Privacy Policy

Below we inform you about the processing of your personal data by us and about the claims and rights you are entitled to under the data protection regulations, in particular the European General Data Protection Regulation (GDPR).

This Privacy Policy explains the nature, scope and purpose of the processing of personal data within our website (hereinafter “website”). It applies regardless of the domains, platforms and devices used (e.g. desktop, mobile, etc.).

Personal data within the meaning of the GDPR is all data that can be related to you personally, e.g. name, address, email addresses, user behaviour. Which data is processed in detail and how it is used depends largely on the services you request from us.

In our Privacy Policy we use various further terms within the meaning of the GDPR, such as processing, restriction of processing, profiling, pseudonymisation, controller, processor, recipient, third party, consent, supervisory authority and international organisation. You can find the corresponding definitions of these terms in Art. 4 GDPR.

1. Who is responsible for data processing and whom can I contact?

The controller is:

Media Impuls GmbH & Co. KG
Döbelner Straße 7
12627 Berlin
Deutschland

Tel. +49 (0) 30 44 35 19 49 0
Fax +49 (0) 30 44 35 19 49 50
info@media-impuls.com

You can reach our Data Protection Officer at:
mip Consult GmbH
Asmus Eggert, Lawyer

Wilhelm-Kabus-Straße 9
10829 Berlin

Tel: +49 (0) 30 – 20 88 999 0
datenschutz@media-impuls.com
www.sofortdatenschutz.de

2. Which sources and data do we use?

We process personal data that we receive from you in the course of using our website and, where applicable, our business relationship.

When you use the website for purely informational purposes — i.e. when you do not register or otherwise provide us with information — we only collect the personal data that your browser transmits to our server. When you access our website, we collect the following access data, which is technically necessary for us to display our website to you and to ensure its stability and security: the IP address, the date and time of the request, the time zone difference from Greenwich Mean Time (GMT), the content of the request (i.e. the specific page accessed), the access status / HTTP status code, the volume of data transferred in each case, the referrer URL (the previously visited page), the operating system and its interface, the language and version of the browser software, and a message indicating successful retrieval.

We also receive your personal data if you contact us via the contact form or by email. Personal data in this case includes in particular salutation, name, address, company with VAT ID and commercial register number, email, telephone number, as well as the name and email of the case manager and, where applicable, the data you send us as a message (hereinafter “contact data”).

3. For what purposes do we process your data (purpose of processing) and on what legal basis?

We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) for the following purposes and on the basis of the following legal grounds:

Purpose

Legal basis

Insofar as you have given us Consent, to the processing of personal data for specific purposes — in particular to contact us (e.g. via our contact form or by email to process and handle the enquiry, advertising approaches by phone, email, SMS, etc.) — the lawfulness of this processing is based on your consent.

Consent that has been given can be withdrawn at any time. Please note that the withdrawal only takes effect for the future. Processing carried out before the withdrawal is not affected by it. The withdrawal can be sent to the contact details given above or to datenschutz@media-impuls.com .

Consent,Art. 6 (1) sentence 1 lit. a) GDPR.

When you visit our website for the first time, you will be asked whether you also wish to accept non-essential cookies. If you consent to the use of non-essential cookies, this enables us to analyse the use of our website. We can also carry out various marketing activities based on your interactions with the website, other marketing channels and other third parties such as social networks.

To learn more about the cookies we use, in particular about managing and deleting cookies, see the “Cookies” section below.

Consent,Art. 6 (1) sentence 1 lit. a) GDPR.

When you contact us (via the contact form or by email), your details are processed in order to handle the contact enquiry and its processing.

Performance of pre-contractual measures at the request of the data subject, Art. 6 (1) sentence 1 lit. b) GDPR.

We process your access data (see the data listed under point 2 above) to protect the **legitimate interests** of us or of third parties. In doing so, we pursue in particular the following legitimate interests:

  • ensuring IT security, in particular the security of the website
  • advertising or market and opinion research, insofar as you have not objected to the use of your data;
  • asserting legal claims and defending against legal disputes.

As part of the balancing of interests to protect legitimate interests, Art. 6 (1) sentence 1 lit. f) GDPR.

Within our company, those departments that need your data to fulfil our contractual and legal obligations are given access to it.

Innerhalb unseres Unternehmens erhalten diejenigen Stellen Zugriff auf Ihre Daten, die diese zur Erfüllung unserer vertraglichen und gesetzlichen Pflichten benötigen.

Processors engaged by us (Art. 28 GDPR) may also receive data for the purposes mentioned above. These are companies in the categories of IT services (hosting) and telecommunications (telephone system). Insofar as we pass on data to our service providers, they may use this data exclusively to fulfil their tasks. The service providers were carefully selected and engaged by us. They are contractually bound by our instructions, have appropriate technical and organisational measures in place to protect the rights of the data subjects, guarantee an adequate level of data protection, and are carefully monitored by us.

Data is only passed on to third parties who are not processors within the framework of legal requirements. We only pass on users’ data to third parties if this is required, for example, on the basis of Art. 6 (1) sentence 1 lit. b) GDPR for contractual purposes, or on the basis of legitimate interests pursuant to Art. 6 (1) sentence 1 lit. f) GDPR for the economic and effective operation of our business, or if you have consented to the data transfer. When the website is used purely for informational purposes, we generally do not pass on any data to third parties.

5. How long is my data stored?

For security reasons (e.g. to investigate misuse or fraud), log file information is stored for a maximum of seven days and then deleted (see point 2 above). Data whose further retention is required for evidentiary purposes is exempt from deletion until the final clarification of the respective incident.

Where necessary, we process and store your personal data for the duration of our business relationship, which also includes, for example, the initiation of a contract via the contact form or by email.

In addition, we are subject to various retention and documentation obligations arising, among other things, from the German Commercial Code (HGB) and the Fiscal Code (AO). The retention and documentation periods specified there are two to ten years.

Finally, the storage period is also assessed according to the statutory limitation periods, which, for example under Sections 195 et seq. of the German Civil Code (BGB), are generally 3 years, but in certain cases up to thirty years, with the standard limitation period being three years.

If you assert your rights as a data subject, we store the information provided to you in this regard until the expiry of the statutory limitation period in accordance with Section 31 (2) No. 1 OWiG, Section 41 (1) BDSG, Art. 83 (5) lit. b GDPR for 3 years. This period may be extended if the statutory limitation period is extended by interruptions of limitation (e.g. in the context of requests from supervisory authorities).

6. Is data transferred to a third country or to an international organisation?

The data provided is processed within the European Union and in the USA. For countries without an adequacy decision by the Commission pursuant to Article 45 GDPR — as is currently the case with the USA — we generally agree EU Standard Contractual Clauses with the recipients of your data, or we obtain your consent for the data transfer.

Note: The protection of personal data in the USA does not correspond to the level of data protection required by the EU. In particular, there is a lack of enforceable rights that would protect your data against access by state authorities. There is therefore a risk that these state authorities may access the personal data without the data exporter or the recipient being able to effectively prevent this. However, we take additional measures to protect your personal data.

7. What data protection rights do I have?

Every data subject has:

  • the right to access under Art. 15 GDPR (i.e. you have the right to request information about your personal data stored by us at any time);
  • the right to rectification under Art. 16 GDPR (i.e. in the event that your personal data is incorrect or incomplete, you can request the rectification of this data);
  • the right to erasure nach Art. 17 DSGVO und das Recht auf restriction of processing under Art. 17 GDPR and the right to **restriction of processing** under Art. 18 GDPR (i.e. you have the right, where applicable, to request the erasure or restriction of the processing of your personal data if, for example, such processing no longer serves a legitimate business purpose and statutory retention obligations do not require further storage);
  • the right to data portability under Art. 20 GDPR (i.e. you have the right, where applicable, to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and to transmit this data to another controller without hindrance).

You may also withdraw any consent given, with effect for the future.

In addition, you have a right to lodge a complaint with a data protection (Art. 77 GDPR in conjunction with Section 19 BDSG). You can find the supervisory authority responsible for you at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

We would also like to point out your right to object under Art. 21 GDPR:

Information about your right to object under Art. 21 GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 (1) sentence 1 lit. e) GDPR (data processing in the public interest) and Art. 6 (1) sentence 1 lit. f) GDPR (data processing based on a balancing of interests); this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR.

If you object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

In individual cases we process your personal data for the purpose of direct marketing. You have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling insofar as it is connected with such direct marketing. If you object to processing for the purposes of direct marketing, we will no longer process your personal data for these purposes.

The objection can be made in any form and incurs no costs other than the basic-rate transmission costs.

If you wish to exercise your right to object, an informal message — e.g. to the contact details given above — is sufficient.

8. Is there automated decision-making in individual cases, including profiling?

In the context of accessing our website, or contacting us via the form or by email, we do not use fully automated decision-making pursuant to Article 22 GDPR. We do not process your data automatically with the aim of evaluating certain personal aspects (profiling).

9. Am I obliged to provide data?

In the context of our website, you must provide the personal data that is technically required for the use of our website or required for IT security reasons (in particular your IP address). If you do not provide this data, you will not be able to use our website.

In the context of contacting us via the form or by email, you only need to provide the personal data required to process your enquiry. Otherwise, we cannot process your enquiry.

10. Cookies

We use cookies on our web pages. Cookies are small text files, usually consisting of letters and numbers, that are stored on the user’s computer when they visit certain websites. 

Some of these cookies are essential for the functioning of our website, while others help us improve our website by giving us insights into how you use it.

By default, we only use essential cookies. Essential cookies enable the core functionalities of our website. The website cannot be displayed correctly without these cookies, or individual areas may not function properly. Essential cookies can only be prevented by means of appropriate settings in your browser.

Cookies that are not essential for the functioning of the website (“non-essential cookies”) are only used if you have given your consent via our cookie banner. You can return to our Privacy Policy at any time and withdraw or change your consent.

Click hereto obtain information about the cookies we use.

Alternatively, you can prevent the storage of cookies individually via the settings of your browser (you can learn how to configure cookie handling from the browser’s help pages). You can find guidance on cookie management in the most common browsers at the following addresses:

  • Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
  • Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
  • Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
  • Opera: http://www.opera.com/de/help
  • Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE.

10.1 Google Analytics

On the basis of your consent, we use the web analytics service Google Analytics from Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), hereinafter “Google”.

The web analytics service Google Analytics uses cookies. The information generated by the cookies about your use of our website is generally transmitted to a Google server in the USA and stored there. The processing of your data in the USA involves corresponding risks. By giving your consent via our cookie banner, you agree to the processing of your data in the USA despite the potential access by US authorities, Art. 49 (1) sentence 1 lit. a GDPR.

Google processes the data on our behalf in order to evaluate the use of our website by website visitors, to compile reports on activities within our website, and to provide further services associated with the use of the website. Pseudonymous usage profiles of website visitors are created from the processed data.

During your visit to the website, the following information, among others, is collected:

  • pages accessed,
  • the achievement of contact goals, such as contact and demo requests or newsletter sign-ups,
  • your use of our website, for example clicks and time spent on one of our pages,
  • your approximate location (country and city),
  • your IP address (in shortened form, so that no unambiguous attribution is possible),
  • technical information such as browser, internet provider, device and screen resolution,
  • which website or advertising medium brought you to us.

Google Analytics stores cookies in your browser for two years from your last visit. These cookies contain a randomly generated user ID with which you can be recognised on future website visits.

The recorded data is stored together with the randomly generated user ID, which enables the evaluation of pseudonymous usage profiles. This user-related data is automatically deleted after 14 months. Other data is stored in aggregated form for an indefinite period. The IP address transmitted by your browser is not merged with other Google data.

We use Google Analytics with IP anonymisation activated. This means that the user’s IP address is shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.

You can prevent the storage of cookies either by declining in our cookie banner or by configuring your browser software accordingly. Users can also prevent the collection of the data generated by the cookie and relating to their use of the website, as well as the transmission of this data to Google and its processing by Google, by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

We use Google Analytics Remarketing to display the ads we have placed with Google or its partners only to those users who have also shown an interest in our website or who exhibit certain characteristics (e.g. interests in certain topics or products) that we transmit to Google (so-called “remarketing”). With the help of remarketing, we aim to ensure that our ads correspond to the interests of users and do not appear intrusive. You can permanently object to cross-device remarketing/targeting by deactivating personalised advertising in your Google account; follow this link: https://www.google.com/settings/ads/onweb/.

Further information on data processing by Google, and on settings and objection options, can be found on Google’s websites at https://policies.google.com/technologies/partner-sites.

10.2 Google Ads

On the basis of your consent, we use the Google Ads service from Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), hereinafter “Google”.

The processing of the data also takes place in the USA as part of this service. The processing of your data in the USA involves corresponding risks. By giving your consent via our cookie banner, you agree to the processing of your data in the USA despite the potential access by US authorities, Art. 49 (1) sentence 1 lit. a GDPR.

Google Ads is a service for placing advertising banners on the internet that allows us to display ads both in Google search results and in the Google advertising network. Google Ads enables us to define predetermined keywords by means of which an ad is displayed in Google search results only when the user carries out a keyword-relevant search. In the Google advertising network, our ads are displayed on topic-relevant websites by means of an automatic algorithm and in compliance with the keywords we have previously defined.

The purpose of our use of Google Ads is to promote our website by displaying advertising on the websites of third-party companies and in Google search results, and, where applicable, displaying third-party advertising on our website.

If you reach our website via a Google ad, Google stores a so-called conversion cookie on your computer. A conversion cookie loses its validity after thirty days and is not used to identify you personally, but rather to track whether certain subpages of our website have been accessed. By means of the conversion cookie, both we and Google can track whether you reached our website via an Ads ad and completed an action (e.g. a purchase) or abandoned it.

The data and information collected through the use of the conversion cookie are used by Google to compile visit statistics for our website. We in turn use these visit statistics to determine the total number of users who were referred to us via Ads ads. In this way we determine the success of our respective Ads ads and are able, based on this information, to optimise our Ads ads for the future. Neither our company nor other Google Ads advertisers receive information from Google by means of which the data subject could be identified.

Instead of using our cookie banner, you can also prevent the setting of cookies by configuring your internet browser accordingly. Such a setting in the internet browser used would also prevent Google from setting a conversion cookie on your computer. In addition, a cookie already set by Google Ads can be deleted at any time via the browser. There is also the option to object to interest-based advertising by Google. To do this, you must access the link www.google.de/settings/ads from each of the internet browsers you use (on each device) and make the desired settings there.

If you wish to object to interest-based advertising by Google, you can use the opt-out options provided by Google at http://www.google.com/ads/preferences.

Further information and the applicable data protection provisions of Google can be accessed at https://policies.google.com/technologies/partner-sites.

10.3 Plausible Analytics

To understand and improve the use of our website, we use the web analytics tool Plausible Analytics. Plausible sets no cookies, stores no information in the browser, and generally does not collect any personal data. You can find more information about Plausible and the data protection of this tool here. Service provider: OÜ Plausible Insights, Västriku tn 2, Tartu 50403, Estonia; Website: https://plausible.io/Privacy policy: https://plausible.io/data-policy

11. Google Fonts

Google Fonts, i.e. external fonts from Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland, https://www.google.com/fonts. Google Fonts are integrated by retrieving the fonts from our server. Through this type of integration, Google receives no information.

12. Our social media presence

You will find us with presences within social networks and platforms, so that we can also communicate with you there and inform you about our services there.

We point out that your data may be processed outside the European Union in this context, and that the data is generally processed for market research and advertising purposes. Usage profiles can be created from users’ usage behaviour and the resulting interests. These usage profiles can in turn be used, for example, to place advertisements within and outside the platforms that presumably correspond to users’ interests. For this purpose, cookies may be stored on users’ computers in which usage behaviour and users’ interests are stored. In addition, data may be stored in these usage profiles regardless of the devices used by the users, in particular if the users are members of the respective platforms and are logged in to them.

On our website we merely link to our company profiles on the respective social networks. Please note, however, that when you click on a link to the social networks, data is transmitted to their servers. If you are logged in to the respective social network with your username and password at that time, the information that you have visited our website via our company profile on the respective social network is transmitted there, and the respective provider can store this information in your user account.

In principle, we have no significant influence on the data processing of the social networks. However, we receive statistics from the providers about the use of our company profiles in the social networks (e.g. information on the number of views, interactions such as likes and comments, and aggregated demographic and other information or statistics). You can find more detailed information on the data used by the providers in the providers’ data protection notices linked below.

Insofar as we receive your personal data in the context of our social media presences (e.g. in the context of a message), the rights set out above in this Privacy Policy apply to you in this respect. You can direct your enquiries regarding data processing in the context of our company profiles to us via the contact details given above.

If you also wish to assert rights against the provider of the social network, the easiest way is to contact the respective provider directly. The provider knows both the details of the technical operation of the platform and the associated data processing, as well as the specific purposes of the data processing. The contact details can be found in each case in the data protection notices linked below. We are also happy to support you in asserting your rights, insofar as this is possible for us.

The processing of users’ personal data generally takes place on the basis of your consent in accordance with Art. 6 (1) sentence 1 lit. a) GDPR. The legal basis is also Art. 6 (1) lit. b GDPR if we receive and process your data in the context of a contract-related enquiry via our social media presence. The legal basis for the linking and operation of our company profiles on the social networks, including the receipt of statistics on the use of our company profiles, is Art. 6 (1) lit. f GDPR, based on our legitimate interest in our corporate communication on the respective social networks.

For information on the respective processing and the respective objection options, we refer to the data protection notices of the providers linked below:

  • (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). We operate our Facebook page on the basis of an agreement on joint processing of personal data with Facebook — Privacy Policy: https://www.facebook.com/about/privacy/, Opt-out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com. (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland), Unsere Facebook-Seite betreiben wir auf Grundlage einer Vereinbarung über gemeinsame Verarbeitung personenbezogener Daten mit Facebook – Datenschutzinformation: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads und http://www.youronlinechoices.com.
  • Instagram (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland), online service for sharing photos and videos, Privacy Policy: https://help.instagram.com/519522125107875/?helpref=hc_fnav.
  • Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA) — Privacy Policy / Opt-out: https://about.pinterest.com/de/privacy-policy.

13. Newsletter

With the following notices we inform you about our newsletter as well as the registration and dispatch procedure, and explain your rights. By subscribing to our newsletter, you agree to receiving it and to the procedures described.

We only send emails with promotional information (hereinafter “newsletter”) with the consent of the recipient or on the basis of a legal ground. You will then receive our newsletter with information about Media Impuls GmbH & Co. KG, our services and our events.

Registration for our newsletter takes place using the so-called double opt-in procedure. This means that after registration we send you an email asking you to confirm your registration. This confirmation serves to ensure that only persons who actually have access to the email address provided in the form can register for our newsletter. We log the newsletter registrations in order to be able to demonstrate that the registration process complies with the legal requirements. This includes storing the time of registration and confirmation as well as the IP address. For dispatch we use AcyMailing, which is hosted on a server we rent located in Germany.