Data privacy

Data Privacy Statement

In this Data Privacy Statement, we inform you about the type, scope and purpose of the processing of your personal data (abbreviated to "data") on our website www.shop.vth.de. (hereinafter: website) and when using our online store available via the website (together also referred to as "online offer"). Personal data is any data that can be related to you personally, e.g. name, address, e-mail addresses, usage behavior.

1. Data controller

Responsible for the data processing is

VTH – Verlag für Technik und Handwerk neue Medien GmbH
Bertha-Benz-Str. 7,
76532 Baden-Baden
Germany
Phone: 07221 / 5087-0
Telefax: 07221 / 5087-33
e-Mail: service@vth.de
(hereinafter referred to as “VTH”)

2. When does VTH - Verlag für Technik und Handwerk neue Medien GmbH use and process personal data?

The careful handling of your personal data has the highest priority at VTH – Verlag für Technik und Handwerk neue Medien GmbH (subsequently called VTH). We act according to the lawful regulations of the General Data Protection Regulation (GDPR), Bundesdatenschutzgesetz (BDSG) and the Telemediengesetz (TMG). Principally you can visit our website without leaving any personal data. However, in some cases we require certain data from you:

• when ordering
• when making contact with us
• when using the protected area “my account”
• when subscribing/cancelling the subscription of the newsletter.

Only if you have explicitly agreed, VTH uses your personal data for advertising purposes (for example for our newsletter). Naturally you can revoke your permission to the use and processing of your personal data for advertising purposes at any time by sending us a respective message. The revocation can take place by informal message to VTH Verlag für Technik und Handwerk neue Medien GmbH, Bertha-Benz-Str 7, 76532 Baden-Baden or by e-mail to verlag@vth.de

3. What does VTH do with personal data?

We specifically use your personal data for handling of the orders, for delivery of goods, for examination of solvency, for prevention of misuse of our internet page and for informing you about the status of your delivery.

We do not transfer your personal data including your address and e-mail address to third parties without your explicit and at any time revocable consent. Exempt from this are our service partners which need your data for the order processing (for example the shipping company responsible for the delivery, the company responsible for the payment handling). In those cases the amount of data to be submitted is limited to the necessary minimum. The legal basis for the transfer of data for order or payment processing is Art. 6 para. 1 lit. b GDPR.

If we commission third parties with the processing of data on the basis of a so-called "order processing agreement", this is done on the basis of Art. 28 GDPR.

Your matters worthy of protection are regarded according to the lawful regulations. Furthermore we use and process your address and order data for own analysis.  We analyze and evaluate customer data in order to improve our service and use it to develop target group-specific products that we can offer. Legal basis is Art. 6 para. 1 lit. f GDPR. We have a legitimate business interest in the evaluation and, based on this, the demand-oriented design of our services.

At any time you have the right to a disclosure free of charge, correction, stoppage and if necessary deletion of your stored data. Please refer to our data protection officer or by mail to VTH Verlag für Technik und Handwerk neue Medien GmbH, z.Hd. Datenschutzbeauftragter, Bertha-Benz-Str. 7, 76532 Baden-Baden.

4. How does VTH protect personal data

Your data is encrypted in critical areas within the field „My account” and during the order process by the SSL-procedure (Secure Sockets Layer). This is currently the most common data transfer procedure in the internet.

Through the use of the SSL-procedure your data will be, before they are being transferred to the server of VTH, defamiliarized in such a way, that a third party is unable to reconstruct them. Within the scope of this encryption procedure it is being ensured, that your data will only be sent to our servers. Upon arrival of your data on our server, they are conclusively examined for completeness and inability to be altered.

If you use the Internet Explorer as browser, you will recognize an encrypted data transfer by the yellow symbol of a lock in the lower bar of your browser.

Furthermore VTH maintains different security measures for the protection of the personal data of its customers. One example for this measure is the access to the customer account, which is only accessible by submission of your password.

4. Detail information about the processing operations, purposes and legal basis

4.1 Data collection when visiting the website

During the mere informational use of the website of the online store, i.e. when the user of the website does not register or otherwise transmit information to us, we only collect the data that the user's browser transmits to our server. This information is temporarily stored in a so-called log file (so-called server log files). The following information, which is technically necessary for us, is collected without the user's intervention and stored until automated deletion:

• Name of the website or file accessed
• Date and time of the retrieval
• Description of the type of web browser used
• IP address (shortened by the last 6 digits)

The aforementioned data is processed by us for the following purposes:

• Ensuring a smooth connection setup of the website as well as.
• Evaluating the system security and stability of the website.

The legal basis for the data processing is Art. 6 para.1 lit. f GDPR. Our legitimate interest follows from the aforementioned purposes and the technical necessity of processing the collected data to display our website to the user. In no case do we use the collected data for the purpose of drawing conclusions about the person of the user.

The server log files are automatically deleted after as soon as they are no longer required for the aforementioned purposes weeks.

4.2 Contact form

For the purpose of correspondence with us, data can be entered via a contact form in the footer of the website or we refer to e-mail addresses that can be used to contact us.

In this case, the specification of an e-mail address and a message is required in order to be able to answer the request. Further information can be given voluntarily.

This data is only processed for this correspondence and for the purpose for which the data was provided to us in each case in the context of this communication, such as to process inquiries or to contact the user at the user's request. In this case, the processing of personal data takes place with the consent of the user and is then permissible pursuant to Art. 6 (1) a) GDPR. If the contact aims at the conclusion of a contract with us, the legal basis for the processing is Art. 6 (1) lit. b GDPR.

The personal data collected by us for the purpose of responding to inquiries will be automatically deleted after the inquiry has been dealt with, if the circumstances indicate that the matter in question has been conclusively clarified and there are no legal obligations to retain data.

4.3 When creating a user account

On our website we offer the possibility to register as a user in order to use the functions of our online store.

When you create a user account or log in, we use your access data (e-mail address and password) to grant you access to the user account and to manage it. The legal basis for the corresponding processing is Art. 6 para. 1 lit. b) GDPR, as this information is required for the processing of the user contract concluded with.

The following data must be provided as mandatory data for registration:

• titel
• Last name, first name
• e-mail address
• password
• Address (street, house number, postal code, city, country)
• phone number

After submitting a registration via the corresponding registration form, the user receives an e-mail to confirm the registration and to verify that the owner of the specified e-mail address has actually registered. Only when the user confirms his registration via the specified link, the registration is completed. From then on, the user can log in to the website with his access data and administer his data himself.

A deletion of the user account is possible at any time and can be sent to the address of the responsible person mentioned under point 1. After deletion of the user account, the data will be blocked with regard to retention periods under tax and commercial law and deleted after expiry of these periods, unless the user has expressly consented to further use of the data (e.g. in the context of e-mail marketing) or further use of the data is required as permitted by law.

4.4 In the context of an order

Within the scope of an order in our online store, we store and use contact data such as name, first name, address, e-mail address, telephone number and, if applicable, payment data.

The processing of this data takes place,

• to be able to identify the user as our customer;
• to be able to process, fulfill and handle orders;
• to correspond with our customers;
• for invoicing purposes;
• to process any liability claims that may exist, as well as the assertion of any claims;
• to ensure the technical administration of our website;
• to manage our customer data.

The data processing is carried out on the basis of Art. 6 para.1 p. 1 lit. b) GDPR for the aforementioned purposes and is necessary for the appropriate processing of orders and for the mutual fulfillment of obligations arising from the contractual relationship.

4.5 Use of data for direct advertising and newsletter tracking

1. Newsletter

We send e-mails and other notifications with promotional information about our offers and services (hereinafter referred to as "newsletter") only with the consent of the recipients or legal permission.

The Newsletter contains content as specified in the registration form, otherwise information about our goods,services and our company.

If you would like to receive the newsletter offered on the website, we require an e-mail address from you. The provision of further, separately marked data is voluntary and will be used to address you personally.

For the registration to our newsletter we use the so-called double-opt-in procedure. This means that after your registration, we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will be blocked and automatically deleted after 2 days. In addition, we store your respective IP addresses used and times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data. The legal basis for this processing is Art. 6 (1) lit. c GDPR, as we are legally obliged to prove registrations.

After your confirmation, we store your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 p. 1 lit. a GDPR.

You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the unsubscribe link provided in every newsletter e-mail, by informal message to VTH Verlag für Technik und Handwerk neue Medien GmbH, Bertha-Benz-Str 7, 76532 Baden-Baden or by e-mail to verlag@vth.de.

5. Detail information about the processing operations, purposes and legal basis

5.1 Data collection when visiting the website

During the mere informational use of the website of the online store, i.e. when the user of the website does not register or otherwise transmit information to us, we only collect the data that the user's browser transmits to our server. This information is temporarily stored in a so-called log file (so-called server log files). The following information, which is technically necessary for us, is collected without the user's intervention and stored until automated deletion:

• Name of the website or file accessed
• Date and time of the retrieval
• Description of the type of web browser used
• IP address (shortened by the last 6 digits)

The aforementioned data is processed by us for the following purposes:

• Ensuring a smooth connection setup of the website as well as.
• Evaluating the system security and stability of the website.

The legal basis for the data processing is Art. 6 para.1 lit. f GDPR. Our legitimate interest follows from the aforementioned purposes and the technical necessity of processing the collected data to display our website to the user. In no case do we use the collected data for the purpose of drawing conclusions about the person of the user.

The server log files are automatically deleted after as soon as they are no longer required for the aforementioned purposes weeks.

5.2 Contact form

For the purpose of correspondence with us, data can be entered via a contact form in the footer of the website or we refer to e-mail addresses that can be used to contact us.

In this case, the specification of an e-mail address and a message is required in order to be able to answer the request. Further information can be given voluntarily.

This data is only processed for this correspondence and for the purpose for which the data was provided to us in each case in the context of this communication, such as to process inquiries or to contact the user at the user's request. In this case, the processing of personal data takes place with the consent of the user and is then permissible pursuant to Art. 6 (1) a) GDPR. If the contact aims at the conclusion of a contract with us, the legal basis for the processing is Art. 6 (1) lit. b GDPR.

The personal data collected by us for the purpose of responding to inquiries will be automatically deleted after the inquiry has been dealt with, if the circumstances indicate that the matter in question has been conclusively clarified and there are no legal obligations to retain data.

We may store the unsubscribed email addresses together with your used IP address and the time of subscription and confirmation for up to three years on the basis of our legitimate interests according to Art. 6 para. 1 lit. f GDPR on a limited basis in order to be able to prove consent formerly given before we delete this data. This data is processed for the purpose of a possible defense against claims.

If you have provided us with your e-mail address when purchasing our services, we reserve the right to regularly send you offers for similar services, such as those already purchased, from our range by e-mail. For this purpose, we do not need to obtain separate consent from you in accordance with Section 7 (3) of the German Unfair Competition Act (UWG). In this respect, the data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6 Para. 1 lit. f GDPR. If you have initially objected to the use of your e-mail address for this purpose, no newsletter will be sent by us. You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future by notifying the aforementioned responsible person. For this, you will only incur transmission costs according to the prime rates. After receipt of your objection, the use of your e-mail address for advertising purposes will cease immediately.

 

1. Newsletter-Tracking

We evaluate your user behavior when sending and using the newsletter. For this purpose, we use technologies from SC-Networks Evalanche. The operator of SC-Networks Evalanche processes personal usage data exclusively on systems located in Germany. The contact details are: SC-Networks GmbH, Enzianstr. 2, 82319 Starnberg, Germany, phone: +49 8151 / 555 16 0, fax: +49 8151 / 555 16 29, https://www.sc-networks.de. The operator processes the personal usage data only on our behalf in accordance with instructions and we have concluded a contract with him on order processing in accordance with Art. 28 GDPR.

For this evaluation, the e-mails sent contain so-called web beacons, also called tracking pixels. These are single-pixel image files that link to our website and thus enable us to evaluate your user behavior. This is done by collecting the data you entered when ordering the newsletter and by using web beacons that are assigned to your e-mail address and linked to a unique ID.

There is no linking of this data with other data that may have been stored for you. In particular, no personal profile is created.

Links contained in the newsletter also contain this ID.

With the data obtained in this way, we create a user profile in order to be able to provide you with the newsletter tailored to your interests. In doing so, we record when you read our newsletter, which links you click on in them and infer your personal interests from this. We link this data to actions you have taken on our website. The newsletter provider stores the information collected in this way on a server in Germany.

The measurement of the opening rates and the click rates as well as the storage of the measurement results in the profiles of the users and their further processing are based on the consent of the users due to Art. 6 para 1 lit. a GDPR.

A separate revocation of the performance measurement is unfortunately not possible, in this case the entire newsletter subscription must be cancelled, or it must be contradicted. In this case, the stored profile information will be deleted.

In the case of newsletters sent to existing customers in accordance to Section 7 (3) of the German Unfair Competition Act (UWG), no opening and click rates are measured.

Such tracking is also not possible if you have deactivated the display of images by default in your e-mail program. In this case, however, the newsletter will not be displayed to you in full and you may not be able to use all the functions. If you display the images manually, the newsletter tracking mentioned above will take place.

5. Cookies

We use so-called cookies in some areas of our online offer. Cookies are pieces of information that are transmitted from our web server or third-party web servers to the users' web browsers and stored there for later retrieval. Cookies can be small files or other types of information storage. In addition to cookies that are only used during a session and deleted after the website visit ("session cookies"), cookies can also be used to store user settings and other information for a certain period of time (e.g. two years) ("permanent cookies").

However, the user usually has the option of setting your Internet browser so that it is informed about the occurrence of cookies, so that he can allow or exclude them, or delete existing cookies.

A general objection to the use of cookies used for online marketing purposes can be declared for a large number of the services, especially in the case of tracking, via the U.S. site www.aboutlads.info/choices; or the EU site www.youronlinechoices.com;. Furthermore, the storage of cookies can be achieved by means of their deactivation in the browser settings. We would like to point out that the exclusion of cookies may lead to functional limitations of this online offer.

Cookies do not allow a server to read private data from your computer or the data stored by another server. They do not cause any damage to your computer and do not contain viruses.

We use technically necessary cookies on our online offer. Necessary cookies help make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

We use the following cookies, which are technically necessary for the operation of the website and the functions of the online store:

Cookie	Provider	Purpose	Period	Type
Consent Management Cookie	Usercentrics GmbH	·        Compliance with legal obligations ·        Consent storage	3 years	permanent

The cookies that are absolutely necessary for the operation of our online offer, i.e. without which our website cannot be displayed, are used for this purpose to protect our legitimate interests according to Art. 6 para. 1 p. 1 lit. f GDPR. The cookies that are necessary for the processing of contracts or for the contractually agreed use of our website, we use on the basis of Art. 6 para. 1 lit. b GDPR. These are automatically deleted after a defined period of time.

6. Use of additional cookies, tools and third-party tools

We use the following cookies and tools to understand how you use our offers and to be able to present you with additional promotional offers that are of interest to you. The services described below are only used if you have previously given your consent in accordance with Art. 6 (1) a) GDPR. Your consent can be revoked at any time with immediate effect. To do so, go to the cookie settings accessible via the footer of our website.

Google Analytics

We use Google Analytics, a web analytics service, on the basis of your consent for the analysis, optimization and economic operation of our online offer pursuant to Art. 6 Para. 1 lit. a GDPR Google Analytics, a web analytics service provided by Google LLC ("Google"). Google uses cookies.

The information generated by the cookie about the use of the online offer by the users is usually transmitted to a Google server in the USA and stored there. Google submits to the European data protection with the standard contractual clauses and thereby offers a guarantee to comply with the European data protection law.

 

Reference to processing of your data collected on this website in the USA by Google: By accepting cookies that are not technically necessary, you consent to the processing of your data in the USA in accordance with Art. 49 (1) p. 1 lit. a GDPR. The European Court of Justice has ruled that the level of data protection in the USA does not meet EU standards. This is justified by the fact that there is a risk that your data may be processed by US authorities, for control and monitoring purposes, possibly also without any legal remedy. If you only accept technically necessary (“essential”) cookies, the transmission described above does not take place.

We use Google Analytics to evaluate the use of our website, to compile reports on the website activities of our users and to obtain further statistical evaluations associated with website and internet use.

There is a joint responsibility regarding the use of the data between Google and us according to Art. 26 GDPR. We have agreed with Google that the primary responsibility under the GDPR for the processing of the data will be assumed by us and that we will fulfill all obligations under the GDPR with regard to the processing of the data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR). Google will use the information to evaluate the use of our online offer by the users, to compile reports on the activities within this online offer and to provide us with further services related to the use of this online offer and the use of the Internet. In doing so, pseudonymous usage profiles of the users can be created from the processed data.

We only use Google Analytics with IP anonymization activated. This means that the IP address of users is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

The IP address transmitted by the user's browser is not merged with other data from Google. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent the collection of data generated by the cookie and related to their use of the online offer to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: tools.google.com/dlpage/gaoptout?hl=en

For more information on terms of use and data protection, please visit Analytics Terms or Google Policies

The deletion of Analytics data is set to 14 months.

These cookies remain stored for up to 1 year.

You can revoke your consent to the use of Google Analytics at the following link. LINK EINFÜGEN

7. Storage period

Unless otherwise stated in this Data Privacy Statement, the data stored by us will be deleted as soon as any consent is revoked or when the data is no longer required for its intended purpose and the deletion is not contrary to any legitimate interests or statutory retention obligations.

If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. I.e. the data is blocked and not processed for other purposes. This applies, for example, to user data that must be retained for reasons of commercial or tax law.

According to legal requirements, data is stored for 6 years in accordance with § 257 para. 1 HGB (e.g. commercial letters, accounting vouchers, etc.) and for 10 years in accordance with § 147 para. 1 AO (e.g. commercial and business letters, tax-relevant documents).

8. Data subject rights

The user is entitled to the following data subject rights:

8.1 Right to information

The user has the right to request confirmation from us as to whether personal data relating the user is being processed.

8.2 Correction/deletion/restriction of processing

Furthermore, the user has the right to demand from us that

- inaccurate personal data concerning him or her be corrected without delay (right to rectification);

- personal data relating to him or her be deleted without delay (right to erasure); and

- the processing be restricted (right to restriction of processing).

8.3 Right to data portability

The user has the right to receive personal data concerning him, which he has provided to us, in a structured, common and machine-readable format and to transfer this data to another responsible party.

8.4 Right of revocation

The user has the right to revoke his consent at any time. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

8.5 Right of objection

If the processing of personal data concerning the user is necessary to protect our legitimate interests (Article 6 (1) (f) GDPR), the user has the right to object.

8.6 Right of complaint

If the user is of the opinion that the processing of personal data concerning him violates the GDPR, he has the right to lodge a complaint with the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, without prejudice to other legal remedies.

To exercise your rights, please contact us via the contact details provides in section 1 above.

9. Data protection office

If you have any questions concerning data privacy in respect to the collection, the processing and the use of your personal data, please contact our data privacy officer

Peter Nümann
e-Mail: dsb@vth.de / Tel: +49 7221 935799

or by mail to VTH Verlag für Technik und Handwerk neue Medien GmbH, z.H. Datenschutzbeauftragter, Bertha-Benz-Str. 7, 76532 Baden-Baden.

10. Modification of the Data Privacy Statement

We reserve the right to adapt this Data Privacy Statement in the event of any changes to the legal situation, the online offer and data processing. However, this only applies with regard to declarations on data processing. Insofar as user consent is required or components of the data protection declaration contain provisions of the contractual relationship with the users, the changes will only be made with the consent of the users.

Users can regularly inform themselves about any changes in this data protection declaration.