Privacy Statement

of Handelsblatt GmbH, Toulouser Allee 27, 40211 Düsseldorf; Managing Directors Gerrit Schumann, Oliver Voigt and of Solutions by HANDELSBLATT MEDIA GROUP GmbH, Toulouser Allee 27, 40211 Düsseldorf, Managing Directors , Dr. Christian Sellmann, Gerrit Schumann, Oliver Voigt  and Andrea Wasmuth A. General information on how Handelsblatt GmbH handles personally identifiable data and on user rights I. Purpose of the privacy statement Personally identifiable data are disclosed almost every time you contact our company. Personally identifiable data represent information with the help of which it is possible to identify a person – in other words, data that can be traced back to a specific individual. These data typically include the name, the e-mail address or the telephone number. In addition, however, purely technical data that can be assigned to a specific person are also to be considered personally identifiable data. The input of your personally identifiable data on this website is generally stipulated neither by law nor by contract. You are not under any obligation to provide personally identifiable data on this website unless we draw your attention to this obligation in this Privacy Statement in individual cases. For example, it is necessary to process your personally identifiable to make use of all the functions of this website and to execute an order.   This Privacy Statement is therefore intended to inform you about the type, scope and purpose of the collection and use of personally identifiable data on the following websites by Handelsblatt GmbH (hereinafter referred to as “we” or “us”): We are responsible for the processing of personally identifiable data on this website unless specified otherwise in this Privacy Statement.   Websites: The contact details of the entity responsible for data processing are as follows: Handelsblatt GmbH Toulouser Allee 27 40211 Düsseldorf E-mail: datenschutz@handelsblattgroup.com or Solutions by HANDELSBLATT MEDIA GROUP GmbH, Toulouser Allee 27, 40211 Düsseldorf, E-Mail: datenschutz@handelsblattgroup.com The contact details of our Data Protection Officer are as follows:   Name: DMC Datenschutz Management & Consulting GmbH & Co. KG E-mail address: datenschutz@handelsblattgroup.com Address: Zur Mühle 2-4, D-50226 Frechen II. Data processing procedures Personally identifiable data are processed on this website within the context of the following procedures:
  1. Creation of a client account (“Digital Pass”)
  2. Profiling and scoring
  3. Conclusion of a contract (e.g. subscription contract, purchase contract)
  4. Subscription to a newsletter
  5. Contact (contact page)
  6. Server logfiles
  7. Use of cookies
  8. Advertising (utilisation-based online advertising)
  9. Travel services
Section B of this Privacy Statement contains detailed information on the various processing routines on this website. III. Your rights On request, you have the right to receive information on the personally identifiable data we have stored about you free of charge (we are permitted to charge a fee from the second information request within a period of 12 months). You also have the right to the correction of incorrect data, the right to demand the restriction of the processing of excessive quantities of data, and the right to the deletion of unlawfully processed personally identifiable data or personally identifiable data that have been stored for too long (insofar as not stipulated otherwise in line with statutory retention obligations or for other reasons outlined in Art. 17 Para. 3 GDPR). In addition, you have the right to the transmission of all data provided to us by you in a commonly used file format (right to data portability).   Where you also have a right to object to processing within the context of individual procedures, we make reference to this right in the description of the various procedures in Section B.   Any consent you have given us can be revoked at any time with effect for the future. In order to exercise these rights, it is sufficient to send an e-mail to datenschutz@handelsblattgroup.com.   In addition, you also have the right to file a complaint with a data protection supervisory authority.  IV. General notes on cookies This website uses cookies.   Cookies are small text files that are stored by the browser in question when you call up our website on your user device. This allows individual services on a website to “recognise” you and to "remember" the settings you made. This not only enhances the user-friendliness of websites, thereby benefiting users (e.g. storage of login data) but cookies also serve to record statistical data on website use so that the obtained data can be used for analytical and advertising purposes.   Some cookies are automatically deleted from your user device as soon as you leave our website again (so-called session cookies). Other cookies are stored for a certain period of time but not for longer than two years (persistent cookies). In addition, we also use so-called third-party cookies that are managed by third parties so that they can offer certain services.   You can influence the use of cookies. Most browsers have an option for limiting or completely preventing the storage of cookies. Users are also made aware, however, that restricting or deleting cookies can impair website use and in particular user convenience when visiting websites.   You can find more details on the cookies we use in Section B.  B. Processing procedures  I.          Creation and use of a personal customer account (“digital pass”) 1. Your data When you create your customer account, you are asked to enter various personally identifiable data for your personal customer profile. The required details are form of address, last name, first name, date of birth, street, postcode and town. You also have the option of entering the preferred mode of payment. If you are a "Club Member" (Handelsblatt Wirtschaftsclub or WirtschaftsWoche Club), you are asked to specify this in some places. This information is voluntary, but is often associated with preferential terms.   We store this data in order to implement contracts we have concluded with you – for such things as your desired subscription, the delivery of goods or the event you have booked. You can always view, change and delete these data under the heading "Profile". 2. Recipients of the data Your profile data are processed by the competent offices of Handelsblatt GmbH for the purpose of handling your contract. We also pass on these data to the following recipients: 2.1       Companies in the HANDELSBLATT MEDIA GROUP You can find the companies of the HANDELSBLATT MEDIA GROUP that receive your data here. 2.2       Service partners Service partners of Handelsblatt GmbH who we commission to handle contracts and manage the contracts for our offerings, such as: We have contractually agreed with these service providers that they may only use your data in the context of handling orders for us and for our services. Any other use – including the making of contact with you by one of these service providers – is only admissible with your prior consent. 2.3       Law enforcement authorities Law enforcement authorities, public agencies (e.g. financial authorities, social insurance providers), supervisory authorities or third parties authorised to receive data: 2.4       Change of ownership In the event of a merger with another company, we pass on your data to the company in question. We only transmit data to entities outside the European Union (third country) without your consent if this is necessary in line with the contract in question, in order to meet legal obligations or to protect our legitimate interests. Moreover, data transmission to a third country is subject to corresponding adequacy decisions of the EU Commission on the level of data protection or the presence of corresponding, suitable and adequate guarantees. You can request more detailed information from our Data Protection Officer (datenschutz@handelsblattgroup.com). 3. Legal basis Your profile data and the data collected for handling of the contract are processed on the basis of Art. 6 Para. 1 b GDPR. This "permission to use" allows the processing of personally identifiable data for the purpose of fulfilling a contract. 4. Duration of data storage The personally identifiable data stored in your profile are deleted when you or we delete the customer account. Data on earlier orders are only deleted after 10 years in line with the retention period under commercial and tax law. II. Profiling and scoring 1. Your data We process your data from your profile together with data we have obtained based on browser sessions or from other sources in order to create new services in which you might be interested as well as to analyse and assess our own services ("profiling"). Moreover, in individual cases we use data to which we have access (e.g. from credit agencies) to calculate the probability of a client meeting his payment obligations ("scoring"). Scoring makes use of data on such factors as employment relationships, occupation, employer experiences from past business relationships or credit information. Scoring is based on generally accepted mathematical/statistical calculation methods. The calculated figures help us to manage risk and reach decisions on the conclusion of contracts. 2. Recipients of the data The recipient groups listed in no. 1.2 receive your data within the context of processing. 3. Legal basis The legal basis for the processing of these data is Art. 6 Para. 1 f GDPR. This "permission to use" allows the processing of personally identifiable data in the context of the "legitimate interest" of the responsible entity, insofar as this interest is not outweighed by your basic rights, basic freedoms or interests. Our legitimate interest consists in improving our services as well as in risk management and risk precaution. You can object to this processing of your data at any time for reasons arising from your particular situation indicating that data processing is inappropriate. In such cases, it is sufficient to send an e-mail to the Data Protection Officer (datenschutz@handelsblattgroup.com). 4. Duration of data storage We delete your data if it is no longer required for the handling of the contract (scoring) or for the improvement of our performance; in the latter case, however, these data are always deleted when your customer account is deleted – or, in the case of pseudonymous data, in line with the provisions outlined in III. 4. III. Handling of the contract (order, subscription, event) 1. Your data When you sign up for a subscription, order products via our websites or register for an event, we access the data stored in your customer account (see no. 1 above). If you do not want to create a customer account, it may under certain circumstances nevertheless be possible to place orders. In such cases, we then require the following data for each concluded contract in order to implement the contract: form of address, first name, last name, billing address (street, number, postcode, town, country), delivery address (street, number, postcode, town, country), details of payment mode, e-mail address and date of birth. Providing your telephone number is optional. 2. Recipients of the data For the purpose of handling the contract, we pass on your data to the recipient groups listed in no. I.2. 3. Legal basis The details provided for the handling of the contract are processed on the basis of Art. 6 Para. 1  b GDPR. Art. 6 Para. 1 Clause 1 b GDPR permits data processing if this is necessary in order to fulfil a contract. 4. Duration of data storage The personally identifiable data stored in the context of the handling of the contract are deleted as follows: 4.1       Subscription After a period of 18 months following expiry of a subscription for the processing of any subsequent claims 4.2       Orders for products After you have received the products and the warranty period has expired. This period has a duration of two years and begins with delivery of the product in question. 4.3       Event After a period of 18 months following staging of the event for the processing of any subsequent claims.   For the remainder, we are legally obliged to keep transaction-related data for ten years for tax reasons. IV.       Newsletters 1. Your data We use the data transmitted by you in line with no. I and your entered e-mail address in order to send you the newsletters you have selected. This is subject to your consent, which we request once again via a confirmation e-mail. You can cancel your subscription to newsletters in your profile data at any time. 2. Recipients of the data For the purpose of handling the contract, we pass on your data to the recipient groups listed in no.. I.2. In addition, the following partner receives your data:   Tripicchio AG Engesserstraße 4a 79108 Freiburg 3. Legal basis This data processing is based on the consent you gave when you registered for the newsletter. Pursuant to Art. 6 Para. 1 a GDPR, data processing is permitted if you have given your consent to data processing for one or more specific purposes. In the context of ordering the newsletter, you submitted a declaration of consent, in which you confirmed that you would like to receive the selected newsletter. You can cancel the newsletter at any time free of charge. For this purpose, you simply use the cancellation link in the newsletter in question or send us an e-mail to kundenservice@handelsblattgroup.com. 4. Duration of data storage The personally identifiable data stored in the context of your registration for the newsletter are deleted when you have successfully cancelled receipt of the newsletter. If you remain our customer – via a subscription, for example – we retain your customer data within the context of nos. I. and III. above. V.        Making of contact 1. Your data When you make contact with us (via e-mail, for example, or using the contact form), the details you provide are processed in order to handle your enquiry as well as to handle any follow-up queries. 2. Recipients of the data The data in the contact form or data you have transmitted in your e-mail enquiries are only processed within Handelsblatt GmbH. 3. Legal basis The legal basis for the processing of the details you provide when making contact with us is Art. 6 Para. 1 in conjunction with f. GDPR. This "permission to use" allows the processing of personally identifiable data in the context of the "legitimate interest" of the responsible entity, insofar as this interest is not outweighed by your basic rights, basic freedoms or interests. Our legitimate interest consists in handling the contact you have made with us. You can object to this processing of your data at any time for reasons arising from your particular situation indicating that data processing is inappropriate. In such cases, it is sufficient to send an e-mail to the Data Protection Officer (datenschutz@handelsblattgroup.com). 4. Duration of data storage The personally identifiable data stored within the context of your contact with us are deleted if the matter connected to this contact has been fully clarified and if it is no longer to be expected that this specific contact event will once again become relevant at any time in the future. VI.       Server logfiles 1. Your data Every time you access this website, we automatically collect various technical data that are personally identifiable data.   These data are the following: IP addresses are assigned to every device (e.g. smartphone, tablet, PC) connected to the Internet. Which IP address this is depends on the Internet connection via which your device is connected to the Internet at the time in question. It may be an IP address that your Internet provider has assigned to you – when you are connected to the Internet at home via your W-LAN, for example.. It may, however, also be an IP address assigned by your mobile phone provider or the IP address of a provider of a public or private W-LAN or other Internet access point. In its currently most common form (IPv4), the IP address consists of four number blocks. As a private user, you will generally not always have the same IP address, as the address is only assigned to you temporarily by your provider (so-called "dynamic IP address"). In principle, unique assignment of user data is easier with a permanently assigned IP address (so-called "static IP address"). Other than for the purpose of tracing unlawful access to our website, we do not use these data as personally identifiable data but only on an anonymised basis in order to determine which of our websites is favoured, how many visits take place each day and so on.   Our website already supports the new IPv6 addresses. If you already have an IPv6 address, you should also be aware of the following: the IPv6 address consists of eight blocks of four. The first four blocks – as with the entire IPv4 address – are typically assigned dynamically in the case of private users. The last four blocks of an IPv6 address (so-called "interface identifier"), however, are determined by the user device that you use for browsing on the website. Unless there are different settings in your operating system, the so-called MAC address is used for this purpose. The MAC address is a kind of serial number assigned once worldwide for each IP-capable device. We therefore do not store the last four blocks of your IPv6 address. We generally recommend that you activate the so-called "Privacy Extensions" on your user device to ensure better anonymisation of the last four blocks of your IPv6 address. Most common operating systems have a "Privacy Extensions" function, but in some cases this function is not factory preset.   These data are not merged with other personally identifiable data that you actively enter on our website – in your profile, for example. We collect server logfiles in order to manage the website and so that we can identify and prevent unauthorised access. 2. Recipients of the data Server logfiles are passed on to the following recipients: 2.1       Companies in the HANDELSBLATT MEDIA GROUP You can find the companies of the HANDELSBLATT MEDIA GROUP that receive your data here 2.2       Service partners of Handelsblatt GmbH We have contractually agreed with these service providers that they may only use your data in the context of handling orders for us and for our services. Any other use – including the making of contact with you by one of these service providers – is only admissible with your prior consent. 2.3       Participant directories If you participate in an event and have not objected beforehand, we record your name (and, where applicable, company name) in participant directories that are made available to the participants at the event (e.g. in displayed participant lists or in an event app). 3. Legal basis The legal basis for the processing of the personally identifiable data in logfiles is Art. 6 Para. 1 f GDPR. This "permission to use" allows the processing of personally identifiable data in the context of the "legitimate interest" of the responsible entity, insofar as this interest is not outweighed by your basic rights, basic freedoms or interests. Our legitimate interest consists in easier administration and improving our services as well as the possibility of identifying and tracing hacking. You can object to this processing of your data at any time for reasons arising from your particular situation indicating that data processing is inappropriate. In such cases, it is sufficient to send an e-mail to the Data Protection Officer. 4. Duration of data storage The server logfiles containing the aforementioned data are automatically deleted after 30 days at the latest. We reserve the right to store the server logfiles for a longer period if there are facts that support the assumption that there has been inadmissible access (such as a hacking attempt or a so-called DDOS attack). VII.      Cookies 1. Your data We use cookies on our websites to enhance performance and user-friendliness (see Section A. IV. "General notes on cookies" for more details). Below is an overview of the cookies we use and the websites on which we use them. We also have a page you can visit for more detailed information on the opt-out options.
  1. Google Our websites use Google Analytics, a Web analysis service of Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and allow analysis of your website use. The information on your use of our websites generated by the cookie is generally forwarded to a server of Google in the USA and stored there. In the event that IP anonymisation is activated on our pages, however, Google first truncates your IP address within the member states of the European Union or in other countries that have signed the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA before it is truncated. Google uses this information to analyse your use of the website, to compile reports on website activities, and to provide additional services to the website operator related to website use and Internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other data by Google.
  2. Webtrekk This website uses "Webtrekk Analytics", a product of Webtrekk GmbH, in order to collect statistical data on the utilisation of this website and to optimise the offered services. Webtrekk Anallytics is a statistics program that records utilisation in anonymised or pseudonymised mode. Webtrekk GmbH is certified for data protection in the field of Web controlling. This certification also involved an on-site audit at Webtrekk in Berlin and at the hosting location in Nuremberg, during which the processing of tracking data was monitored for data protection conformity and data security. The use of Webtrekk enables us to perform pseudonymised analysis of user behaviour, and information transmitted by your browser is collected and evaluated for this purpose. The evaluations are all non-person related but are anonymised or pseudonymised. In other words, personal identification characteristics are replaced by markers that make it impossible or far more difficult to determine the identity of the person in question. For this purpose, the IP address is anonymised immediately after processing and before being stored. Webtrekk also uses cookies. You have the right to object to data collection and storage by Webtrekk with effect for the future at any time.
  3. Facebook Plug-ins of the social network Facebook are sometimes integrated in our website. These plug-ins are services of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. You can recognise the "Facebook" plug-ins by the Facebook logo or the "Like" button” on our website. When you visit a page with this kind of plug-in on our website, your Internet browser establishes a direct connection with the servers of Facebook Inc. During this process, the content of the plug-in is transmitted to your Internet browser, which integrates it in the displayed page. The information that you have visited this website is transmitted to Facebook Inc. If you are logged into your personal Facebook user account when you visit the page in question, Facebook Inc. assigns the website visit to your user account. If you use the plug-in – by clicking on the "Like" button, for example – this information is direct transmitted to Facebook Inc. and stored by Facebook. If you want to prevent this data transmission, you must log out of your Facebook user account before visiting our website. Active use of the plug-in is subject to the data protection terms and terms of use of Facebook Inc. You can find information on the collection, storage and use of your data by Facebook Inc. in the  Facebook privacy guidelines and the guidelines on the private sphere.
  4. Plug-in for retargeting of the social network Facebook Retargeting tags of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA are integrated in our pages. When you visit our pages, the retargeting tags establish a direct connection between your browser and the Facebook server. The information that you have visited this website with your IP address is then transmitted to Facebook. This permits Facebook to assign the visit to our pages to your user account. We can use the information we have received in this way to display Facebook Ads. We would like to point out that we as the provider of the pages do not receive any information on the content of the transmitted data or their use by Facebook. You can find more information on this topic in the privacy statement of Facebook at www.facebook.com/about/privacy/. In addition, we use the Facebook target group tool "Custom Audiences", with the help of which it is possible to display customised ads to you in the social network. During this process, Facebook generates a non-reversible, non-personally identifiable checksum (hash value) from your utilisation data which can be used for marketing purposes. This hashing process (pseudonymisation) means that your data are not identifiable. If you do not wish data to be collected by Custom Audiences, you can deactivate Custom Audiences here: www.facebook.com/ads/website_custom_audiences/.
  5. Twitter With Twitter and the re-tweet functions, we use plug-ins of twitter.com, a service of Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. If you use the re-tweet functions, third parties gain information regarding the pages you have visited and this information is linked to your Twitter account . You can find more details on how Twitter Inc. handles your data, on your rights and on the setting options to protect your personal data in the Twitter privacy statement.
  6. GroupM / [m]PLATFORM We sometimes use the services of the provider GroupM with its product [m]PLATFORM on our pages. [m]PLATFORM helps us to serve advertising that is more relevant and therefore of more interest to you. For this purpose, [m]PLATFORM records certain demographic information (such as age, gender, education, income and household status [e.g. number of children]), geographic location, interests, activities and similar data in anonymised form. Exact data: Internet protocol address (“IP address”) and data that can be derived from an IP address such as non-exact geolocation data indicating the country, region, town and/or postcode of a device, type of Internet browser, browser language and operating system, type of connection (cable or WLAN), network via which the device is connected and mobile phone provider (where available), latitude/longitude of a (mobile) device. Also recorded: types of visited sites and pages (to determine interests), the site/page you visited before and after viewing advertising, data and time of online activity, frequency of visits to a page, search terms used on a site, interaction with advertising (i.e. whether a user clicks on an ad). Privacy statement of [m]PLATFORM: https://www.groupm.com/mplatform-privacy-notice-german You can object to data utilisation via the above opt-out link for the website in question.
  7. IVW / INFOnline Our websites use the SZM "Scalable Central Measurement Method" of INFOnline GmbH (http://www.infonline.de) to determine statistical KPIs for the utilisation of our websites based on the collection of anonymous measurement values. For the recognition of computer systems, the SZM reach measurement concept uses either a cookie with the identifier "ioam.de", "ivwbox.de", a LocalStorage object or a signature created from various automatically transmitted information items of your browser. IP addresses are only processed in anonymised form. The reach management model was developed in compliance with data protection provisions. The aim of reach measurement is to statistically determine the utilisation intensity and the number of users of a website. At no point in time are individual users identified. Your identity always remains protected. You do not receive any advertising via the system. As we are a member of the IVW German Audit Bureau of Circulation (IVW – http://www.ivw.eu), the         utilisation statistics are published monthly by the AGOF Working Group for Online      Media Research and the Media Analysis Working Group (ag.ma- http://www.agma-mmc.de), as well as the IVW and can be viewed at  www.agof.de, www.agma-mmc.deund http://www.ivw.eu. In addition to publishing measurement data, the IVW also regularly reviews the SZM procedure to ensure it is used in compliance with the regulations and data protection provisions. For the recognition of computer systems, either a cookie of a third-party provider, a first-provider cookie, a local memory object or a signature is used during the further course of processing made up of various information from your browser and which is automatically transmitted. You can find more information on the SZM procedure on the website of the INFOnline GmbH company (https://www.infonline.de), who perform the SZM procedure, the data protection website of AGOF (http://www.agof.de/datenschutz-allgemein/) and the data protection website of the IVW (http://www.ivw.eu).
  8. Optimizely Services of third-party provider Optimizely, Inc. 631 Howard Street, Suite 100 San Francisco, CA 94105, are integrated in some of our digital offerings in order to serve to you various versions of our digital offerings and to analyse which version works better so that we can improve our services. In order to enable us to offer these services, your usage behaviour is anonymously recorded, pseudonymised and additionally stored on the basis of cookies. At no point in time are individual users personally identified. Your identity always remains protected. You do not receive any advertising via the system.
  9. Usabilla The website uses the service "Usabilla for Websites" from Usabilla B.V. (Rokin 16, 1012 KR Amsterdam, Netherlands, hereinafter called "Usabilla"). Usabilla collects feedback from website visitors so that we can analyse and improve utilisation of our website and remedy any occurring errors. Information is only processed if the user clicks on the corresponding button in the feedback form or actively participates in a survey. During this process, Usabilla collects information on such things as device, operating system, browser and screen resolution, and then stores this information in a pseudonymised utilisation profile. Additional data such as e-mail address and feedback text are only collected if the user actively provides this information. In this process, cookies are only ever used to establish whether the user is visiting the website for the first time (or not) and whether the user has already seen a survey.
  10. Taboola This website uses Taboola’s Content Discovery Technology to recommend to you other online content that might be of interest to you. In order to manage these recommendations, Taboola collects information on your device and your behaviour on this website (and other partner pages) using cookies and similar technologies. For more information, you can find Taboola’s privacy guidelines here: Datenschutz Richtlinien.
  11. Brightcove Services of third-party provider Brightcove, Inc., 290 Congress Street, Boston MA 02210, USA, are integrated in some of our digital offerings in order to provide you with media content such as videos. In order to be able to offer these services, the provider collects anonymous or pseudonymised data on utilisation behaviour to improve the service in question. At no point in time are individual users personally identified. Your identity always remains protected. You do not receive any advertising via the system.
  12. AddThis Services of third-party provider AddThis, 1900 Oracle Way Reston, VA 20190, are integrated in some of our digital offerings in order to provide you with a bookmark service. In order to be able to offer these services, anonymous or pseudonymised data are exchanged with the provider. At no point in time are individual users personally identified. Your identity always remains protected. You do not receive any advertising via the system.
  13. WhatsBroadcast We use the services of WhatsBroadcast GmbH, Schwanthalerstr. 32, 80336 Munich. WhatsBroadcast is a service provided by WhatsBroadcast GmbH that allows customers like the Handelsblatt Media Group to send messages via messenger platforms (like WhatsApp, Facebook Messenger and others). Data that we automatically collect from you after you have logged in may contain your user data stored with the messenger platform (that may include your first and last name), your telephone number, your device, all the messages sent to the service, and information on which messages you have read and clicked on. These data help our client to send you customised messages based on your preferences. Further information that you make available via the chat in question is automatically stored. WhatsBroadcast does not pass on any of your data to third parties. You can view the privacy statement of the company here.
  14. OneSignal Services of third-party provider OneSignal., a U.S. company located at 2194 Esperanca Avenue, Santa Clara, CA 95054, are integrated in some of our digital offerings in order to inform you about new content via push messages. In order to be able to offer these services, the following anonymous or pseudonymised data are exchanged with the provider:  if the operating system permits this, OneSignal may possibly use a restricted list to check whether the device has been installed. It does this for purposes comprising assignment, the relevance of ads and the relevance of messages in connection with these applications; purchases made in an app; information on transactions and interactions of the end user with apps and websites; mobile ad identifiers such as iOS IDFAs and Android Advertising IDs ("mobile IDs"); these mobile IDs may be linked with other information, including data segments; exact locational information, generally with lat / long data of the end user (i.e. GPS-level data) or wifi information that may be linked with mobile IDs and on whether the app can be used or not; e-mail address, which we possibly may not be allowed to identify; IP address and system configuration information; information that belongs to devices or is related to these devices, such as device type (e.g. mobile phone, tablet); type and version of the operating system (e.g. Android, iOS); Internet provider; mobile browser (e.g. Safari, Chrome etc.); language settings: time zone; and network status (search as WLAN). Your identity always remains protected.
  15. 360dialog Services of third-party provider 360dialog GmbH, Saarbrücker Straße 36-38, 10405 Berlin, are integrated in some of our digital offerings in order customise our service to your preferences and thereby to serve you with content that may be of more relevance to you. In order to be able to offer these services, the following anonymous or pseudonymised data are exchanged with the provider: if the operating system permits this, 360dialog may possibly use a restricted list to check whether the device has been installed. It does this for purposes comprising assignment, the relevance of ads and the relevance of messages in connection with these applications; purchases made in an app, information on transactions and interactions of the end user with apps and websites; mobile ad identifiers such as iOS IDFAs and Android Advertising IDs ("mobile IDs"); these mobile IDs may be linked with other information, including data segments; exact locational information, generally with lat / long data of the end user (i.e. GPS-level data) or wifi information that may be linked with mobile IDs and on whether the app can be used or not; e-mail address, which we possibly may not be allowed to identify; IP address and system configuration information; information that belongs to devices or is related to these devices, such as device type (e.g. mobile phone, tablet); type and version of the operating system (e.g. Android, iOS); Internet provider; mobile browser (e.g. Safari, Chrome etc.); language settings: time zone; and network status (search as WLAN). Your identity always remains protected.
  16. Fabric If you use one of our apps, we provide services via third-party providers to make your user experience as convenient as possible. For this purpose, the Fabric service needs some personalised data in order to make the service available. These personal data comprise your mobile ad ID, installation UUID, Android IDs and your IP addresses. These data enable us to analyse utilisation of the apps and improve our service. The IP addresses are used to offer you location-based information. Your data are stored for 180 days.
  17. adjust.io For our apps, we also use the analysis technology "io analyzer" or "Adjust.io verifier". Both technologies are systems of Adeven GmbH, Saarbrücker Straße 36, 10405 Berlin. For the purpose of analysis, Adeven uses the IP and Mac addresses of the users, but this use is always anonymised.
  18. Burda Burda Direct interactive GmbH is active on our behalf to collect data for the purpose of serving utilisation-based online advertising. Cookies of the domain “trck.bdi-services” are stored on your computer to record your utilisation behaviour. These cookies collect information on your activities on the websites operated by Handelsblatt GmbH (e.g. surfing behaviour, visited subpages of the websites etc.). The technology allows the collection and storage of completely anonymous and non-personally identifiable data on Internet users and the use of these data for analysis and behaviour-related Internet advertising. The IP address of your computer is transmitted for technical reasons but is not stored and is not used for controlled display of advertising. In its data protection provisions, Burda Direct Interactive GmbH provides information on the collection and use of utilisation and other data as the responsible entity: https://www.apartena.net/datenschutzerklaerung.html You have the right to object to data collection and storage with effect for the future at any time (opt-out). To do this, please call up the following link: https://metrics.apartena.net/privacy-optout.do
  19. Criteo retargeting Criteo GmbH, Gewürzmühlstraße 11, 80538 Munich, is active on our behalf to collect data for the serving of utilisation-based online advertising. A cookie is set on your computer to record your utilisation behaviour. The cookie collects information on your activities on the websites operated by Handelsblatt GmbH (e.g. surfing behaviour, visited subpages of the websites etc.). As, based on current law, the possibility that the collected data permit an indirect connection to the person in question cannot be entirely ruled out, all utilisation data are stored using a pseudonym to ensure that personal identification is not possible. The IP address of your computer is transmitted for technical reasons but is not stored and is not used for controlled display of advertising. In its data protection provisions, Criteo provides information on the collection and use of utilisation and other data as the responsible entity. By following this link, you also have the option of objecting to the use of utilisation and other data for specific purposes (opt-out).
  20. Handelsblatt GmbH We also use cookies for our own purposes so that we are able to offer you our services. We store your login session in cookies anonymously and in pseudonymised mode after you have logged in. If we do not use these cookies, we are not able to properly assign your session and cannot provide you with access to our premium content.
You can of course object to the exchange of data using the corresponding link for the digital Handelsblatt offering in question (see list of offerings). Please note that this may result in some restrictions on our products, as we are then no longer able to offer you all the elements of the respective service. We have agreed with the named service providers that your data may only be used within the context of handling orders for us and for the services we provide. Any other use – including contact with you by one of these service providers – is only permitted with your prior consent. 2. Legal basis We base our processing of personally identifiable using the specified cookies on Art. 6 Para. 1 f GDPR. This "permission to use" allows the processing of personally identifiable data in the context of the "legitimate interest" of the responsible entity, insofar as this interest is not outweighed by your basic rights, basic freedoms or interests. Our legitimate interest consists in analysing the use of our websites, improving our services, increasing user-friendliness and optimising the marketing options for the advertising spaces on our websites. You can find more details in no. VIII. 3. You can object to this processing of your data at any time for reasons arising from your particular situation indicating that data processing is inappropriate. In such cases, it is sufficient to send an e-mail to the Data Protection Officer (datenschutz@handelsblattgroup.com). 3. Duration of data storage The reference to a specific person is directly cancelled by the partial deletion of the IP addresses, with the result that only statistical data are permanently stored. For the remainder, we refer to the duration of data storage in no. III.4. VIII.     Utilisation-based online advertising 1. Your data We have assigned responsibility tor the marketing of the ad spaces on our websites to iq digital media markteting gmbh, Toulouser Allee 27, 40211 Düsseldorf ("iq digital"). On our behalf, iq digital processes pseudonymous data of the users of our websites collected during a browser session. We merge these data with your profile data as outlined in no. I if you have given us a corresponding declaration of consent. Otherwise, the data collected when you call up our pages or apps are only processed pseudonymously or anonymously. 2. Recipients of the data The activities of iq digital are outlined below:   When websites in its marketing portfolio are called up (for portfolio see ??), iq digital sets cookies in the browser of a user. To avoid wastage in the serving of ads, iq digital also compares its own cookies with cookies it receives from third-party companies – for the purpose of avoiding duplicated contact with the same user, for example, or to enhance the precision serving of an ad. In some cases, iq digital also permits third-party companies to set their own cookies in the iq digital portfolio based on corresponding agreements or uses cookies to make collected data segments available to third parties for campaign validation.   Cookies only collect pseudonymised data. This does not permit any conclusions as to individual specific persons, but the pseudonymous data permit assumptions based on probability calculations that the user in whose browser session a cookie was set can be assigned to a certain group of persons. These assumptions form the basis for the serving of user-based advertising. If, for example, a user makes multiple visits to a technical page, then this user will in this context receive technology-related advertising instead of other advertising that happens to be available at that point in time.   Users can influence the use of cookies. Most browsers have an option that restricts or completely prevents the storage of cookies. This does not mean that the user receives less advertising. As outlined above, the advertising is merely less relevant for the user following an opt-out. iq digital also provides an option for the blocking or deleting of individual cookies.   Below is a description of the cookies used by iq digital . In order to provide a better overview of the cookies used by iq digital, the links initially lead to overviews providing general information on the purposes for which cookies are used. In addition, iq digital uses a software tool to provide in-depth information on the general purposes of the cookie for each set cookie (and this information may extend beyond the specific use by iq digital) as well as on the provider and the opt-out options.   The following types of cookies are used by iq digital: 2.1       Cookies for campaign validation: These are cookies that are used to monitor whether an advertising campaign has been implemented for an advertising client by iq digital in line with the client order. These cookies include: You can find more details on the various cookies for campaign validation used by the offering in question via the links on right to object under no. I. 2.2       Cookies used to achieve greater accuracy: Cookies always transmit only pseudonymous data. A cookie does not allow identification based on such things as gender or fields of interest. The cookie does not know which user is calling up the browser at any point in time. Cookies of iq digital are therefore compared with cookies of other service providers in order to increase hit probability in a specific segment (e.g. gender). iq digital uses the following cookies for this kind of comparison:   -        Cookies used in the context of user surveys   -        Cookies set by service providers on behalf of iq digital to determine motion patterns on the Internet (pages called up by a user)   -        Cookies transmitted to iq digital by third parties in order to compare them with own segmentations   -        Cookies used by partners of iq digital to achieve greater accuracy and for comparison with own pseudonymous data   You can find more information on the various cookies to achieve greater accuracy here.   We have contractually agreed with iq digital that they may only use your data within the context of handling orders for us and for our services as well as for the services of iq digital. 3. Legal basis The personally identifiable – pseudonymous – data are processed by iq digital on our behalf based on Art. 6 Para. 1 f GDPR. This "permission to use" allows the processing of personally identifiable data in the context of the "legitimate interest" of the responsible entity, insofar as this interest is not outweighed by the interests of a user. Our legitimate interest consists in financing the functions of our websites and apps – both of which contain intensively researched information, a considerable amount of which we offer free of charge. Marketing of the advertising spaces on our pages enables us to continue to provide access to major parts of these offerings to all users in this form, and thereby to make a significant contribution to sharing knowledge and information with the public and promoting the exchange of opinions. In our user-based serving of ads, our activities are based on the selection models that are also standard in the print media. Here as well, ads are booked based on environment and reader groups, and are also evaluated in reader reach analyses to determine perception levels in the relevant target groups. Unlike in the print segment – where much of the information on reader profiles is available in the form of booked subscriptions – the only available data are pseudonymous data, and the cookies are used to validate the serving segments.   You can object to this processing of your data at any time for reasons arising from your particular situation indicating that data processing is inappropriate. In such cases, it is sufficient to send an e-mail to the Data Protection Officer (datenschutz@handelsblattgroup.com). 4. Duration of data storage The pseudonymous data are deleted by iq digital based on the requirements of the respective technical provider commissioned to serve utilisation-based online advertising. As a rule, however, the maximum storage duration does not exceed two years. You can find more information on the various cookies under nos. 2.1 and 2.2 above. IX.     Travel services 1. Your data To handle your participation in a trip, it is necessary to transmit your registration data to us as the tour operator. The following data are required for the handling of the contract: form of address, title, first name, last name, company, position, billing address (street, house number, postcode, town, country), e-mail. You also have the option of providing your telephone number. 2. Recipients of the data Within the context of handling of the contract, we pass on your data to the groups of recipients listed in I.2. The data are processed within Handelsblatt GmbH and, where this is necessary to stage the trip, to the relevant providers of travel services (for the purpose of hotel or flight bookings, for example). 3. Legal basis The details provided for the handling of the contract are processed on the basis of Art. 6 Para. 1  b GDPR. Art. 6 Para. 1 Clause 1 b GDPR permits data processing if this is necessary in order to fulfil a contract. 4. Duration of data storage The personally identifiable data stored in the context of the handling of the contract are deleted as follows: after a period of 24 months following staging of the trip. The 24 months serve to address any subsequent claims. For the remainder, we are legally obliged to keep transaction-related data for ten years for tax reasons.     If you have any questions, please contact the Data Protection Officer named in Section A.   Düsseldorf, May 2018