Data protection notice
Thank you for your interest in our company. We take data protection seriously.
Generally you may use our website without providing any personal details. Where a data subject wishes to use our company’s services on our website, it may be necessary for us to process personal data. If it is necessary to process personal data and there is no legal basis for such processing, we shall always obtain the consent of the data subject.
The processing of personal data (e.g. name, address, email address or telephone number of a data subject) shall always be in accordance with the General Data Protection Regulation (GDPR) and in conformity with the national data protection provisions applicable to us.
With the following data privacy statement we would like to inform the general public concerning the nature, extent and purpose of the personal data collected, used and processed by us. Similarly this statement will inform data subjects of their rights.
As a controller (an organisation responsible for processing) we have put in place numerous technical and organisational measures in order to ensure the most complete protection possible of the personal data processed on our website. However data transfers via the Internet can contain security vulnerabilities. Accordingly it is not possible to guarantee 100% protection. Therefore each data subject may of course also provide personal data alternatively e.g. by telephone.
This data privacy statement uses the definitions that were used by the European regulators issuing the GDPR (Article 4 GDPR). This data privacy statement is intended to be straightforward for any person to read, and also readily understandable. You may access the GDPR via the following link:
The aim of our data privacy statement is to inform you in a simple and understandable way concerning the processing of your personal data on our websites and via our apps. To ensure this, we would like firstly to explain the definitions used. In this data privacy statement these definitions inter alia will be used:
- “personal data” all information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, economic, mental, cultural or social identity of that natural person;
- “data subject” each identified or identifiable natural person whose personal data is processed by the controller responsible for the processing.
- “processing” any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
- “restriction of processing” the marking of stored personal data with the aim of limiting their processing in the future;
- “profiling” any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements;
- “controller” the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
- “recipient” a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;
- “third party” a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data;
- “consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
2. Name and contact details of the controller of the processing
This data protection notice applies to data processing by:
Media Ventures GmbH, represented by the directors Stefan Petter, Dirk Ströer, Jay Binler, E- Gustav-Heinemann-Ufer 74, D-50968 Cologne, email: firstname.lastname@example.org, telephone: +49 (0)221 – 888 78-0, fax: +49 (0)221 –888 78- 101
3. Contact details of the data protection officer:
Data protection officer Bechtle Datenschutz Competence Center, Mr. Philipp Moehrle, Gustav-Heinemann-Ufer 74, D-50968 Cologne, Germany, telephone: +49 (0)221 – 888 78-0, fax: +49 (0)221 –888 78- 101, email: email@example.com
4. Erasure and storage of personal data
We process and store personal data of the data subject only for the amount of time necessary to achieve the purpose of the storage or to the extent provided by the applicable legislation to which the controller of the processing is subject.
If the storage ceases to have purpose or if a legally prescribed storage period expires, the personal data shall be routinely blocked or destroyed in accordance with legal provisions.
5. Collection and storage of personal data and nature and purpose of its use
a) On visiting the website
You may use our website generally without disclosing your identity. When accessing our website information is automatically sent to the server of our website by the browser used by your device. This information is stored temporarily in a so-called log file. The following information is thus collected without action on your part and stored until its automatic destruction:
- IP address of the accessing computer,
- Date and time of the access,
- Name and URL of the downloaded file,
- Website from which access initiated (referrer URL),
- browser used and if applicable the operating system of your computer and the name of your access provider.
The specified data will be processed by us for the following purposes:
- to ensure seamless connection to the website,
- to ensure easy use of our website,
- to evaluate systems security and stability and
- for other administrative purposes.
The legal basis for data-processing is Art. 6 para. 1 sentence 1 (f) GDPR. Our legitimate interest derives from the data collection purposes listed above. Under no circumstances shall we use the collected data for the purposes of drawing conclusions about you.
b) On using our contact form
If you have any questions we offer you the option of contacting us using a form provided on our website. This requires you to provide a valid email address so that we know the source of the enquiry and can send a response. Further details can be provided voluntarily. It is your decision whether you would like to provide these details in the contact form.
The data processing for the purposes of making contact with us is carried out in accordance with Art. 6 para. 1 sentence 1 (a) GDPR on the basis of your voluntarily given consent.
The personal data collected by us for the use of the contact form will be erased automatically following completion of our response to your enquiry.
6. Further explanation of the legal basis for processing
Art. 6 para. 1 (a) GDPR is relied on by Media Ventures GmbH as the legal basis for processing operations for which consent for a specific purpose must be obtained. If the processing of personal data is necessary to fulfil a contract to which the data subject is a party, the processing is based on Art. 6 para. 1 (b) GDPR. The same applies for processing operations that are necessary to carry out pre-contractual steps, as in the event of enquiries concerning our services and products. If Media Ventures GmbH is subject to a legal obligation that necessitates the processing of personal data, the processing is based on Art. 6 para. 1 (c) GDPR. In rare cases the processing of personal data might be necessary in order to protect the vital interests of the data subject or of another natural person. In this event the processing is based on Art. 6 para. 1 (d) GDPR. Processing operations might also be based on Art. 6 para. 1 (f) GDPR. This is the legal basis for processing operations that are not covered by any of the afore-mentioned legal grounds where the processing is necessary to secure a legitimate interest of Media Ventures GmbH or of a third party provided the interests, rights and fundamental freedoms of the data subject are not overriding. We are permitted to carry out such processing operations therefore in particular since they have been separately referred to by the European legislators (see recital 47 sentence 2 GDPR).
7. Consideration of legitimate interests
If the processing of personal data is based on Article 6 para. 1 (f) GDPR the legitimate interest of Media Ventures GmbH is the conduct and performance of our business operations for the benefit of our employees and shareholders.
Filed in the cookie is information that is given respectively in connection with the specific device used. However this does not mean that we learn your identity directly as a consequence.
In addition similarly to optimise user-friendliness we use temporary cookies that are stored on your device for a specific fixed period. If you visit our site again to use our services, it will be automatically recognised that you have already visited our site and which inputs and settings you have entered so that you do not have to enter these again.
The data processed using cookies is required for the specified purpose of protecting our legitimate interest and those of third parties under Art. 6 para. 1 sentence 1 (f) GDPR.
Most browsers accept cookies automatically. However you may configure your browser so that no cookies are stored on your computer or so that a warning always appears before a new cookie is created. The complete deactivation of cookies can however result in you not being able to use all the functionality of our website.
9. Links to third party websites
The links on our website are researched and compiled by us with the utmost care. However we have no influence on the current or future structure or content of the linked sites. We are not responsible for the content of the linked pages and we expressly do not adopt their content as our own. The providers of the websites referred to are solely liable for illegal, incorrect or incomplete content and for damages incurred through the use or non-use of information on these sites. The liability of anyone merely referring to such a publication by means of a link is excluded. We are responsible for third-party references only where we had positive knowledge of them, i.e. including knowledge of any unlawful or criminal content, and it is technically possible and reasonable for us to prevent their use.
10. Analysis and tracking tools
The tracking measures listed below and used by us are carried out on the basis of Art. 6 para. 1 sentence 1 (f) GDPR. Using these tracking measures we wish to ensure a needs-based design and continual optimisation of our website. Also we use the tracking measures to collect statistical data on the use of our website and to evaluate the optimisation of our offering for you. These interests are considered as legitimate within the meaning of the aforesaid provision.
The respective data processing purposes and data categories are to be inferred from the corresponding tracking tools.
a) Google Analytics1
For the purposes of needs-based design and continual optimisation of our pages we use Google Analytics, a web analysis service offered by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). In this connection pseudonymized usage profiles are created and cookies (see paragraph 5) are used. The information generated by the cookie concerning your use of this website such as
- browser type/version,
- operating system used,
- referrer URL (the site visited beforehand),
- host name of the accessing computer (IP address),
- time of server request,
are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to prepare reports on website activity and to provide further services relating to website use and Internet use for the purposes of market research and needs-based design of these Internet sites. Also this information is transferred where appropriate to third parties where this is prescribed by law or to the extent that third parties process this data by proxy. Under no circumstances will your IP address be merged with other data by Google. The IP addresses are anonymised, so that attribution is not possible (IP masking).
You may prevent the installation of the cookies using the appropriate browser software setting; we advise you however that in this event it is probable that not all functionality of our website may be used to its full extent.
You may also prevent the collection of the data (incl. your IP address) generated by the cookie and related to your use of the website and the processing of this data by Google, by downloading and installing a browser add on (https://tools.google.com/dlpage/gaoptout?hl=en).
Alternatively to the browser add on, in particular in the case of browsers on mobile devices, you can also prevent collection by Google Analytics, by clicking on the afore-mentioned link. An opt-out cookie is set that prevents the future collection of your data when visiting our website. The opt-out cookie applies only in this browser and only for our website and is filed on your device. If you delete the cookies in this browser, you must re-set the opt-out cookie.
You will find further information on data protection in connection with Google Analytics at the following link in Google Analytics Help: https://support.google.com/analytics/answer/6004245?hl=en
b) Google Adwords Conversion Tracking
To collect statistical data on the use of our website and for the purposes of evaluating the optimisation of our website for you, we also use Google Conversion Tracking. This involves Google Adwords placing a cookie (see paragraph 5) on your computer, where you have reached our website via a Google ad.
These cookies cease to be valid after 30 days and do not lead to personal identification. If the user visits certain pages of the web site of the Adwords customers and the cookie has not yet expired, Google and the customer can recognise that the user has clicked on the advert and been directed to this page.
Each Adwords customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Adwords customers. The information collected with the assistance of the conversion cookies aids in the production of conversion statistics for Adwords customers who have opted into conversion tracking. The Adwords customers find out the total number of users who have clicked on their advertisement and been directed to a hyperlinked site with a conversion tracking tag. However they do not receive any information which would enable the user to be personally identified.
If you do not wish to participate in the tracking process, you may also decline the setting of the cookie required for this – for instance by using browser settings that deactivate generally the automatic setting of cookies. You may also deactivate cookies for conversion tracking by setting your browser so that cookies from the domain “www.googleadservices.com” are blocked. You will find Google‘s privacy notice concerning conversion tracking at the following link: https://services.google.com/sitestats/en.html
11. Rights of persons affected
You have the right:
- under Art. 15 GDPR to obtain information concerning your personal data processed by us. In particular you may obtain information concerning the purposes of the processing, the categories of personal data concerned, the categories of recipient to whom your personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data or to object to such processing, the right to lodge a complaint with a supervisory authority, information as to the source of your data where this was not collected by us, and on the existence of automated decision-making including profiling and, where relevant, meaningful information about the logic involved;
- under Art. 16 GDPR to require the correction of inaccurate or completion of incomplete personal data stored by us without undue delay;
- under Art. 17 GDPR to require the erasure of personal data concerning you stored by us, in so far as processing is not necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, on public interest grounds or for the establishment, exercise or defence of legal claims;
- under Art. 18 GDPR to require the restriction of processing of your personal data, where the accuracy of the personal data is contested by you, the processing is unlawful but you oppose the erasure and we no longer need the data, but you require the data for the establishment, exercise or defence of legal claims or you have objected to the processing under Art. 21 GDPR;
- under Art. 20 GDPR to receive your personal data, that you have provided to us, in a structured, commonly used and machine-readable format or to require the transmission of such data to another controller;
- under Art. 7 para. 3 GDPR to withdraw your consent once given to us at any time. The consequence of this is that we may not in future continue the data processing in reliance on such consent and
- under Art. 77 GDPR to lodge a complaint with a supervisory authority. Generally you may lodge a complaint with the supervisory authority for your habitual residence, your place of work or our registered office.
12. Right to object
Where your personal data is processed on the basis of legitimate interest under Art. 6 para. 1 sentence 1 (f) GDPR, you have the right under Art. 21 GDPR to object to the processing of your personal data, on grounds relating to your particular situation or where the objection is to direct marketing. In the latter case you have a general right to object that will be acted on by us without the provision of details of a particular situation.
If you wish to exercise your rights to withdraw consent or to object, an email to the following address shall suffice: firstname.lastname@example.org
13. Data security
During visits to our website visit we use the widely-used SSL (Secure Socket Layer) process in conjunction with the highest level of encryption that is supported by your browser. Generally this is a 256 bit encryption. If your browser does not support 256 bit encryption we rely instead on 128 bit v3 technology. You will see whether an individual page of our Internet presence is transmitted encoded in an encrypted manner in the locked depiction of a key and/or lock symbol in the bottom status bar of your browser.
We also employ suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction or unauthorised access by third parties. Our security measures are continually improved in accordance with technological developments.
14. Currency and amendment of this data privacy statement
This data privacy statement applies at this time and is current as at 17.05 2018.
Through the further development of our website and offering on it or for reasons of altered statutory or regulatory requirements it may be necessary to change this data privacy statement. The currently valid data privacy may be retrieved and printed using the following link:
1 Data protection authorities require for permitted use of Google Analytics the conclusion of a contract data processing agreement. A suitable template is available from Google at http://www.google.com/analytics/terms/de.pdf .