- 1. Who is accountable for processing my personal data?
- 2. What data is collected?
- 3. What cookies are used?
- 4. What data is collected and for what purpose?
- 5. Who comes into possession of my personal data?
- 6. Is my data processed outside of the EU or EEA (‘transfer to a third country’)?
- 7. What data privacy rights do I have?
- 8. To what extent does automated decision-making take place?
- 9. Is profiling done?
1. Who is accountable for processing my data?Bertelsmann SE & Co. KGaA
33311 Gütersloh, Germany
Phone: +49 (0) 5241-80-0
Fax: +49 (0) 5241-80-62321
Email: Send email
is responsible for processing your data on this website (hereinafter referred to as “we”). We process personally identifiable information (“personal data”) in accordance with GDPR provisions and the German Federal Data Protection Act (BDSG).
You can contact our designated Data Protection Officer at the address indicated above by using the reference ‘For the attention of the Data Protection Officer’ or by writing to: Send email .
2. What data is collected?When you visit our website, the data of the computer you use to access our website is automatically logged (“access data”). This access data includes server log files that generally consist of information pertaining to your web browser type and version, your operating system, your internet service provider (ISP), the date and time you used the website, the websites previously visited by you and the websites you accessed from our website, in addition to the IP address of your computer. With the exception of your IP address, the information contained in the server log files is not personally identifiable. An IP address is personally identifiable when it is static (permanently allocated when using internet access) and the ISP is able to attribute it to a specific person.
Some features of our website require that you divulge personal information to us. In this case, the information provided by you is used to provide the service requested by you or process a matter submitted by you (e.g. search queries, entries made in forms or contracts, click data).
As a general principle, cookies enable online recognition without reference to a specific person. Cookies may become personally identifiable when the information they contain is merged with other information apart from the information generated by the cookies themselves. Here a distinction is made between cookies that are necessary for the provision of website features, and cookies that are required for other purposes, e.g. marketing reach measurement, web analysis and market research.
The cookies that are required for the provision of website features include the following in particular:
- Cookies that are used to identify or authenticate the user;
- Cookies used to temporarily store user input (e.g. the content of a shopping cart or online form);
- Cookies used to store user preferences (e.g. search or language settings);
- Cookies that store data to enable the trouble-free rendering of video or audio content.
Cookies that are needed for other purposes of the website include analytics cookies to record the usage behaviour of our users and evaluate it in the form of statistics (e.g. advertising banners clicked, sub-pages visited, search queries conducted).
4. What data is collected and for what purpose?The purpose of data processing may be based on technical, contractual or statutory requirements or result from consent having been given by the user.
We use the data described in section 2 for the following purposes:
- To provide website features and content and ensure technical security in troubleshooting technical issues and also to ensure that unauthorized persons do not gain access to our website systems;
- To conduct marketing reach measurements and web analyses in order to make our website more efficient and interesting for you, and for market research purposes;
- To ensure that the cookie settings selected by website visitors are taken into account;
- For communication, completion of precontractual procedures, and customer care purposes; and
- To send out press releases via email.
4.1 Provision of the website
4.1.1 Description and scope of data processingIn order to enable the proper functioning of our website, security analyses to be conducted, and denial-of-service attacks to be prevented and stopped, server log files are automatically collected and saved on a short-term basis as an integral part of access data that is created by the system of the visiting computer upon accessing our website and while using it (see section 2). The content of the server log files is not merged with other data. We use the server log files for statistical analyses to troubleshoot and remedy technical issues, prevent and defend against denial-of-service attacks and attempted fraud, and to optimize the proper functioning of our website.
4.1.2 Purpose and legal basis of data processingThe legal basis for the creation of server log files follows from Art. 6(1)(f) GDPR. Our legitimate interests lie in the proper functioning of our website, conducting security analyses and defending against threats.
4.1.3 Duration of storage or criteria applied in defining this periodWhen the pages of our website are accessed, information is logged to server log files that are stored on our web server; the IP address contained in them is deleted after 7 days at the latest. No analysis is conducted during this time unless there is a denial of service or other attack.
4.1.4 Options for lodging an objection and having your data removedYou have the right to lodge an objection to the processing of your data contained in the server log files provided that there are cogent reasons that arise from your specific situation. If you would like to exercise your right to lodge an objection, please write to the contact address in section 1.
4.2 Contact form, email and telephone contact information
4.2.1 Description and scope of data processingOn our website you have the option of contacting us by way of a contact form, by email or by telephone using the designated email address and phone number. If you take advantage of this option, the information you enter in the contact form, your email address and/or your phone number are disclosed to us. Depending on the reason you are contacting us (questions about our products and services, pursuing your rights as a data subject, e.g. submitting a request for information) your contact details are processed (with the assistance of service providers). If necessary for processing your request, this information may be shared with third parties (e.g. partner companies).
4.2.2 Purpose and legal basis of data processingThe legal basis for processing your contact details follows from Art. 6(1)(f) GDPR. We have legitimate interests in processing your request and in continued communication. If the purpose for your establishing contact with us is to enter into a contract with our company, the legal basis for processing your contact details follows from Art. 6(1)(b) GDPR.
4.2.3 Duration of storage or criteria applied in defining this periodYour contact details are deleted once your request has been processed and further communication has been discontinued. This does not apply if the purpose of your establishing contact with us is to conclude a contract or you wish to exercise your right as a data subject (e.g. request information). In this case your details are stored until all contractual and/or statutory obligations have been fulfilled and statutory retention periods (currently 6 to 10 years) do not prevent this information from being deleted.
4.2.4 Options for lodging an objection and having your data removedYou have the right to lodge an objection to the processing of your contact information provided that there are cogent reasons that arise from your specific situation. If you would like to exercise your right to lodge an objection, please write to the contact address in section 1. If you lodge an objection, communication with you cannot be continued. This does not apply if the storage of your contact details is necessary for completing precontractual procedures, fulfilling a contract or exercising your rights as a data subject.
4.3 Dispatch of newsletters
4.3.1 Description and scope of data processing
On the website, it is possible to subscribe to newsletters and notifications from the company free of charge via e-mail or SMS. For this purpose, your data from the registration mask on the website will be transmitted to the company and processed further (with the help of service providers) for sending the messages and newsletters. When you register, we will ask for your consent and refer you to this data protection notice. Your data will not be passed on by us to companies outside the group. Your e-mail address or mobile phone number is required in order to receive communications and newsletters. It is also necessary to process your access data in order to be able to prove that you have given your consent. Further data can be provided voluntarily in order to be able to address you personally.
4.3.2 Purposes and legal basis of data processing
Data processing in the context of sending a newsletter is necessary for the transmission of information and communication to you. The legal basis for the processing is your consent to the newsletter dispatch pursuant to Art.6 (1)(a) DSGVO.
We are entitled, even after possible revocation of consent, to store it for 3 years for verification purposes. The legal basis for the (continued) storage of the consent is Art. 6 (1) (c) in conjunction with Art. 5 (1) (a), (2), Art. 7 (1) DSGVO and Art. 6 (1) (f) DSGVO.
4.3.3 Duration of storage or criteria for determining this duration
The data is stored during the subscription to the messages and newsletters. After they have been unsubscribed, the data will be stored for 3 years in order to prove that the Company has obtained your consent for sending the communications and newsletters. The same applies if you have revoked your consent. Your data will then be deleted from our distribution lists or blocked.
4.3.4 Revocation and removal options
You have the following options against the use of your data by us for the purpose of sending the newsletter: If you have given your consent to receive communications and newsletters, you may revoke this consent at any time with future effect by notifying the Company of your revocation via Send email with the subject "Revocation Newsletter". An objection to data processing does not lead to deletion of data that may be retained due to legal obligations.
4.4 Dispatch of press releases
4.4.2 Purpose and legal basis of data processingThe legal basis for processing your data to dispatch press releases is Art. 6 (1) GDPR with reference to Section 7 (2) 3. Act against Unfair Competition. Data entered by you in the registration form is solely used for the dispatch of press releases of the company.
If you are contacted within the scope of our existing business relations or our common business interests processing your data take place persuant Art. 6 (1) (f) GDPR. The legitime legal interest of the company is the continued communication of relevant information of the company.
4.4.3 Duration of storage or criteria applied in defining this periodData is stored for the duration of your subscription of the press releases. If you unsubscribe, the purpose for which they were collected or otherwise processed will no longer apply and your data will be deleted from our mailing list. By cancelling your subscription you revoke your consent or object processing your data. Your data will then be erased or locked from our mailing lists.
4.4.4 Options for lodging an objection and having your data removedIf the data is processed on the legal basis of your consent pursuant to Art. 6 (1) (a) GDPR, you can withdraw consent with effect for the future at any time. The withdrawl is to be sent to Send email with the subject line "revocation of press releases".
If your data is processed on the basis of a legitimate interest pursuant to Art. 6 (1) (f) GDPR, you can object to the processing of your data at any time for reasons arising from your particular situation by sending an e-mail to Send email with the subject line "objection press release". By revoking your consent or object into processing your dara, we will revoke your personal data from our company’s internal mailing list.
4.5.1 Functional CookiesOn our website, we use cookiebot, a webservice developed and administered by Usercentrics A/S, Havnegade 39, 1058 Copenhagen (hereinafter: cookiebot.com). We use this service to collect, store and respect your cookie preferences in compliance with the GDPR. In order to do so, your browser will submit your IP-Address to cookiebot.com and cookiebot.com will assign you a cookie-ID which contain your cookie choices. The legal basis for this processing of personal data is Art. 6 (1) f GDPR, whereas the our legitimate interest is to store your privacy and cookie choices in a format which suits our technical setup. You can find further information, such as your rights as a data subject and information on deletion under: https://www.cookiebot.com/de/privacy-policy/ . You can surpress the aforementioned processing of personal data by deactivating the execution of scripts in your browser or use a script blocker such as: www.noscript.net oder www.ghostery.com .
4.5.2 Consent-based cookiesWe use the following cookies in case you provided us your consent according to art. 6 par. 1 lit. a GDPR. Without your consent, you can access the website without these cookies.
220.127.116.11. Google Analytics and Google Tag ManagerWe use the web analysis services of Google Inc. ("Google") to analyze the use of the websites, in particular: Google Analytics. A cookie is set for this purpose. The information generated by this cookie about your use of this website (including your IP address) is transferred to a Google server in the USA and stored there.
The website uses Google Analytics exclusively with the setting of IP anonymization, so that IP addresses are only processed in a shortened form in order to exclude references to individual website visitors. Through the IP-anonymization on this website, your IP address will be shortened by Google within member states of the EU or in other signatory states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.
Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. Google will not associate your IP address with any other data held by Google. If you provide your consent, you agree to the processing of the data collected about you by Google in the manner and for the purpose described above.
Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of DoubleClick, Google receives the information that you have visited the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will identify and save your IP address.
In addition, DoubleClick's floodlight cookies allow us to understand whether you perform certain actions on our site after you view or click on one of our display/video ads on Google or another platform through DoubleClick (conversion tracking). DoubleClick uses this cookie to understand the content that you have interacted with on our sites so that we can later send you targeted advertisements. For more information about DoubleClick by Google, please visit www.google.de/doubleclick and support.google.com/adsense/answer/2839090 , and for general information about privacy at Google, please visit https://policies.google.com/privacy?hl=en . Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org .
Right of objection: The collection and storage of data by Google Analytics can be objected to at any time with effect for the future. You have the possibility to install a browser plug-in published by Google. This is available for various browser versions and can be downloaded here.
You can object to the use of the aforementioned web tracking services at any time by changing your browser settings and/or clicking the following link to download and install the available browser plug-ins:
Google Analytics: https://tools.google.com/dlpage/gaoptout
You can prevent and object to this tracking procedure in various ways:
- by changing the settings in the cookie settings section of this website;
- by adjusting your browser software settings accordingly, in particular the suppression of third-party cookies means that you will not receive ads from third parties;
- by disabling cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com", https://www.google.de/settings/ads , this setting will be cleared when you delete your cookies;
- by permanently disabling cookies in your Firefox, Internet Explorer or Google Chrome browsers at http://www.google.com/settings/ads/plugin .
Please note that in this case you may not be able to use all functions of this website.
4.6 External services and content on our websiteWe integrate external services and content on our website. If you use one of these services or you are shown the content of third parties, communication data is exchanged between you and the provider of that service or content for technical purposes.
That provider may use your data for their own purpose. To the best of our knowledge and belief, we have configured the services or content of third-party providers who are known to use data for their own purposes so that communication for purposes other than rendering their content or services on our website is prevented or communication does not come about unless you actively decide to use the service. However, since we have no control over the data collected by third parties and its processing by them we are unable to make any binding statements pertaining to the purpose and scope of the processing of your data.
- YouTube (videos)
- Google Maps
4.7 Processing of your data by using a Connector ID (C-ID)
4.7.1 Creation of the Connector ID (mutual responsibility)As long as you have given C-ID online consent according to cypher 18.104.22.168, we transfer the Cookie-ID, the IP address gathered while placing the cookie, and device information to the Bertelsmann Data Services GmbH, Carl-Bertelsmann-Str. 270, 33311 Gütersloh („BDS“). BDS processes this data to generate a unique Connector-ID („C-ID“). Subsequently, this data is deleted by BDS. The C-ID is an indicator allowing the respectively involved Bertelsmann business unit to determine which data base of the other involved Bertelsmann business units contains an existing person saved in their own data base.
Moreover, we transmit the ID (Customer-ID) that we have allocated to your data set to our data catalog, as well as, an anonymized data catalog to BDS. The anonymized data catalog consists of aggregated, non-personal information on data saved in our customer data base (“anonymous data catalog”). For all involved Bertelsmann business units, BDS centrally gathers and manages the C-ID, the customer ID, information on the anonymous data catalog and which consent to a C-ID exists in the involved Bertelsmann business units.
The data processing mentioned above happens to ensure our and the eligible interests of the other Bertelsmann business units involved based on article 6 (1) (f) DS-GVO (GDPR). This initially happens, to allow us and the involved Bertelsmann business units to estimate via a request to the BDS, within which of the involved Bertelsmann business units the same C-ID exists and which potential the anonymous data catalog offers for data exchange. Furthermore, this is to enable us and the other involved Bertelsmann business units to exchange data based on interest assessment (cypher 4.7.2) using the C-ID or if your consent was given, to send you interesting and useful offers as well as advertisements and to design the respective websites, products and services accordingly.
You can access the currently involved Bertelsmann business units at https://dataservices.bertelsmann.de/participatingcompanies/ or request them postally or via email at Send email .
For data processing during the creation of the C-ID we and BDS are mutually responsible in terms of data protection law. In this respect we have determined a common agreement ac-cording to article 26 DS-GVO on who of us fulfills which duties according to the DS-GVO (GDPR). This particularly affects exercising the rights of the affected persons and the fulfill-ment of the information obligation according to article 13 and 14 DS-GVO (GDPR).
This agreement is necessary because personalized data is being processed in the different steps of the C-ID creation, which are either operated by us, the BDS or by both parties to-gether. Even when the mutual responsibility exists, in terms of data protection law, each party fulfills their own duties accordingly to their responsibilities for the individual process section as follows:
- For the process of transmitting of the above-mentioned data we are responsible.
- For generating the C-ID we and BDS are mutually responsible.
- For managing the C-ID as well as the deletion of data described above, transmitted to BDS for the C-ID creation, BDS is responsible.
You can allege your data protection rights with Bertelsmann Data Services GmbH, Corporate Data Protection, Carl-Bertelsmann-Str. 270, 33311 Gütersloh, Germany, or by email at Send email .
4.7.2 Processing operations using the C-ID regardless of your consentRegardless of the presence of your consent we and other involved Bertelsmann business units can share and use your name, your address, your contact data (if available) your date of birth (if available), and interest categories using the C-ID, when the requirements of article 6 (1) (f) DS-GVO (GDPR) is present, to send you interesting and useful offers as well as advertisements and to design the respective websites, products and services accordingly. Interest category means belonging to a group of addressees that have similar general characteristics (e.g. belonging to the same age group) or a comparable potential interest in specific products or services (e.g. purchases of the same product category, user of the same media content, e.g. TV series enthusiast). When choosing target group specific advertisement or adequate designs for offers, we can also use and additionally save anonymized information as well as data that we have received from data providers based on article 6 (1) (f) DS-GVO (GDPR), sufficiently considering your interests.
4.7.3 Right of objectionYou can object to the use of your data for the data processing described in cypher 1.1 and 1.2 at any time, as described under cypher 7. Your data will then no longer be used for these purposes in the future.
4.7.4 Processing using the C-ID based on your consent
22.214.171.124 Using your IP address and cookie ID to generate the C-IDWhen you use our offer, we set a cookie with your consent, in which we store a cookie ID. The cookie ID is a randomly generated character string that is used by our offer as an identifier in subsequent invocations. This cookie is a small text file that is stored by your Internet browser. If you have also given your C-ID online consent in accordance with cypher 126.96.36.199, we will transmit the cookie ID, the IP address collected when the cookie was set and information about your terminal device to BDS to generate the C-ID. The legal basis for the collection and transmission of this data is article 6 (1) (a) DS-GVO (GDPR).
188.8.131.52 Consent to the cross-offer processing of data by Bertelsmann companies for analysis, product development, measurement, advertising and risk management ("C-ID Online Consent")If you have given your consent to the cross-offer processing of data by Bertelsmann compa-nies across all offers for analysis, product development, measurement, advertising, and risk management ("C-ID Online Consent") to us, BDS or a Bertelsmann company involved, your data will be processed - in addition to the purposes described in cypher 4.7.2 - on the basis of article 6 (1) (a) DS-GVO (GDPR) as follows:
We, the other Bertelsmann companies involved, and BDS share and use the following data (if available, hereinafter referred to as "Online Data") using the C-ID, in each case under our own responsibility:
- Your IP address;
- Details about the content you have requested and about your usage behavior (e.g. which web pages and sections you have viewed and when);
- the content you enter on the website (e.g. search terms, login data, ratings, form entries, click data);
- The date and time of access, information about the Internet browser you are using, the duration of your visit to the site, and the page you previously visited from which you accessed our site; and
- Device information such as the terminal device model and other information about your device (e.g. browser, language, time zone settings, operating system, platform, and screen resolution);
to personalize ads and content on the websites and apps of the participating Bertelsmann business units or BDS based on a profile and to measure the performance of ads and content on these websites and apps. Furthermore, insights can be derived about target groups that have viewed the ads and content. Finally, your online data may be used to build or improve the usability, systems, and software of participating Bertelsmann business units. Furthermore, findings/profiles derived in this way can be transmitted between the Bertelsmann companies involved on the basis of the C-ID and used for the aforementioned purposes.
Moreover, we use the C-ID to pass on your online data/profiles to other involved Bertelsmann business units so that they can automatically check whether there are any indications of possible fraudulent conduct when ordering paid content, goods or services from these Bertelsmann business units or third parties for whom this Bertelsmann business unit provides payment services. This also includes the decision whether a high-risk payment method such as purchase on account can be offered for this order. The online data/profiles shared between the involved Bertelsmann business units using the C-ID will not be passed on to the third party.
Details can be found in the respective consent dialog of the offer for which you give consent. If you have given consent to the processing of your online data for this purpose, you can revoke your consent at any time with effect for the future, as described under 4.4. In this case, the processing of your data described above will no longer take place.
5. Who comes into possession of my personal data?Within our company those who need access to your information for the purposes described in section 4 will be given access to it. Service providers contracted by us may also be given access to your information (“contract data processors”, e.g. data centers, mailing services for newsletters, web tracking). They are bound by our directives and must provide for data security and the confidential treatment of your information under the contract data processing agreements we have concluded with them.
No sharing of information with other recipients such as advertising partners, providers of social media services or credit institutions (“third parties”) takes place.
6. Is my personal data processed outside of the EU or EEA (‘transfer to a third country’)?The use of Google Analytics as described in section 4.4 above causes personal data to be transferred to a third country since the data centers of Google Inc. are located outside of the European Union and the European Economic Area (“EU or EEA”). Such transfers of personal data to third countries may result in your personal information being transmitted to a country which does not provide for the same standard of data protection as the EU or EEA.
If you have given your consent to the processing of your personal information for specific purposes, you can revoke that consent at any time for the future. Your notice of revocation is to be addressed to us by writing to the contact address indicated in section 1.
Pursuant to Art. 21 GDPR, you also have the right for reasons relating to your specific situation to raise an objection to the processing of your data that is done on the basis of Art. 6(1)(f) GDPR. You also have the right to lodge an objection to the processing of your personal information for direct marketing purposes. The same applies to automated processes involving the use of individual cookies, unless they are required for providing the functionality of our website.
You also have the right to lodge a complaint with the competent data protection authority. The authority responsible for us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
40213 Düsseldorf, Germany
Email: Send email
You also have the right to contact the data protection authority at your place of residence and request support in pursuing your matter.
8. To what extent does automated decision-making take place?We do not use any fully automated decision-making processes for any of the purposes set out in section 4.
9. Is profiling done?No profiling takes place for any of the purposes set out in section 4.