How do we analyze your activity on our websites? Which advertising is presented to you? How can you view your personal data if you are a registered user? In short, how do we deal with the data that arises from the users of our digital products and services? We aim to answer these and many other questions in this data protection declaration, which applies to all the titles of our Website.
The regulations for data collection, processing and usage defined here apply as soon as you use one of our digital products or services, set up a user account or navigate one of our sites in any other way. They define the basis for data protection on our sites. Important: For some actions we work with selected partners — on service pages, for example, or when you buy products, for competitions, in the analysis of usage of our content, products and services as well as the integration of advertising. In these cases, you may find additional references to the data protection regulations of these partners. If the content of third parties — particularly of social networks and platforms – is integrated, this may also contain data; this will be explained at greater length later on.
You may reject any analysis or services that are not essential for the operation of the products and services we offer, which we will also explain.
The essentials in brief
Should we hold personal data about you, you have the right to information and rectification at any time, and in most cases to restriction of processing, erasure, blocking and/or transfer of the data to you. If you have questions, you can contact us at any time at firstname.lastname@example.org.
What we promise you
We will store, process and use your data only in the manner described in this declaration, and in compliance with German and European data protection legislation. Naturally, we maintain data secrecy. We treat your data confidentially and do not pass it on to third parties other than to closely associated service providers, who may process subscriptions, payment services, video delivery, advertising business or other services on our behalf. These service providers are under obligation to use your data only for the purpose provided for in the relevant contract, and not to pass it on to anyone else under any circumstances. When we refer to “we” in this declaration, this also includes these closely associated service providers.
For each visit, we temporarily record the IP address used for your Internet access, as well as the pages you access. If you are accessing the site from an app, we temporarily record the device number so that basic services like access authorization can function. However, we never use this data to identify you personally.
We, our external cooperation partners and content providers as well as advertising service providers who activate advertising on our site – more on this below – store cookies on your browser. These are small files with information that serves to differentiate users (using software and device IDs, etc.), as well as settings for advertising trackers and usage preferences. You may delete or deactivate cookies in your browser, but you must then log in again and create new settings, etc. Generally, you are able to use our sites without cookies. You can find out more about cookies at www.meine-cookies.org. Generally, we and our cooperation partners establish no reference to you as an individual from the cookies, but rather use them at most as pseudonyms. The legal basis for this is the European ePrivacy Directive in conjunction with the German Telemedia Act (Telemediengesetz; Par 12 et seq.) and/or the European General Data Protection Regulation (Art. 6(1)(b) and (f)).
Only when you are registered and logged in with us will your user account – including concrete details about you – be stored in cookies, so that you can use our products and services without having to log in every time. To personalize the products and services which use advertising and market research, this personal data is only used in limited scope and with your express consent which you may grant on a case-by-case basis.
For all of our purchasing and order sites to which you may submit personal data, we use only the latest SSL security standard. Your data is encrypted directly upon transfer, and all information that may be subject to data protection such as credit card numbers, routing numbers, account numbers, names and addresses are stored in a protected database in encrypted form.
What we know about you as an individual
- We only know your name, your address, your age and other personal details if, for example, you are registered for a user account and have supplied these details yourself.
- We only know you by your email address if you have used it to directly register with us for a newsletter or a contest, for example, or with one of our cooperation partners Newsletter2Go or MailChimp which send emails on our behalf and which also must protect your data in the framework of our cooperation. In the event of contests, we pass them on to prize sponsors for processing, if necessary, within the scope of the applicable conditions of participation.
In each case, we first ask for your consent and then only use the respective data relating to you as an individual in the provision of the actual products and services for which you have registered. If you contact us as an identifiable individual, through a contact form, for example, in addition to your name and email address we may also store such details in our system as the time and place a registration takes place or a message is sent to us; the download, purchase or attempted purchase of products or services; in some cases, also the dispatch or opening of newsletters, emails and push messages; also contact via email or interest in individual products or services. As long as and to the extent that we do not need to make the data available, you may revoke your consent for usage at any time. This often requires nothing more than unsubscribing from the product or service in question, but naturally this means that you can no longer use it.
Essentially, we only process personal data to fulfill our contractual obligations to our users. We need to process data to be able to suggest suitable contacts to you, for instance, or products and services, or information. With certain products and services, we have to ensure that access requests come from humans and not automated programs. To prevent such abuses, we use Google’s reCaptcha service, which uses a truncated version of your IP address and other necessary data (only in the event of technical outage in Europe, for instance, is it possible that the IP address will be truncated in the USA). The reCaptcha data is not merged with other Google data.
How we analyze the usage of our products and services
Which articles are currently being read? How often? By how many people? How much time do viewers spend watching videos? How often do users visit our sites? For us it is important to learn about the preferences and desires of our readers. That’s why we use analysis services which can offer us trending topics in real time and comparison with the competition on a daily or monthly basis. The legal basis for this is the European ePrivacy Directive in conjunction with the German Telemedia Act (Telemediengesetz; Par 12 et seq.) and/or the European General Data Protection Regulation (Art. 6(1)(b) and (f)). These services are largely integrated via the Google Tag Manager, which does not collect any data itself and these services never record you as an individual with your identity data, rather they use a pseudonym at most. They also do not present advertising or other products or services.
- Optimization analysis with Google Optimize and Hotjar: We use the analysis service Google Optimize to experimentally configure our sites in a number of different variations and to optimize them using comparative statistics. By using cookies, we can anonymously differentiate between test groups. The data is processed by Google Analytics in the manner described; if you deactivate Google Analytics, your data is not included in the comparative tests. We also use spot samples to analyze movement, clicks or swiping behavior on some of our webpages to improve the structure of our projects and pages. For this purpose, the service Hotjar records data in a small number of sessions randomly and pseudonymously, without making you identifiable to us. This data is anonymized in Ireland, stored and deleted after 365 days. It can be deleted earlier upon request.
- Newsletter statistics: We track clicks from our newsletters to our products and services with the help of the statistics services mentioned, and we also analyze opening and click rates as well as other usage data for individual newsletters with our service providers Newsletter2Go and MailChimp. Your email address is stored in a recipients list used to maintain distributions and sometimes also used in pseudonymized form to send you personalized newsletters tailored to your preferences. You can unsubscribe from the newsletter at any time.
- Market research: In surveys, we may sometimes ask for details on usage of our products and services and for demographic details such as age and sex. Your responses are collected anonymously and separately from other data, meaning no connection can be made to you. We need this for our own, legally permissible analysis and to present proposals to potential partners, advertising customers and other contacts. Data from accompanying betting games for which you may have submitted your email address, for instance, is recorded separately and not associated with your responses.
What social networks and external tools can see about you through us
On our site, we integrate posts and recommendation functions from platforms such as Facebook, YouTube, Instagram, Spotify, Google Maps, most of which are located in the U.S. but are nonetheless subject to the applicable data protection regulations in EU and EEA countries. If, for instance, you actively use a recommendation switch on our site or read an article with an embedded post, YouTube video or Spotify playlist, the embedding technology may transfer general framework data such as your IP address back to the social networks and platforms. We have no influence over the way these platforms use the data. Please consult Facebook, Twitter, Spotify, Google Maps and YouTube directly for more information, and adjust your privacy settings.
For social networks and on other external platforms, the companies’ respective data protection regulations apply, even if we distribute information and maintain presences there with our brand.
How we advertise ourselves
We, too, advertise our products and services on the Internet. We use various options for individualized advertisements with which we aim to reach you and other potential readers directly:
- Google Remarketing: We use Google’s Remarketing function to present you with advertisements for our products and services that correspond with your usage preferences in the global Google advertising network. You will be identified in this network through cookies, but not identified as an individual.
- Facebook Remarketing/Retargeting: We have integrated remarketing tags from the social network in our products and services where appropriate. If you are logged into Facebook, the platform receives the information that you have visited our site, through which we can present you with advertising on Facebook. The transfer of your data as a Facebook user is regulated in the data protection declaration of the network itself.
- Bing Ads: This service from Microsoft, a U.S.-based company, sets a cookie if you access our website through a Bing ad so that we can find out the total number of clicks leading from an ad to our website. Your user profile is only stored in a pseudonymized form.
Also good to know
The responsible authority for data processing is Discovery Magazine, represented by the management. You can always contact the Discovery Magazine, Kennwort Datenschutz, Kaltererstraße 1, 86368 Gersthofen or send an email to email@example.com if you have questions about the way we collect, process or use your data; if you wish to rectify, delete or block such data; or if you have any other general questions that have not been answered.
One last thing: This declaration applies to all digital products and services of the Discovery Magazine. When we link to other websites, we have no influence and no control over whether the service provider complies with data protection provisions. If you wish to raise possible problems on a linked site or with one of our partners, please email us.
Valid from 23. January 2020