A. Responsible for data processing

The following entity is responsible for processing personal data within the scope of this website in accordance with the provisions of the General Data Protection Regulation (GDPR):

Eugen G. Leuze Verlag GmbH & Co. KG
Karlstraße 4
D-88348 Bad Saulgau

Tel. +49/7581/4801-0
Fax +49/7581/4801-10
Email: info@leuze-verlag.de

Personally liable partner:

Leuze Verwaltungs-GmbH,
registered office: Bad Saulgau

Ulm Local Court: HRB 743601

Managing Directors: Sylvia Leuze-Reichert, Klaus Decker

Our data protection officer:

Our data protection officer, Mr Jahnel, will also handle all matters relating to our data processing. If you have any questions, suggestions or complaints, you can contact our data protection officer by email: datenschutz@leuze-verlag.de. This privacy policy provides you with information about the scope of the processing of your personal data (hereinafter referred to as ‘data’).

B. Data processing

What is personal data and what does data processing mean?

Personal data is any information relating to an identified or identifiable natural person who can be identified directly or indirectly.

Processing is any operation or set of operations which is performed on personal data, whether or not by automated means:

namely the collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. We process data in the course of operating our website. The processing of data also includes disclosure by transmission. For data transfers to the USA, there is an adequacy decision by the EU Commission, the EU-US Privacy Shield. In this, the Commission has certified that the guarantees for the transfer of data to the USA on the basis of the EU-US Privacy Shield comply with the data protection standards in the EU. Insofar as we transfer data to the USA, we have indicated the participation of our service providers in the EU-US Privacy Shield. The specific data concerned, processing purposes, legal bases, recipients and transfers to third countries are listed in the following table:

a) Log file

We log your visit to our websites. The following data is processed: name of the website accessed, date and time of access, amount of data transferred, browser type and version, operating system used, referrer URL (the website previously visited), your IP address and the requesting provider. This is necessary to ensure the security of the website. We process the data on the basis of our legitimate interests in accordance with Art. 6 (1) f) GDPR. The log file is deleted after seven days, unless it is required for the investigation or proof of specific legal violations that have become known within the retention period.

b) Hosting

All data to be processed in connection with the operation of this website is stored as part of the hosting service. This is necessary to enable the website to function. We process the data on the basis of our legitimate interests in accordance with Art. 6 (1) f) GDPR. To provide our online presence, we use the services of web hosting providers to whom we transfer the above-mentioned data.

c) Contact and booking enquiries

If you contact us, your data (name, contact details, if provided by you) and your message will be processed exclusively for the purpose of processing and handling your enquiry. We process this data on the basis of Art. 6 (1) b) GDPR or Art. 6 (1) f) GDPR for the purpose of handling your enquiry.

d) Newsletter

In order to be able to send you regular information about our company and our offers, we offer a newsletter service. When you subscribe to the newsletter, we process the data you enter (e-mail address and other voluntary information). The newsletter is sent to you on the basis of your consent in accordance with Art. 6 (1) a) GDPR. Registration for the newsletter is carried out using the double opt-in procedure. To prevent misuse, we will send you an email after you register, asking you to confirm your registration. In order to be able to verify the registration process in accordance with legal requirements, your registration is logged. This includes the storage of the registration and confirmation time as well as your IP address. We use service providers to send the newsletter, to whom we transfer the above-mentioned data.

e) Customer account, registration and use

When you open a customer account, you consent to the storage of your inventory data (name, address, email address, bank details) and your usage data (user name, password). This allows us to identify you as a customer and gives you the opportunity to manage your orders. Your data will be processed on the basis of your consent in accordance with Art. 6 (1) a) GDPR.

f) Purchase processing

We process your order data for the purpose of processing the purchase contract. The data is processed in accordance with Art. 6 (1) b) GDPR. We transfer your address data to the company responsible for delivery. If necessary for the execution of the contract, we also transfer your email address or telephone number to the company responsible for delivery in order to coordinate a delivery date (notification). We transfer your transaction data (name, date of order, payment method, shipping and/or receipt date, amount and payee, bank details or credit card details, if applicable) to the payment service provider responsible for processing the payment.

g) Cookies, website analysis and marketing

We use cookies to enable the use of certain functions. These are short data packets that are stored on your device and exchanged with other providers. Some of the cookies we use are deleted immediately after you close your browser (so-called session cookies). Other cookies remain on your device and enable your browser to be recognised on your next visit (persistent cookies). You can find out how this works here, for example: AllAboutCookies.org. In this case, you may have to manually adjust some settings each time you visit a page and accept that some functions may be impaired. We use cookies in connection with the following functions: session cookies from the CMS system (when registering for our premium subscription), cookies for the search function in the article archive, and cookies that are required for the ordering process in the online shop.

h) Integration of external content

We use external dynamic content to optimise the presentation and range of our website. When you visit the website, a request is automatically sent to the server of the respective content provider via API, transmitting certain log data (e.g. the user's IP address). The dynamic content is then transmitted to our website and displayed there. We use external content in connection with the following functionalities:

aa) Integration of YouTube videos

We have integrated videos from the YouTube portal of YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066, USA (‘YouTube’) into our website. When the videos are played, log data is transferred to YouTube's servers in the USA. This processing is based on our overriding legitimate interest in the optimal marketing of our offering in accordance with Art. 6 (1) f) GDPR.

YouTube is certified at: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Further information is available at: https://policies.google.com/privacy?hl=de&gl=de

bb) Google Maps

We use Google's ‘Google Maps’ map service to provide you with an interactive map. When the map is displayed, data, including your IP address and location, is transferred to Google's server in the USA and stored there. This processing is based on our overriding legitimate interest in optimising the marketing of our services in accordance with Art. 6(1)(f) GDPR.

Google is certified at: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=ActiveWeitere Information on data protection can be found at: https://policies.google.com/privacy?hl=de&gl=de

cc) Google Re-Captcha

In order to ensure sufficient data security when transmitting form content, we use the reCAPTCHA service from Google Inc. for our forms. This serves to distinguish whether the input is made by a natural person or abusively by robots. The service includes the transmission of the IP address and, if necessary, other data required by Google for the reCAPTCHA service. The different data protection provisions of Google Inc. apply in this case. Further information can be found at http://www.google.de/intl/de/privacy or https://www.google.com/intl/de/policies/privacy/

dd) Google Analytics

If you have given your consent, this website uses Google Analytics, a web analytics service provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’).

Scope of processing: Google Analytics uses cookies that enable an analysis of your use of our websites. The information collected by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.

We use the “anonymizeIP” function (so-called IP masking): Due to the activation of IP anonymisation on this website, your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

During your visit to the website, the following data, among other things, is collected:

• the pages you visit, your ‘click path’
• achievement of ‘website goals’ (conversions, e.g. newsletter registrations, downloads, purchases)
• your user behaviour (e.g. clicks, dwell time, bounce rates)
• Your approximate location (region)
• Your IP address (in abbreviated form)
• Technical information about your browser and the devices you use (e.g. language settings, screen resolution)
• Your internet service provider
• The referrer URL (via which website/advertisement you came to this website)

Purpose of processing: On behalf of the operator of this website, Google will use this information to evaluate your (pseudonymous [NOT WHEN USING USER ID]) use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website [OPTIONAL] and the success of our marketing campaigns.

Recipient: The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as the data processor. We have concluded a data processing agreement with Google for this purpose. Google LLC, based in California, USA, and, where applicable, US authorities may access the data stored by Google.

Transfer to third countries: A transfer of data to the USA cannot be ruled out.

Storage period: The data sent by us and linked to cookies is automatically deleted after 14 months. Data that has reached its retention period is automatically deleted once a month.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by

a. not giving your consent to the setting of the cookie or

b. downloading and installing the browser add-on to deactivate Google Analytics HERE.

You can also prevent the storage of cookies by adjusting your browser software settings accordingly. However, if you configure your browser to reject all cookies, this may result in restrictions on the functionality of this and other websites.

Legal basis and revocation option: Your consent, Art. 6 (1) (a) GDPR, is the legal basis for this data processing. You can revoke your consent at any time with future effect by changing the cookie settings in the cookie manager, which you will find in the lower left corner of the website. For more information on Google Analytics' terms of use and Google's privacy policy, please visit https://policies.google.com/?hl=de.

C. Duration of data storage

We only store personal data for as long as is necessary for the purposes for which it is processed or until you revoke your consent. If statutory retention obligations must be observed, the storage period for certain data may be up to 10 years, regardless of the processing purposes.

D. Your rights as a data subject

Information: Upon request, you will receive information about all personal data we have stored about you at any time free of charge.

Rectification, erasure, restriction of processing (blocking), objection: If you no longer agree to the storage of your personal data or if it has become incorrect, we will arrange for the erasure or blocking of your data or make the necessary corrections (insofar as this is possible under applicable law) upon receiving a corresponding instruction. The same applies if you wish us to restrict the processing of your data in future.

Data portability: Upon request, we will provide you with your data in a common, structured and machine-readable format so that you can transfer the data to another controller if you wish.

Right to lodge a complaint: You have the right to lodge a complaint with a competent supervisory authority: (https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html).

Right to withdraw consent with effect for the future: You may withdraw your consent at any time with effect for the future. Your withdrawal does not affect the lawfulness of the processing until the time of withdrawal.

Restrictions: Data for which we are unable to identify the data subject, e.g. if it has been anonymised for analysis purposes, is not covered by the above rights. Information, deletion, blocking, correction or transfer to another company may be possible in relation to this data if you provide us with additional information that allows us to identify you.

Exercising your rights as a data subject: If you have any questions about the processing of your personal data, or if you wish to request information, correction, blocking, objection or deletion of data, or if you wish to transfer the data to another company, please contact

Eugen G. Leuze Verlag GmbH & Co. KG

Karlstraße 4

D-88348 Bad Saulgau

Fax

Email: info@leuze-verlag.de