Privacy Policy
Date of entry into force of this data protection notice: 25 May 2018
The privacy policy of ella Verlag und Medien GmbH respects your privacy.
This privacy policy (the "Policy" hereinafter) applies to the website http://www.packaging-journal.de(the "Website"). The Website is operated by ella Verlag und Medien GmbH, ("we", "our", "ella Verlag"), whose head office is located at Headquarters Hürth 3, D-50354 Hürth.
The policy explains how we use personal information that we collect about you (either "user" or "you") when you use the website. This policy is designed to protect you, our users, by informing you what personal information is collected, how we use the information about you, who we share it with, how long we keep it and how you can contact us if you have any questions or concerns about our use of your personal information. Your use of the Website and individual micro-websites is subject to your acceptance of this Policy.
In this Policy, the terms "personal data" or "personal information" means data relating to a living individual who is or can be identified either from the data or from the data in conjunction with other information in our possession or likely to come into our possession, and includes personal data in the form described in the Data Protection Legislation (as defined below).
Please read the following carefully. By accessing the website and giving your consent for us to use your personal data in accordance with the provisions of this policy, you acknowledge that you have reviewed this policy and agree to be bound by it. If you no longer consent to our processing of your personal data, you can request that we stop processing it by using the "Contact" get in touch with us.
ella Verlag is committed to complying with the Data Protection Acts 1988 and 2003, legal instrument 336 of the 2011 EUROPEAN COMMUNITY REGULATIONS (ELECTRONIC COMMUNICATIONS NETWORKS AND SERVICES (PROTECTION OF PRIVACY IN ELECTRONIC COMMUNICATIONS) and the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679), which replaces the former Data Protection Directive (officially Directive 95/46/EC) on 25 May 2018 ("Data Protection Laws"). May 2018 replaces the former Data Protection Directive (officially Directive 95/46/EC) ("Data Protection Laws").
What data do we collect about you?
Simply put, our function is primarily to inform you about technologies, companies, products and solutions from the packaging industry. As a visitor to our website, we also invite you to sign up for a newsletter and to purchase print magazines (either as a subscription or single issue order). The provision of your personal data is entirely at your discretion. If you choose to subscribe, we will require certain limited personal information from you. This includes your name and email address. We may also ask for your postal address in order to send the magazines to the correct address. In all cases, we assure you that we will only ask for very basic details. Information about the use of the website is collected using cookies (see the Cookies section below).
ella Verlag does not collect the kind of data that enables identifiable profiling of individuals without the consent of the owner of that data. We collect and collate general information from all traffic on all our websites; it is only ever used or presented in aggregated form.
From time to time, ella Verlag may ask users for feedback (free text input, quality ratings or similar) to help analyse the quality and performance of the website. This information is collected anonymously and used solely to improve our knowledge of customer needs and opinions. Occasionally, certain quotes from individuals may be highlighted, but this is done in a way that ensures the anonymity of the user.
How do we use the data about you?
We store your data in order to contact you directly about special advertising or opportunities.
IP addresses
We anonymise IP addresses of visitors to our website (an IP address is a number that can be used to uniquely identify a specific computer or other network device on the Internet). These are used by our analysis systems such as Google Analytics, WP Statistics and Jetpack for statistical analyses.
Cookies
A cookie is a small text file placed on your hard drive by a web server that enables a website and/or mobile app to recognise repeat use by users, facilitates the user's ongoing access to and use of a website and/or mobile app, and allows usage behaviour on the website and/or mobile app to be tracked and aggregated data to be compiled, enabling content improvements and targeted advertising.
We use cookies to compile data from all traffic on our websites, which is presented in aggregated form. We use third parties such as Google Analytics to collect user data, including through the use of (flash and non-flash) cookies and web beacons. They help to improve the website and provide many of the features that make your browsing experience more user-friendly.
How you delete cookies depends on the browser you are using. You will find instructions for your browser under the links below:
Internet Explorer
Chrome
Firefox
Safari
Opera
Flash cookies (applies to all browsers)
iPhone, iPad and more from Apple
Phones with the Android operating system
Integration of content from external websites
Posts on this website may contain embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves exactly as if the visitor had visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking services and record your interaction with this embedded content, including your interaction with the embedded content if you have an account and are logged in to this website.
We use the following third-party services:
ella Verlag uses various services from Google Inc. from the USA. These include Google Analytics, Google Adwords, Google Tag Manager, Google reCaptcha, Google Fonts and Google Maps.
Google Analytics
We use Google Analytics for our own websites and in some cases also for our users' websites. Google Analytics is a web analytics service provided by Google Inc ("Google"). In this context, cookies are also stored on the visitor's end device, which enable the use of the website to be analysed. The information generated by the cookie is transmitted to a Google server in the USA and stored there. We use the option of IP anonymisation, so that the IP address is generally shortened by Google within member states of the European Union and in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on our behalf to analyse the use of the website, to compile reports on website activity for the website operator and to provide other services relating to website activity and internet usage. The IP address transmitted by the browser as part of Google Analytics will not be merged with other Google data. The setting of cookies can be prevented by a corresponding setting in the browser; however, we would like to point out that in this case not all functions of this website may be fully utilised. You can object to the collection and storage of your IP address and the data generated by cookies at any time with effect for the future. The corresponding plugin for the browser can be found here: http://tools.google.com/dlpage/gaoptout.
Additional information on how Google handles personal data in its advertising network can be found here: Advertising and data protection.
Google Tag Manager
We also use Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags via an interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.
From time to time, our developers collect information on product usage in order to further optimise the product. However, we will never pass on this type of data to other Google products without the user's consent. Further information on this can be found in the Usage guidelines for this product.
Google reCaptcha
We use the reCAPTCHA service from Google Inc (Google) to protect your orders via the Internet form. The query serves to differentiate whether the input is made by a human or abusively by automated, machine processing. The query includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and used there. However, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website to analyse your use of this service. The IP address transmitted by your browser as part of reCaptcha will not be merged with other Google data. The deviating data protection provisions of Google apply to this data. Further information on Google's privacy policy can be found at https://policies.google.com/privacy
Facebook social plugins
Our online offering uses social plugins ("plugins") from the social network facebook.com, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). The plugins can be recognised by one of the Facebook logos (white "f" on a blue tile, the terms "Like", "Gefällt mir" or a "thumbs up" sign) or are marked with the addition "Facebook Social Plugin". The list and appearance of Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/.
When a user accesses a function of this online offering that contains such a plugin, their device establishes a direct connection with the Facebook servers. The content of the plugin is transmitted by Facebook directly to the user's device and integrated into the online offering. User profiles can be created from the processed data. We therefore have no influence on the scope of the data that Facebook collects with the help of this plugin and therefore inform users according to our level of knowledge.
By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the online offering. If the user is logged in to Facebook, Facebook can assign the visit to their Facebook account. If users interact with the plugins, for example by clicking the Like button or leaving a comment, the corresponding information is transmitted directly from your device to Facebook and stored there. If a user is not a member of Facebook, it is still possible for Facebook to find out their IP address and store it. According to Facebook, only an anonymised IP address is stored in Germany.
The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the relevant rights and setting options for protecting the privacy of users, can be found in Facebook's data protection information: https://www.facebook.com/about/privacy/.
If a user is a Facebook member and does not want Facebook to collect data about them via this online service and link it to their membership data stored on Facebook, they must log out of Facebook and delete their cookies before using our online service. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US-American site http://www.aboutads.info/choices/ or the EU side http://www.youronlinechoices.com/. The settings are platform-independent, i.e. they are adopted for all devices, such as desktop computers or mobile devices.
Facebook Remarketing
Within our online offer, so-called "Facebook pixels" of the social network Facebook, which is operated by Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are based in the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), are used. With the help of the Facebook pixel, Facebook is able to determine the visitors to our website as a target group for the display of adverts, so-called "Facebook ads". Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our website. This means that with the help of the Facebook pixel, we want to ensure that our Facebook ads correspond to the potential interest of users and are not annoying. With the help of the Facebook pixel, we can also track the effectiveness of Facebook adverts for statistical and market research purposes by seeing whether users have been redirected to our website after clicking on a Facebook advert.
The Facebook pixel is integrated directly by Facebook when you visit our website and can save a so-called cookie, i.e. a small file, on your device. If you subsequently log in to Facebook or visit Facebook while logged in, your visit to our website will be noted in your profile. The data collected about you is anonymous to us, so it does not allow us to draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible. The data is processed by Facebook in accordance with Facebook's data usage policy. Accordingly, you can find more information on how the remarketing pixel works and how Facebook ads are displayed in general in Facebook's data usage policy: https://www.facebook.com/policy.php.
You can object to the collection by the Facebook pixel and use of your data to display Facebook ads. To do this, you can go to the page set up by Facebook and follow the instructions on the settings for usage-based advertising: https://www.facebook.com/settings?tab=ads or the objection via the US side http://www.aboutads.info/choices/ or the EU side http://www.youronlinechoices.com/ explain. The settings are platform-independent, i.e. they are adopted for all devices, such as desktop computers or mobile devices.
Jetpack (WordPress Stats)
We use the Jetpack plugin (here the sub-function "Wordpress Stats"), which integrates a tool for the statistical analysis of visitor access and is provided by Automattic, Inc. 132 Hawthorne Street San Francisco, CA 94107, USA. Jetpack uses so-called "cookies", text files that are stored on your computer and enable your use of the website to be analysed.
The information generated by the cookie about your use of this online offer is stored on a server in the USA. User profiles can be created from the processed data, whereby these are only used for analysis and not for advertising purposes. Further information can be found in Automattic's privacy policy: https://automattic.com/privacy/ and notes on Jetpack cookies: https://jetpack.com/support/cookies/.
Twitter buttons
We use the buttons of the Twitter service. These buttons are provided by Twitter Inc, 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. They can be recognised by terms such as "Twitter" or "Follow" or by a stylised blue bird. With the help of the buttons it is possible to share a post or website of this online offer on Twitter or to follow the provider on Twitter.
When a user accesses a website of this online offering that contains such a button, their browser establishes a direct connection with the Twitter servers. The content of the Twitter button is transmitted by Twitter directly to the user's browser. We therefore have no influence on the scope of the data that Twitter collects with the help of this plugin and inform users according to our level of knowledge. According to this, only the user's IP address and the URL of the respective website are transmitted when the button is accessed, but are not used for purposes other than displaying the button. Further information on this can be found in Twitter's privacy policy at http://twitter.com/privacy.
Aumago
The website works together with Aumago GmbH ("Aumago"), Berlin, a target group marketer. Aumago uses so-called cookies, a text file that is stored in the computer's browser. Pseudonymised usage data is collected in the form of cookie IDs and advertising IDs without IP addresses in the cookie. The cookie ID and advertising IDs without an IP address are not sufficient to identify a natural person behind a browser/user.
Based on the user's surfing behaviour (website visited, categories, product pages), Aumago assumes an interest in a specific B2B industry and uses this information on behalf of ella Verlag to target more targeted, usage-based online advertising. In this respect, the cookies can be synchronised with other platforms via so-called cookie matching. Matching can take place, for example, for: Google, Doubleclick, Adition, Appnexus, Mediamath, The Trade Desk, Adform, Active Agent, yieldlab.
The cookies are either Aumago cookies or cookies from service providers used by Aumago, such as The ADEX GmbH, Berlin. The user can at any time via the following Link opt-out and thus object to cookie tracking in this regard. This sets a so-called opt-out cookie. The opt-out cookie requires that a setting in the browser does not prevent the storage of cookies or deletes the cookie. After deleting the opt-out cookie, the user must repeat the objection. Alternatively, the user can delete the cookies directly in the browser, set their browser settings to do-not-track from the outset or change their cookie preferences. here manage. If you would like to receive information about the information stored in your cookie, please send us your cookie ID."
Stepstone
We cooperate with StepStone Deutschland GmbH, Völklinger Str. 1, 40219 Düsseldorf on the basis of a legitimate interest pursuant to Art. 6 para. 1 sentence 1 f GDPR. The legitimate interest is that we want to provide our users with a comprehensive offer. The information provided on our site at https://packaging-journal.de/stellenmarkt/ The available job exchange is therefore operated by StepStone Deutschland GmbH, which is responsible for data protection. Therefore, when accessing the page https://packaging-journal.de/stellenmarkt/ a direct connection is established between your device and StepStone Deutschland GmbH and your IP address is transmitted to StepStone Deutschland GmbH. The data processing that then takes place there and further information on this can be found in the StepStone Deutschland GmbH privacy policy at https://www.stepstone.de/Ueber-StepStone/Rechtliche-Hinweise/datenschutzerklaerung/. The privacy policy is also referred to directly by https://packaging-journal.de/stellenmarkt/ linked.
List of integrated services
- Google Analytics; Purpose: User statistics; Contact usGoogle Inc. San Francisco, CA 94105, United States; Privacy policyBrowser plugin, opt-out link see above, https://www.google.com/policies/privacy/
- SendGrid; PurposeNotifications, newsletter; Contact usSendGrid Inc, 1801 California St #500 Denver, CO 80202, USA; Privacy policy: https://sendgrid.com/policies/privacy/
- Facebook; PurposeLike button, Share button; Contact: Facebook, Caffamacherreihe 7, 20355 Hamburg Privacy policy: https://www.facebook.com/privacy/explanation
- WordPress; Purpose: Blog system, Contact: WordPress San Francisco, Privacy policy: https://wordpress.org/about/privacy/
- Hootsuite; PurposePlatform for social media management; Contact usHootsuite Legal Services, c/o Hootsuite Media Inc, 5 East 8th Avenue Vancouver, BC V5T 1R6 Canada; Privacy policy: https://hootsuite.com/de/legal/privacy/
- Jetpack/WordPress.com stats; Purpose: Statistics; Contact: Automattic Inc, 60 29th Street #343, San Francisco, CA 94110-4929, USA & Quantcast Inc, 201 3rd St, Floor 2, San Francisco, CA 94103-3153, USA; Privacy policy: Opt out: http://www.quantcast.com/opt-out
https://automattic.com/privacy/ - AdRotate; PurposeBanner management and statistics; Contact: AJDG Solutions, Arnan de Gans, info@ajdg.net, Privacy policy: https://ajdg.solutions/terms-of-service-and-privacy-policy/
- Aumago; Purpose: Target group marketing; Contact usAumago GmbH, Neue Schönhauser Str. 20, 10178 Berlin, opt-out: http://www.theadex.com/opt-out
- Stepstone; Purpose: Offer industry-related job market; Contact: StepStone GmbH, Alexanderstr. 1, 10178 Berlin; Privacy policy: https://www.stepstone.de/Ueber-StepStone/Rechtliche-Hinweise/datenschutzerklaerung/
Communication
We would like to continue to offer you newsletters and magazines as well as information about the packaging industry that may be of interest to you. When you enter your contact details on one of our website forms and submit them, you are opting in to receive information from us. If you have consented to receive communications from us, you can opt out at any time. You have the right to prevent us from contacting you at any time (see: "Right to ask us to stop contacting you").
From time to time, we organise advertising campaigns via newsletters together with third parties. As part of these campaigns, if you have opted in to receive them, we will send you stand-alone newsletters to your email address containing information about products that we think may be of interest to you. These emails may contain links to third party websites and for this aspect we refer you to the following section entitled "Security".
Children under the age of 16
We ask that persons under the age of 16 do not submit any personal data to us. We do not knowingly accept data from anyone under the age of 16.
What rights do you have?
As a data subject, you have the following rights under data protection laws:
- The right to access the personal data concerning you;
- the right to correct errors in your personal data;
- the right to ask us to stop contacting you;
- the right to restrict or prevent the processing of personal data;
- the right to transfer your personal data to another controller;
- the right to cancellation and
- the right to lodge a complaint with the Data Protection Officer (DPO) if you believe that we have not handled your personal data in accordance with data protection laws.
These rights are explained in more detail below, but if you have any comments, concerns or complaints about our use of your personal data, please contact us (see below "How to get in touch with us"). We will respond to any rights you exercise within one month of receiving your request, unless the request is particularly complex or cumbersome, in which case we will respond within three months (we will inform you within the first month if we need more than one month to respond). If we are required by data protection laws to respond within a specific time limit, we will respond within that time limit.
Right to access the personal data concerning you
You can request information about what personal data we hold about you and you will be provided with the following:
- An overview of this personal data and the categories of personal data stored;
- Details of the purpose for which they are or will be processed;
- Details of the recipients or categories of recipients to whom it is or may be disclosed, including those located abroad, and what safeguards are used for this transfer abroad;
- Details of the period for which they are stored (or the criteria we use to determine how long they are stored);
- Details of your rights, including the rights to rectification, erasure, restriction or objection to processing;
- Information available about the source of this data;
- whether we carry out automated decision-making or profiling and, if we do, information about the logic involved and the intended result(s) or impact of such decision-making or profiling; and
- where your personal data is transferred outside the EEA and what security measures are in place.
Requirements for your personal data must be met by us (see below "How to get in touch with us") stating which personal data you require access to and a copy will be kept in your personal file. Please provide as much information as possible about the type of data you would like to see so that we can easily find the data.
If, in order to fulfil your request, we need to disclose information about another person or information that identifies another person, we may need to obtain that person's consent where possible. If we are unable to obtain consent, we may need to withhold this information or process the data to remove the identity of that individual where possible.
There are certain types of data for which there is no obligation to disclose them to you; they include personal data that records our intentions in connection with negotiations with you and the disclosure of which would be likely to affect those negotiations.
We may refuse to comply with a data subject access request made by you if (i) the request is manifestly unfounded or excessive, in particular if it is repetitive (in which case, if we decide to provide you with the personal data you have requested, we may charge you a reasonable fee taking into account the administrative costs of doing so), or (ii) we are entitled to do so under the Data Protection Legislation.
Right to update your personal data or correct errors in your personal data
You can ask us to correct errors in your personal data that we store free of charge. If you wish to do so, please do the following:
- Send us an e-mail, give us a call or write to us (see below "How to get in touch with us");
- you provide us with sufficient information to identify you (e.g. name, login details); and
- let us know which data is incorrect and what should replace it.
If we need to update your personal data, we will inform the recipients to whom this personal data has been disclosed (if applicable), unless this proves impossible or would require a disproportionate effort.
You are responsible for ensuring that all personal data provided to us is accurate and complete. If any information you have provided to us changes, please let us know as soon as possible (see below "How to get in touch with us").
Right to ask us to stop contacting you
You can ask us to stop contacting you. If you wish to do so, please do the following:
- Send us an e-mail, give us a call or write to us. Here you will find our contact details. (For newsletters: you can also click the "unsubscribe" button at the bottom of any newsletter email we send you). It may take up to 5 days for this to happen; and
- let us know which method of contact you are not satisfied with, if you are only dissatisfied with certain methods of contact (for example, you may be satisfied with being contacted by e-mail but not by telephone).
We will provide you with information about actions we have taken in response to the request to stop contacting you - this may be in the form of an email response confirming that you have "unsubscribed".
Right to restrict or prevent the processing of personal data
In accordance with data protection laws, you can request that we stop processing your personal data if:
- you do not believe that your data is correct (but we will start processing again once we have checked and confirmed its correctness);
- the processing is unlawful, but you do not want us to delete your data;
- we no longer need the personal data for our processing, but you need the data for the establishment, exercise or defence of legal claims; or
- you have objected to the processing because you consider that your interests should override the basis on which we process your personal data.
If you exercise your right to restrict us from processing your personal data, we will continue to process the data if:
- you give your consent to this processing;
- the processing is necessary for the defence of legal claims;
- the processing is necessary to protect the rights of other natural or legal persons; or
- the processing is necessary for reasons of public interest.
Right to data portability
You may request an electronic copy of the personal data that you have provided to us and that we store electronically, or request that we provide it directly to another party, in accordance with data protection laws. This only applies to personal data that you have provided to us - it does not apply to data generated by us.
Furthermore, the right to data portability only applies if:
- the processing is based on your consent or on the fulfilment of a contract; and
the processing is carried out using automated procedures.
Right to cancellation
You can ask us to delete your personal data in accordance with data protection laws if:
- you do not consider that we need your personal data to process it for the purposes set out in this policy;
- you have given us your consent to process your personal data and you withdraw this consent and we have no other legal basis for processing your personal data;
- you object to our processing and we have no other legal basis to continue processing your personal data;
- your personal data have been unlawfully processed or have not been erased when they should have been; or
- the personal data must be deleted for legal reasons.
In certain circumstances, we may continue to process your personal data in accordance with data protection laws.
If you have requested the deletion of your personal data, we will inform the recipients to whom this personal data has been disclosed, unless this proves impossible or would require a disproportionate effort. If you request it, we will also inform you about these recipients.
Right to lodge a complaint with the DPO
If you are not satisfied that we have processed your personal data in accordance with this policy, please contact us in the first instance. If you are not satisfied, you can lodge a complaint with the DPO or exercise your other rights under data protection laws.
Security
We do our best to protect users' privacy through the appropriate use of security technology. We restrict access to personal data to employees, contractors and agents who need to know that personal data in order to provide, develop or improve the services we provide. We ensure that we have appropriate physical and technical measures in place to protect your data and, where we outsource processes, we ensure that the service provider has appropriate security measures in place.
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risks posed by the processing of your personal data. In particular, we take into account the risks of accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.
Unfortunately, the transmission of data via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website and any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access. We are not responsible for any delays, failed delivery or other loss or damage resulting from: (i) the transmission of data over transmission networks and telecommunications facilities, including the internet; or (ii) delays or failed delivery by other service providers not engaged by us, and you acknowledge that the Website may be subject to limitations, delays and other problems associated with the use of such telecommunications facilities. You understand that we cannot guarantee the absolute prevention of cyber-attacks, spyware and viruses. Accordingly, you will not hold us liable for any unauthorised disclosure, loss or destruction of your personal data arising from these risks.
Other websites
Websites of ella Verlag may be linked to other websites operated by third parties. These links are provided for convenience only. Links to external websites do not imply that ella Verlag endorses these websites, and we are not responsible for the privacy practices of the owners and operators of these websites. We encourage you to review the privacy policies and practices of any website that asks you to provide personal information.
Reporting violations
We will notify the DPO of serious data breaches without undue delay and, where practicable, no later than 72 hours after becoming aware of them. If the notification is not made after 72 hours, we will record a reasoned justification for the delay; however, it is not necessary to notify the DPO if the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons. A personal data breach in this context means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.
We will record data breaches, including their impact and the remedial action taken, and notify you of data breaches affecting your personal data (which poses a high risk to you) if we are required to do so under data protection laws. We do not have to notify you of a data breach if:
- we have implemented appropriate technical and organisational measures to make the personal data unintelligible to any person who is not authorised to access the data, e.g. encryption; or
- we have taken subsequent measures to ensure that the high risk to affected individuals is unlikely to materialise; or
- it would require a disproportionate effort; in such a case, we would make a public announcement instead if necessary.
To whom we pass on your data
We may disclose your personal data to all business units, companies or other organisations controlled by ella Verlag and subject to its instructions.
Furthermore, ella Verlag may pass on your data in the following highly unlikely cases:
- When required by applicable law or pursuant to a court or similar order;
- if it is urgently necessary to prevent serious loss of or damage to property belonging to ella Verlag;
- if it is necessary for the purpose of obtaining legal advice or for the purpose or in the course of legal proceedings in which ella Verlag is involved as a party or as a witness.
We may also use service providers to help us operate the Website or provide services available on the Website. Third parties who provide these services on our behalf and access your data in the course of that provision are subject to strict contractual restrictions to ensure that your data is protected in accordance with data protection laws.
Where we store your data
The data we collect from you will be transferred to and stored within the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for us or for one of our providers. By providing your personal data, you consent to this transfer, storage or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this policy. The security measures in place in relation to the transfer of your personal data outside the EEA are that we have appropriate contracts in place with all persons who transfer that personal data.
All data you submit to us will be stored on secure servers. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password confidential. We ask you not to share a password with anyone else.
How long do we store your personal data?
ella Verlag fulfils the highest standards in the collection and use of personal data. Personal data will not be retained for longer than is necessary to fulfil a legitimate business need or as required by applicable law. If you have not contacted us for more than 3 years, we will delete your personal data from our database.
Amendment of the directive
We keep our policy under regular review and we reserve the right to amend this policy at our discretion. Users will be deemed to have accepted the amended policy if they continue to access the Website and submit personal data on or after the date of amendment. We will post updates on the Website.
How to get in touch with us
The controller (as defined in the data protection laws) for the website and for the services provided via the website is ella Verlag und Medien GmbH, Headquarters Hürth 3, D-50354 Hürth, Germany.
You are entitled to request a copy of the data we hold about you. If you would like a copy of some or all of your personal data, please send us an e-mail or write to us at the following address.
DSB
ella Verlag und Medien GmbH
Headquarters Hürth 3
50354 Hürth
Germany
We aim to ensure that your personal data is accurate and up to date. You can ask us to correct or remove data that you believe to be incorrect.
We do not charge a fee for the above-mentioned measures.
Responsibility
This Privacy Policy is an agreement between you and ella Verlag und Medien GmbH. Any complaints or disputes should be addressed to ella Verlag und Medien GmbH at the address given in the section "How to get in touch with us" is stated in this privacy policy.