Data Privacy Statement
> Data Privacy Policy for our Website
> Information for customers on the processing of personal data
> Our social media presences
Data Privacy Policy for our Website
1. General
We are pleased about your visit to our website. We take the protection of your data seriously. We process data collected during a visit to our website in compliance with the applicable data protection regulations, the German Telemedia Act (TMG), the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (FDPA)
With this data protection information, we would like to inform you which non-personal and personal data we collect on your visit to our website or the use of our online offers and how this data is processed and used by us.
2. Responsible authority and data protection officer
The responsible party pursuant to Art. 4 (7) EU General Data Protection Regulation (GDPR) is the
GMP-Verlag Peither AG
represented by the authorized executive Barbara Peither
Karlstraße 2
79650 Schopfheim
Tel.: +49 (0)7622 66686-70
Email: service@gmp-publishing.com
(see our website imprint)
You can contact our data protection officer at datenschutz@gmp-verlag.de or at our postal address with the addition “Data Protection Officer”.
Please contact our data protection coordinator for any questions at rebecca.struett@gmp-verlag.de or at our postal address.
3. Information about the collection of personal data
(1) In the following, we inform about the collection of personal data when using our website www.gmp-publishing.com and the subpages (hereinafter "website"). Personal data include all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.
(2) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name and, if applicable, your telephone number and your company) will be stored by us in order to answer your questions. We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are legal retention obligations.
(3) If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. In doing so, we will also state the defined criteria for the storage period.
4. Your rights
(1) You have the following rights against us regarding the personal data concerning you:
- Right of access, Art. 15 GDPR
- Right to rectification or erasure, Art. 16 and 17 GDPR
- Right to restriction of processing, Art. 18 GDPR
- Right to object to processing, Art. 21 GDPR
- Right to data portability, Art. 20 GDPR.
(2) You also have the right to complain to a data protection supervisory authority about our processing of your personal data. For example, you can contact the supervisory authority named below: The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Königstraße 10a, 70173 Stuttgart, https://www.baden-wuerttemberg.datenschutz.de.
5. Collection of personal data while visiting our web site
(1) In the case of mere informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 Abs. 1 S. 1 lit. f GDPR):
- IP address
- Date and time of the request
- Time zone difference from Greenwich Mean Time (GMT)
- Content of the request (concrete page)
- Access status / HTTP status code
- Data volume transferred in each case
- Website from which the request comes
- Browser
- Operating system and its interface
- Language and version of the browser software.
(2) Our website uses cookies. Cookies are small text files that are stored on your computer and saved by your browser. Cookies cannot execute programs or transfer viruses to your computer. By setting cookies, we obtain information that is necessary for the proper functioning of our website or is used to make our Internet offering user-friendly and to continuously optimize the performance of our site.
When you visit our website for the first time, you will be asked to decide which types of cookies you wish to accept.
6. Use of the blog functions
In our blog, where we publish various posts on topics related to our activities, you can make public comments. Your comment will be published with your specified username at the post. We recommend using a pseudonym instead of your real name. You are required to provide your username and e-mail address; all other information is voluntary. If you post a comment, we will continue to store your IP address. The storage is necessary for us to be able to defend ourselves against liability claims in cases of possible publication of illegal content. We need your e-mail address to contact you if a third party should object to your comment as unlawful. Legal bases are Art. 6 para. 1 p. 1 lit. b and f GDPR. The comments are checked before publication. We reserve the right not to publish or to delete comments if they are objected to by us or third parties as unlawful.
7. Use of our webshop
(1) If you would like to order in our webshop, it is necessary for the conclusion of the contract that you provide your personal data, which we need for the processing of your order. Mandatory data necessary for the processing of contracts are marked separately, other information is voluntary. We process the data you provide to process your order. For this purpose, we may pass on your payment data to our house bank and, if applicable, to the payment service providers mentioned below under paragraph 4. The legal basis for this is Art. 6 para. 1 p. 1 lit. b GDPR.
You can voluntarily create a customer account, through which we can store your data for future purchases. When creating an account under "My account", the data you provide will be stored revocably. We use the so-called double-opt-in procedure for registration, i.e. your registration is only completed when you have previously confirmed your registration via a confirmation e-mail sent to you for this purpose by clicking on the link contained therein.
We may also process the data you provide to inform you about other interesting products from our portfolio or to send you e-mails with technical information.
(2) We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years. However, we will restrict processing after two years, i.e. your data will only be used to comply with legal obligations.
(3) To prevent unauthorized access by third parties to your personal data, in particular financial data, the ordering process is encrypted. In doing so, we use the current state of the art.
(4) If you pay by credit card, we will pass on your payment data to Unzer GmbH, Vangerowstraße 18, 69115 Heidelberg, Germany, as part of the payment processing. The transfer takes place in accordance with Art. 6 para. 1 lit. b GDPR and only insofar as this is necessary for the payment processing. Further information can be found in the privacy policy of Unzer GmbH. This is available at: https://www.unzer.com/de/datenschutz/.
8. Use of our knowledge portals
(1) Your access data to the knowledge portals is stored in our systems for technical reasons. Personal settings are also stored. You can export the settings in compliance with the GDPR and delete the user profile.
(2) We use cookies in our knowledge portals, which are used to continuously optimize our offer.
(3) As a user of our knowledge portals, you will be automatically informed about technical and content updates: You will receive an info letter sent via our email tool CleverReach. Each e-mail contains a link to unsubscribe from this information service.
8.1 Use of ChatGPT in the context of our knowledge portals
In accordance with Article 13 of the General Data Protection Regulation (GDPR), we inform you below about the processing of personal data when using the AI tool ‘ChatGMP’. This is connected via an interface with ChatGPT, provided by OpenAI, L.L.C., 3180 18th Street, San Francisco, CA 94110, Attn
(1) Responsible for the processing of your data is
GMP-Verlag Peither AG
Karlstrasse 2
79650 Schopfheim
GERMANY
Phone +49 7622 66686-70
service@gmp-publishing.com
(2) You can contact our data protection officer as follows
datenschutz@gmp-verlag.de
(3) Purpose and legal basis of processing
The AI chat is used exclusively for knowledge transfer and general support. The data is processed on the basis of Article 6(1)(b) GDPR, as access to the AI chat is part of a paid product and the processing of the data is necessary for the fulfilment of contractual obligations. In addition, processing is carried out on the basis of Article 6(1)(f) GDPR, whereby our legitimate interest lies in the provision of an efficient and informative dialogue system.
(4) Categories of personal data processed
The following data may be processed when using the AI chat:
- Input into the chat: Content that you enter is transmitted to OpenAI's servers to generate responses. Please do not enter any personal data.
- Log data: Technical information such as timestamps, session information and usage statistics are processed for analysis and troubleshooting purposes.
(5) The data is transmitted to OpenAI, which acts as a processor in accordance with Article 28 GDPR. OpenAI is contractually obliged to comply with data protection regulations.
(6) Transfer to third countries
The data is stored in Europe. Processing may take place on OpenAI servers in the USA. OpenAI provides suitable guarantees (e.g. EU standard contractual clauses) to ensure an adequate level of data protection.
(7) Duration of storage
The content of the chat is only processed temporarily and deleted after 30 days. Technical log data may be stored for a limited period of time to ensure the security and functionality of the service.
(8) You have the following rights regarding your personal data:
- Right of access (Article 15 GDPR)
- Right to rectification (Article 16 GDPR)
- Right to erasure (Article 17 GDPR)
- Right to restriction of processing (Article 18 GDPR)
- Right to data portability (Article 20 GDPR)
- Right to object to the processing (Article 21 GDPR)
(9) There is no automated decision-making or profiling within the meaning of Article 22 GDPR.
(10) This data protection notice may be updated if necessary. Please inform yourself regularly about the current status.
9. Newsletter
(1) With your consent, you can subscribe to our newsletter, with which we inform you, among other things, about interesting news and trends about GMP as well as our current offers. The advertised goods and services are named in the declaration of consent. You automatically give this consent when you complete your order.
(2) If the newsletter registration takes place via a form, we use the so-called double-opt-in procedure. This means that after your registration we send you an e-mail to the specified e-mail address in which we ask you to confirm that you wish to receive the newsletter. In addition, we partially store your IP addresses used and times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.
(3) Mandatory data for sending the newsletter are your e-mail address and your country of origin. The provision of further, separately marked data is voluntary and is used to address you personally and to adapt the content to your interests. After your confirmation, we store your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 p. 1 lit. a GDPR.
(4) To send our newsletter, we use the email tool CleverReach®, which is operated by CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany. For this purpose, your data is also stored by CleverReach®. CleverReach® offers evaluation options on how the newsletters are opened and used. Your data will not be passed on to other third parties and CleverReach® does not obtain the right to pass on your data. For more information, please also refer to the CleverReach® privacy policy at https://www.cleverreach.com/de/datenschutz/.
(5) You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in each newsletter e-mail, by e-mail to service@gmp-verlag.de or by sending a message to the contact details provided in the imprint. Your data will be deleted within 12 months after termination of the newsletter receipt, provided that the deletion does not conflict with any statutory retention obligations.
(6) We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the e-mails sent contain so-called web beacons or tracking pixels, which are single-pixel image files that are stored on our website or at the above-mentioned service provider used by us. Your data is presented anonymously in our evaluations and the collection and processing of complete IP addresses and cookies is prevented.
You can object to this tracking at any time by contacting us via our contact details provided in the imprint. The information will be stored as long as you have subscribed to the newsletter. After unsubscribing, the data will be automatically deleted within 12 months. Furthermore, such tracking is not possible if you have deactivated the display of images by default in your e-mail program. In this case, the newsletter will not be displayed to you in full and you may not be able to use all the functions. If you display the images manually, the above-mentioned tracking will take place.
10. Third-party analytics tools Matomo
(1) Our website and our knowledge portals www.gmp-berater.de, www.eu-gmp-leitfaden.de, www.gmpcadviser.com, aq.gmp-knowhow.de/, gdp.gmp-knowhow.de/, free.gmpandtea.de and abo.gmpandtea.de utilize the web analysis service Matomo, in order to be able to analyze and regularly improve usage. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. The legal basis for the use of Matomo is Art. 6 para. 1f GDPR.
(2) We process the following data: The type of browser used, the browser version, the operating system used, the country of origin, the date and time of the server request, the number of visits, the time spent on the website, the internal and external links activated, and the documents accessed and downloaded.
(3) Cookies are stored on your computer for this evaluation. The information collected in this way is stored by the responsible party exclusively on its server in Germany. You can set the evaluation by deleting existing cookies and preventing the storage of cookies. If you prevent the storage of cookies, we point out that you may not be able to use this website in full. The prevention of the storage of cookies is possible through the setting in your browser.
(4) We use Matomo with the extension "AnonymizeIP". This means that IP addresses are processed in abbreviated form, thus excluding the possibility of direct personal references. The IP address transmitted by your browser via Matomo is not merged with other data collected by us.
(5) The Matomo program is an open-source project. Information from the third-party provider on data protection is available at https://matomo.org/privacy-policy/.
11. Social Media
a) YouTube videos
(1) We have integrated YouTube videos into our online offer, which are stored on http://www.YouTube.com and can be played directly from our website. These are all integrated in "extended data protection mode", i.e., no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos, the data mentioned in paragraph 2 are transmitted. We have no influence on this data transmission.
(2) By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under point 5 of this declaration are transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
(3) For more information on the purpose and scope of data collection and processing by YouTube, please refer to the privacy policy. There you will also find further information on your rights and setting options to protect your privacy:
http://www.google.de/intl/de/policies/privacy. YouTube is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
The integration of the videos serves to protect our legitimate interests in an optimal marketing of our offer, which outweigh our interests in the context of a balancing of interests according to Art. 6 para. 1f GDPR.
b) LinkedIn
We only use the LinkedIn button embedded in our pages as a hyperlink to our LinkedIn page. If you click on the LinkedIn button while logged into your LinkedIn account, LinkedIn can associate the visit to our pages with your user account. We would like to point out that we, as the provider of the LinkedIn fan page, have no knowledge of the content of the transmitted data or its use by LinkedIn.
You can find more information on this in LinkedIn's data protection information at https://de.linkedin.com/legal/privacy-policy
If you do not want LinkedIn to be able to assign the visit to our pages to your user account, please log out of your LinkedIn user account.
LinkedIn Insight Tag
Our website uses the LinkedIn Insight Tag. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
By using the LinkedIn Insight Tag, we collect information about visitors to our website. If a visitor is logged in to LinkedIn, this enables us to analyze the professional details (such as career level, company size, country, location, industry and job title) of our visitors in order to better target our site to the respective target groups. We can also use the LinkedIn Insight Tag to measure whether visitors to our website make a purchase or take another desired action (conversion measurement). This measurement can also be carried out across devices, e.g. from a PC to a tablet. The LinkedIn Insight Tag also provides a retargeting function that allows us to display targeted advertising outside the website to visitors to our website. It is important to emphasize that, according to LinkedIn, no identification of the advertising addresses takes place.
LinkedIn also collects log files containing information such as the URL, referrer URL, IP address, device and browser characteristics and the time of access. The IP addresses are either shortened or (if they are used to identify LinkedIn members across devices) pseudonymized. LinkedIn deletes the members' direct identifiers after seven days. The remaining pseudonymized data is deleted within 180 days.
The data collected by LinkedIn cannot be assigned to individual persons by us as the website operator. LinkedIn stores the personal data collected from website visitors on its servers in the USA and uses it as part of its own advertising measures. Further details can be found in LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy#choices-oblig
Legal basis
The use of the service is based exclusively on Art. 6 para. 1 lit. a GDPR and § 25 TTDSG. Consent can be revoked at any time.
You can object to the analysis of usage behavior and targeted advertising by LinkedIn at the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
LinkedIn members can also control the use of their personal data for advertising purposes in their account settings. To prevent LinkedIn from linking data collected on our website to your LinkedIn account, you must log out of your LinkedIn account before visiting our website.
12. up-to-dateness and amendment of this privacy notice
The data protection information was adjusted in February 2025 and corresponds to the status. We reserve the right to adjust this privacy policy accordingly in the event of changes.
Information for customers on the processing of personal data
In order to fulfil our duty to provide information in accordance with Art. 13 of the EU General Data Protection Regulation (GDRP), we would be pleased to provide you with the following information on data protection.
1. Who is responsible for data processing?
The person responsible pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDRP) is
GMP-Verlag Peither AG
Karlstrasse 2
79650 Schopfheim, Germany
Email: service@gmp-verlag.de
Phone: +49 7622 66686-70
Further information about our company and contact details can be found in the imprint of our website.
We have appointed a data protection officer for our company. You can reach this person at datenschutz@gmp-verlag.de or our postal address with the addition "Datenschutzbeauftragter".
2. For what purposes do we collect your personal data and on what legal basis is the data collection based?
If you order from us, it is necessary for the conclusion of a contract that you provide us with your personal data (name, first name, address data, e-mail address, telephone number, if applicable company, department, position), which we need to process your order. This data is also collected when you request an offer from us. The data provided by you will be processed by us within the scope of preparing offers and processing orders. If you want to pay with your credit card, we need and process your credit card details. The legal basis for these purposes is Art. 6 (1) lit. b GDPR.
3. How long is the data stored?
Your personal data will be deleted if they are no longer needed for the above-mentioned purposes.
Personal data that we have stored within the framework of your customer account created on our website will be deleted when you finally delete your access.
Some documents that contain your personal data (e.g. surname, first name, address data on invoices) must be stored by us for as long as there is a legal obligation to do so.
Data collected on the basis of your consent will be deleted as soon as you revoke your consent (e.g. newsletter).
4. To which recipients will the data be forwarded?
We pass on your personal data to third parties (e.g. service providers, suppliers) if this is necessary for the execution of the contract with you or the processing of your order. The legal basis for this transfer is Art. 6 (1) lit. b GDPR. In connection with order processing, the providers of our CRM system and accounting software, our suppliers of Internet and web hosting services and the printers who send our products directly to you (e.g. as part of print on demand) have access to your data. In the context of the newsletter – dispatch, the newsletter - evaluation and in the course of conducting surveys your data raised for it are passed on to our software supplier. The legal basis for this is Art. 6 (1) lit. f GDPR. If you pay with your credit card in our webshop, your credit card details will be passed on to our credit card company to process the payment. This is done on the basis of Art. 6 (1) lit. b GDPR.
5. Your rights as a data subject
You have the right to be informed about the personal data processed by us as well as a right to rectification, erasure or restriction of their processing. You also have the right to receive the data you provide in a structured, common and machine-readable format. (cf. Art. 15 -20 GDPR). You may object to the processing of your data and complain to the responsible data protection supervisory authority, the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg in Stuttgart, about the processing of your personal data by us.
6. Obligation to provide data
We need your personal data for the purposes listed under point 2. If you do not provide us with the required data, we will unfortunately not be able to process your order or conclude a contract with you.
7. Automated decision making
The processing of your personal data does not involve fully automated decision-making (including profiling) pursuant to Art. 22 GDPR.
(As of Juni 2024)
Our social media presences
This privacy notice applies to the following social media sites:
Data processing through social networks
We maintain publicly accessible profiles on social networks. The social networks used by us in detail can be found below.
Social networks such as LinkedIn, YouTube, etc. can generally comprehensively when you visit their website or a website with integrated social media content (e.g., like buttons or advertising banners). By visiting our social media presences, numerous processing operations relevant to data protection are triggered. In detail:
If you are logged in to your social media account and visit our social media page, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP-address.
With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are or were logged in.
Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. Details on this can be found in the Terms of use and privacy policy of the respective social media portals.
Legal basis
Our social media presences are intended to ensure the most comprehensive presence possible on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) f GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which are to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 (1) a GDPR).
Responsible person and assertion of rights
If you visit one of our social media sites (e.g. LinkedIn), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal (e.g. against LinkedIn).
Please note that although we share responsibility with the social media portal-operators do not have full influence on the data processing operations of the social media portals. Our options are largely determined by the corporate policy of the respective provider.
Storage duration
The data collected directly by us via the social media presence will be deleted from our systems as soon as you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory legal provisions - in particular retention periods - remain unaffected.
We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).
Social networks in detail
We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton
Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.
If you wish to disable LinkedIn advertising cookies, please use the following link:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Data transfer to the USA is based on the standard contractual clauses of the EU Commission.
Details can be found here:
https://www.linkedin.com/legal/l/dpa and
https://www.linkedin.com/legal/l/eu-sccs
For details on their handling of your personal data, please refer to the Privacy Policy.
From LinkedIn:
https://www.linkedin.com/legal/privacy-policy
YouTube
We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow
Street, Dublin 4, Ireland. For details on how they handle your personal data, please refer to the
YouTube privacy policy:
https://policies.google.com/privacy?hl=en
(As of June 2024)