Privacy

Privacy Statement

The protection of your data is of great important to us. We collect, save and use your data, of course, only in compliance with the corresponding guidelines. The following explains how we collect, save and process your data.

I. Party responsible

1) Responsible for the processing of your data:

BPM Broadcast & Professional Media GmbH
Obenhauptstraße 15
D-22335 Hamburg
Tel.: +49 (0)40 / 55 76 24 - 0
Fax: +49 (0)40 / 55 76 24 - 25
E-Mail: [email protected]

2) Appointed Data Protection Officer

Thilo Noack
SBS Data Protect GmbH
[email protected]

II. Rights of the data subject

1) You have the right,

- according to Art. 15 GDPR to information regarding the personal data concerning you that we have processed and to the information listed in Art. 15 Para. 1 a)-h) GDPR. You can demand, in particular, information on the processing purposes; the category of the personal data; the category of receivers to whom your data has been or will be disclosed; the planned storage time; the existence of a right to correction, deletion or restriction to the processing or objection to this; the existence of a right to lodge a complaint; the source of your data, where this has not been collected by us, and the existence of automated decision-making including profiling, and in these cases details of meaningful information (‘Right of access’);

- according to Art. 16 GDPR to demand the correction of inaccurate personal information concerning you and the completion of incomplete personal data without undue delay (‘Right to rectification’);

- according to Art. 17 GDPR to demand the erasure of personal data concerning you, provided processing is not necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims (‘Right to erasure’);

- according to Art. 18 GDPR to demand the restriction of processing of your personal data, insofar as the accuracy of your data is contested by you, the processing is unlawful but you oppose its erasure, we no longer need the data but you require it for the establishment, exercise or defence of legal claims or you have objected to the processing pursuant to Art. 21 GDPR (‘Right to restriction of processing’);

- according to Art. 20 GDPR to demand you receive your personal data that you have provided to us within the framework of an agreement or for contract processing, in a structured, commonly used and machine-readable format or demand its transfer to another controller, providing this is technically feasible and the rights and freedoms of others is not affected (‘Right to data portability’);

- according to Art. 7 Para. 3 GDPR to withdraw your consent given to us at any time. In this case, we shall not continue with the data processing based on this consent in the future. The withdrawal of consent shall not affect the lawfulness of processing based on this consent before its withdrawal (‘Right of withdrawal of consent’);

- according to Art. 22 GDPR not to be subject to a decision based solely on automated processing – including profiling - which produces legal effects concerning you or similarly significantly affecting you, providing the decision is not necessary for entering into, or the fulfilment of, a contract between us, is not permitted by law or not based on your explicit consent.

2) Right to object

Should data processing have taken place on the basis of legitimate interests according to Art. 6 Para. 1 f) GDPR, you also have the right to object to processing by us at any time according to Art. 21 GDPR, providing grounds for this exist relating to your particular situation or there is an objection to direct marketing or profiling that is related to such direct marketing. On your objection, we shall no longer process your personal data unless demonstrable compelling legitimate grounds for the processing exist, which override your interests, rights and freedoms or are required for the establishment, exercise or defence of legal claims. These exceptions shall not apply where you have objected to direct marketing or profiling in connection with such marketing. In this case we shall no longer process your personal data for this use. You can contact us for the purpose of exercising your objection by sending us an appropriate email, for example.

3) Right to lodge a complaint

Finally, according to Art. 77 GDPR you have the right to lodge a complaint with a supervisory authority. As a rule, you can turn to the supervisory body of your usual place of residence, work or our registered office for this.

III. Processing of your personal data and the purpose of the processing

1) Your visit to our website

When you visit our website, information from the browser you use is sent automatically to our website server. This information is temporarily saved in a so-called log file. The collection of this data and its processing takes place on the basis of our legitimate interests according to Art. 6 Para. 1 S. 1 f) GDPR for the purpose of a smooth connection establishment with and comfortable use of our website, the analysis of system security and stability and further administrative purposes.
The following information is collected and saved until automatic deletion without any action on your part:

- IP address of the accessing computer,

- date and time of access,

- name and URL of the requested file,

- website from which access is obtained (so-called Referrer URL),

- browser used and, where applicable, the operating system of your computer and the name of your access provider.

2) Contract processing

a) When you purchase products in this online shop, the order process involves you disclosing your personal data to us, e.g. through the input of your data when opening a customer account. We process your data according to Art. 6 Para. 1 b) GDPR for the fulfilment and processing of the contract concluded with you. For this purpose, we transmit your data for the shipment of the goods to the transport company contracted by us (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn / United Parcel Service Deutschland S.à r.l. & Co. OHG, Görlitzer Straße 1, 41460 Neuss / TNT Express GmbH, Haberstraße 2, 53842 Troisdorf). It is also used for invoicing as well as communication with you.
b) Should you have created a customer account, the data that you have provided will be permanently saved until you delete your account or object to its processing. However, we save your data under consideration of legitimate interests for the duration of the regular statute of limitations (3 years starting from the end of the year in which you disclosed your data to us). Your data will be deleted after this, unless we are obliged to store it for longer for legal requirements, such as the saving of invoices (10 years) or business letters (6 years) according to § 147 German Fiscal Code (Abgabenordnung). In such cases, your data will be blocked for use for the duration of the further storage period and subsequently deleted.

3) Newsletter (via MailChimp)

You have the possibility to subscribe to a newsletter. We use the tool ‘MailChimp’, operated by The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA, (hereinafter ‘MailChimp’), to send out our newsletter. This is certified for the so-called ‘Privacy Shield’ (EU-U.S. Data Protection Convention) that offers a guarantee for compliance with European Data Protection Law. You can find further information on the ‘Privacy Shield’ here:
https://www.privacyshield.gov/list
In order to send out our newsletter through MailChimp, it is necessary for us to transmit your data (name and email address) to a MailChimp server where it will be stored exclusively for the purpose of sending out the newsletter. On registering for the newsletter, you consent, according to Art. 6 Para. 1a GDPR, to this data transmission to MailChimp and our use of your name and email address to send regular promotional emails (‘newsletter’). In this case, we will save your data (name and email address) until you unsubscribe from the newsletter or otherwise withdraw your consent given to us. You can unsubscribe at any time, for example through the link that can be found at the end of every newsletter, or by advising us of your wish to unsubscribe by email.

4) Using the contact form

You can use our contact form to send us a message. By submitting your message, you consent, according to Art. 6 Para. 1 a) GDPR, to the processing of your personal data transmitted with your message in the way that we may use this information for the purpose of answering and processing your enquiry and to communicate with you. Personal data collected by us from the use of the contact form is automatically deleted on the completion of your enquiry.

5) Payment processing

Depending on which payment method you choose in the ordering process, you will, where necessary, disclose your data to third parties or consent, according to Art. 6 Para. 1 a) GDPR, to a credit assessment. The information relevant is shown in the following points.

a) paypal

When choosing ‘PayPal’ as a payment method in the ordering process, payment processing is carried out by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. First, you must log in with your PayPal account information or open a PayPal account. In opening an account, you disclose your personal data to PayPal. Data processing by PayPal takes place according to Art. 6 Para. 1 a) GDPR. PayPal uses your PayPal account information in order to firstly identify you and subsequently perform payment processing.
You can find further guidance on PayPal’s privacy policy here:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE

b) Payment on account (PayPal Invoice)

Should payment on account be agreed to, we will assign our payment claims against the customer to PayPal. For this purpose, we transmit the personal data you disclosed to us to PayPal. PayPal carries out a credit assessment using your disclosed data before accepting the act of assignment. With your consent to the data transfer and credit assessment, you authorise PayPal and us to the aforementioned data processing according to Art. 6 Para. 1 a) GDPR. In the case of a negative outcome to the credit assessment, we reserve the right to refuse you the use of ‘PayPal invoice’ as a payment method and refer you to the other payment methods available. If the ‘PayPal invoice’ payment method is accepted, you can only perform a full discharge of duties through PayPal. We always remain, however, your contracting partner and are responsible for contract processing. You can find further information on the ‘PayPal invoice’ payment method in the following links:
https://www.paypal.com/de/webapps/mpp/ua/pui-terms
https://www.paypal.com/de/webapps/mpp/ua/useragreement-full?locale.x=de_DE#6a

c) Financing by abcfinance

You can arrange financing for your purchases from us through our partner abcfinance GmbH, Kamekestraße 2-8, 50672 Köln. When you send us a request to this effect, we will forward your request with your personal data to our partner. In sending this request, you consent to the transfer of this data according to Art. 6 Para. 1 a) GDPR.

6) Cookies

Our website uses cookies in order to optimise the user-friendliness of our website and to enable the use of certain functions. Cookies are small data files that your browser automatically creates and saves on your device when you visit our page. Most of the cookies we use allow us to recognise that you have already visited particular subpages of our website – so-called session cookies. These are deleted from your hard drive at the end of your browser session. Other cookies – so-called temporary cookies – remain on your device for an established period of time and allow us to recognise your device on your next visit. When you revisit our website, it will automatically be recognised that you have already visited us and which entries and settings you used so that these do not have to be re-entered. We also use cookies to collect statistical data on the use of our website and for the purpose of optimising our services, create and analyse the marketing and needs-based design of our website usage profile by using pseudonyms (see Section 7 for more detail).

The data processed by cookies is required for the purposes referred to for the protection of our legitimate interests according to Art. 6 Para. 1 S. 1 lit f) GDPR.

Note: you may configure your browser so that no cookies are saved on your computer or a message appears before a new cookie is created. We would point out, as a precaution, that the complete deactivation of cookies may mean that full use of our website may not be possible.

7) Analysis Tools

a) Google Analytics

We use the tool ‘Google Analytics’ for the purpose of analysis. Google Analytics is a web analysis service from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter ‘Google’). This is intended for the protection of our legitimate interests in a predominant balancing of interests for optimal marketing, ongoing optimisation and needs-based design of our services. The processing of your data described in the following takes place in accordance with Art. 6 Para. 1 f) GDPR.

Google Analytics uses ‘cookies’ (see Section 6). The information generated by the cookie, such as browser type and version, operating system used, previously visited page (so-called Referrer URL), IP address (host name of accessing computer) and the time of the server request are transmitted and saved to a Google server in the USA. IP anonymisation is activated on our website, meaning that your IP address is firstly shortened by Google. The shortened IP address that is transmitted from your browser within the framework of Google Analytics is also not merged with other data from Google so that inferences to your person are hereby excluded.

The information transmitted is used to analyse your use of our website in an anonymised form to create anonymised statistics on website activity and to provide further services related to website and Internet usage for purposes of market research and the needs-based design of our website. You may prevent Google Analytics cookies being saved by appropriately adjusting your browser software; in this case it is possible that you will then not have full use of this website. In addition, you can prevent the use of your data by Google by downloading and installing the available browser plug-in in the following link: http://tools.google.com/dlpage/gaoptout?hl=de. You can find further information on data protection in connection with Google Analytics at Google Analytics Help https://support.google.com/analytics/answer/6004245?hl=de.

b) Google Adwords Conversion Tracking

We use ‘Google AdWords’ and, in connection with this, conversion tracking, an analytical service from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter ‘Google’) in order to statistically analyse the use of our website for the purpose of optimisation. When you click on an advertisement displayed by Google, a cookie will be saved on your device for conversion tracking (see Section 6). These cookies lose their validity after 30 days, do not contain any personal data and therefore cannot provide personal identification. Should you visit certain pages of our website and the cookie has not yet expired, Google and we can recognise that you have clicked on the advertisement and been redirected to the particular web page. Every Google AdWords customer receives a different cookie so that no cookies on our web pages can be tracked. Conversion cookies allow us to track the total number of users that have clicked on their advertisements and been routed to a page with a conversion tracking tag. We do not, however, receive any information that allows us to personally identify a user.
If you do not wish to participate in tracking, you can prevent a cookie being saved through an appropriate adjustment to your browser settings meaning that cookies from the ‘www.googleadservices.com’ domain are blocked. You will then not be recorded in conversion tracking statistics.
You can find further information on conversion tracking at the following link: https://services.google.com/sitestats/de.html

c) Trustpilot

We may contact you to invite you to rate the service and / or products you have received from us in order to obtain your feedback and improve our service. As we work with an external company, Trustpilot A/S, to collect customer feedback, we will share your name, email address and reference number with Trustpilot for this purpose. If you would like to know more about how Trustpilot processes your data, you can view their privacy policy here.
We may also use such ratings in other advertising and promotional materials.

8) Social Media Plug-ins

We use social media plug-ins on our website from the social networks Facebook, Twitter, LinkedIn, Xing, Pinterest, WhatsApp and Google+ for marketing purposes and to shape a more personal use of our website for you. The marketing purpose behind this is a legitimate interest in line with Art. 6 Para. 1 S. 1 f) GDPR.

Our integration of these plug-ins takes the form of the so-called Shariff solution, in that buttons that correspond to the plug-ins are integrated without any connection between your browser and the particular network being established unless a button is clicked on. Data processing as laid out in the following points will only take place through you actively clicking the button.

a) Facebook

In order to make the use of our website more personal for you, we use social plug-ins (‘plug-ins’) on our pages from the social network Facebook, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. The buttons can be identified by the Facebook logo (white ‘f’ on a blue background, with the term ‘like’ or a ‘thumbs up’ sign) or through the label ‘Facebook’. The list and look of Facebook buttons can be seen here:
https://developers.facebook.com/docs/plugins/
Our website displays buttons that are appropriately illustrated for a particular social plug-in using the Shariff solution. This solution differs in that when you visit our web pages that have these buttons, no connection is established between your browser and Facebook. A script tracks how often a page has been shared or liked. It establishes contact with Facebook through the service of programming interfaces (APIs) and retrieves the figures. The server address, not your IP address, is therefore always transmitted to Facebook. A connection from your browser to Facebook’s server will only be established when you actively click on the Facebook button, to share content for example. Facebook receives the information through this that you have accessed our particular Internet website page. This information (including your IP address) is then transmitted from your browser directly to a Facebook server in the USA and saved there. Moreover, if you are logged into Facebook, Facebook can directly assign your visit to our website with your Facebook account. Facebook can then use this information for the purpose of marketing, market research and the needs-based design of Facebook pages. For this purpose, Facebook will create profiles to provide further services connected to the use of Facebook. In order to prevent Facebook from receiving data about you from our Internet presence that could be assigned to your Facebook account, log out of Facebook before using the Facebook button.
You can find further information regarding the processing of your data by Facebook as well as your rights concerning this and configuration options for the protection of your privacy in Facebook’s privacy policy:
https://www.facebook.com/about/privacy/

b) Twitter

Plug-ins from the short messaging network of Twitter Inc. 795 Folsom Street, Suite 600, San Francisco, CA 94107, USA (‘Twitter’) are integrated into our website pages. You can find an overview of Twitter buttons in the following link:
https://about.twitter.com/resources/buttons

Our website displays buttons that are appropriately illustrated for a particular social plug-in using the Shariff solution. This solution differs in that when you visit our web pages that have these buttons, no connection is established between your browser and Twitter. A script tracks how often a page has been shared. It establishes contact with Twitter through the service of programming interfaces (APIs) and retrieves the figures. The server address, not your IP address, is therefore always transmitted to Twitter. A connection from your browser to Twitter’s server will only be established when you actively click on the Twitter button, to share content for example. Twitter receives the information with your IP address through this that you have accessed our particular website page. If you click on the Twitter button while you are logged into Twitter, you can link the contents of our pages to your Twitter profile thereby also allowing Twitter to assign the visit to our pages to your user account. We do not have any knowledge of the content of the data transmitted to or its exact use by Twitter. Should you wish to prevent Twitter from assigning data from your visit to our Internet pages, please log out of Twitter before using the Twitter button.
You can find further information regarding the processing of your data by Twitter as well as your rights concerning this and configuration options for the protection of your privacy in Twitter’s privacy policy:
https://twitter.com/privacy

c) LinkedIn

Plug-ins from LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (‘LinkedIn’) are used on our website. These plug-ins are marked with a LinkedIn logo [in].
Our website displays buttons that are appropriately illustrated for a particular social plug-in using the Shariff solution. This solution differs in that when you visit our web pages that have these buttons, no connection is established between your browser and LinkedIn. A script tracks how often a page has been shared. It establishes contact with LinkedIn through the service of programming interfaces (APIs) and retrieves the figures. The server address, not your IP address, is therefore always transmitted to LinkedIn. A connection from your browser to LinkedIn’s server will only be established when you actively click on the LinkedIn button. LinkedIn receives the information through this that your browser has accessed our particular website page and you have clicked on the button. This information (including your IP address) is then transmitted from your browser directly to a LinkedIn server in Ireland and saved there. Should you be logged into LinkedIn, LinkedIn can then directly assign the information to your LinkedIn account. Should you wish to prevent LinkedIn from assigning data collected from our Internet pages to your LinkedIn account, please log out of LinkedIn before using the LinkedIn button.
You can find further information regarding the processing of your data by LinkedIn as well as your rights concerning this and configuration options for the protection of your privacy in LinkedIn’s privacy policy:
https://www.linkedin.com/legal/cookie-policy?trk=hb_ft_cookie und
https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

d) Google+

We use plug-ins from the social network Google+ (Google Plus) of Google LLC, 1600 Amphitheatre Parkway, Mountain View, Kalifornien, 94043 USA, (‘Google’) on our website.
Our website displays buttons that are appropriately illustrated for a particular social plug-in using the Shariff solution. This solution differs in that when you visit our web pages that have these buttons, no connection is established between your browser and Google. A script tracks how often a page has been shared, for example. It establishes contact with Google through the service of programming interfaces (APIs) and retrieves the figures. The server address, not your IP address, is therefore always transmitted to Google. A direct connection from your browser to Google’s server will only be established when you actively click on the Google button, to share content for example. Google receives the information through this that you have accessed our webpage with your IP address. You need a Google profile in order to use the Google button. If you use the Google button while you are logged into Google+, Google will collect information relating to your browser via your Google profile, e.g. the URL recommended by you as well as your IP address. Your recommendations can be shown as tips along with your profile name and, where available, your photo in Google services (e.g. search results) and advertisements in the Internet. Google can also use this information made available by you for the purpose of optimising Google services. It is possible that Google publishes aggregated statistics on the +1 activities of users or passes these on to customers. If you wish to prevent Google from assigning data collected from our Internet presence to your Google account, please log out of Google before using the Google button.
You can find further information regarding the processing of your data by Google as well as your rights concerning this and configuration options for the protection of your privacy in Google’s privacy policy:
https://developers.google.com/+/web/buttons-policy

e) Pinterest

Plug-ins from the social network Pinterest Inc., 808 Brannan St, San Francisco, CA 94103, USA are integrated into our website.
Our website displays buttons that are appropriately illustrated for a particular social plug-in using the Shariff solution. This solution differs in that when you visit our web pages that have these buttons, no connection is established between your browser and Pinterest. A script tracks how often a page has been shared. It establishes contact with Pinterest through the service of programming interfaces (APIs) and retrieves the figures. The server address, not your IP address, is therefore always transmitted to Pinterest. A connection from your browser to Pinterest’s server will only be established when you actively click on the Pinterest button, to share content, for example. Pinterest receives the information through this that you have accessed our webpage with your IP address. This information (including your IP address) is then transmitted from your browser directly to a Pinterest server in the USA and saved there. If you are logged into Pinterest, Pinterest can then directly assign the visit to our website with your Pinterest account. Should you wish to prevent Pinterest from assigning data collected from our web pages to your Pinterest account, please log out of Pinterest before using the Pinterest button.
You can find further information regarding the processing of your data by Pinterest as well as your rights concerning this and configuration options for the protection of your privacy in Pinterest’ privacy policy:
http://pinterest.com/about/privacy/

f) Xing

We use buttons on our website from the Xing social network (XING SE, Dammtorstraße 30, 20354 Hamburg – hereinafter ‘Xing’) to make the use of our website more personal for you. The marketing purpose behind this can be seen as a legitimate interest in line with Art. 6 Para. 1 S. 1 f) GDPR.
No personal information is transferred to Xing when our web pages that include such buttons are visited. A connection to Xing’s servers is only established when you click on the Xing button. According to statements from Xing, however, in this event no separate personal data is collected; in particular, Xing does not save your IP address. By activating the button, the browser on your device will call up a specific server cluster in one of the computer centres used by Xing. This server cluster will render and process all functions of the Xing share button. Xing does not use cookies in doing this. Xing does not carry out any analysis of your usage behaviour, however, it can later recognise through the server logs how often domain pages have been called up by the Xing share button. In our case, however, only when the button on our page has been activated.
You can find more data privacy protection information regarding the ‘Xing share button’ as well as additional information here:
https://www.xing.com/app/share?op=data_protection

g) WhatsApp

We use buttons on our website from the ‘WhatsApp’ service (WhatsApp Inc., 1601 Willow Road, Menlo Park, California 94025, USA - hereinafter ‘WhatsApp’) to make the use of our website more personal for you. The marketing purpose behind this can be seen as a legitimate interest in line with Art. 6 Para. 1 S. 1 f) GDPR.
The buttons are only imbedded in our web pages as hyperlinks. No personal information is transferred to WhatsApp when our web pages that include such buttons are visited. A connection to WhatsApp’s servers will only be established when you click on the WhatsApp button. This has the effect that WhatsApp learns the source of the website. No personal data will be collected in doing this, rather the reported data is only referrer information that results from every opening of a link.
You can find more data privacy protection information regarding services from WhatsApp here:
https://www.whatsapp.com/legal/