Privacy Statement


GUJ.DE is the website of Gruner + Jahr GmbH in Hamburg.

So, you would like to understand our approach data protection? For us, it is important that we explain this to you because, if you decide to use our products and services, we will be processing your personal data. We need to process personal data to help us continuously improve the design of our products and/or services for you. We can only do this by closely monitoring and analysing the use of our products and services. However, we do this responsibly and only to the extent permitted by the applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR).

In the following we will provide comprehensive information on what kind of information we process, how we process it and why we process it. In addition, we have compiled all of the relevant information we are obligated to provide in accordance with the EU General Data Protection Regulation in this document.

The responsibility for protecting your personal data and complying with the EU General Data Protection Regulation (GDPR) lies with Gruner + Jahr GmbH, based in 20459 Hamburg (hereinafter referred to as "Gruner + Jahr"). Further contact information, contact persons and mandatory information about Gruner + Jahr GmbH is available at www.guj.de/en/imprint.

If you have any questions relating to data protection for Gruner + Jahr or would like to exercise your rights with respect to data protection (see under "Your rights as a data subject"), you can contact our data protection officer at any time by sending a mail to datenschutz-gujguj.de.

► Overview of the most important information

I. What data is collected when you use our services?

Direct entry of "real ID data". When you register for one of our personalised services, such as the subscription of press releases or the use of the download library, we request personal data using the relevant forms that recognisably and directly pertains to you or your identity ("Klardaten", real ID data). This "real ID data" includes contact data, e.g. name, e-mail address, mailing address, telephone number.

We do not request any data that is particularly sensitive from a data protection law perspective (referred to as "special categories of data", as defined in GDPR Article 9, e.g. relating to health status, ethnic origin, philosophical beliefs, genetic information, sex life).

Pseudonymous data. In addition, we also process data that is not related to you as a person in a directly recognisable way ("pseudonymous data"). "Pseudonymised" means that it would be possible to recognise you, or your computer or browser, under an ID ("pseudonym"), but it would not be possible to determine who you are or how to contact you using standard methods. To put it another way, pseudonyms are not merged with real ID data, such as a person's name or e-mail address, simply because we do not need to know more than necessary in this case.

This applies, for example, where we would like to determine which pages of our service people click on particularly often and which pages they do not click on at all, or where we do not want to show a particular user the same things all the time.

We have compiled all additional details for you below.

II. Why is this data processed?

Personal data is processed primarily for the following purposes and/or based on the following legitimate interests:

» to process orders of images and press releases;
» to optimise our services: to find out (based on statistics) what our users are particularly excited about and what they are less excited about, and what else we might be able to improve with respect to the use of our services;
» to ensure uninterrupted business operations: to recognise and defend against attack patterns and detect errors in the system, and to ensure that you will not receive any e-mails from us contrary to your instructions;

In this context we process your personal data lawfully based on the EU General Data Protection Regulation, either specifically based on your consent, to comply with statutory or regulatory requirements, and/or after weighing legitimate interests in individual cases and/or based on pseudonymous usage profiles (see GDPR Article 6(1), subsections a, b and f, and/or Section 15(3) of the German Telemedia Act (TMG).

Where we process personal data based on your consent or on the weighing of legitimate interests, we only do this as long as you do not object or revoke your consent. Since we cannot technically merge real ID data with pseudonyms and are not legally allowed to do so either, it is not possible to comply with a blanket objection to all processing operations. We will provide more detailed information on the revocation of your consent and the objection to processing below in the details regarding the relevant processing operations.

III. Is data also transferred to third parties or to other EU countries?

GUJ.DE does not engage in the commercial distribution of your data (sale, rental) to third parties or in address trading.

However, in some areas other people can do a better job than we can. For this reason we have contracted a few service providers. Some of these companies are our affiliates, with others we only have a business relationship. Some service providers will need to access, or at least be able to access, personal data in this context. This specifically applies to the IT technology used to maintain the operation of, monitor and analyse our services or individual features and products.

We contract all of our service providers in writing, strictly in accordance with the requirements of the EU General Data Protection Regulation, and, for example, have service providers explain the technical and organisational measures they use to protect personal data they are entrusted with against abuse.

GUJ.DE and/or the IT service providers contracted by us only operate servers in Germany. In some cases we also disclose data (in accordance with data protection law) to third parties that further process the data independently. Among others, this includes the services provided by social media providers; for example, when you share and further distribute content you saw on our website on providers such as Twitter or Facebook.

We will provide more information on this below in the details.


► Detailed information on the individual data processing operations

In the following – to provide a better overview – we have arranged the specific details of data processing operations based on the criterion of whether a particular use of data affects individual features or services on our website that are either (A.) provided or operated by us or (B.) by a third party, or whether it is an analysis or evaluation that (C.) we use for primarily internal purposes in pseudonymised form.

A. Individual areas, services and features of the site

- Registration for the download library/media center

In the download library we offer logos and images to journalists for editorial purposes for downloading. To request a password for the download library, users must enter the following data: Last name, first name, name of the medium, telephone number, e-mail address and purpose. After an internal review of the request, the password is sent to the e-mail address provided. The password entitles you to download logos a single time from the G+J homepage for the purpose specified by you for each individual case which must be expressly accepted by us in each individual case. All content of the website, including the trademarks and titles, is protected by law and must not be used in any way without the prior consent of Gruner + Jahr GmbH, which includes that it must not be reproduced, distributed or made publicly available.
Your data will not be disclosed to third parties. Gruner + Jahr only uses your data to enable you to download images and trace back that download. Therefore, data is stored by Gruner + Jahr for a period of six months.

- Press release subscription

For sending press releases by e-mail, Gruner + Jahr uses the service provider Mapp Digital Germany GmbH, Dachauer Str. 63, 80335 Munich (hereinafter referred to as "Mapp"). Our press releases enable us to inform you regularly about news at Gruner + Jahr.

You can register as a subscriber to our press releases by e-mail. Your e-mail address will be shared with our mailing service provider Mapp with which we have concluded an agreement on "contract data processing", as defined in GDPR Article 28. Mapp will store your name and your e-mail address as proof of your consent and/or revocation. E-mail addresses collected by Gruner + Jahr are only used for e-mails from Gruner + Jahr. We will only use your e-mail address for sending our press releases and will not disclose it to third parties (with the exception of Mapp).

We use newsletter tracking to improve our products. In this context, the terms of the newsletter regarding tracking also apply to notification e-mails. We only use the results of these pseudonymised analyses for the purpose of improving our products and designing them based on user requirements. The results are not allocated to a specific person.

Object to the subscription: You can revoke your consent to the storage of this data and to the use of your e-mail addresses for sending you press releases at any time. To do so, you can use the respective link in the newsletter.

- Cookie-based features

To improve surfing on the website, GUJ.DE uses "cookies" (small files containing configuration information). Cookies are used on GUJ.DE to enhance the experience of users when navigating the website and to provide an individualised experience based on the user's interests.

GUJ.DE also uses cookies to analyse and use marketing opportunities where applicable. Such cookies are not only placed by GUJ.DE, but also by third-party providers, e.g. Google.de, on its behalf (see more on this below). In addition, cookies are placed when you access any specific page on GUJ.DE. These cookies will remain on your computer beyond your current visit on GUJ.DE ("session").

If you don't want cookies to be placed or want to delete existing cookies, you can turn them off in and remove them from your browser. You can use the following links if you need help with the deletion of cookies for the most common browsers:
- Internet Explorer (https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies)
- Mozilla Firefox (https://support.mozilla.org/en-US/kb/delete-cookies-remove-info-websites-stored)
- Safari (https://support.apple.com/kb/PH21411?locale=de_DE&viewlocale=en_UK)
- Chrome (https://support.google.com/chrome/answer/95647?co=GENIE.Platform&hl=en)

GUJ.DE also uses analytics cookies of third-party providers, e.g. Google, for analysis purposes.

Right to object: You have a right to object to the use of analysis programmes by GUJ.DE and the collection of data (pseudonymised data) by partner companies at any time with future effect. These features are offered and provided by the respective operators and are described in the respective notes.

- General browser data:

GUJ.DE also automatically collects and stores information transmitted by the bowser you use to access the GUJ.DE website in cookies. In particular, this information includes details on the browser and operating system used, information on the websites you visited before (referral URL), the IP address and/or the host name of the computer requesting the access, and the time of the site access. This information is used for a statistical analysis of the pages of GUJ.DE.

GUJ.DE will not link the existing usage data to name or address data that is collected in the context of a registration (inventory data); the pseudonymised usage data collected is used for long-term analysis purposes and is only erased at the end of the analysis phase or as required by law.

- Additional services

GUJ.DE also contains services provided by subsidiaries of Gruner + Jahr or affiliates of Bertelsmann SE & Co. KGaA, e.g. in the areas of career, marketing and subscriptions. More detailed information on data processing by those services is available in the privacy statements of the websites of Bertelsmann Becruiter, G+J e|MS, DPV Deutscher Pressevertrieb, Prisma Media.

Please note that partners of GUJ.DE and other websites and internet services that can be accessed through GUJ.DE sites, as well as partners collecting data in the context of sweepstakes, promotions, and the like, have their own data protection policies which are independent of GUJ.DE. GUJ.DE does not accept any responsibility or liability for those policies or procedures that are not related to GUJ.DE.

B. Embedded third-party plugins/widgets (social media)

GUJ.DE contains "social plugin" features for the networks of Facebook and Twitter for a more appealing user experience.

To protect your privacy, we offer these social plugins as a button click in the form of an HTML link, which means that data can only be transferred when users actively click on the plugin button (recommend, share, tweet, etc.) if you are registered with a social network and have visited it before. No data are transferred prior to clicking on that button.

Facebook and Twitter may be able to trace back your visit on respective pages on GUJ.DE and allocate it to your user account if you are registered with these networks or recently visited a page of the social network or other pages with an embedded share plugin.

- Facebook share button

GUJ.DE uses "social plugins" of the Facebook network, for example the "Like" button. These plugins are offered and operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook") and are clearly marked with the Facebook logo.

GUJ.DE does not process any data about you when you use the Facebook share button. Facebook may be able to trace back your visit on respective pages on GUJ.DE and allocate it to a Facebook account if you are registered with Facebook or recently visited a Facebook page or a page with Facebook content. If you actively use plugins (e.g. if you click on the "Like" button), the respective information will be directly transmitted to Facebook by your browser. Facebook can allocate the information on the pages you visited on our site to your user account. Please note that GUJ.DE does not have any influence on this and is not informed about the content of the data transmitted to Facebook or how this data is used by Facebook.

Please refer to the Privacy statement of Facebook for more detailed information regarding the type, purpose and scope, as well as the further processing and use, of your data by Facebook. That statement also contains information on your related rights and your settings options for protecting your privacy.

Termination of data processing (opt-out):
To prevent Facebook from collecting information about you as you are visiting GUJ.DE, you can log out of Facebook prior to visiting GUJ.DE and delete any Facebook cookie from your browser (Instructions for deleting cookies in Microsoft Internet Explorer. Instructions for deleting cookies in Mozilla Firefox. Instructions for deleting cookies in Safari. Instructions for deleting cookies in Google Crome).

- Twitter button

GUJ.DE uses the Twitter button which enables you to share content on Twitter. They are offered and operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA ("Twitter").GUJ.DE does not process any data about you when you use a Twitter button. When you use the Twitter button on GUJ.DE and if you have a profile on Twitter, the data Twitter will process about you include the following (as referred to by Twitter): account data (e.g. user name), contact data (e.g. e-mail address), tweets, following, lists, profiles and other public data (e.g. the tweet you are sharing on Twitter when you use the Twitter button on GUJ.DE), location information (e.g. your location at the time you use the button), log data (e.g. your IP address or device ID), internet data (e.g. your content preferences on websites you use).

When you use the Twitter button, you authorise Twitter to transfer all of your personal data to the United States, Ireland, and every other country in which Twitter operates and to store and use your data there. The data protection laws and regulations of some of these countries with respect to when government authorities are entitled to access your personal data may be very different from those in your country of residence. You can find more information on Twitter's global operations and on the transfer of data here.

Please refer to Twitter's privacy statement for more detailed information regarding the type, purpose and scope, as well as the further processing and use, of your data by Twitter. That statement also contains information on your related rights and your settings options for protecting your privacy.

Termination of data processing (opt-out):
If you would like to delete or edit any of your personal data on Twitter, you can do so in your Twitter account settings. If you would like to delete your Twitter account entirely, you will find the description of that process here.

- Share-by-mail

GUJ.DE offers you the option to share information by e-mail. This facilitates sharing GUJ.DE content via your e-mail provider. When you use the e-mail share button as a simple HTML link, we do not store, use or process any personal data about you. Please refer to your e-mail provider's privacy statement with respect to the storage of personal data and the erasure and disclosure of such data. We do not have any influence on the data collected about you by your e-mail provider.

C. Individual analyses and evaluations by Gruner + Jahr

- Server log files

When you visit any GUJ.DE page, Gruner + Jahr automatically stores the information sent by the browser when this page is visited. The information includes the request, the IP address, the browser type and language, the date and time of access, as well as the last page requested prior to the visit on GUJ.DE (referral URL). We also collect information on HTTP users (if it is an HTTP authentication (directory protection), we store the name of the user), the URL requested, and the protocol used. The data is stored on servers in Germany. We do not disclose data to third parties. The information is used to analyse and maintain the technical operation of our servers and the network, as well as to combat abuse, and it is automatically erased after 10 days. Data is logged to monitor the server load, for example, or in the context of analysis procedures and/or error analyses. Any temporary storage of the data and log files is based on GDPR Article 6(1f).

Termination of data processing (opt-out):
The collection of data for providing the website, and the storage of data in log files, is vital to the operation of the website. Consequently, users do not have a right to object in this respect.

- Google Analytics

To analyse your use of the website, GUJ.DE uses the web analysis service of Google Inc. ("Google"): Google Analytics. For this purpose, a cookie is placed on your computer. The information on your use of this website (including your IP address) generated by this cookie is transferred to a Google server in the USA and is stored there.

GUJ.DE only uses Google Analytics with the IP anonymisation extension, which means that IP addresses are only further processed in a shortened form to ensure that they cannot be directly related to a specific person. Due to the IP anonymisation on this website, your IP address is shortened by Google within EU member states or in other signatory states to the Agreement on the European Economic Area. The full IP address is only transferred to a Google server in the USA and shortened there in exceptional cases.

Google will use this information to analyse your use of the website, compile reports on the website activities for GUJ.DE, and to provide other services related to the website and internet use. Google will not link your IP address to other Google data under any circumstances. By using this website you agree that Google may process the data collected about you in the manner described and for the purpose specified above.

Google may transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.

More information on the security and data protection principles of Google Analytics can be found here.

Termination of data processing (opt-out):
You can object to the collection and storage of data by Google Analytics at any time with future effect. You can do this by installing a browser plugin published by Google. This plugin is available for various browser versions and can be downloaded at https://tools.google.com/dlpage/gaoptout?hl=en.


► Your rights as a data subject

In accordance with the EU General Data Protection Regulation, you have the right to request access to your personal data (see Article 15) or demand the rectification (see Article 16), erasure (see Article 17), or at least a restriction of processing (see Article 18) of your personal data.

You also have the right to data portability (see Article 20). Of course you also have the right to revoke any consent you have given with respect to the processing of personal data at any time (Article 7(3)) and object to any processing operation that is based on the weighing of legitimate interests at any time (see GDPR Article 21(4)). Where decisions with legal effects are made automatically, you have the right to present your own point of view and to challenge the decision, as well as, ultimately, to obtain the intervention of a person to represent us, as the controller (see Article 22(3)). Furthermore, you have the right to complain with the competent supervisory authority, the Hamburg Commissioner for Data Protection and Freedom of Information (Hamburgische Beauftragte für Datenschutz und Informationsfreiheit):

Kurt-Schumacher-Allee 4
20097 Hamburg
Tel.: +49 (0)40 / 4 28 54 - 40 40
E-fax: +49 (0)40 / 4 279 - 11811
E-mail: mailboxdatenschutz.hamburg.de

If you have any questions on this or general questions regarding data protection, or if would like to exercise your aforementioned rights with respect to data protection, you can contact our data protection officer at any time by sending a mail to datenschutz@guj.de at any time by sending a mail to datenschutz-gujguj.de.

Gruner + Jahr GmbH
Datenschutz
Am Baumwall 11
20459 Hamburg
Registered in the commercial register of the Amtsgericht [Local Court] of Hamburg under the number HRB 151939

Version: 24/05/2018 - "You can access and print this Privacy Statement at any time at www.guj.de/en/privacy-protection Given that changes in laws or in our internal company processes may require adjustments to this Privacy Statement, we reserve the right to make such adjustments and would like to ask you to please review this Privacy Statement on a regular basis."