In the following, we inform you about the processing of your personal data by us and the claims and rights to which you are entitled under data protection regulations, in particular the European General Data Protection Regulation (GDPR).

This data protection information clarifies the type, scope and purpose of the processing of personal data within our website (hereinafter referred to as “website”). The data protection information applies regardless of the domains, platforms and devices used (e.g. desktop, mobile, etc.).

Personal data within the meaning of the GDPR are all data that can be related to you personally, e.g. B. Name, address, e-mail addresses, user behavior. Which data is processed in detail and how it is used depends largely on the services we use.

In our data protection information, we use various other terms within the meaning of the GDPR. These include terms such as processing, restriction of processing, profiling, pseudonymization, controller, processor, recipient, third party, consent, supervisory authority and international organization. You can find corresponding definitions for these terms in Art. 4 GDPR.

1. Who is responsible for data processing and who can I contact?

The responsible party is:
Media Impuls GmbH & Co.KG
Döbelner Straße 7
12627 Berlin
Germany
Tel. 030 44 35 19 49-0
Fax 030 44 35 19 49-50
info@media-impuls.com

You can reach our data protection officer at:
mip Consult GmbH
Lawyer Asmus Eggert
Wilhelm-Kabus-Straße 9
10829 Berlin
Tel: +49 (0) 30 – 20 88 999 0
datenschutz@media-impuls.com
www.sofortdatenschutz.de

2. What sources and data do we use?

We process personal data that we receive from you in the course of using our website and, if applicable, our business relationship.

When you use the website for purely informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. When you access our website, we collect the following access data, which is technically necessary for us to display our website to you and to ensure its stability and security. The access data includes the IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (i.e. name of the specifically accessed website), access status/HTTP status code, amount of data transferred in each case, referrer URL (previously visited page), operating system and its interface, language and version as well as type of browser software, notification of successful retrieval.

We also receive your personal data if you contact us via a contact form or e-mail. Personal data here includes, in particular, title, name, address, company with VAT ID and commercial register number, e-mail, telephone number, as well as the name and e-mail of the case manager and, if applicable, the data that you send us as a message (hereinafter referred to as “contact data”).

3. For what purpose do we process your data (purpose of processing) and on what legal basis?

We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) for the following purposes and on the basis of the following legal bases:

4. Who gets my data?

Within our company, those departments that need your data to fulfill our contractual and legal obligations have access to it.

Processors employed by us (Art. 28 GDPR) may also receive data for the purposes mentioned above. These are companies in the categories of IT services (hosting) and telecommunications (telephone system). If we pass on data to our service providers, they may only use the data to fulfill their tasks. The service providers have been carefully selected and commissioned by us. They are contractually bound by our instructions, have suitable technical and organizational measures to protect the rights of the data subjects, guarantee an appropriate level of data protection and are carefully monitored by us.

Data will only be passed on to third parties who are not processors within the framework of the legal requirements. We only pass on user data to third parties if this is necessary, for example, on the basis of Art. 6 para. 1 sentence 1 lit. b) GDPR for contractual purposes or on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR in the economic and effective operation of our business or if you have consented to the data transfer. When using the website for purely informational purposes, we generally do not pass on any data to third parties.

5. How long will my data be stored?

For security reasons (e.g. to clarify acts of abuse or fraud), log file information is stored for a maximum of seven days and then deleted (see point 2 above). Data whose further storage is required for evidence purposes is excluded from deletion until the respective incident has been finally clarified.

If necessary, we process and store your personal data for the duration of our business relationship, which also includes, for example, the initiation of a contract via a contact form or by e-mail.

In addition, we are subject to various storage and documentation obligations, which result, among other things, from the German Commercial Code (HGB) and the German Fiscal Code (AO). The periods for storage and documentation specified there are two to ten years.

Finally, the storage period is also assessed according to the statutory limitation periods, which, for example, according to §§ 195 ff. of the German Civil Code (BGB), are generally 3 years, but in certain cases can also be up to thirty years, whereby the regular limitation period is three years.

If you assert your rights as a data subject, we will store the information provided to you in this regard until the expiry of the statutory limitation period in accordance with Section 31 (2) No. 1 OWiG, Section 41 (1) BDSG, Art. 83 (5) lit. b GDPR for 3 years. This period may be extended if the statutory limitation period is extended by interruptions to the limitation period (e.g. in the context of inquiries from the supervisory authorities).

6. Will data be transferred to a third country or to an international organization?

The data provided will be processed within the European Union and in the USA. For countries without an adequacy decision by the Commission in accordance with Article 45 GDPR, as is the case with the USA, we generally agree on EU standard data protection clauses with the recipients of your data or obtain your consent for the data transfer.

Note: The protection of personal data in the USA does not correspond to the level of data protection required by the EU. In particular, there are no enforceable rights that protect your data against access by government agencies. There is therefore a risk that these government agencies can access the personal data without the data exporter or the recipient being able to effectively prevent this. However, we also take additional measures to protect your personal data.

7. What data protection rights do I have?

Every data subject has

• the right to information under Art. 15 GDPR (i.e. you have the right to request information about your personal data stored by us at any time),
• the right to rectification under Art. 16 GDPR (i.e. in the event that your personal data is incorrect or incomplete, you can request that this data be rectified),
• the right to erasure under Art. 17 GDPR and the right to restriction of processing under Art. 18 GDPR (i.e. you may have the right to request the erasure or restriction of the processing of your personal data if, for example, there is no longer a legitimate business purpose for such processing and legal retention obligations do not require further storage),
• the right to data portability under Art. 20 GDPR (i.e. you may have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and to transmit this data to another controller without hindrance).

Furthermore, you can revoke your consent, generally with effect for the future.

In addition, there is a right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG). You can find the supervisory authority responsible for you at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

In addition, we would like to draw your attention to your right to object under Art. 21 GDPR:

8. To what extent is there automated decision-making in individual cases, including profiling?

When accessing our website or when contacting us by form or e-mail, we do not use fully automated decision-making in accordance with Article 22 GDPR. We do not process your data automatically with the aim of evaluating certain personal aspects (profiling).

9. Is there an obligation for me to provide data?

Within the framework of our website, you must provide the personal data that is technically necessary for the use of our website or for IT security reasons (in particular your IP address). If you do not provide this data, you cannot use our website.

When contacting us via form or e-mail, you only need to provide the personal data that is required to process your request. Otherwise, we will not be able to process your request.

10. Cookies

We use cookies on our websites. Cookies are small text files, which usually consist of letters and numbers and are stored on the user’s computer when visiting certain websites.

Some of these cookies are essential for the functioning of our website, while other cookies help us to improve our website by providing us with insights into how you use the website.

By default, we only use necessary cookies. Necessary cookies enable the core functionalities of our website. The website cannot be displayed correctly without these cookies, or individual areas may not function correctly. Necessary cookies can only be prevented by appropriate settings in your browser.

We only use cookies that are not necessary for the functioning of the website (“non-necessary cookies”) if you have given your consent via our cookie banner. You can return to our privacy policy at any time and revoke your consent or make changes.

Click here to receive information about the cookies we use.

Alternatively, you can prohibit the storage of cookies individually via the settings of your browser (you can find out how to set the cookie handling on the help page of the browser). You can find help on cookie management in the most common browsers at the following addresses:

• Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
• Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
• Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
• Opera: http://www.opera.com/de/help
• Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE.

10.1 Google Analytics

We use the web analytics service Google Analytics from Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), hereinafter referred to as “Google”, on the basis of your consent.

The web analytics service Google Analytics uses cookies. The information generated by the cookies about the use of our website is usually transferred to a Google server in the USA and stored there. The processing of your data in the USA is associated with corresponding risks. By giving your consent via our cookie banner, you agree to the processing of your data in the USA despite potential access by US authorities, Art. 49 para. 1 s. 1 lit. a GDPR.

Google processes the data for us in order to evaluate the use of our website by website visitors, to create reports on the activities within our website and to provide other services associated with the use of the website. Pseudonymous user profiles of the website visitors are created from the processed data.

During your website visit, the following information is recorded, among other things:

• pages viewed,
• the achievement of contact goals, such as contact and test drive requests or newsletter registrations,
• your use of our website, for example clicks and time spent on one of our pages,
• your approximate location (country and city),
• your IP address (in abbreviated form, so that no clear assignment is possible),
• technical information such as browser, internet provider, device and screen resolution,
• which website or which advertising material brought you to us.

Google Analytics stores cookies in your browser for a period of two years since your last visit. These cookies contain a randomly generated user ID with which you can be recognized on future website visits.

The recorded data is stored together with the randomly generated user ID, which enables the evaluation of pseudonymous user profiles. This user-related data is automatically deleted after 14 months. Other data remains stored in aggregated form indefinitely. The IP address transmitted by your browser is not merged with other Google data.

We use Google Analytics with IP anonymization activated. This means that the IP address of users is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

You can prevent the storage of cookies either by rejecting them in our cookie banner or by setting your browser software accordingly; users can also prevent the collection of the data generated by the cookie and its transmission to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

We use Google Analytics Remarketing to display the ads we place with Google or its partners only to those users who have also shown an interest in our website or who have certain products or services (e.g. interests in certain topics on our website) that we transmit to Google (so-called “Remarketing”). With the help of remarketing, we want to ensure that our ads correspond to the interests of the users and are not annoying. You can permanently object to cross-device remarketing/targeting by deactivating personalized advertising in your Google account; follow this link to do so: https://www.google.com/settings/ads/onweb/.

Further information on data processing by Google, setting and objection options can be found on the Google websites at https://policies.google.com/technologies/partner-sites

10.2 Google Ads

We use the Google Ads service from Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), hereinafter referred to as “Google”, on the basis of your consent.

Within the scope of this service, data is also processed in the USA. The processing of your data in the USA is associated with corresponding risks. By giving your consent via our cookie banner, you agree to the processing of your data in the USA despite potential access by US authorities, Art. 49 para. 1 s. 1 lit. a GDPR.

Google Ads is a service for placing advertising banners on the Internet, which allows us to place ads in both the search engine results of Google and in the Google advertising network. Google Ads allows us to define certain keywords in advance, by means of which an ad is displayed in the search engine results of Google only when the user performs a keyword-relevant search. In the Google advertising network, our ads are displayed on topic-relevant websites by means of an automatic algorithm and in compliance with the keywords we have previously defined.

The purpose of our use of Google Ads is to promote our website by displaying advertising on the websites of third-party companies and in the search engine results of Google and, if applicable, to display third-party advertising on our website.

If you reach our website via a Google ad, a so-called conversion cookie is stored on your computer by Google. A conversion cookie loses its validity after thirty days and is not used to identify you, but it is used to track whether certain subpages of our website have been accessed. The conversion cookie allows both us and Google to track whether you have reached our website via an Ads ad, have completed or canceled an action (e.g. a purchase).

The data and information collected through the use of the conversion cookie are used by Google to create visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who were referred to us via Ads ads. We thus determine the success of our respective Ads ads and are able to optimize our Ads ads for the future based on this information. Neither our company nor other advertising customers of Google Ads receive information from Google by means of which the data subject could be identified.

Instead of via our cookie banner, you can also prevent the setting of cookies by means of a corresponding setting of your internet browser. Such a setting of the internet browser used would also prevent Google from setting a conversion cookie on your computer. In addition, a cookie already set by Google Ads can be deleted at any time via the browser. Furthermore, it is possible to object to interest-based advertising by Google. To do this, you must call up the link www.google.de/settings/ads from each of the internet browsers you use (on each device) and make the desired settings there.

If you would like to object to interest-based advertising by Google, you can use the opt-out options provided by Google: http://www.google.com/ads/preferences.

Further information and the applicable data protection provisions of Google can be found at https://policies.google.com/technologies/partner-sites.

11. Google Fonts

Google Fonts, i.e. external fonts from Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland, https://www.google.com/fonts. The integration of Google Fonts is done by retrieving the fonts from our server. Google does not receive any information through this type of integration.

12. Our social media presences

You can find us with presences within social networks and platforms so that we can also communicate with you there and inform you about our services there.

We would like to point out that your data may be processed outside the European Union and that the data is generally processed for market research and advertising purposes. User profiles can be created from the user behavior and the resulting interests of the users. These user profiles can in turn be used to, for example, place advertisements inside and outside the platforms that are likely to correspond to the interests of the users. For this purpose, cookies may be stored on the users’ computers, in which the user behavior and the interests of the users are stored. Other data may also be stored in these user profiles, especially if the users are members of the respective platforms and are logged in to them.

On our website, we only link to our company profiles on the respective social networks. However, please note that when you click on a link to the social networks, data is transferred to their servers. If you are logged into the respective social network with your username and password at this time, the information that you have visited our company profile on the respective social network from our website will be transmitted there and the respective provider can store this information in your user account.

In principle, we have no significant influence on the data processing of the social networks. However, we receive statistics from the providers about the use and visits to our company profiles on the social networks (e.g. information about the number of views, interactions such as likes and comments, as well as summarized demographic and other information or statistics). You can find more information about the data used by the providers in the data protection notices of the providers linked below.

Insofar as we receive your personal data in the context of our social media presences (e.g. in the context of a message), you are entitled to the rights mentioned above in this data protection information. You can address your inquiries regarding data processing in the context of our company profiles to us via the contact details mentioned above.

If you also wish to assert rights against the provider of the social network, the easiest way to do so is to contact the respective provider directly. The provider knows both the details of the technical operation of the platform and the associated data processing as well as the specific purposes of the data processing. The contact details can be found in the data protection information linked below. We are also happy to support you in asserting your rights as far as we are able to.

The processing of users’ personal data is generally based on your consent in accordance with Art. 6 Para. 1 S. 1 lit. a) GDPR. The legal basis is also Art. 6 Para. 1 lit. b GDPR if we receive and process your data in the context of a contract-related inquiry via our social media presence. The legal basis for linking and operating our company profiles on social networks, including receiving statistics on the use of our company profiles, is Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in our corporate communication on the respective social networks.

For information about the respective processing and the respective objection options, we refer to the data protection information of the providers linked below:

• Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), We operate our Facebook page on the basis of an agreement on joint processing of personal data with Facebook – Data protection information: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com.
• Instagram (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland), online service for sharing photos and videos, data protection information https://help.instagram.com/519522125107875/?helpref=hc_fnav
• Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA) – Data protection information/Opt-Out: https://about.pinterest.com/de/privacy-policy.

13. Newsletter

With the following information, we inform you about our newsletter as well as the registration and dispatch procedure and clarify your rights. If you subscribe to our newsletter, you agree to receive the newsletter and the described procedures.

We send e-mails with promotional information (hereinafter “newsletter”) only with the consent of the recipients or on the basis of a legal basis. You will then receive our newsletter with information about media impuls KG, our services and our events.

Registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registering for the newsletter, we will send you an e-mail in which we ask you to confirm your registration. This confirmation serves to ensure that only people who actually have access to the e-mail address provided in the form register for our newsletter. We log the registrations for the newsletter in order to be able to prove the registration process in accordance with the legal requirements. This includes storing the registration and confirmation time as well as the IP address. For sending we use AcyMailing, which is hosted on a server rented by us with a location in Germany.