Privacy Policy

With this Privacy Policy, we would like to inform you about the scope of the processing of your personal data (hereinafter referred to as "Data").

1. Data controller 

The data controller responsible for data processing according to the provisions of the General Data Protection Regulation (GDPR) is:

Fachverlag Hans Carl GmbH
Andernacher Str. 33a
90411 Nuremberg
Germany
Phone: +49 (0) 911/95285-0
Web: mebak.org
E-mail: info[at]hanscarl.com

2. Our data protection officer's contact details

E-mail: datenschutz[at]hanscarl.com

With this privacy policy, we would like to inform you about the scope of the processing of your personal data (hereinafter referred to as "Data").

3. General information on data processing

We process data as part of our business and website operations.

This also includes disclosure through transmission to third parties and possibly to so-called third countries outside the European Union (“EU”) and the European Economic Area (“EEA”). Insofar as we transmit data outside the EU or the EEA, we have marked this accordingly below.

4. Data processing

The specific data concerned, reasons for processing, legal bases, recipients and, if applicable, transfers to third countries are listed below:

a) Log file when visiting the website

We log your website visit. We process:

• Name(s) of our accessed website(s)

• Date and time of the access

• The amount of data transferred

• Browser type and version

• Your operating system

• The referrer URL (the previously visited website)

• Your IP address

• The requesting provider
   

According to Article 6 para. 1 f) GDPR, the legal basis for data processing is our overriding legitimate interest in the ongoing provision and security of our website.

The log file is deleted after seven days, unless it is required to prove or clarify specific legal violations that have become known within the retention period.

b) Hosting

To provide our online presence, we use the services of web hosting providers who process the above-mentioned and all data to be processed in connection with the operation of this website (log file when visiting the website) on our behalf.

According to Article 6 para. 1 f) GDPR , the legal basis for data processing is our overriding legitimate interest in the provision of our website.

c) Contact

If you contact us, we will process the following data from you for the purpose of processing and handling your request: Name, contact details – if you have provided them – and your message.

The legal basis for data processing is our obligation to fulfill the contract and/or to fulfill our pre-contractual obligations in accordance with Article 6 para. 1 b) GDPR and/or our overriding legitimate interest in processing your request in accordance with Article 6 para. 1 f) GDPR.

d) Contact for applications

If you contact us to send us a job application e.g. by email or via a contact form, the data you provide (e.g. name, email address, desired location, etc.), your message and the application documents transmitted are processed exclusively for the purpose of processing and handling your application request.

The legal basis for data processing is primarily Section 26 BDSG (Federal Data Protection Act). It allows the processing of data required in connection with the decision to establish an employment relationship.

Should the data be necessary for legal purposes after completion of the application process, data can be processed to safeguard our legitimate interests in accordance with Article 6 para. 1 f) GDPR, namely to assert and/or defend against claims.

e) Contract processing

We process your order data to handle the contractual relationship between you and us.

The legal basis for the data processing is the fulfillment of our contractual obligations according to Art. 6 para. 1 b) GDPR and in individual cases the fulfillment of our legal obligations according to Art. 6 para. 1 c) GDPR.

We transmit your address data to the company commissioned with the delivery. If necessary for the execution of the contract, we additionally transmit your e-mail address or your telephone number to the company commissioned with the delivery in order to coordinate a delivery date (notification).

We transmit your transaction data (name, date of order, payment method, date of dispatch and/or receipt, amount and payee, bank details or credit card data, if applicable) to the payment service provider commissioned with processing the payment.

f) Newsletter

To provide you with information about our company and offers on a regular basis, we offer to send you an email newsletter. When you register for the newsletter, we process the data you entered when registering (email address and other voluntary information). To prevent misuse, we will send you an email after you have registered, in which we ask you to confirm your registration (double opt-in procedure). To be able to prove that the registration process is legally compliant, your registration will be logged. The time of registration and confirmation as well as your IP address are affected.

The legal basis for sending the newsletter is your consent in accordance with Article 6 para. 1 a) GDPR. Data processing in connection sending the confirmation email for your registration and the associated data logging takes place in accordance with Article 6 para. 1 f) GDPR due to our legitimate interest in proving your proper registration.

g) Registration

By registering on our site, you consent to the storage of your personal data (name, address, email address, bank details) as well as your usage data (username, password). This allows us to identify you as a customer and gives you the ability to manage your orders. Your data will be processed on the basis of your consent in accordance with Article 6 para. 1 a) GDPR.

h) Application of cookies

We use "cookies" on our website. Cookies are small text files that are stored on your respective end device (PC, smartphone, tablet, etc.) and saved by your browser.

Information about the specific cookies we use, their providers and purposes can be found in our consent banner. In the cookie banner, you provide your consent to the respective services; you can revoke them or adjust your settings afterwards.

We only use technically necessary cookies on our website.

i) Analysis and marketing

aa) Our consent banner
We use a consent banner to document your selection for certain data processing processes and to meet our data protection obligations. When you visit our website, your cookie preferences will be queried via a banner. We then set a cookie in which data on granted or revoked consent is stored. The data processing takes place to fulfill our legal obligations according to Article 6 para. 1 c) GDPR.

bb) Matomo

We use the open source analysis service Matomo on our website. Matomo was configured in such a way that no cookies are set. However, Matomo uses other technologies to process information, e.g. about your device type, log-ins or the operating system you are using, in order to analyze user behavior. We use this stored information to evaluate your use of the website, to compile reports on website activity for ourselves, and for the provision of other services related to Internet use and use of the website.

The legal basis for data processing is your consent in accordance with Article 6 para. 1 a) GDPR.

You can revoke your consent at any time by changing your preferences in our consent banner.

j) External content

aa) Payment service provider seals

We use seals of the payment service "Paypal" on our website. These are loaded from servers of PayPal (Europe) S.à r.l. et Cie, S.C.A. when visiting the website. In the process, the name of the website accessed, the date and time of access, the amount of data transferred, the browser type and version, the operating system you are using, the referrer URL (the previously visited website), your IP address and the requesting provider are transmitted to the servers of the respective provider.

The legal basis for data processing is our overriding legitimate interest in the optimal marketing of our online offering pursuant to Art. 6 para. 1 f) GDPR.

Further information on data protection can be found at:

PayPal: https://www.paypal.com/en/webapps/mpp/ua/privacy-full?locale.x=en_EN

bb) Advertising banner

We partially integrate advertising banners of our partners on our website. These are loaded directly from the servers of our partner and displayed on our site. For this purpose, the IP address is transmitted to the partner's server and stored. This processing is based on our overriding legitimate interest in the marketing of our partner products according to Art. 6 para. 1 f) GDPR.

5. Data retention period

We only store personal data for as long as it is necessary for the purposes for which it is processed or you have revoked your consent. As far as statutory storage requirements are concerned, the storage period for certain data can be up to 10 years regardless of the processing purposes.
 

6. Your rights as a data subject

a) Information
On request and at no cost, you may receive information about the personal data that we have stored about you at any time.

b) Correction, erasure, restriction of processing (blocking), objection
In the event that you are no longer happy for your personal data to be stored or if the personal data is no longer correct, then with appropriate notice we will have your data deleted or blocked or make the necessary corrections (to the extent that this is possible, according to the applicable law). The same applies if we should only process data to a limited extent in the future. You have a right of objection in particular in those cases in which your data is required due to the performance of a task that is in the public interest or our legitimate interest, as well as profiling based thereon. You also have such a right of objection in the case of data processing for the purpose of direct advertising.

c) Right of revocation of consent with future effect
Expressed consent may be revoked at any time, applicable for future interactions. Your revocation does not affect the legality of the processing up to the point in time of the revocation

d) Data portability
If data processing takes place on the basis of a contract, pre-contractual negotiations, consent or using automated procedures, you have the right to data portability. Upon request, we will provide you with your data in a common, structured and machine-readable format so that you can transfer the data to another data controller if you wish.

e) Restrict the processing of your data
Data from which we are unable to identify the data subject, for example if it has been anonymised for analysis purposes, are not covered by the above rights. Information, deletion, blocking, correction or transfer to another company may be possible with respect to such information if you provide us with additional information that allows us to identify you.

f) Exercising your rights as a data subject and the right to lodge a complaint
If you have any questions about the processing of your personal data, information, correction, blocking, objection or deletion of data or the request to transfer the data to another company, please contact datenschutz[at]hanscarl.com.

You also have the opportunity to lodge a complaint with a supervisory authority about your rights as a data subject.