This privacy policy is divided into the following sections:
Data processing on our websites
Data processing on our social media channels
Data processing within our apps
PONS Langenscheidt GmbH protects and respects your personal data and your privacy with the highest priority.
In our privacy policy, we would like to provide transparent information about which data processing takes place in connection with our company and what rights you have in connection with your data. Your personal data is always collected and processed in accordance with the General Data Protection Regulation (GDPR) and any other data protection regulations.
We treat your data as strictly confidential and attach great importance to the protection of your personal information. If you have any questions or concerns regarding this statement or the processing of your data, please do not hesitate to contact us.
PONS Langenscheidt GmbH
Stöckachstraße 11
70190 Stuttgart
Germany
Phone: 0711 89 462 - 100
E-mail: kundenservice@pons.de
Jörg ter Beek
Cortina Consult GmbH
Hafenweg 24
48155 Münster
Data protection team for general data protection inquiries:
Team e-mail: datenschutz@pons.de
Website: https://www.cortina-consult.com/
If you have any questions about the processing of your personal data, if you wish to assert your rights as a data subject (such as the right to information, correction, blocking or deletion of data) or if you wish to withdraw your consent, please contact our data protection officer directly.
We would like to explain to you transparently how we handle your data when you use our services to translate your texts: What happens to the texts you enter: As soon as you enter your texts into our service, they are transferred to our servers. This step is necessary so that we can translate or improve your texts for you. Without this transfer, our service would not be usable. Your personal data will be deleted immediately after the texts have been translated or improved. What do we use your texts for? We store the texts & uploaded documents entered by you only for the duration and purpose of the processing, i.e. for the translation or improvement of the texts. After this processing, the texts and uploaded documents are deleted. We do NOT store this data to train our translation models or improve our service. How we treat your glossary data: If you use our glossary function to save certain terms or pairs of terms, we store this data on our servers so that it is only accessible to you, so that you can use your glossaries across devices and use them in the translation process for a customized translation. How does the PONS Translate Enterprise Interface version differ? If you use our PONS Translate Enterprise Interface, some functions and therefore also your personal data will be handled differently: Translated documents are saved within your account for retrieval.Translate with PONS Translate
We only store your personal data for the period required to fulfill the specified purpose. Once the purpose no longer applies and any retention periods have expired, your data will be deleted immediately. If deletion is not possible, the data will be blocked instead.
The EU General Data Protection Regulation (GDPR) provides for extensive rights for data subjects in Chapter III, which we explain to you accordingly below with regard to the processing of your personal data:
This requirement concerns in particular information on the following details of data processing:
We will correct any erroneous data immediately, provided that you inform us of the circumstance accordingly.
Provided that the processing is no longer necessary and one of the following conditions is met:
Within the scope of the deletion request, we will, if necessary, pass on your request to those third parties to whom a transfer of your data had previously taken place.
Provided that one of the following conditions is met:
If it is technically possible and does not affect the rights and freedoms of other persons, we will - at your request - transfer your data to another recipient (responsible party).
If we collect or have collected and process personal data from you (on the basis of Art. 6 (1) e or f or Art. 9 (2) a GDPR), you have the right to object to the data processing (including profiling) at any time (with effect for the future). In exceptional cases, the objection may be ineffective, e.g. if we can demonstrate compelling interests worthy of protection for the processing that outweigh your interests or processing serves the assertion, exercise or defense of legal claims. If we process your personal data for the purpose of direct marketing, you have the right to object to such processing at any time. This also applies to profiling, insofar as it is related to such direct advertising. You also have the right to object to processing of your data concerning you which is carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Article 89 (1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.
If we collect or have collected and process personal data from you, you have the right not to be subject to any decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you. Exceptions to this requirement apply if the decision is necessary for the conclusion or performance of a contract between you and us or you have expressly consented to the processing. In any case, we will take reasonable steps to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain the intervention of a person on our part, to express our own point of view and to contest the decision.
You have the right to revoke consent to the processing of personal data at any time.
A list of the supervisory authorities responsible in Germany can be found on the website of the Federal Commissioner for Data Protection or at the following link: https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html.
We process personal data in accordance with the provisions of the GDPR, depending on the type and purpose of processing, as follows
| Authorization | Requirement of the GDPR |
| Informed consent | Art. 6 para. 1 a |
| Fulfillment of a contract | Art. 6 para. 1 b |
| Implementation of pre-contractual measures | Art. 6 para. 1 b |
| Fulfillment of legal obligations | Art. 6 para. 1 c |
| Protection of vital interests | Art. 6 para. 1 d |
| Safeguarding our legitimate interest | Art. 6 para. 1 f |
Our legitimate interest as defined in Article 6(1)(f) GDPR is based on the performance of our business activities to maintain our operational capability and secure the employment of our employees.
We do not use automatic decision-making or profiling techniques.
The following information applies to data processing on our website in general. If there are exceptions or additions to this information, these are described in detail in the respective sections.
We protect your personal data processed by us against loss, destruction, access, alteration or distribution by unauthorized persons by means of appropriate technical and organizational measures. However, despite regular checks, complete protection against all risks is not possible.
After the purpose of storage has ceased, the retention periods are generally at least six or ten years. As a rule, data is deleted immediately in accordance with our deletion concept, provided that this does not conflict with any retention obligation, necessity for contract fulfillment or a legitimate interest.
As soon as you visit our website, our web server collects some general data and technical information - as shown in the table below:
Data collected | Purpose of the survey |
|---|---|
| browser types and versions used | correct display of the page content |
| Operating system used, visitor origin (referrer, e.g. Google), subpages clicked on | Optimization of our website content as well as our advertising |
| Date and time of access to the website as well as IP address and internet service provider of the visitor | Ensuring the permanent functionality of our IT systems (for the operation of the website) and prevention of misuse |
Other data and information for security in the event of attacks | Providing relevant information to law enforcement agencies in the event of a cyberattack |
Under certain circumstances (e.g. due to legal or contractual regulations), an obligation arises for you to provide us with your personal data. Examples of such processing as follows:
Nature or purpose of the processing | Need |
|---|---|
| Conclusion of a sales contract (e.g. your address) | Fulfillment of the contractual obligation (e.g. delivery of the goods to your address) |
| In the employee context (e.g. transmission of data to the tax office) | Compliance with legal requirements (e.g. tax regulations) |
| Purpose of the processing | Processing and, if necessary, answering the request of the form sender |
| Legal basis (pursuant to Art. 6 / 9 GDPR) | |
| Recipient, if applicable (in case of forwarding) | Prospero GmbH, Müllerstrasse 27, 80469 Munich & Amevida Freiburg GmbH, Zinkmattenstrasse 6a, 79108 Freiburg |
| If applicable, intention of onward transfer to a third country or international organization (incl. information on adequacy decision of the Commission or suitable guarantees) | Data transfer to a third country does not take place and is not planned. |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | There is no obligation. |
| Consequences of non-compliance (failure to provide the required data) | none |
| If applicable, existence of automated decision-making | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data originates from the person concerned. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | Data and categories requested in the respective form. |
| Change of purpose, if applicable | none |
| Purpose of the processing |
| ||||
| Legal basis (pursuant to Art. 6 / 9 GDPR) | |||||
| Recipient, if applicable (in case of forwarding) | none | ||||
| If applicable, intention of onward transfer to a third country or international organization (incl. information on adequacy decision of the Commission or suitable guarantees) | Data transfer to a third country does not take place and is not planned. | ||||
| If known: Duration of data storage | See General deadlines for data deletion | ||||
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | The user account cannot be created without the data. | ||||
| Consequences of non-compliance (failure to provide the required data) | The user account cannot be created without the data. | ||||
| If applicable, existence of automated decision-making | In this context, we do not use automated decision-making. | ||||
| If applicable, origin of the data (if not collected directly from the data subject) | The data originates from the person concerned. | ||||
| Change of purpose, if applicable | none |
| Purpose of the processing | Provision of information in the form of electronic circulars |
| Legal basis (pursuant to Art. 6 / 9 GDPR) | |
| Recipient, if applicable (in case of forwarding) | Sendinblue; Operator: Sendinblue SAS, 55 Rue d\'Amsterdam, 75008 Paris, France & Emarsys Interactive Services GmbH, Willi-Schwabe-Straße 1, 12489, Berlin, Germany |
| If applicable, intention of onward transfer to a third country or international organization (incl. information on adequacy decision of the Commission or suitable guarantees) | Data transfer to a third country does not take place and is not planned. |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | There is no obligation to provide personal data. Newsletters are only sent after registration via a double opt-in procedure (voluntary and revocable informed consent in accordance with Article 6 (1) a GDPR) or after a purchase contract has been successfully concluded and the e-mail address has been collected in this process (in accordance with Section 7 (3) UWG). |
| Consequences of non-compliance (failure to provide the required data) | Failure to comply (i.e. failure to provide the required data) would result in the newsletter not being delivered to you. |
| If applicable, existence of automated decision-making | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data originates from the person concerned. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | none |
| Change of purpose, if applicable | none |
In addition to the data required for order processing, we also store your Internet address (IP address) in order to monitor our payment system for unauthorized transactions. In specific cases of fraud or suspected fraud, the IP address is forwarded to law enforcement authorities for investigation. The IP address will be deleted once the purpose or retention period has expired. The legal basis for processing is the fulfillment of a contract pursuant to Art. 6 para. 1 lit. b GDPR, as well as our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.
| Purpose of the processing of general data |
| ||||||||
| Legal basis | Fulfillment of a contract (Art. 6 para. 1 lit. b GDPR) | ||||||||
| Recipient, if applicable (in case of forwarding) | Parcel service providers, logistics service providers, payment service providers, debt collection companies, billing and customer management, technical service providers (Stuttgarter Verlagskontor GmbH, Rotebühlstr. 77, 70178 Stuttgart & Balmer Bücherdienst AG, Kobiboden, CH-8840 Einsiedeln) | ||||||||
| If applicable, intention of onward transfer to a third country or international organization (incl. information on adequacy decision of the Commission or suitable guarantees) | Data transfer to a third country does not take place and is not planned. | ||||||||
| If known: Duration of data storage |
| ||||||||
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | The data (in the mandatory fields) must be provided as part of the underlying contract. | ||||||||
| Consequences of non-compliance (failure to provide the required data) | It is not possible to create a customer account in this case. | ||||||||
| If applicable, existence of automated decision-making | In this context, we do not use automated decision-making. | ||||||||
| If applicable, origin of the data (if not collected directly from the data subject) | The data originates from the person concerned. | ||||||||
| Where applicable, categories of personal data (if not collected directly from the data subject). | The data originates from the person concerned. | ||||||||
| Change of purpose, if applicable | none |
We use cookies on this website; these are small text files that are stored on your computer via your internet browser (e.g. Google Chrome, Safari, Firefox, Edge). These cookies are used for various purposes: Many cookies are technically necessary to provide you with certain website functions (e.g. shopping cart functions, saving your login information), other cookies are used for the security of your data or the website and some cookies can be used to analyze your user behavior. The latter cookies may contain a so-called cookie ID - a unique identifier consisting of a character string that enables websites and servers to be assigned to the storing browser.
Cookies that are necessary to carry out the transmission of a message via a public telecommunications network and cookies that are absolutely necessary to provide you with an expressly requested function are referred to as "technically necessary cookies" and may be set without your explicit consent (Section 25 (2) TDDDG). All other cookies are subject to consent (Section 25 (1) TDDDG); where applicable, this is regulated by our consent management platform.
We use cookies in part only for the duration of your visit to the website, in part for a predefined period and in part permanently. You can delete all these cookies manually or automatically at any time via your web browser.
It is possible to use our website (although possibly not to its full extent) without cookies. Most browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies or set your browser so that it notifies you as soon as cookies are sent.
In rare cases, we also use your data to send advertising or e-mail advertising for our products, provided you have been our customer for three years, you have given us your postal address or e-mail address and you have not objected to the advertising (for your right to object, see 5.4). The data is processed on the basis of Art. 6 para. 1 f) GDPR. We have a legitimate economic interest in sending advertising to our existing customers by post or email.
| Purpose of the processing | Applicant data is collected, processed and used for the purpose of selecting potential employees. |
| Legal basis (pursuant to Art. 6 / 9 GDPR) | |
| Recipient, if applicable (in case of forwarding) | softgarden e-recruiting GmbH, Tauentzienstraße 14, 10789 Berlin, Germany |
| If applicable, intention of onward transfer to a third country or international organization (incl. information on adequacy decision of the Commission or suitable guarantees) | Forwarding does not take place and is not planned. |
| If known: Duration of data storage | The personal data of applicants whom we do not hire will be stored for the period required for possible legal claims (e.g. under the General Equal Treatment Act (AGG)) (maximum 6 months) and then immediately destroyed or deleted. |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | For a smooth application process, it is necessary that you provide us with the requested information truthfully. |
| Consequences of non-compliance (failure to provide the required data) | Failure to do so (i.e. failure to provide the required data) may mean that an employment contract cannot be concluded with you. |
| If applicable, existence of automated decision-making | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | As a rule, the data originates from the data subject themselves; however, it may also originate from third parties. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | Master data, contact data, application data |
| Change of purpose, if applicable | If we take you on as an employee after the application process has been completed, the purpose for processing the relevant data will change: in this case, the data will be used in future to implement and maintain the employment relationship. |
| Data type | Cookies, device IDs and similar tracking technologies on end devices |
| Purpose of the processing | Display of usage-based advertising ("advertising tracking") |
| Legal basis (pursuant to Art. 6 / 9 GDPR) | Voluntary consent(Art. 6 para. 1 lit. a) |
| Recipient, if applicable (in case of forwarding) | none |
| If applicable, intention of onward transfer to a third country or international organization (incl. information on adequacy decision of the Commission or suitable guarantees) | Data transfer to a third country does not take place and is not planned. |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | The user account cannot be created without the data. |
| Consequences of non-compliance (failure to provide the required data) | The user account cannot be created without the data. |
| If applicable, existence of automated decision-making | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data originates from the person concerned. |
| Change of purpose, if applicable | none |
| Data type | Cookies and tracking technologies |
|---|---|
| Purpose of the processing | Ensuring functionality and measuring the range |
| Legal basis (pursuant to Art. 6 / 9 GDPR) | Protection of legitimate interests (Art. 6 para. 1 f) |
| Recipient, if applicable (in case of forwarding) | none |
| If applicable, intention of onward transfer to a third country or international organization (incl. information on adequacy decision of the Commission or suitable guarantees) | Data transfer to a third country does not take place and is not planned. |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | The user account cannot be created without the data. |
| Consequences of non-compliance (failure to provide the required data) | The user account cannot be created without the data. |
| If applicable, existence of automated decision-making | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data originates from the person concerned. |
| Change of purpose, if applicable | none |
| Purpose of the processing |
| ||||||||
| Legal basis (pursuant to Art. 6 / 9 GDPR) | |||||||||
| Recipient, if applicable (in case of forwarding) | In the case of data transfer to enable the offering of languages that are not officially supported: Microsoft Corporation, One Microsoft Way Redmond, Washington 98052, destination of the data transfer is in France. | ||||||||
| If applicable, intention of onward transfer to a third country or international organization (incl. information on adequacy decision of the Commission or suitable guarantees) | Data transfer to a third country does not take place and is not planned. | ||||||||
| If known: Duration of data storage | See General deadlines for data deletion | ||||||||
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | There is no obligation. | ||||||||
| Consequences of non-compliance (failure to provide the required data) | none | ||||||||
| If applicable, existence of automated decision-making | In this context, we do not use automated decision-making. | ||||||||
| If applicable, origin of the data (if not collected directly from the data subject) | The data originates from the person concerned. | ||||||||
| Change of purpose, if applicable | none |
| Purpose of the processing | Provision of a data protection management platform |
| Legal basis | |
| Recipient, if applicable (in case of forwarding) | OneTrust, LLC, Beavis Morgan and BM2020, 82, St. John Street, Farringdon, London Borough of Islington, London, Islington, Greater London, England, EC1M 4JN, United Kingdom |
| If applicable, intention of onward transfer to a third country or international organization (incl. information on adequacy decision of the Commission or suitable guarantees) | none |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | none |
| Consequences of non-compliance (failure to provide the required data) | none |
| If applicable, existence of automated decision-making | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | As a rule, the data originates from the data subject themselves. |
| If applicable, categories of personal data (if not collected directly from the data subject) | which pages and functions are accessed or clicked on during the website visit (click behavior), IP address assigned by the Internet service provider (ISP) in anonymized form, previously visited website (referrer), subpages visited, time spent on the website, frequency of visit, date, access location, time of visit, user agent |
| Change of purpose, if applicable | none |
| Opt-Out | Installation of the browser plugin: https://tools.google.com/dlpage/gaoptout, see also under Cookies |
| Data protection officer of the provider | https://support.google.com/policies/contact/general_privacy_form |
| Privacy policy of the provider | https://policies.google.com/technologies/cookies?hl=en |
| Purpose of processing | Web analysis tool that interprets user behavior |
| Legal basis (according to Art. 6 / 9 GDPR) | |
| Recipient (if applicable) | Amplitude, San Francisco, California |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | United States of America |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | no |
| Consequences of non-compliance (in case of failure to provide the required data) | no |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually comes from the data subject, but can also come from third parties. |
| Change of purpose, if applicable | no |
| Purpose of processing | Website hosting |
| Legal basis (according to Art. 6 / 9 GDPR) | |
| Recipient (if applicable) | Gandi SAS, 63-65 Boulevard Masséna, 75013 Paris |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | none |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | no |
| Consequences of non-compliance (in case of failure to provide the required data) | no |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually comes from the data subject, but can also come from third parties. |
| Change of purpose, if applicable | no |
| Purpose of the processing | Creation of usage profiles to optimize the cost-benefit factor on the website |
| Legal basis | |
| Recipient, if applicable (in case of forwarding) | Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Irelandhttps://policies.google.com/technologies/cookies?hl=en |
| If applicable, intention of onward transfer to a third country or international organization (incl. information on adequacy decision of the Commission or suitable guarantees) | United States of America |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | none |
| Consequences of non-compliance (failure to provide the required data) | none |
| If applicable, existence of automated decision-making | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | As a rule, the data originates from the data subject themselves. |
| If applicable, categories of personal data (if not collected directly from the data subject) | which pages and functions are accessed or clicked on during the website visit (click behavior), IP address assigned by the Internet service provider (ISP) in anonymized form, previously visited website (referrer), subpages visited, time spent on the website, frequency of visit, date, access location, time of visit, user agent |
| Change of purpose, if applicable | none |
| Opt-Out | Installation of the browser plugin: https://tools.google.com/dlpage/gaoptout, see also under Cookies |
| Data protection officer of the provider | https://support.google.com/policies/contact/general_privacy_form |
| Privacy policy of the provider | https://policies.google.com/technologies/cookies?hl=en |
| Purpose of processing | Placement of advertisements for relevant search queries in the results of the Google search engine and in the network of Google Ads participants.Evaluation of success rates of placed advertisements (conversion tracking) |
| Legal basis (according to Art. 6 / 9 GDPR) | |
| Recipient (if applicable) | Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Irland |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | if applicable, transfer, storage and processing in the USA; Google LLC The data transfer is based on the EU-US Data Privacy Framework, through which Google LCC is certified. |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | no |
| Consequences of non-compliance (in case of failure to provide the required data) | no |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually comes from the data subject, but can also come from third parties. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | Which pages and functions are accessed or clicked during the website visit (click behavior), IP address assigned by the Internet service provider (ISP) in anonymized form, previously visited website (referrer), subpages visited, time spent on the website, frequency of visits, date, access location, Time of visit, user agent |
| Change of purpose, if applicable | no |
| Opt-Out | Prevent cookies from being set, object to interest-based advertising by Google at https://adssettings.google.de/ , See also under Cookies |
| Data protection officer of the provider | https://support.google.com/policies/contact/general_privacy_form |
| Privacy policy of the provider | https://policies.google.com/privacy?hl=en |
| Purpose of processing | Simplified management of analysis tools through central control and management of the collected analysis mechanisms |
| Legal basis | Consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG) |
| Recipient (if applicable) | Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Irland |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | If applicable, transfer, storage and processing of personal data in the USA. The data transfer is based on the standard contractual clauses of the EU Commission. Google LLC is certified according to the EU-US Data Privacy Framework (DPF). |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | no |
| Consequences of non-compliance (in case of failure to provide the required data) | no |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | As a rule, the data comes from the person concerned. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | which pages and functions are accessed or clicked during the website visit (click behavior), IP address assigned by the Internet service provider (ISP) in anonymized form, previously visited website (referrer), subpages visited, time spent on the website, frequency of visits, date, access location, time of visit |
| Opt-Out | no |
| Data protection officer of the provider | https://support.google.com/policies/contact/general_privacy_form |
| Privacy policy of the provider | https://policies.google.com/privacy?hl=en |
| Purpose of processing | Creation of usage profiles to optimize the website in terms of the cost-benefit factor |
| Legal basis (according to Art. 6 / 9 GDPR) | |
| Recipient (if applicable) | Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | Data transfer to a third country does not take place and is not planned. |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | no |
| Consequences of non-compliance (in case of failure to provide the required data) | no |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | As a rule, the data comes from the person concerned. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | Date and time of visit, device type, geographical location, IP address, mouse movements, pages visited, referrer URL, screen resolution, own device identifier, language information, device operating system, browser type, clicks, domain name, own user ID, user agent |
| Change of purpose, if applicable | no |
| Opt-Out | See Cookies and https://www.hotjar.com/legal/compliance/opt-out |
| Data protection officer of the provider | dpo@hotjar.com |
| Privacy policy of the provider | https://www.hotjar.com/legal/policies/privacy |
| Purpose of processing | A platform for digital audience measurement. |
| Legal basis (according to Art. 6 / 9 GDPR) | |
| Recipient (if applicable) | INFOnline GmbH, 9, Brühler Straße, Nordstadt, Bonn district, Bonn, North Rhine-Westphalia, 53119, Germany |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | United States of America |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | no |
| Consequences of non-compliance (in case of failure to provide the required data) | no |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually comes from the data subject, but can also come from third parties. |
| Change of purpose, if applicable | no |
| Purpose of processing | Provision of an Authenticated Traffic Solution (ATS) for marketing purposes (placement of advertisements) |
| Legal basis (according to Art. 6 / 9 GDPR) | |
| Recipient (if applicable) | LiveRamp, Inc, 225 Bush St FL 17, San Francisco, CA 94104, United States of America |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | United States of America |
| Where applicable, categories of personal data (if not collected directly from the data subject). | IP address, unique mobile device identifier, browser information, device operating system, browser type, browser version, cookie ID, third-party information, Android/Google advertising ID, iOS ID for advertisers, device identifier |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | no |
| Consequences of non-compliance (in case of failure to provide the required data) | no |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually comes from the data subject, but can also come from third parties. |
| Opt-Out | https://liveramp.com/opt_out/ |
| Change of purpose, if applicable | no |
| Purpose of processing | This is an open source web analytics service used to analyze user behavior and optimize the website. |
| Legal basis (according to Art. 6 / 9 GDPR) | legitimate interest (Art. 6 para. 1 lit. f GDPR) |
| Recipient (if applicable) | none |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | A data transfer to a third country does not take place and is not planned. |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | none |
| Consequences of non-compliance (in case of failure to provide the required data) | none |
| If applicable, existence of an automated decision-making process | In this context, we do not use automatic decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually originates from the data subject, but may also originate from third parties. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | Browser language, Browser type, Device operating system, Device type, Geographic location, IP address, Number of visits, Referrer URL, Screen resolution, Usage data, Subpages visited. |
| Change of purpose if necessary | none |
| Purpose of processing | Functionality, optimization |
| Legal basis (according to Art. 6 / 9 GDPR) | |
| Recipient (if applicable) | Microsoft Corporation One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18 P521, Irelandhttps://privacy.microsoft.com/de-de/privacystatement |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | United States of America, Microsoft Corporation The data transfer is based on the EU-US Data Privacy Framework, with which Microsoft Corporation is certified. |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | no |
| Consequences of non-compliance (in case of failure to provide the required data) | no |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually comes from the data subject, but can also come from third parties. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | IP address, date and time of visit, user agent, referrer URL |
| Change of purpose if necessary | no |
| Purpose of processing | This is a video player service. It can be used by users to view, rate, share, comment on and upload videos. |
| Legal basis (according to Art. 6 / 9 GDPR) | |
| Recipient (if applicable) | Google Ireland Limited; Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | If applicable, transmission, storage and processing in the USA, Google LLCThe data transfer is based on the EU-U.S. Data Privacy Framework through which Google LCC is certified. |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | none |
| Consequences of non-compliance (in case of failure to provide the required data) | none |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually originates from the data subject, but may also originate from third parties. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | Device informationIP addressReferrer URLViewed videos |
| Change of purpose if necessary | none |
| Change of purpose if necessary | https://safety.google/privacy/privacy-controls/ |
| Data protection officer of the provider | https://support.google.com/policies/contact/general_privacy_form |
| Privacy policy of the provider | https://policies.google.com/privacy?hl=en |
| Purpose of processing | Delivering and hosting video content. |
| Legal basis (according to Art. 6 / 9 GDPR) | |
| Recipient (if applicable) | Vimeo LLC555 West 18th Street, New York, New York 10011, United States of Americahttps://vimeo.com/privacy |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | United States of America |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | no |
| Consequences of non-compliance (in case of failure to provide the required data) | no |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | Browser information, browser language, browser type, cookie information, device information, device operating system, information from third-party sources, IP address, pages visited, referrer URL, information that users provide on the website, search queries, geographic location, content viewed, user agent |
| Where applicable, categories of personal data (if not collected directly from the data subject). | no |
| Change of purpose if necessary | no |
| Data protection officer of the provider | Privacy@vimeo.com |
| Privacy policy of the provider | https://vimeo.com/privacy |
| Purpose of processing | Advertising, marketing, personalization, retargeting, analysis |
| Legal basis (according to Art. 6 / 9 GDPR) | |
| Recipient (if applicable) | Criteo SA, 32 Rue Blanche, 75009 Paris, France Firstlead GmbH, Rosenfelder Str. 15-16, 10315 Berlin, Germany LinkedIn Ireland Unlimited Company, LinkedIn Inc PubMatic, Redwood City, CA Amazon Europe Core S.à.r.l., Amazon EU S.à.r.l. and Amazon Media EU S.à.r.l., all three located at 38, avenue John F. Kennedy, L-1855 Luxembourg Polarbyte, 8470 Enterprise Cir, Lakewood Ranch, FL 34202, United States Teads Hamburg, Poststrasse 6, 20354 Hamburg, Germany 3Lift, New York, United States of America Meta Platforms, Inc, California, United States of America |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | United States of America |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | no |
| Consequences of non-compliance (in case of failure to provide the required data) | no |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually comes from the data subject, but can also come from third parties. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | Browser information, click path, date and time of visit, device information, files accessed, location information, IP address, mobile advertising IDs, number of page views, products accessed, search terms, technical IDs, usage data, number of ads displayed, referrer URL, user agent |
| Change of purpose, if applicable | no |
| Opt-Out | https://www.criteo.com/privacy/#user-choices |
| Data protection officer of the provider | dpo@criteo.com |
| Privacy policy of the provider | https://www.criteo.com/privacy/ |
| Purpose of processing | Setting up online shops |
| Legal basis (according to Art. 6 / 9 GDPR) | |
| Recipient (if applicable) | Automattic Inc. (60 29th Street #343, San Francisco, CA 94110, USA) |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | United States of America |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | no |
| Consequences of non-compliance (in case of failure to provide the required data) | no |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually comes from the data subject, but can also come from third parties. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | IP address, browser information |
| Change of purpose if necessary | no |
| Purpose of the processing | Creation of usage profiles to optimize the cost-benefit factor on the website |
| Legal basis | |
| Recipient, if applicable (in case of forwarding) | Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Irelandhttps://policies.google.com/technologies/cookies?hl=en |
| If applicable, intention of onward transfer to a third country or international organization (incl. information on adequacy decision of the Commission or suitable guarantees) | United States of America |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | none |
| Consequences of non-compliance (failure to provide the required data) | none |
| If applicable, existence of automated decision-making | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | As a rule, the data originates from the data subject themselves. |
| If applicable, categories of personal data (if not collected directly from the data subject) | which pages and functions are accessed or clicked on during the website visit (click behavior), IP address assigned by the Internet service provider (ISP) in anonymized form, previously visited website (referrer), subpages visited, time spent on the website, frequency of visit, date, access location, time of visit, user agent |
| Change of purpose, if applicable | none |
| Opt-Out | Installation of the browser plugin: https://tools.google.com/dlpage/gaoptout, see also under Cookies |
| Data protection officer of the provider | https://support.google.com/policies/contact/general_privacy_form |
| Privacy policy of the provider | https://policies.google.com/technologies/cookies?hl=en |
| Purpose of the processing | Provision of a data protection management platform |
| Legal basis | |
| Recipient, if applicable (in case of forwarding) | OneTrust, LLC, Beavis Morgan and BM2020, 82, St. John Street, Farringdon, London Borough of Islington, London, Islington, Greater London, England, EC1M 4JN, United Kingdom |
| If applicable, intention of onward transfer to a third country or international organization (incl. information on adequacy decision of the Commission or suitable guarantees) | none |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | none |
| Consequences of non-compliance (failure to provide the required data) | none |
| If applicable, existence of automated decision-making | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | As a rule, the data originates from the data subject themselves. |
| If applicable, categories of personal data (if not collected directly from the data subject) | which pages and functions are accessed or clicked on during the website visit (click behavior), IP address assigned by the Internet service provider (ISP) in anonymized form, previously visited website (referrer), subpages visited, time spent on the website, frequency of visit, date, access location, time of visit, user agent |
| Change of purpose, if applicable | none |
| Opt-Out | Installation of the browser plugin: https://tools.google.com/dlpage/gaoptout, see also under Cookies |
| Data protection officer of the provider | https://support.google.com/policies/contact/general_privacy_form |
| Privacy policy of the provider | https://policies.google.com/technologies/cookies?hl=en |
| Purpose of processing | Marketing, advertisements. |
| Legal basis (according to Art. 6 / 9 GDPR) | |
| Recipient (if applicable) | Firstlead GmbHRosenfelder Str. 15-1610315 BerlinDeutschlandhttps://www.adcell.de/agb |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | Data transfer to a third country does not take place and is not planned. |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | no |
| Consequences of non-compliance (in case of failure to provide the required data) | no |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually comes from the data subject, but can also come from third parties. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | no |
| Change of purpose if necessary | no |
| Purpose of the processing | Provision of an online marketing solution |
| Legal basis (pursuant to Art. 6 / 9 GDPR) | |
| Recipient, if applicable (in case of forwarding) | Ströer Media Deutschland GmbH, Ströer-Allee 1, 50999 Cologne, Germany |
| If applicable, intention of onward transfer to a third country or international organization (incl. information on adequacy decision of the Commission or suitable guarantees) | none |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | none |
| Consequences of non-compliance (failure to provide the required data) | none |
| If applicable, existence of automated decision-making | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually originates from the data subject, but may also originate from third parties. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | Items placed in the shopping cart, crash data, date and time of the visit, browser language, search terms, device type, log file data, IP address. |
| Change of purpose, if applicable | none |
| Purpose of processing | Cloud computing, website hosting |
| Legal basis (according to Art. 6 / 9 GDPR) | |
| Recipient (if applicable) | Amazon Web Services EMEA SARL 38 Avenue John F. Kennedy, L-1855, Luxembourg. We have concluded a data processing agreement with the recipient so that the personal data of our website visitors will only be processed in accordance with our instructions. |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | If applicable, transfer, storage and processing of personal data in the USA. The data transfer is based on the standard contractual clauses of the EU Commission. Amazon.com, Inc. is certified according to the EU-US Data Privacy Framework (DPF). |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | no |
| Consequences of non-compliance (in case of failure to provide the required data) | no |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually comes from the data subject, but can also come from third parties. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | Applications accessed, authentication and security information, browser plugins, browser type, browser version, click path, content interaction information, cookie ID, cookie information, device information, device type, download errors, content downloaded from AWS, duration and number of concurrent streams and downloads, email address, full URL clickstream to, through and from the AWS website (including date and time), geographic location, interactions or communications with AWS, internet service provider, IP address, mouse movements, type of network connection, usage data, time zone |
| Change of purpose if necessary | no |
| Purpose of processing | Placement of advertisements for relevant search queries in the results of the Google search engine and in the network of Google Ads participants.Evaluation of success rates of placed advertisements (conversion tracking) |
| Legal basis (according to Art. 6 / 9 GDPR) | |
| Recipient (if applicable) | Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Irland |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | if applicable, transfer, storage and processing in the USA; Google LLC The data transfer is based on the EU-US Data Privacy Framework, through which Google LCC is certified. |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | no |
| Consequences of non-compliance (in case of failure to provide the required data) | no |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually comes from the data subject, but can also come from third parties. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | Which pages and functions are accessed or clicked during the website visit (click behavior), IP address assigned by the Internet service provider (ISP) in anonymized form, previously visited website (referrer), subpages visited, time spent on the website, frequency of visits, date, access location, Time of visit, user agent |
| Change of purpose, if applicable | no |
| Opt-Out | Prevent cookies from being set, object to interest-based advertising by Google at https://adssettings.google.de/ , See also under Cookies |
| Data protection officer of the provider | https://support.google.com/policies/contact/general_privacy_form |
| Privacy policy of the provider | https://policies.google.com/privacy?hl=en |
| Purpose of the processing | Creation of usage profiles to optimize the cost-benefit factor on the website |
| Legal basis | |
| Recipient, if applicable (in case of forwarding) | Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Irelandhttps://policies.google.com/technologies/cookies?hl=en |
| If applicable, intention of onward transfer to a third country or international organization (incl. information on adequacy decision of the Commission or suitable guarantees) | United States of America |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | none |
| Consequences of non-compliance (failure to provide the required data) | none |
| If applicable, existence of automated decision-making | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | As a rule, the data originates from the data subject themselves. |
| If applicable, categories of personal data (if not collected directly from the data subject) | which pages and functions are accessed or clicked on during the website visit (click behavior), IP address assigned by the Internet service provider (ISP) in anonymized form, previously visited website (referrer), subpages visited, time spent on the website, frequency of visit, date, access location, time of visit, user agent |
| Change of purpose, if applicable | none |
| Opt-Out | Installation of the browser plugin: https://tools.google.com/dlpage/gaoptout, see also under Cookies |
| Data protection officer of the provider | https://support.google.com/policies/contact/general_privacy_form |
| Privacy policy of the provider | https://policies.google.com/technologies/cookies?hl=en |
| Purpose of processing | Simplified management of analysis tools through central control and management of the collected analysis mechanisms |
| Legal basis | Consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG) |
| Recipient (if applicable) | Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Irland |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | If applicable, transfer, storage and processing of personal data in the USA. The data transfer is based on the standard contractual clauses of the EU Commission. Google LLC is certified according to the EU-US Data Privacy Framework (DPF). |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | no |
| Consequences of non-compliance (in case of failure to provide the required data) | no |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | As a rule, the data comes from the person concerned. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | which pages and functions are accessed or clicked during the website visit (click behavior), IP address assigned by the Internet service provider (ISP) in anonymized form, previously visited website (referrer), subpages visited, time spent on the website, frequency of visits, date, access location, time of visit |
| Opt-Out | no |
| Data protection officer of the provider | https://support.google.com/policies/contact/general_privacy_form |
| Privacy policy of the provider | https://business.safety.google/privacy/ |
| Purpose of processing | Central product of the website |
| Legal basis | Consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG) |
| Recipient (if applicable) | Titanom Technologies GmbH, Gabriele-Münter-Straße 3, 82110 Germering, Germany |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | If applicable, transfer, storage and processing of personal data in the USA. The data transfer is based on the concluded data processing agreement pursuant to Art. 28 GDPR. |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | no |
| Consequences of non-compliance (in case of failure to provide the required data) | no |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | As a rule, the data comes from the person concerned. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | User data, text content |
| Purpose of processing | Error tracking and performance monitoring platform |
| Legal basis | Exercise of legitimate interest (Art. 6 para. 1 lit. f GDPR), if the use of Sentry is in the interest of the error-free functioning of your own website, otherwise consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG) |
| Recipient (if applicable) | Functional Software Inc. dba Sentry,45 Fremont Street 8th Floor, San Francisco, CA 94105, USAsecurity@sentry.iohttps://sentry.io/privacy/We have concluded an order processing contract with the recipient to ensure that the personal data of our website visitors is only processed in accordance with our instructions. |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | If applicable, transfer to and storage and processing of personal data in the USA.The data transfer is based on the standard contractual clauses of the EU Commission. Functional Software Inc. is certified in accordance with the EU-US Data Privacy Framework (DPF). |
| If known: Duration of data storage | Data is deleted as soon as it is no longer required for the purposes for which it was processed. See General time limits for data erasure |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | none |
| Consequences of non-compliance (in case of failure to provide the required data) | none |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually originates from the data subject, but may also come from third parties. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | User agent, usage data, device information, IP address, error data |
| Change of purpose, if applicable | none |
| Order processing agreement (AVV) or data processing addendum (DPA) | https://sentry.io/legal/dpa/3.0.0/ |
| Privacy policy of the provider | https://sentry.io/privacy/ |
| Purpose of the processing | Provision of an advertising service |
| Legal basis (pursuant to Art. 6 / 9 GDPR) | |
| Recipient, if applicable (in case of forwarding) | LoopMe Ltd, Ground Floor, 32-38 Saffron Hill, London EC1N 8FH, United Kingdom |
| If applicable, intention of onward transfer to a third country or international organization (incl. information on adequacy decision of the Commission or suitable guarantees) | none |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | none |
| Consequences of non-compliance (failure to provide the required data) | none |
| If applicable, existence of automated decision-making | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually originates from the data subject, but may also originate from third parties. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | Items placed in the shopping cart, crash data, date and time of the visit, browser language, search terms, device type, log file data, IP address. |
| Change of purpose, if applicable | none |
| Purpose of the processing | Provision of a data protection management platform |
| Legal basis | |
| Recipient, if applicable (in case of forwarding) | OneTrust, LLC, Beavis Morgan and BM2020, 82, St. John Street, Farringdon, London Borough of Islington, London, Islington, Greater London, England, EC1M 4JN, United Kingdom |
| If applicable, intention of onward transfer to a third country or international organization (incl. information on adequacy decision of the Commission or suitable guarantees) | none |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | none |
| Consequences of non-compliance (failure to provide the required data) | none |
| If applicable, existence of automated decision-making | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | As a rule, the data originates from the data subject themselves. |
| If applicable, categories of personal data (if not collected directly from the data subject) | which pages and functions are accessed or clicked on during the website visit (click behavior), IP address assigned by the Internet service provider (ISP) in anonymized form, previously visited website (referrer), subpages visited, time spent on the website, frequency of visit, date, access location, time of visit, user agent |
| Change of purpose, if applicable | none |
| Opt-Out | Installation of the browser plugin: https://tools.google.com/dlpage/gaoptout, see also under Cookies |
| Data protection officer of the provider | https://support.google.com/policies/contact/general_privacy_form |
| Privacy policy of the provider | https://policies.google.com/technologies/cookies?hl=en |
| Purpose of the processing | Hosting, structure and functionality of the website. |
| Legal basis (pursuant to Art. 6 / 9 GDPR) | |
| Recipient, if applicable (in case of forwarding) | Shopware AGEbbinghoff 10, 48624 Schöppingen, Germanyhttps://www.shopware.com/de/datenschutz/ |
| If applicable, intention of onward transfer to a third country or international organization (incl. information on adequacy decision of the Commission or suitable guarantees) | Data transfer to a third country does not take place and is not planned. |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | none |
| Consequences of non-compliance (failure to provide the required data) | none |
| If applicable, existence of automated decision-making | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually originates from the data subject, but may also originate from third parties. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | Items placed in the shopping cart, crash data, date and time of the visit, browser language, search terms, device type, log file data, IP address. |
| Change of purpose, if applicable | none |
| Purpose of the processing | Provision of an online survey tool |
| Legal basis (pursuant to Art. 6 / 9 GDPR) | |
| Recipient, if applicable (in case of forwarding) | SurveyMonkey Europe UC, Ella House, Suite 40.4, 40 Merrion Square East, Dublin 2, D02 NP96, Ireland |
| If applicable, intention of onward transfer to a third country or international organization (incl. information on adequacy decision of the Commission or suitable guarantees) | United States of America |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | none |
| Consequences of non-compliance (failure to provide the required data) | none |
| If applicable, existence of automated decision-making | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually originates from the data subject, but may also originate from third parties. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | Items placed in the shopping cart, crash data, date and time of the visit, browser language, search terms, device type, log file data, IP address. |
| Change of purpose, if applicable | none |
| Purpose of the processing | Provision of an analysis and tracking tool for marketing purposes by assigning an ID based on the personal data collected. |
| Legal basis (pursuant to Art. 6 / 9 GDPR) | |
| Recipient, if applicable (in case of forwarding) | ID5 Technology Ltd, 15 Bishopsgate, London EC2N 3AR, United Kingdom |
| If applicable, intention of onward transfer to a third country or international organization (incl. information on adequacy decision of the Commission or suitable guarantees) | United Kingdom |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | none |
| Consequences of non-compliance (failure to provide the required data) | none |
| If applicable, existence of automated decision-making | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually originates from the data subject, but may also originate from third parties. |
| Where applicable, categories of personal data (if not collected directly from the data subject). | Browser information (type, version, language, settings & cookie information), device information (type, model if applicable), IP address |
| Change of purpose, if applicable | none |
| Detailed information about ID5\'s data processing can be found here: https://id5.io/platform-privacy-policy | You can find detailed information about ID5\'s opt-out here: https://id5-sync.com/privacy |
| Purpose of the processing |
| ||||
| Legal basis (pursuant to Art. 6 / 9 GDPR) | |||||
| Recipient, if applicable (in case of forwarding) | none | ||||
| If applicable, intention of onward transfer to a third country or international organization (incl. information on adequacy decision of the Commission or suitable guarantees) | Data transfer to a third country does not take place and is not planned. | ||||
| If known: Duration of data storage | See General deadlines for data deletion | ||||
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | The user account cannot be created without the data. | ||||
| Consequences of non-compliance (failure to provide the required data) | The user account cannot be created without the data. | ||||
| If applicable, existence of automated decision-making | In this context, we do not use automated decision-making. | ||||
| If applicable, origin of the data (if not collected directly from the data subject) | The data originates from the person concerned. | ||||
| Change of purpose, if applicable | none |
| Purpose of the processing |
| ||||||||
| Legal basis (pursuant to Art. 6 / 9 GDPR) | |||||||||
| Recipient, if applicable (in case of forwarding) | none | ||||||||
| If applicable, intention of onward transfer to a third country or international organization (incl. information on adequacy decision of the Commission or suitable guarantees) | Data transfer to a third country does not take place and is not planned. | ||||||||
| If known: Duration of data storage | See General deadlines for data deletion | ||||||||
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | There is no obligation. | ||||||||
| Consequences of non-compliance (failure to provide the required data) | none | ||||||||
| If applicable, existence of automated decision-making | In this context, we do not use automated decision-making. | ||||||||
| If applicable, origin of the data (if not collected directly from the data subject) | The data originates from the person concerned. | ||||||||
| Change of purpose, if applicable | none |
| Purpose of processing | Web analysis tool that interprets user behavior |
| Legal basis (according to Art. 6 / 9 GDPR) | |
| Recipient (if applicable) | Amplitude, San Francisco, California |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | United States of America |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | no |
| Consequences of non-compliance (in case of failure to provide the required data) | no |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually comes from the data subject, but can also come from third parties. |
| Change of purpose, if applicable | no |
We may collect personal data for the operation of our Facebook website. Your data is generally collected and processed in pseudonymized form, i.e. we cannot assign your data directly to your name or email address. In this respect, processing takes place via a profile based on an ID or a cookie. You can significantly influence the processing of your data; simply click on the Settings menu item in your Facebook profile.
Facebook provides us with statistical data about visitors to our Facebook website via the "Insights" function. We are not in a position to establish a personal reference. This information is purely functional and helps us to better analyze our site and adapt it to your needs and interests. Facebook itself processes this data in a more detailed way; you can find more information about this at the following link: https://www.facebook.com/iq/tools-resources/audience-insights. In addition, Meta has published an addendum to its privacy policy, which you can read here: https://www.facebook.com/legal/terms/page_controller_addendum
As soon as you use a Facebook plugin on our website or rate or subscribe to our posts on our Facebook page, we can establish the corresponding personal reference. We can also see from which Facebook profile the comments on our Facebook page originate.
If we use service providers for the data processing of our Facebook presence, we conclude corresponding data processing agreements (DPAs) with them. In doing so, we regulate to what extent and under what security conditions the processing of the data takes place and define the necessary powers of instruction in accordance with Art. 28 GDPR.
Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2 Ireland
For the operation of our Facebook page, we are jointly responsible with Facebook for the processing of your personal data.
Facebook\'s privacy policy can be viewed here: https://www.facebook.com/policy.php.
To contact Facebook\'s data protection officer, you can fill out a contact form at the following link: https://www.facebook.com/help/contact/540977946302970
We regularly publish news on our Facebook page. We have activated the corresponding Facebook comment function so that we can enter into an active exchange with you. We reserve the right to remove inappropriate posts (e.g. with racist, illegal or similar content) immediately. For this purpose, all comments are checked for inappropriate content. In doing so, we can see from which Facebook profile the respective comment was posted. We have access to
and can establish a link to previous contributions and comments. As a rule, the data will not be passed on to third parties; in exceptional cases, a legal provision or a corresponding court order may oblige us to disclose the relevant data.
You can contact us via various channels on our Facebook page. Personal data is only collected if you provide it to us voluntarily when you contact us. We use the data you provide without your separate consent exclusively to fulfill and process your contact request. The data will not be passed on to third parties or only at your request.
We may collect personal data for the operation of our Instagram website. Your data is generally collected and processed in pseudonymized form, i.e. we cannot assign your data directly to your name or email address. In this respect, processing takes place via a profile based on an ID or a cookie. You can significantly influence the processing of your data; simply click on the Settings menu item in your Instagram profile.
Instagram provides us with statistical data about visitors to our Instagram website via the "Instagram stats" function. We are not able to establish a personal reference. This information is purely functional and helps us to better analyze our site and adapt it to your needs and interests. Instagram itself processes this data in a more detailed way; you can find more information about this at the following link: https://help.instagram.com/788388387972460?helpref=uf_permalink. Instagram provides us with statistical data about visitors to our Instagram profile via the "Instagram Insights" function. We cannot establish a personal reference to this. This information is purely functional and helps us to better analyze our site and adapt it to your needs and interests. Instagram itself processes this data in a more extensive manner; you can find more information on this under the following link: https://help.instagram.com/788388387972460?helpref=uf_permalink
As soon as you use an Instagram plugin on our website or rate or subscribe to our posts on our Instagram page, we can establish the corresponding personal reference. We can also see from which Instagram profile the comments on our Instagram page originate.
If we use service providers for the data processing of our Instagram page, we conclude corresponding data processing agreements (DPAs) with them. In doing so, we regulate to what extent and under what security conditions the processing of the data takes place and define the necessary powers of instruction in accordance with Art. 28 GDPR.
Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2 Ireland
For the operation of our Instagram page, we are jointly responsible with Instagram for the processing of your personal data.
You can find Instagram\'s privacy policy here: https://help.instagram.com/519522125107875.
To contact Instagram\'s data protection officer, you can fill out a contact form at the following link: https://www.facebook.com/help/contact/540977946302970
We regularly publish news on our Instagram page. In order to be able to enter into an active exchange with you, we have activated the corresponding Instagram comment function. We reserve the right to remove inappropriate posts (e.g. with racist, illegal or similar content) immediately. For this purpose, all comments are checked for inappropriate content. In doing so, we can recognize from which Instagram profile the respective comment was posted. We have access to
and can establish a link to previous contributions and comments. As a rule, the data will not be passed on to third parties; in exceptional cases, a legal provision or a corresponding court order may oblige us to disclose the relevant data.
You can contact us via various channels on our Instagram page. Personal data is only collected if you provide it to us voluntarily when you contact us. We use the data you provide without your separate consent exclusively to fulfill and process your contact request. The data will not be passed on to third parties or only at your request.
We may collect personal data for the operation of our LinkedIn website. Your data is generally collected and processed in pseudonymized form, i.e. we cannot assign your data directly to your name or email address. In this respect, processing takes place via a profile based on an ID or a cookie. You have the option of significantly influencing the processing of your data by clicking on the Settings menu item in your LinkedIn profile.
LinkedIn provides us with statistical data about visitors to our LinkedIn website via the "LinkedIn analytics" function. We are not able to establish a personal reference. This information is purely functional and helps us to better analyze our site and adapt it to your needs and interests. LinkedIn itself processes this data in a more detailed way; you can find more information about this at the following link: https://www.linkedin.com/help/linkedin/answer/83597.
As soon as you use a LinkedIn plugin on our website or rate or subscribe to our posts on our LinkedIn page, we can establish the corresponding personal connection. We can also see from which LinkedIn profile the comments on our LinkedIn page originate.
If we use service providers for the data processing of our LinkedIn page, we conclude corresponding data processing agreements (DPAs) with them. In doing so, we regulate to what extent and under what security conditions the processing of the data takes place and define the necessary powers of instruction in accordance with Art. 28 GDPR.
LinkedIn Ireland Unlimited Company
Wilton Place
Dublin 2
Ireland
For the operation of our LinkedIn page, we are jointly responsible with LinkedIn for the processing of your personal data.
You can find LinkedIn\'s privacy policy here: https://www.linkedin.com/legal/privacy-policy.
To contact LinkedIn\'s data protection officer, you can fill out a contact form at the following link: https://www.linkedin.com/help/linkedin/ask/TSO-DPO
We regularly publish news on our LinkedIn page. In order to be able to enter into an active exchange with you, we have activated the corresponding LinkedIn comment function. We reserve the right to remove inappropriate posts (e.g. with racist, illegal or similar content) immediately. For this purpose, all comments are checked for inappropriate content. In doing so, we can see from which LinkedIn profile the respective comment was posted. We have access to
and can establish a link to previous contributions and comments. As a rule, the data will not be passed on to third parties; in exceptional cases, a legal provision or a corresponding court order may oblige us to disclose the relevant data.
You can contact us via various channels on our LinkedIn page. Personal data is only collected if you provide it to us voluntarily when you contact us. We use the data you provide without your separate consent exclusively to fulfill and process your contact request. The data will not be passed on to third parties or only at your request.
We may collect personal data for the operation of our YouTube page. Your data is generally collected and processed in pseudonymized form, i.e. we cannot assign your data directly to your name or email address. In this respect, processing takes place via a profile based on an ID or a cookie. You can significantly influence the processing of your data by simply clicking on this link while you are logged into your YouTube account: https://myaccount.google.com.
YouTube provides us with statistical data about visitors to our YouTube page via the "CREATOR STUDIO: Analytics" function. We are not able to establish a personal reference. This information is purely functional and helps us to better analyze our site and adapt it to your needs and interests. YouTube itself processes this data in a more extensive manner; you can find more information on this under the following link: https://policies.google.com/privacy?hl=de&gl=de.
As soon as you use a YouTube plugin on our website or rate or subscribe to our posts on our YouTube page, we can establish the corresponding personal reference. We can also see from which YouTube profile the comments on our YouTube page originate.
If we use service providers for the data processing of our YouTube page, we conclude corresponding data processing agreements (DPAs) with them. In doing so, we regulate the scope and security conditions under which the data is processed and define the necessary powers of instruction in accordance with Art. 28 GDPR.
YouTube LLC
901 Cherry Ave.
San Bruno, CA 94066
USA
For the operation of our YouTube page, we are jointly responsible with YouTube for the processing of your personal data.
You can find YouTube\'s privacy policy here: https://policies.google.com/privacy?hl=de&gl=de.
To contact YouTube\'s data protection officer, you can fill out a contact form at the following link: https://support.google.com/policies/contact/general_privacy_form
We regularly publish news on our YouTube page. To enable us to enter into an active exchange with you, we have activated the corresponding YouTube comment function. We reserve the right to remove inappropriate posts (e.g. with racist, illegal or similar content) immediately. For this purpose, all comments are checked for inappropriate content. In doing so, we can recognize from which YouTube profile the respective comment was posted. We have access to
and can establish a link to previous contributions and comments. As a rule, the data will not be passed on to third parties; in exceptional cases, a legal provision or a corresponding court order may oblige us to disclose the relevant data.
You can contact us via various channels on our YouTube page. Personal data is only collected if you provide it to us voluntarily when you contact us. We use the data you provide without your separate consent exclusively to fulfill and process your contact request. It will not be passed on to third parties or passed on solely on the basis of your inquiry.
The following information applies to data processing within our apps in general. If there are exceptions or additions to this information, these are described in detail in the respective sections.
In order to use the full functionality of the PONS LS apps(PONS and Langenscheidt brand apps and Klett brand vocabulary training apps), a one-off registration is required. If you have already registered via the PONS translation service (see 4.1.3) or as part of an order in a PONS LS online store (see 4.1.1), you can also use the registration data to register in a PONS LS app. After registering in a PONS LS app, you can also purchase and activate additional fee-based functions that are processed via the corresponding iOS and Android app stores. Apple\'s privacy policy for the iOS app store (Apple Legal - Legal Department - App Store & Privacy - Apple ) and from Google for the Android app store (Privacy Policy - Privacy Policy & Terms of Use - Google ) must be observed.
Some functions require access to various functions and interfaces on your smartphone. To do this, you must grant the respective app certain authorizations. The authorizations may differ between different operating systems and are usually combined into authorization categories. You can revoke the authorizations at any time in the smartphone settings.
The following authorizations are queried:
| Authorization | Purpose of the authorization |
|---|---|
| Push notifications | Notification of activities in the app |
| Camera access | When using the camera features |
| Microphone access | When using the language features |
| Access to images | When using the photo features |
| Location | Location query |
| Authorization | Purpose of the authorization |
|---|---|
| Push notifications | Notification of activities in the app |
| Microphone access | When using the language features |
| Authorization | Purpose of the authorization |
|---|---|
| Camera access | When using the camera features |
| Type of data / data types | E-mail address & user ID, text content, saving original text and translation, device ID, app activities |
| Purpose of the processing | Account management, quality assurance, analysis to optimize services, translation of entered texts, further development of AI, offering languages that are not officially supported |
| Type of processing | Electronic processing |
| Group/category of persons affected | Customers, users |
We would also like to inform you about data processing by Amplitude within our app:
| Purpose of processing | Web analysis tool that interprets user behavior |
| Legal basis (according to Art. 6 / 9 GDPR) | |
| Recipient (if applicable) | Amplitude, San Francisco, California |
| If applicable, intention of forwarding to a third country or int. organization (incl. info on adequacy decision of the Commission or suitable guarantees) | United States of America |
| If known: Duration of data storage | See General deadlines for data deletion |
| Obligation to provide personal data (e.g. due to legal or contractual regulations) / necessity | no |
| Consequences of non-compliance (in case of failure to provide the required data) | no |
| If applicable, existence of an automated decision-making process | In this context, we do not use automated decision-making. |
| If applicable, origin of the data (if not collected directly from the data subject) | The data usually comes from the data subject, but can also come from third parties. |
| Change of purpose, if applicable | no |
| Type of data / data types | E-mail address & user ID, user\'s learning status, app activities, diagnostic data |
| Purpose of the processing | Account management, recording of learning statuses in order to use the product, analysis to optimize services |
| Type of processing | Electronic processing |
| Group/category of persons affected | Customers, users |
| Type of data / data types | E-mail address & user ID, device ID, app activities, diagnostic data |
| Purpose of the processing | Account management, provision of the dictionary, analysis to optimize services |
| Type of processing | Electronic processing |
| Group/category of persons affected | Customers, users |
| Type of data / data types | User ID, location, device ID, app activities, diagnostic data |
| Purpose of the processing | Account management, app functions, analysis and fraud prevention, security and compliance, analysis to optimize services |
| Type of processing | Electronic processing |
| Group/category of persons affected | Customers, users |