Use and disclosure of personal data
Thank you for your interest in Media Impact. You can normally visit all pages of www.mediaimpact.de without needing to hand over personal data to us.
In general, we need your personal data to respond to your enquiries or to provide you with specific information or services, such as our newsletter.
- Controller and general information
Your data will be processed by Media Impact GmbH & Co. KG, Axel-Springer-Str. 65, 10888 Berlin, Germany, Phone: +49 30 2591 0, Email: firstname.lastname@example.org (service provider in the sense of the Telemediengesetz (TMG, Telemedia act) and controller in the sense of the General Data Protection Regulation (GDPR). This is also what we are referring to when we use terms such as ‘we’ or ‘us’. ‘Media Impact’ in this document means www.mediaimpact.de, www.media-impact.de and www.mediapilot.de, in each case including all sub-pages, content and features available there (e.g. Internet forums, competitions). Separate parts of Media Impact will hereinafter be referred to as ‘online services’. This is also what we mean when we speak of a website below.
Our services are intended for the general public and not for children. We do not knowingly collect personally identifiable information from users who are considered children under the applicable national laws.
- Collection and processing of personal data
You can generally use online services for which no payment or registration is required without handing over personal data. In some cases, however, we may process the personal data listed in section 3. This is done only to the extent necessary to provide a functional website, as well as useful content and services. Furthermore, we process personal data in connection with your use of Media Impact if you provide it yourself, e.g. as part of a registration, competition, enquiry, application or subscription, or because there is another legal basis for this (see section 4.). If you do not want this to happen, you will unfortunately not be able to take full advantage of our services.
- Categories of processed data
When you use Media Impact, our system automatically collects data from the computer system that made the request. Among other things, the following data may be collected:
- Information about the browser type and version used
- Operating system of the user
- Date and time of access
- Web analytics data/pseudonymous usage profiles (cookie ID, ad ID, etc.)
- Websites from which the user arrives at our website
- Websites the user accesses through our website
In addition, we process the following personal data if there is a contractual relationship between you and us or if you have sent the data to us in another way:
- Personal master data (name, address, date of birth)
- Communication data (telephone number, email address)
- Legal basis and purpose of the processing
We process your data solely in accordance with one or more of the possible legal bases.
According to the GDPR, personal data may be processed in particular on the basis of a contract or for the performance of pre-contractual arrangements, where consent has been given, on the basis of a legitimate interest or law and to protect vital or public interests.
Registration is required to provide certain content or services on our website. Any user can register for free at Media Impact, indicating first name, last name, e-mail address and a password; this will send their registration information to us. This data is collected and processed in order to fulfil the user agreement between us and the user, Art. 6(1)(b) of the GDPR.
We also use the email address you provide during registration or as part of a contract performance to keep you up to date on similar goods or services, existing subscriptions or about Media Impact in general. In this case, the email address is processed on the basis of our legitimate interest in marketing our goods and services (Art. 6(1)(f) of the GDPR).
We also use your email address to send you our newsletter if you have given us your prior express consent to receive a newsletter or advertising. In this case, we process your email address so that we can send you the newsletter as requested (Art. 6(1)(b) of the GDPR). You can object to the use of your email address for such purposes at any time with future effect by writing to email@example.com or Axel-Springer-Str. 65 in 10888 Berlin, without incurring any costs other than the transmission costs according to the base rates.
Every device connected to the Internet needs a unique address to send data, the so-called IP address. Storage of this IP address, at least on a temporary basis, is necessary for technical reasons to allow delivery of the website to the user’s computer. We do however truncate IP addresses before any processing takes place and process these anonymously thereafter. The IP addresses that have not been truncated are not stored or further processed. For security purposes, our servers also store your IP address for a period of 14 days.
In the case of processing operations that are not covered by one or more of the aforementioned legal bases, processing takes place if it is necessary to safeguard a legitimate interest and if your interests, fundamental rights and fundamental freedoms do not predominate based on a comprehensive weighing of interests (Art. 6(1)(f) of the GDPR). A legitimate interest is to be assumed if the data subject is a customer of the controller. When the processing of personal data is based on this, our legitimate interest is to conduct our business activities for the benefit of all our employees and shareholders.
Our legitimate interest in offering you tailor-made products, to inform you about our products, innovations and quality features and to constantly improve our products and services, thereby also increasing our turnover, is the legal basis of processing for the purpose of direct marketing (own advertising and the advertising of third parties).
You can object to the processing on the basis of a legitimate interest at any time (see section 11.).
If the data is processed for purposes other than those specified during the data collection, a compatibility check will be carried out in accordance with Art. 6(4) of the GDPR. Further processing is only permissible then if the original purpose is compatible with the new purpose or if it is allowed on grounds of a separate legal basis. Accepted compatible purposes include, but are not limited to, the assertion, exercise or defence of civil claims unless there is an overriding interest of the data subject. In this case, we will inform you about the change of purpose. If the new purpose is incompatible with the purpose stated when the data was collected, the data must be collected again on a new legal base. We will also inform you of this change of purpose.
- Place of processing
We do not share your personal data with countries outside the European Economic Area, except in cases where it is permitted under the GDPR. Whether third parties with whom you have your own contractual relationship (such as Facebook, if you have a Facebook account) share data with countries outside the European Economic Area is beyond our knowledge and influence.
- Origin of data
In certain cases we also receive data because you have consented to it being sent to us.
- Sharing your data with third parties
We will only share your personal data with third parties if such disclosure is necessary in order to fulfil our contractual obligations towards you and this can patently only be carried out by or together with another provider (e.g. in the case of cooperation), if we are legally entitled or obliged to share your personal data in any other way or if you have given us appropriate consent.
In order to provide our services, selected personal data may be communicated to certain departments within our company. This includes employees in the accounting, product management, marketing and IT departments.
In some cases we also use external service providers or affiliates who have been instructed by us to process data on our behalf. Such service providers are under our contract as data processors in accordance with the strict requirements of the GDPR and may not use your data for any other purpose. Data processors used by us provide the following services in particular: registration service(s), hosting, newsletter distribution and web/app analysis.
Sharing data with data processors takes place in accordance with Art. 28(1) of the GDPR, or alternatively on the basis of our legitimate interest in the economic and technical benefits associated with the use of specialised data processors, Art. 6(1)(f) of the GDPR.
If we are legally obliged to do so or it is permitted under data protection law, we may share personal data with authorities such as the police or the public prosecutor’s office (Art. 6(1)(c) of the GDPR). The disclosure of this data is based on our legitimate interest in the fight against abuse, the prosecution of criminal offenses and the protection, assertion and enforcement of claims whenever your rights and interests in the protection of your personal data do not predominate, Art. 6(1)(f) of the GDPR.
- Cookies and similar technologies
Ads are mostly served by third parties. These may use, to the extent permitted by your device settings, information about pages visited by your web browser in order to serve ads for products and services that may be of interest to you. Specific contact data such as your name, address, e-mail address or telephone number will not be shared under any circumstances.
You can stop us from installing cookies at any time by changing the appropriate settings in the web browser used and thus permanently disabling cookies. Furthermore, cookies that have already been installed can be deleted at any time through a web browser or with other software programs. This is possible in all of the major web browsers. If you disable cookies in the web browser used, not all functions of our website may be fully usable.
- Web analytics services
In order to constantly improve our content and adapt it to the interests of our users, as well as to display online behavioural advertising, we use a number of services on our website that collect and evaluate data. Insofar as these service providers are not themselves controllers in the sense of data protection law, they will always process the pseudonymised user data according to instructions and on the basis of an order processing agreement. You can deactivate the individual analytics services at any time with future effect. Below you will find details of the analytics services we use:
We have integrated Google Analytics (with anonymisation function). Google Analytics is a web analytics service. Web analytics is the collection and evaluation of data about user behaviour on websites. Among other things, a web analytics service collects data on the website from which a data subject arrived at a website (the so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. Web analytics is used primarily to optimise a website and for a cost-benefit analysis of Internet advertising.
The operating company of the Google Analytics component is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.
We use the add-on ‘_gat._anonymizeIp’ for web analysis via Google Analytics. This add-on allows Google to truncate and anonymise the IP address of the data subject’s Internet connection whenever our websites are accessed from a Member State of the European Union or from another Contracting State to the Agreement on the European Economic Area.
The purpose of the Google Analytics component is to analyse visitor flows to our website. Among other things, Google uses the data and information obtained to evaluate the use of our website, to compile online reports for us showing the activities on our websites and to provide other services related to the use of our website.
Google Analytics installs a cookie on the computer system of the data subject. What cookies are has already been explained above. By installing the cookie, Google is able to analyse the use of our website. Each time you access one of the individual pages of this website, which is operated by us and into which a Google Analytics component has been integrated, the web browser on the computer system of the data subject is automatically prompted by the respective Google Analytics component to send data to Google for the purpose of web analytics. As part of this technical process Google obtains knowledge of personal data, such as the IP address of the data subject, which Google uses, among other things, to track the origin of visitors and clicks and to subsequently make commission settlements.
The cookie stores personal information, such as the time of access, the location from which the access originated and the frequency of visits to our website by the data subject. Each time our websites are visited, this personal data, including the data subject’s Internet connection IP address, is sent to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may share the personal data collected through this technical process with third parties.
The data subject can, as already mentioned above, stop cookies from being installed by our website at any time by changing the appropriate settings of the web browser used and thus permanently disabling cookies. Changing these settings on the web browser used would also prevent Google from installing a cookie on the data subject’s computer system. In addition, a cookie already installed by Google Analytics can be deleted at any time through the web browser or by using other software programs.
- Storage period
We store personal data only as long as we are entitled to do so and while the processing purpose still applies. The respective legal retention period applies for the storage of personal data. After expiry of this period, the corresponding data will be routinely deleted if it is no longer required for the fulfillment or initiation of the contract.
- Contact details and your rights as a data subject
If you have any questions or suggestions regarding data protection or the enforcement of your rights as a data subject, please contact our data protection officer at any time:
Media Impact GmbH & Co. KG
Email address firstname.lastname@example.org
- Information and rectification
You can obtain from us information as to whether personal data relating to your person is being processed by us at any time and free of charge, as well as which specific data about you is being stored and a copy of the stored data. You can also rectify or complete incorrect data.
- Erasure, restriction and the right to be forgotten
You can request the erasure and restriction of your personal data. Please note that there are certain legal storage obligations, e.g. for paid contracts such as the purchase of a subscription from Media Impact, and therefore we may not always be able to erase your data completely. In such cases, your data will be flagged with the aim of limiting future processing.
- Data portability
You also have the right, where applicable, to have your personal data sent to you or to another controller in a structured, current and machine-readable format, provided that the processing is based on consent or a contract and is carried out by automated means. However, this only applies if the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Furthermore, you have the right to have the personal data sent from one controller directly to another controller, insofar as this is technically feasible and does not impair the rights and freedoms of other persons.
You may revoke your consent at any time with future effect at the above contact address. In particular, you may at any time object to the use of your email address for the purpose of sending newsletters with future effect by writing to email@example.com or Axel-Springer-Str. 65 in 10888 Berlin; this will not incur any costs for you other than transmission costs according to the base rates. You also have the right, for reasons related to your particular situation, to object at any time to the processing of personal data concerning you on the basis of a legitimate or public interest. This also applies to profiling based on these provisions. In the event of an objection, we will no longer process personal data unless we can establish compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the data subject, or the processing is for the purpose of asserting, exercising or defending legal claims.
If we process personal data for direct advertising purposes, you can always object to such processing of personal data for advertising purposes at the above contact address. This also applies to profiling if it is connected to such direct advertising. You also have the right, for reasons related to your particular situation, to object to the processing of your personal data by us for scientific or historical research purposes or for statistical purposes, unless such processing is necessary for the performance of a task in the public interest.
- Right of appeal
You have the right to appeal to the competent supervisory authority as well as the option of seeking legal remedies. The supervisory authority to which the appeal is lodged will inform the complainant of the status and outcome of the appeal, including the option of legal remedies.
- Existence of an automated decision making process
We do not use automatic decision-making or profiling.
Version: 25 May 2018