your account is Art.6 Para. 1 P.1 lit. b GDPR. You can have your account deleted if you no longer need it. You will then no longer be able to use any digital services that require registration. If you want to register for an account again later, this is possible at any time.
Upon termination of the contract, we will delete or block your data, unless we are legally obliged to store this data. Deletion usually takes place after ten years at the latest. Automated decision making, including profiling, does not take place.
Your data will also be passed on to our billing, hosting, payment and collection service providers, such as our accounting and database service providers, who support us in the fulfilment of contracts and customer service, among other things. We contractually oblige them neither to use your data for their own purposes nor to pass it on to others, and regularly check compliance with data protection regulations.
If we request and receive your data via a special contract, we will use it for the same purposes and under the same conditions as described above.
Registration for the products SZ Archiv for schools, LibraryNet, medienport.de, Corporate E-Paper is carried out by us within the framework of the conclusion of the contract.
When you register with us, we collect your billing address (company name, street/house number, postcode, city, country) and voluntarily, your company name, department, telephone number, VAT ID of your company, and SZ subscription number. We need this data to be able to issue you with a proper invoice later. In addition, we request personal data (title, first name, surname, email, user name, password) and voluntarily, contact person -first name, -last name, -email, -phone. We need this information so that we can create access to the database and contact you. You can subscribe to our newsletter voluntarily. In concluding the contract, you confirm that you have read and understood our Data Protection Provisions and have accepted our General Terms and Conditions.
The legal basis for the processing of all data that we store for you in your account is Art.6 Para. 1 P.1 lit. b GDPR.
You can have your account deleted if you no longer need it. You will then no longer be able to use any digital services that require registration. If you want to register for an account again later, this is possible at any time.
You can register via the registration form on our pages and use the „light table“ function for the collection of images. After verification and activation, you will also have the option of downloading images via the shopping cart.
The legal basis for the processing of all data that you deposit in your account is Art.6 Para. 1 P.1 lit. b GDPR.
At Timeline Images: You can register via the registration form „Bilderhochladen“ on our pages and upload and sell images to our photo community. To register, enter your login information (username: this name will also appear on your images, email address and password).
In addition, we need your address (title, first name, surname, street/house number, postcode, city and country) for the conclusion of the contract. The legal basis of the processing is the initiation or performance of the contract (Art. 6 para. 1 lit. b GDPR).
You can voluntarily enter your account data (name of account holder, tax number, IBAN, BIC) here. We need this information so that we can pay your fee as soon as one of your images is sold.
You can have your digital account deleted if you no longer need it. You will then no longer be able to use any digital services that require registration. If you want to register for a digital account again later, this is possible at any time.
A legally compliant integration of social media plugins or social media buttons is the so-called „Shariff“ solution. This is a further development of the so-called „2-click“ solution. With the Shariff solution, a script retrieves how often a page has already been shared or tweeted. It contacts these services via the programming interfaces (APIs) and retrieves the data. The query is therefore made from the server; instead of the visitor’s IP address, only the server address is transmitted to Facebook, Google or Twitter. Users are only directly connected to Facebook, Google or Twitter when they become active. Before that, social networks cannot collect data about them. This means: As long as the user does not click on the link to share content, he remains invisible to Facebook, Google or Twitter, i.e. no data is processed by the social networks mentioned. If the user clicks on the link, however, the obligation to inform about data collection and processing is no longer with DIZ München GmbH, but with the operator of the social network.
You can license individual articles or information graphics from the SZ for use in your analog or digital publication or acquire data supplies from various publications for regular use on your website or in your intranet or for media monitoring..
Invoice address (street/house number, postcode, city, country). In addition, we request personal data (title, first name, surname, email and voluntarily, telephone number). We need this information so that you can contact us.
The legal basis for the processing of all data that you deposit in your account is Art.6 Para. 1 S. 1 lit. b GDPR.
We evaluate how many newsletters were opened and which links were clicked on.
You can object to this at any time by clicking on the corresponding link at the end of the newsletter or by contacting us – however, you will then no longer receive the newsletter.
Your data will be passed on to our hosting service providers for newsletter management. The legal basis for the aforementioned data processing operations are Art. 6 para. 1 sentence 1 lit. a GDPR and Art. 6 para. 1 sentence 1 lit. b GDPR.
We use your e-mail addresses beyond the contractual use if you have consented and/or in the context of customer relationship for direct advertising for similar products and services from our portfolio (Art. 6 Para. 1 Sentence 1 lit. a, lit. b, or lit. f GDPR). You will receive this information from us irrespective of whether you have subscribed to a newsletter or not.
Your personal data will be passed on to our newsletter service providers for the aforementioned advertising purposes.
We only use your telephone contact data for advertising purposes for our own and related products if you have expressly consented or if we are legally entitled to do so (Art. 6 Para. 1 Sentence 1 lit. a or lit. f GDPR).
We can exchange information and documents (e.g. contract correspondence, billing and receivables documents, etc.) for contract performance, contract execution, contract maintenance and contract analysis by telephone and in writing, but also electronically, e.g. by email.
You can contact us via our e-mail address or the contact form. We will use the personal data transmitted to us in this way for contract fulfilment, contract execution, contract maintenance and contract analysis.
You have the possibility to contact us by phone. We will use the personal data transmitted to us in this way for contract fulfilment, contract execution, contract maintenance and contract analysis.
As standard, products and services you purchase from us are paid by bank transfer after the invoice has been issued.
In exceptional cases, payment can be made by credit card or Paypal order at your request.
We will then pass on your payment data to the commissioned credit institution or the respective payment service provider as part of the processing of payments.
Your credit card data will be processed for payment processing by the following office: Heidelberger Payment GmbH, Vangerowstrasse 18, 69115 Heidelberg, Germany. We would like to point out that Heidelberger Payment GmbH will pass your personal data on to other parties necessary for processing the transaction, in particular the participating banks, credit card institutions, HPC GmbH, Vangerowstraße 18, 69115 Heidelberg, PAY.ON AG, Lucile-Grahn-Straße 37, 81675 Munich and HUELLEMANN & STRAUSS ONLINESERVICES S.à r.l. 1, Place du Marché, L-6755 Grevenmacher,R.C.S. Luxembourg B 144133, where your personal data will also be processed.
Billing data may be transferred to third parties if this is necessary for the purpose of debt collection. In this context, we reserve the right in particular to assign our claim to a collection agency or to instruct such an agency to collect our claim. We also reserve the right to send information about outstanding payments to credit agencies. Of course, this will always be done in strict compliance with legal regulations.
In case of a Paypal payment we may see your data in our Paypal account.
(8)	the existence of automated decision-making including profiling in accordance with Art. 22 para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.
(4)	if you have filed an objection to the processing pursuant to Art. 21 para. 1 GDPR and it has not yet been determined whether the legitimate reasons of the person responsible outweigh your reasons.
(1)	The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
(2)	You revoke your consent, on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, and there is no other legal basis for the processing.
(3)	You file an objection against the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate reasons for the processing, or you file an objection against the processing pursuant to Art. 21 para. 2 GDPR.
(4)	The personal data concerning you have been processed unlawfully.
(5)	The deletion of personal data relating to you is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the data controller is subject.
(6)	The personal data concerning you were collected in relation to information society services offered pursuant to Art. 8 para. 1 GDPR.
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you under Art. 6 par. 1 lit.e or f GDPR; this also applies to profiling based on these provisions.
(3)	with your express consent.
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or suspect of infringement, if you believe that the processing of personal data concerning you is contrary to the GDPR. The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.
We will contact you in different situations (e.g. order form, telephone etc.). In these situations, we always fulfil our data protection obligations to you in a reduced form in accordance with the GDPR. In all situations we will provide you with a link where you can find „Detailed information on data protection and information obligations“. We will explain this to you in the following lines.
Service providers in the areas of billing, hosting, logistics, etc.
We will delete your personal data upon termination of the contract, unless there are legal storage obligations to the contrary. Deletion usually takes place after ten years.
This processing is based on your consent pursuant to Art. 6 para. 1 sentence 1 lit. a) GDPR, if you have granted it. For the purpose of proof of your consent we process according to Art. 6 para. 1 lit. c) in connection with Art. 7 para. 1 GDPR.
If we are legally entitled to use your personal data for the aforementioned advertising purposes, we base the processing of your data on Art. 6 para. 1 sentence 1 f) GDPR, i.e. on a so-called legitimate interest. From our point of view, our interest in an advertising use prevails if this is permissible within the narrow legal limits, in particular the law against unfair competition (UWG).
You have also already been informed that your personal data will also be passed on by us for contact (advertising purposes). In order to give you the greatest possible transparency in handling your personal data, you will find further information in our data protection declaration.
Your personal data for contacting us will be deleted regularly after 2 years if your consent has not been processed by us by then.
If you object to the processing, revoke your consent or the legal requirements for an advertising approach are no longer met, your data will no longer be used by us for advertising contact. Your data will be kept for another three years for verification purposes and then deleted.
The provision of your personal data is neither required by law nor by contract. Automated decision making, including profiling, does not take place.
We would like to point out that you have the right to information (Art. 15 GDPR), correction (Art. 16 GDPR), cancellation (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data transferability (Art. 20 GDPR) and a right of objection against processing (Art. 21 GDPR).
Since we also use your personal data for advertising purposes on the basis of a so-called legitimate interest, we would like to point out your associated right of objection separately. In the event of your objection, we will no longer process your personal data unless we can prove compelling grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising pursuant to Art. 21 para. 2 GDPR. In the event of your objection to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
In addition, you have a right of appeal to the competent supervisory authority (Art. 77 GDPR). You also have the right to revoke your consent at any time without this affecting the legality of the processing based on the consent until your revocation.
We would like to point out that this data protection declaration and the information obligations under the GDPR that it fulfils apply exclusively to the offers of Dokumentations- und Informationszentrum München GmbH.
Please also note the data protection information in our General Terms and Conditions, which you can view here. There we treat in particular the processing of your personal data, which we need for the execution of the contracts.
Our websites may contain links to websites of other providers. We have no influence on and do not control that other providers comply with the applicable data protection regulations.
We reserve the right to change or adapt this data protection declaration at any time in compliance with the applicable data protection regulations.
The DIZ München GmbH maintains appearances in „social media“. Insofar as we have control over the processing of your data, we ensure that the applicable data protection regulations are observed.
Below you will find the most important information on data protection law with regard to our corporate presences.
However, you use these platforms and their functions under your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating).
We would also like to point out that your data may be processed outside the European Union. With regard to the US providers that are certified under the „Privacy Shield“, we would like to point out that these providers thereby undertake to comply with the data protection standards of the EU.
We ourselves maintain the fan pages in order to communicate with the visitors of these pages and to inform them about our offers.
In addition, we collect data for statistical purposes in order to further develop and optimise the content and to make our services more attractive. The data required for this (e.g. total number of page views, page activities and data provided by visitors, interactions) is processed and made available by the social networks. We do not have any influence on the generation and presentation.
In addition, your personal data will be processed by social media providers for market research and advertising purposes. For example, it is possible that user profiles are created based on your usage behaviour and the resulting interests. This may result in advertisements being placed inside and outside the platforms that are presumed to correspond to your interests. Cookies are usually stored on your computer for this purpose. Irrespective of this, data that is not collected directly from your end devices can also be stored in your user profiles. This applies in particular, but not exclusively, if you are registered as a member and logged on to the respective platforms.
In addition, we do not collect and process none of or the following personal data [: Information on type of data and type, scope and purpose of processing].
The processing of your personal data by DIZ München GmbH is based on our legitimate interests in effective information and communication pursuant to Art. 6 Para. 1 Sentence 1 lit. f. GDPR.
In total, you have the following rights with regard to the processing of your personal data: Right of access; right to rectification; right to cancellation; right to limitation of processing; right to opposition; right to data transfer; right to complain about unlawful processing of your personal data to the competent data protection authority.
However, since DIZ München GmbH does not have complete access to your personal data, you should contact the social media providers directly when asserting your claim, as they each have access to the personal data of their users and can take appropriate measures and provide information.
Should you nevertheless need help, we will of course try to support you. Please contact us at datenschutz@diz-muenchen.de.
Should you wish to publish pictures, texts, plans, videos, music etc. on our website, you should be aware that you may assign all rights of use to the network, which could ultimately have legal consequences for you if you are not the author or rights owner yourself.

References: Art. 45
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art.6
 Art.6
 Art.6
 Art.6
 Art. 6
 Art. 6
 Art. 22
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 6
 Art. 6
 Art. 6
 Art. 7
 Art. 6
 Art. 21
 Art. 6