Data Protection

The company’s data protection officer can be reached at:

Oliver Numrich
Tel.: +49-30-246 2660
E-Mail: DataSecurity@Goldmedia.de
Website: www.goldmedia.com

 

The activity of Goldmedia GmbH is also the creation and sale of studies and market data in digital form. In this context, we process the data required to complete, execute or terminate a contract with you. Which includes:

• First name, last name
• Tax ID Billing and delivery address
• E-mail address
• Invoice and payment data
• Phone number (if necessary)

The legal basis for this is Article 6 (1) (b) GDPR, i. You provide us with the data based on the contractual relationship between you and us. To process your e-mail address, we are also obliged to send an electronic order confirmation due to a requirement in the Civil Code (BGB) (Article 6 (1) (c) GDPR. Insofar as we do not use your contact data for advertising purposes, we store the data collected for the execution of the contract until the end of the statutory or potential contractual warranty and guarantee rights. After expiry of this period, we retain the information required by commercial and tax law of the contractual relationship for the statutory periods. For this period (usually ten years from the conclusion of the contract), the data will be reprocessed in the event of a review by the tax authorities. If you have selected a different payment method than prepayment or cash on delivery, we will pass on the required payment data to a payment service provider commissioned by us.

 

We use so-called cookies on our website. Insofar as these cookies are personal data, they are used on the basis of Article 6 (1) (f) GDPR. Our interest in optimizing our website is considered to be justified in the sense of the aforementioned provision. Cookies are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not harm your device, do not contain viruses, Trojans or other malicious software. In the cookie information is stored, each resulting in connection with the specific terminal used. However, this does not mean that we are immediately aware of your identity. On the one hand, the use of cookies serves to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages on our website or that you have already logged in to your customer account. These are automatically deleted after leaving our page. In addition, for the sake of usability, we also use temporary cookies that are stored on your device for a specific period of time. If you visit our site again to take advantage of our services, it will automatically recognize that you have already been with us and what inputs and settings you have made, so you do not have to re-enter them.

On the other hand, we use cookies in order to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer and to display information tailored to your specific needs. These cookies allow us to automatically recognize when you visit our site again that you have already been with us. These cookies are automatically deleted after a defined time. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a note always appears before a new cookie is created. However, disabling cookies completely may mean that you can not use all features of our website. The storage period of cookies depends on their purpose and not the same for everyone.

b) Legal basis for the processing of personal data

The deployment is based on Article 6 (1) (f) GDPR.

c) Purpose of the data processing

Our interest in optimizing our website is considered to be justified in the sense of the aforementioned provision.

d) Duration of storage, objection and disposal options

Cookies are stored on the computer of the user and transmitted by this on our wesite. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all the functions of the website to the full.

 

8.1. General

The following statements refer to the processing of personal data for advertising purposes. GDPR declares such data processing on the basis of Article 6 (1) (f) as fundamentally conceivable and as a legitimate interest. The duration of data storage for advertising purposes does not follow any rigid principles and is based on the question of whether the storage is required for the promotional approach. As in the case of an objection, we will inform you below.

8.2. Advertising purposes

As far as you have concluded a contract with us, we will keep you as an existing customer. In this case, we will process your postal contact details outside the scope of a specific consent in order to provide you with information about new products and services in this way. From time to time, we will send your postal contact details to selected contractors from the areas of mail order and telecommunication, who will be able to inform you about their products. We process your e-mail address in order to provide you with information for your own, similar products outside of the availability of a specific consent.

8.3. Newsletter

a) Description and scope of personal data processing

On our website you can subscribe to a free newsletter. The data from the input mask are transmitted to us when registering for the newsletter.

If you order the Goldmedia Newsletter, we will collect and save your e-mail address, the time of the order and the date of the order confirmation. The storage and use of this data is exclusively for the sending of the newsletter.

For the processing of the data, your consent is obtained during the registration process and reference is made to this privacy policy.

In connection with the processing of data for the sending of newsletters, there is no disclosure of the data to third parties. The data will be used exclusively for sending the newsletter.

b) Legal basis for the processing of personal data

Legal basis for the processing of the data after registration for the newsletter by the user is in the presence of a consent of the user Art. 6 (1) (a) GDPR.

c) Purpose of the data processing

The collection of the user’s e-mail address serves to deliver the newsletter. The collection of other personal data in the context of the registration process is intended to prevent misuse of the services or used e-mail address.

d) Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. The e-mail address of the user is therefore stored as long as the subscription to the newsletter is active.

e) Opposition and removal option

Subscription to the newsletter may be terminated at any time by the user concerned. For this purpose, there is a corresponding link in each newsletter. This also allows a revocation of the consent to the storage of the personal data collected during the registration process.

 

10.1. Google Analytics with anonymization function

For the purpose of the needs-oriented design and continuous optimization of our pages, we use Google Analytics, a web analysis service of Google Inc. (“Google”), based on Article 6 (1) (f) GDPR. In this context, pseudonymised usage profiles are created and cookies are used. The information generated by the cookie about your use of this website such as

• Browser type / browser version,
• Used operating system,
• Referrer URL (the previously visited page),
• Host name of the accessing computer (IP address),
• Time of server request,

are transmitted to a Google server in the US and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage for the purposes of market research and tailor-made website design. This information may also be transferred to third parties if required by law or if third parties process this data in the order. Under no circumstances will your IP address be merged with any other data provided by Google. The IP addresses are anonymized, so that an assignment is not possible (so-called IP masking).

You can prevent the installation of cookies by setting the browser software accordingly; however, we point out that in this case not all features of this website may be fully exploited. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing this browser add-on.

An opt-out cookie will be set which prevents the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

As an alternative to the browser add-on or within browsers on mobile devices, please click this link to prevent the collection by Google Analytics within this website in the future (the opt-out works only in this browser and only for this domain). An opt-out cookie is stored on your device. If you delete your cookies in this browser, you must click this link again.

For more information about privacy in connection with Google Analytics, visit the website of Google Analytics.

 

We do not share your information with recipients based outside the European Union or the European Economic Area, except for the procedures described in the Social Plug-ins and Google Analytics. The processing operations, described here in paragraph 10.1., cause the data to be transmitted to the servers of the providers of tracking or targeting technologies commissioned by us. These servers are located in the USA. The data are transmitted according to the principles of the so-called Pricavy Shield and on the basis of so-called standard contractual clauses of the European Commission.

 

All personally transmitted data, including your payment data, will be transmitted using the common and secure SSL (Secure Socket Layer) standard. SSL is a secure and proven standard, e.g. is also used in online banking. You will see a secure SSL connection, including the attached s at the http (ie …) in the address bar of your browser or the lock icon at the bottom of your browser.

We use appropriate technical and organizational security measures to protect your personal data stored against us against manipulation, partial or complete loss and against unauthorized access by third parties. Our safety measures are constantly being improved in line with technological developments and are certified.

 

If you process personal data, you are victim within the meaning of the GDPR and you have the following rights to the person responsible:

a) Right to information

You may ask the person in charge to confirm if personal data concerning you is processed by us.

If such processing is available, you can request information from the person responsible about the following information:

(1) the purposes for which the personal data are processed;

(2) the categories of personal data being processed;

(3) the recipients or categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;

(4) the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;

(5) the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;

(6) the existence of a right of appeal to a supervisory authority;

(7) all available information on the source of the data if the personal data is not collected from the data subject;

(8) the existence of automated decision-making including profiling under Article 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved, and the scope and intended impact of such processing on the data subject.

You have the right to request information about whether your personal information relates to a third country or an international organization. In this connection, you can request the appropriate guarantees in accordance with. Art. 46 GDPR in connection with the transfer.

b) Right to rectification

You have a right to rectification and/or completion to the controller, if the personal data you process is incorrect or incomplete. The responsible person must make the correction without delay.

c) Right to limit processing

You may request the restriction of the processing of your personal data under the following conditions:

(1) if you contest the accuracy of your personal information for a period of time that enables the controller to verify the accuracy of your personal information;

(2) the processing is unlawful and you refuse the deletion of the personal data and instead demand the restriction of the use of the personal data;

(3) the controller no longer needs the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims; or

(4) if you have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet certain whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State. If the limitation of the processing after the o.g. If conditions are restricted, you will be informed by the person in charge before the restriction is lifted.

d) Right of deletion

a) Obligation to delete

You may require the controller to delete your personal information without delay, and the controller is required to delete that information immediately if one of the following is true:

(1) Personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.

(2) You revoke your consent, to which the processing acc. Art. 6 (1)(a) or (9) (2) GDPR and there is no other legal basis for processing.

(3) According to  Art. 21 (1) GDPR objection to the processing and there are no prior justifiable reasons for the processing, or you appeal to processing acc. Art. 21 (2) GDPR.

(4) Your personal data have been processed unlawfully.

(5) The deletion of personal data concerning you shall be required to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject. (6) The personal data concerning you were collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.

b) Information to third parties

If the person in charge has made the personal data concerning you public and is acc. Article 17 (1) of the GDPR, it shall take appropriate measures, including technical means, to inform data controllers who process the personal data that you have been identified as being affected, taking into account available technology and implementation costs Persons requesting deletion of all links to such personal data or of copies or replications of such personal data.

c) Exceptions

The right to erasure does not exist if the processing is necessary

(1) to exercise the right to freedom of expression and information;

(2) to fulfill a legal obligation required by the law of the Union or of the Member States to which the controller is subject, or to carry out a task which is in the public interest or in the exercise of official authority conferring on the controller has been;

(3) for reasons of public interest in the field of public health pursuant to Art. 9 (2)(h,i) and Art. 9 (3) GDPR;

(4) for archival purposes of public interest, scientific or historical research purposes or for statistical purposes acc. Article 89 (1) GDPR, to the extent that the law referred to in subparagraph (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing, or

(5) to assert, exercise or defend legal claims.

e) Right to information

If you have the right of rectification, erasure or restriction of processing to the controller, he / she is obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless: this proves to be impossible or involves a disproportionate effort.

You have a right to the person responsible to be informed about these recipients.

f) Data transferability

You have the right to receive personally identifiable information you provide to the controller in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another person without hindrance by the person responsible for providing the personal data, provided that

(1) the processing on a consent acc. Art. 6 (1) ( a) GDPR or Art. 9 (2) (a) GDPR or on a contract acc. Art. 6 (1)(b) GDPR is based and

(2) the processing is done by automated means. In exercising this right, you also have the right to obtain that your personal data relating to you are transmitted directly from one person to another, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.

g) Right to object

You have the right at any time, for reasons that arise from your particular situation, against the processing of your personal data, which pursuant to Art. 6 (1) (e or f) GDPF takes an objection; this also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, exercising or defending legal claims.

If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

Regardless of Directive 2002/58 / EC, you have the option, in the context of the use of information society services, of exercising your right to object through automated procedures that use technical specifications.

h) Right to revoke the data protection consent declaration

You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

i) Automated decision on a case-by-case basis, including profiling

You have the right not to be subjected to a decision based solely on automated processing – including profiling – that will have legal effect or similarly affect you in a similar manner. This does not apply if the decision

(1) is required for the conclusion or performance of a contract between you and the controller,

(2) is permitted under Union or Member State legislation to which the controller is subject, and where such legislation contains reasonable measures to safeguard your rights and freedoms and legitimate interests, or

(3) with your express consent. However, these decisions must not be based on special categories of personal data under Art. 9 (1) GDPR, unless Art. 9 (2) (a or g) and reasonable measures have been taken to protect the rights and freedoms and your legitimate interests.

With regard to the cases referred to in (1) and (3), the person responsible shall take appropriate measures to uphold the rights and freedoms and their legitimate interests, including at least the right to obtain the intervention of a person by the controller, to express his / her own position and heard on challenge of the decision.

j) Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of its residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you is against the GDPR violates.

The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.

 

The website uses newsletter tracking. Here is simply stored, how many and which links / contents were clicked in the newsletter. In bounce handling (management of returns), e-mail addresses and – if available and entered in the data sets – name of the unreachable recipients in our bounce mailbox and in TYPO3 are collected and listed. The data is deleted regularly.

 

We use a blog (www.goldmedia.com/blog) with comments. Here additional personal data (example: pseudonyms) are stored. You have the option to subscribe to and submit comments. By writing comments on our blog, you consent to us processing your personal information in this context. The legal basis is in Art. 6 (1) (a) GDPR. Your comment may be deleted if you let us know.

 

The search function on the website www.Goldmedia.com also logs IP addresses. Currently, the data can not be technically anonymized. If you do not agree, please do not use the search function on www.Goldmedia.com.

 

We use social plug-ins from Facebook, Linked-In, Google+ and Xing on our website based on Article 6 (1) (f) of the GDPR to make our company better known. The commercial purpose is to be regarded as a legitimate interest within the meaning of the GDPR. Responsibility for the operation compliant with data protection is to be guaranteed by their respective providers. The integration of these plug-ins by us takes place in the way of the so-called two-click method, in order to protect visitors of our website in the best possible way.

a) Facebook

On our website so-called plug-ins of the social network Facebook are used, which is offered by the Facebook Inc. The Facebook plug-ins are marked with a Facebook logo or the addition “Like” or “Share”. An overview of the Facebook plug-ins and their appearance can be found at the following link. If you activate such a plug-in (first click), your browser connects directly to the Facebook servers. The content of the plug-in is transmitted by Facebook directly to your browser and integrated into the page. By this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are currently not logged in to Facebook. This information (including your IP address) will be transmitted from your browser directly to a Facebook server in the US and stored there. If you are logged in to Facebook, Facebook can immediately assign the visit to our website to your Facebook profile. If you interact with the plug-ins, for example by clicking the “Like” button, this information will also be transmitted directly to a Facebook server and stored there. The information will also be posted on your Facebook profile and displayed to your Facebook friends.

The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your related rights and settings options for the protection of your privacy, please refer for further information to the privacy policy of Facebook. If you do not want Facebook to immediately associate the information collected about your visit to our website with your Facebook profile, you must log out of Facebook before visiting our website.

b) Twitter

Our website uses plug-ins from the social network Twitter, which Twitter Inc. is offered. The Twitter plug-ins are marked with a Twitter logo. The Twitter logo is a blue or white bird on a white or blue background. If you activate such a plug-in (first click), your browser connects directly to the servers of Twitter. The content of the plug-in is transmitted by Twitter directly to your browser and integrated into the site. By this integration, Twitter receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Twitter profile or are currently not logged in to Twitter. This information (including your IP address) is sent from your browser directly to a Twitter server in the United States and stored there. If you are logged in to Twitter, Twitter can immediately assign the visit to our website to your Twitter profile. When you interact with the plug-ins, this information is also sent directly to a Twitter server and stored there. The information will also be posted on your Twitter profile and displayed to your Twitter contacts.

The purpose and scope of the data collection and the further processing and use of the data by Twitter as well as your rights in this regard and setting options for protecting your privacy, please refer to the privacy policy of Twitter. If you do not want Twitter to directly map the information collected from your visit to our website to your Twitter profile, you must log out of Twitter before visiting our website.

c) Google+

On our website so-called plug-ins of the social network Google Plus are used, which is offered by Google Inc. The plug-ins are for example on buttons with the sign “+1” on white or colored background recognizable. An overview of the Google plug-ins and their appearance can be found here.

If you enable the plug-in (first click), your browser connects directly to Google’s servers. The content of the plug-in is transmitted by Google directly to your browser and integrated into the site. The integration gives Google the information that your browser has accessed the corresponding page of our website, even if you do not have a profile on Google Plus or are currently not logged in to Google Plus. This information (including your IP address) is transmitted from your browser directly to a Google server in the United States and stored there. If you are logged in to Google Plus, Google may immediately associate your visit to our website with your Google Plus profile. If you interact with the plug-ins, for example, pressing the “+1” button, the corresponding information is also transmitted directly to a Google server and stored there. The information will also be published on Google Plus and displayed there to your contacts.

The purpose and scope of the data collection and the further processing and use of the data by Google, as well as your rights in this regard and setting options for the protection of your privacy, can be found in the data protection information provided by Google.

If you do not want Google to immediately associate information collected about your visit to our site with Google Plus, you must log out of Google Plus before visiting our website. You can completely prevent the Google plug-ins from loading even with add-ons for your browser, such as: Eg with the script blocker “NoScript”.

d) LinkedIn

Our website uses plug-ins from the LinkedIn social network, which is offered by LinkedIn Corporation. The plug-ins are z. B. on buttons with the character “in” recognizable on a white or colored background.

LinkedIn is an Internet-based social network that allows users to connect to existing business contacts and make new business contacts.

For information on the purpose and scope of the data collection and the further processing and use of the data by LinkedIn, as well as your rights in this regard and setting options for the protection of your privacy, please refer to the data protection information provided by LinkedIn.

If you do not want LinkedIn to directly associate information collected about your visit to our website with LinkedIn, you’ll need to log out of LinkedIn before visiting our website.

May 2018