Data Privacy Statement

Data Privacy Policy for our Website

1. General

We are pleased about your visit to our website. We take the protection of your data seriously. We process data collected during a visit to our website in compliance with the applicable data protection regulations, the German Telemedia Act (TMG), the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (FDPA)

With this data protection information, we would like to inform you which non-personal and personal data we collect on your visit to our website or the use of our online offers and how this data is processed and used by us.

2. Responsible authority and data protection officer

The responsible party pursuant to Art. 4 (7) EU General Data Protection Regulation (GDPR) is the

GMP-Verlag Peither AG
represented by the authorized executive Barbara Peither
Karlstraße 2
79650 Schopfheim
Tel.: +49 (0)7622 66686-70
Fax.: +49 (0) 7622 66686-77
Email: service@gmp-publishing.com
(see our website imprint)

You can contact our data protection officer at datenschutz@gmp-verlag.de or at our postal address with the addition “Data Protection Officer”.

Please contact our data protection coordinator for any questions at rebecca.struett@gmp-verlag.de or at our postal address.

3. Information about the collection of personal data

(1) In the following, we inform about the collection of personal data when using our website www.gmp-publishing.com and the subpages (hereinafter "website"). Personal data include all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.

(2) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name and, if applicable, your telephone number and your company) will be stored by us in order to answer your questions. We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are legal retention obligations.

(3) If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. In doing so, we will also state the defined criteria for the storage period.

4. Your rights

(1) You have the following rights against us regarding the personal data concerning you:

Right of access, Art. 15 GDPR
Right to rectification or erasure, Art. 16 and 17 GDPR
Right to restriction of processing, Art. 18 GDPR
Right to object to processing, Art. 21 GDPR
Right to data portability, Art. 20 GDPR.

(2) You also have the right to complain to a data protection supervisory authority about our processing of your personal data. For example, you can contact the supervisory authority named below: The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Königstraße 10a, 70173 Stuttgart, https://www.baden-wuerttemberg.datenschutz.de.

5. Collection of personal data while visiting our web site

(1) In the case of mere informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 Abs. 1 S. 1 lit. f GDPR):

IP address
Date and time of the request
Time zone difference from Greenwich Mean Time (GMT)
Content of the request (concrete page)
Access status / HTTP status code
Data volume transferred in each case
Website from which the request comes
Browser
Operating system and its interface
Language and version of the browser software.

(2) Our website uses cookies. Cookies are small text files that are stored on your computer and saved by your browser. Cookies cannot execute programs or transfer viruses to your computer. By setting cookies, we obtain information that is necessary for the proper functioning of our website or is used to make our Internet offering user-friendly and to continuously optimize the performance of our site.

When you visit our website for the first time, you will be asked to decide which types of cookies you wish to accept.

You can find more detailed information about the various cookies we use on our website in our cookie policy. There you will also learn how to change cookie settings once you have made them and how to configure your browser with regard to cookie settings.

6. Use of the blog functions

In our blog, where we publish various posts on topics related to our activities, you can make public comments. Your comment will be published with your specified username at the post. We recommend using a pseudonym instead of your real name. You are required to provide your username and e-mail address; all other information is voluntary. If you post a comment, we will continue to store your IP address. The storage is necessary for us to be able to defend ourselves against liability claims in cases of possible publication of illegal content. We need your e-mail address to contact you if a third party should object to your comment as unlawful. Legal bases are Art. 6 para. 1 p. 1 lit. b and f GDPR. The comments are checked before publication. We reserve the right not to publish or to delete comments if they are objected to by us or third parties as unlawful.

7. Use of our webshop

(1) If you would like to order in our webshop, it is necessary for the conclusion of the contract that you provide your personal data, which we need for the processing of your order. Mandatory data necessary for the processing of contracts are marked separately, other information is voluntary. We process the data you provide to process your order. For this purpose, we may pass on your payment data to our house bank and, if applicable, to the payment service providers mentioned below under paragraph 4. The legal basis for this is Art. 6 para. 1 p. 1 lit. b GDPR.

You can voluntarily create a customer account, through which we can store your data for future purchases. When creating an account under "My account", the data you provide will be stored revocably. We use the so-called double-opt-in procedure for registration, i.e. your registration is only completed when you have previously confirmed your registration via a confirmation e-mail sent to you for this purpose by clicking on the link contained therein.

We may also process the data you provide to inform you about other interesting products from our portfolio or to send you e-mails with technical information.

(2) We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years. However, we will restrict processing after two years, i.e. your data will only be used to comply with legal obligations.

(3) To prevent unauthorized access by third parties to your personal data, in particular financial data, the ordering process is encrypted. In doing so, we use the current state of the art.

(4) If you pay by credit card, we will pass on your payment data to Unzer GmbH, Vangerowstraße 18, 69115 Heidelberg, Germany, as part of the payment processing. The transfer takes place in accordance with Art. 6 para. 1 lit. b GDPR and only insofar as this is necessary for the payment processing. Further information can be found in the privacy policy of Unzer GmbH. This is available at: https://www.unzer.com/de/datenschutz/.

8. Use of our knowledge portals

(1) If you use our knowledge portals, you can log in using your access data agreed with the publisher. For technical reasons, your access data will be stored in our systems for this purpose.

(2) We use cookies in our knowledge portals, which are used to continuously optimize our offer.

You can find more detailed information about the various cookies that we use in our knowledge portals in the cookie policy of the knowledge portals. There you will also learn how to change cookie settings once you have made them and how to configure your browser with regard to cookie settings.

9. Newsletter

(1) With your consent, you can subscribe to our newsletter, with which we inform you, among other things, about interesting news and trends about GMP as well as our current offers. The advertised goods and services are named in the declaration of consent. You automatically give this consent when you complete your order.

(2) If the newsletter registration takes place via a form, we use the so-called double-opt-in procedure. This means that after your registration we send you an e-mail to the specified e-mail address in which we ask you to confirm that you wish to receive the newsletter. In addition, we partially store your IP addresses used and times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.

(3) Mandatory data for sending the newsletter are your e-mail address and your country of origin. The provision of further, separately marked data is voluntary and is used to address you personally and to adapt the content to your interests. After your confirmation, we store your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 p. 1 lit. a GDPR.

(4) To send our newsletter, we use the email tool CleverReach®, which is operated by CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany. For this purpose, your data is also stored by CleverReach®. CleverReach® offers evaluation options on how the newsletters are opened and used. Your data will not be passed on to other third parties and CleverReach® does not obtain the right to pass on your data. For more information, please also refer to the CleverReach® privacy policy at https://www.cleverreach.com/de/datenschutz/.

(5) You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in each newsletter e-mail, by e-mail to service@gmp-verlag.de or by sending a message to the contact details provided in the imprint. Your data will be deleted within 12 months after termination of the newsletter receipt, provided that the deletion does not conflict with any statutory retention obligations.

(6) We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the e-mails sent contain so-called web beacons or tracking pixels, which are single-pixel image files that are stored on our website or at the above-mentioned service provider used by us. Your data is presented anonymously in our evaluations and the collection and processing of complete IP addresses and cookies is prevented.

You can object to this tracking at any time by contacting us via our contact details provided in the imprint. The information will be stored as long as you have subscribed to the newsletter. After unsubscribing, the data will be automatically deleted within 12 months. Furthermore, such tracking is not possible if you have deactivated the display of images by default in your e-mail program. In this case, the newsletter will not be displayed to you in full and you may not be able to use all the functions. If you display the images manually, the above-mentioned tracking will take place.

10. Use of SurveyMonkey

(1) We use the online survey tool SurveyMonkey to conduct surveys and collect feedback from customers and prospects. SurveyMonkey uses cookies to collect personal data such as device and browser data (e.g., IP address, operating system, device type, device ID/MAC address, bowser type). This data may be transferred to and stored in various countries where SurveyMonkey has offices, including the United States.

(2) Your participation in surveys is voluntary and requires your consent.

(3) Information from the third party can be found here:
Terms of use: https://de.surveymonkey.com/mp/legal/terms-of-use/
Data processing agreements, storage and transmission (EU): https://help.surveymonkey.com/articles/de/kb/SurveyMonkey-Data-Transfers-and-EU-Laws#DPA
Privacy Policy: https://de.surveymonkey.com/mp/legal/privacy-policy/

11. Third-party analytics tools Matomo

(1) Our website and our knowledge portals www.gmp-berater.de, www.eu-gmp-leitfaden.de, www.gmpcadviser.com, aq.gmp-knowhow.de/, gdp.gmp-knowhow.de/, free.gmpandtea.de and abo.gmpandtea.de utilize the web analysis service Matomo, in order to be able to analyze and regularly improve usage. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. The legal basis for the use of Matomo is Art. 6 para. 1f GDPR.

(2) We process the following data: The type of browser used, the browser version, the operating system used, the country of origin, the date and time of the server request, the number of visits, the time spent on the website, the internal and external links activated, and the documents accessed and downloaded.

(3) Cookies are stored on your computer for this evaluation. The information collected in this way is stored by the responsible party exclusively on its server in Germany. You can set the evaluation by deleting existing cookies and preventing the storage of cookies. If you prevent the storage of cookies, we point out that you may not be able to use this website in full. The prevention of the storage of cookies is possible through the setting in your browser.

(4) We use Matomo with the extension "AnonymizeIP". This means that IP addresses are processed in abbreviated form, thus excluding the possibility of direct personal references. The IP address transmitted by your browser via Matomo is not merged with other data collected by us.

(5) The Matomo program is an open-source project. Information from the third-party provider on data protection is available at https://matomo.org/privacy-policy/.

12. Social Media

a) YouTube videos

(1) We have integrated YouTube videos into our online offer, which are stored on http://www.YouTube.com and can be played directly from our website. These are all integrated in "extended data protection mode", i.e., no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos, the data mentioned in paragraph 2 are transmitted. We have no influence on this data transmission.

(2) By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under point 5 of this declaration are transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

(3) For more information on the purpose and scope of data collection and processing by YouTube, please refer to the privacy policy. There you will also find further information on your rights and setting options to protect your privacy:
http://www.google.de/intl/de/policies/privacy. YouTube is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

The integration of the videos serves to protect our legitimate interests in an optimal marketing of our offer, which outweigh our interests in the context of a balancing of interests according to Art. 6 para. 1f GDPR.

b) Twitter

We use the Twitter button embedded in our pages only as a hyperlink to our Twitter page. A direct integration of Twitter content into our pages does not take place. If you click on the Twitter button while you are logged into your Twitter account, Twitter can associate the visit to our pages with your user account. We would like to point out that we, as the provider of the Twitter page, have no knowledge of the content of the transmitted data or its use by Instagram.

If you do not want Twitter to be able to associate the visit to our pages with your user account, please log out of your user account.

For more information, please see Twitter's privacy information at:
https://twitter.com/de/privacy.

c) Xing

We only use the XING button embedded in our pages as a hyperlink to our XING page. If you click the XING button while you are logged into your XING account, XING can associate the visit to our pages with your user account. We would like to point out that we, as the provider of the XING Fan Page, do not receive any knowledge of the content of the transmitted data or its use by XING.

You can find more information on this in the data protection information of XING at https://privacy.xing.com/de/datenschutzerklaerung

If you do not wish XING to be able to associate your visit to our pages with your XING user account, please log out of your user account.

d) LinkedIn

We only use the LinkedIn button embedded in our pages as a hyperlink to our LinkedIn page. If you click on the LinkedIn button while logged into your LinkedIn account, LinkedIn can associate the visit to our pages with your user account. We would like to point out that we, as the provider of the LinkedIn fan page, have no knowledge of the content of the transmitted data or its use by LinkedIn.

You can find more information on this in LinkedIn's data protection information at https://de.linkedin.com/legal/privacy-policy

If you do not want LinkedIn to be able to assign the visit to our pages to your user account, please log out of your LinkedIn user account.

13. up-to-dateness and amendment of this privacy notice

The data protection information was adjusted in June 2023 and corresponds to the status. We reserve the right to adjust this privacy policy accordingly in the event of changes.

Information for customers on the processing of personal data

In order to fulfil our duty to provide information in accordance with Art. 13 of the EU General Data Protection Regulation (GDRP), we would be pleased to provide you with the following information on data protection.

1. Who is responsible for data processing?

The person responsible pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDRP) is

GMP-Verlag Peither AG
Karlstrasse 2
79650 Schopfheim, Germany
Email: service@gmp-verlag.de
Phone: +49 7622 66686-70

Further information about our company and contact details can be found in the imprint of our website.

We have appointed a data protection officer for our company. You can reach this person at datenschutz@gmp-verlag.de or our postal address with the addition "Datenschutzbeauftragter".

2. For what purposes do we collect your personal data and on what legal basis is the data collection based?

If you order from us, it is necessary for the conclusion of a contract that you provide us with your personal data (name, first name, address data, e-mail address, telephone number, if applicable company, department, position), which we need to process your order. This data is also collected when you request an offer from us. The data provided by you will be processed by us within the scope of preparing offers and processing orders. If you want to pay with your credit card, we need and process your credit card details. The legal basis for these purposes is Art. 6 (1) lit. b GDPR.

We may also process the information you provide to inform you about other interesting products in our portfolio or to send you e-mails with relevant information. Therefore you will automatically be registered as a recipient of our newsletter. The legal basis for this purpose is Art. 6 (1) lit. f GDPR.

If you subscribe to our newsletter(s) via the form on the website, you must enter your e-mail address and your country of origin so that we can send you the newsletter(s). Further personal data (name, first name, title) can be given voluntarily. The legal basis for this is Art. 6 (1) lit. a GDPR. We can evaluate your newsletter usage via an e-mail tool. This is done on the legal basis of Art. 6 (1) lit. f GDPR.

If you participate in a survey, we may ask for the following personal data: Name, first name, e-mail address, telephone number. If it is an online survey, your IP address will also be collected. The legal basis for this is Art. 6 para. 1 lit. f GDPR.

3. How long is the data stored?

Your personal data will be deleted if they are no longer needed for the above-mentioned purposes.

Personal data that we have stored within the framework of your customer account created on our website will be deleted when you finally delete your access.

Some documents that contain your personal data (e.g. surname, first name, address data on invoices) must be stored by us for as long as there is a legal obligation to do so.

Data collected on the basis of your consent will be deleted as soon as you revoke your consent (e.g. newsletter).

4. To which recipients will the data be forwarded?

We pass on your personal data to third parties (e.g. service providers, suppliers) if this is necessary for the execution of the contract with you or the processing of your order. The legal basis for this transfer is Art. 6 (1) lit. b GDPR. In connection with order processing, the providers of our CRM system and accounting software, our suppliers of Internet and web hosting services and the printers who send our products directly to you (e.g. as part of print on demand) have access to your data. In the context of the newsletter – dispatch, the newsletter - evaluation and in the course of conducting surveys your data raised for it are passed on to our software supplier. The legal basis for this is Art. 6 (1) lit. f GDPR. If you pay with your credit card in our webshop, your credit card details will be passed on to our credit card company to process the payment. This is done on the basis of Art. 6 (1) lit. b GDPR.

If you place an order with us from the USA or Canada, we transmit the data necessary for processing the order to our office in the United States (legal basis: Art. 6 (1) lit. b GDPR).

5. Your rights as a data subject

You have the right to be informed about the personal data processed by us as well as a right to rectification, erasure or restriction of their processing. You also have the right to receive the data you provide in a structured, common and machine-readable format. (cf. Art. 15 -20 GDPR). You may object to the processing of your data and complain to the responsible data protection supervisory authority, the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg in Stuttgart, about the processing of your personal data by us.

6. Obligation to provide data

We need your personal data for the purposes listed under point 2. If you do not provide us with the required data, we will unfortunately not be able to process your order or conclude a contract with you.

7. Automated decision making

The processing of your personal data does not involve fully automated decision-making (including profiling) pursuant to Art. 22 GDPR.

(As of October 2021)

Our social media presences

This privacy notice applies to the following social media sites:

Data processing through social networks

We maintain publicly accessible profiles on social networks. The social networks used by us in detail can be found below.

Social networks such as Facebook, Twitter, etc. can generally comprehensively when you visit their website or a website with integrated social media content (e.g., like buttons or advertising banners). By visiting our social media presences, numerous processing operations relevant to data protection are triggered. In detail:

If you are logged in to your social media account and visit our social media page, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP-address.

With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are or were logged in.

Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. Details on this can be found in the Terms of use and privacy policy of the respective social media portals.

Legal basis

Our social media presences are intended to ensure the most comprehensive presence possible on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) f GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which are to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 (1) a GDPR).

Responsible person and assertion of rights

If you visit one of our social media sites (e.g. LinkedIn), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal (e.g. against LinkedIn).

Please note that although we share responsibility with the social media portal-operators do not have full influence on the data processing operations of the social media portals. Our options are largely determined by the corporate policy of the respective provider.

Storage duration

The data collected directly by us via the social media presence will be deleted from our systems as soon as you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory legal provisions - in particular retention periods - remain unaffected.

We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Social networks in detail

We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton
Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.
If you wish to disable LinkedIn advertising cookies, please use the following link:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Data transfer to the USA is based on the standard contractual clauses of the EU Commission.
Details can be found here:
https://www.linkedin.com/legal/l/dpa and
https://www.linkedin.com/legal/l/eu-sccs
For details on their handling of your personal data, please refer to the Privacy Policy.
From LinkedIn:
https://www.linkedin.com/legal/privacy-policy

YouTube

We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow
Street, Dublin 4, Ireland. For details on how they handle your personal data, please refer to the
YouTube privacy policy:
https://policies.google.com/privacy?hl=en

My Account

GMP Compliance Adviser

Categories