Data protection policy (german) / Datenschutzbestimmungen (deutsch) »

Part 1: Information on data protection regarding our data processing pursuant to Articles (Art.) 13, 14, and 21 of the General Data Protection Regulation (GDPR)

We greatly appreciate your interest in our website and the services we offer. We view the protection of your personal data as a highly important matter.

We have implemented both technical and organizational measures to ensure that any of your personal data processed via our website are protected as effectively as possible. Nevertheless, Internet-based data transmissions can be subject to security gaps, which means complete protection cannot be guaranteed.

With this data protection policy we wish to inform you how and for which purposes we collect and process your data and which claims and rights you are entitled to according to data protection regulations.

1. Name and contact details of the data controller

This data protection policy applies to data processed by
(data controller):

HUSS-VERLAG GmbH
Joseph-Dollinger-Bogen 5
D-80807 Munich
E-Mail: info@huss-verlag.de
Telefon: +49 (0) 89-32391-0
Website: www.huss-verlag.de

The publisher's data protection officer can be contacted at the following address:

Jörg Hermann
jmh datenschutzberatung
Freibadstr. 30
D-81543 Munich
Telephone: +49 (0)89 200 033 580
E-Mail: info@jmh-datenschutz.de
Website: https://jmh-datenschutz.de

2. Extent of personal data processing

As a matter of principle, we collect and process the personal data of our users only to the extent necessary to provide visitors with a functional website that displays our content and services.

Personal data are those data with which you can be personally identified. Processing is defined as any procedure relating to personal data, including collection, recording, filing, storing, adaptation, alteration, disclosure, and any other type of use.

We collect and process our users' personal data in accordance with the following policy. Further details or additions to the purposes of data processing are available in the relevant contractual documents, forms, declaration of consent, and/or other information provided to you.

3. Legal basis for processing personal data

3.1. Assuming we obtain the prior consent of the data subject to process their personal data, Art. 6 (1a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis. You may revoke your consent at any time. You will be informed separately about the consequences of revoking or not granting consent in the relevant text pertaining to consent.

As a general rule, however, consent can only be effectively revoked for any future processing. Any processing performed prior to revocation is not affected and remains lawful.

Consent: Any voluntarily given specific and informed indication of the wishes of the data subject, in the form of a statement or other unambiguous affirmative act, by which the data subject signifies agreement to their personal data being processed.

3.1.1 In particular, when you register for our newsletter, we use your name and e-mail address to send you our personalized newsletters on a regular basis. In order to receive a newsletter, you only need to provide us with an e-mail address. When we receive a registration for the newsletter, we also store the IP address of the computer system used by the data subject at the time of registration assigned by the Internet Service Provider (ISP) as well as the date and time of registration. It is necessary to store these data in order to trace any (possible) misuse of a data subject's e-mail address at a later point in time, thus providing the data controller with legal protection.

No other data are collected, unless you provide them voluntarily.

Registration is carried out with the help of the so-called "double opt-in" procedure, i.e. you receive an e-mail with a link, via which you can confirm that you are the owner of the e-mail address and wish to be notified via our e-mail service. If your subscription is not confirmed after requesting the confirmation e-mail, the personal data you have provided will not be processed, but automatically disabled and deleted at the next data check (usually within one week).

The legal basis for sending the newsletter as a result of the sale of goods or services is provided under Section 7 (3) of the Act against Unfair Competition (UWG).

Once you have registered, you can unsubscribe from the newsletter by clicking on the link contained in each newsletter. The e-mail address together with the identifying information will be stored until you unsubscribe.

Based on our legitimate interests, we may store unsubscribed e-mail addresses for up to three years before deleting them, in order to prove that consent was previously given. The processing of these data is limited to the purpose of a possible defense against any claims. An individual request for deletion may be made at any time, provided that the previous existence of a consent is simultaneously confirmed. In the event of obligations to permanently comply with objections, we reserve the right to store the e-mail address in a blacklist created solely for this purpose.

3.1.2 If you have questions of any kind, we offer you the option to contact us via a contact form provided on our websites. You need to provide your name and a valid e-mail address so that we know who sent the question and to enable us to answer it. When the form is sent, it is necessary to temporarily store the IP address in order to guarantee the secure operation of the website and its underlying IT systems.

Further information can be given on a voluntary basis.

Voluntary fields in the form are those not clearly marked as mandatory with a red asterisk. We also use your address, telephone number, or other personal data to contact you in case of any queries, to enter into a contract with you, to send you any goods you have ordered, or to otherwise adequately respond to your question.

Any data processed in the course of contacting us is based on your voluntarily given consent, which can be revoked at any time. Any data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it, or if the purpose of storing the data is no longer applicable (e.g. after we have completed processing your request). Mandatory legal provisions, particularly retention periods, remain unaffected.

3.1.3 Registration/user account

You can set up a password-protected user account with us, especially for the HUSS Shop and for some magazine subscriptions, in which we store your personal data. The user account serves to provide you with a high level of convenience when it comes to handling your orders through easier, faster, and more personalized purchase processing as well as making it easier to manage your user profile. However, it is not necessary to create a user account to use our website or place orders with us, as we also offer you the option to place an order as a guest. However, as a guest you will have to completely re-enter your data each time you place an order.

To set up a user account, we require the following information from you:

• Salutation
• First name, surname
• Address
• Payment details if you do not pay by invoice
• A valid e-mail address

You also need to enter a password of your choice to set up a user account. Together with your e-mail address, the password enables you to access your user account, where you can view and change your personal data at any time.

To clarify any queries you may have more quickly, you can also voluntarily provide your telephone or fax number. You can also voluntarily state your occupation, company, department, and country.

After your user account is deleted, your data will be automatically deleted for further use, unless we are required to store them for a longer period of time pursuant to Article 6 (1c) GDPR due to tax and commercial law retention and documentation obligations (contained in HGB, StGB, or AO regulations) or if you have consented to further storage pursuant to Article 6 (1a) GDPR.

Any data absolutely required for delivery or order processing are passed on to third-party service providers. As soon as your data no longer need to be stored or are no longer required by law, they will be deleted.

3.1.4 Competitions

We require personal data from persons who participate in any of our competitions (first name, surname, address, e-mail address, telephone number). We store these personal data in order to conduct and process the competition by name, identify you as a possible winner, or inform you of a possible win, and to respond to any questions to and from participants and winners. If you have won, we require your address in order to send you your prize.

Apart from the data collected via the participation forms, we store the time of participation as well as information on the browser used, the IP address assigned at the time of participation, and the last website visited by the participant. This information can help us in any troubleshooting that may be necessary and to answer questions from participants in the competition. In addition, this method enables us to identify participants who do not participate personally, but via competition services.

We process your personal data for the purpose of conducting the competition on the basis of Art. 6 (1b) GDPR.

By entering the competition, you consent to receiving e-mails (e.g. entry confirmation, prize notification, etc.) and to the publication of your first name and surname on our website as well as in our publications in connection with any prize you may win.

If we conduct competitions together with cooperation partners, your data will be forwarded to the cooperation partner responsible for awarding the prizes. Our cooperation partner(s) are named in each respective competition. We will only pass on the winners' personal data to the extent required by us or our cooperation partners to award or claim the prize.

Subject to legal retention periods, your personal data will be deleted no later than one month after the end of the competition. Your personal data will also be deleted if you have revoked your consent to processing, unless mandatory legal retention periods prevent it.

For more information on your rights, see Section 12.

Consent to use your photo

By participating in the competition, you consent to your photo being published on our website in the event that you win. You may revoke your consent at any time.

If consent has not been given, publication is based on our legitimate interest as organizer to publish the name of the winner of the competition, Art. 6 (f) GDPR.

3.2 When processing personal data that are necessary to fulfill a contract to which the data subject is a party, Art. 6 (1b) GDPR serves as the legal basis. The same applies to processing needed to perform pre-contractual measures, e.g. with interested parties.

In particular, the processing thus helps to provide media services, face-to-face or online events, purchases of products or services, consulting services and activities in the context of direct advertising and market research in accordance with your orders and wishes, and include the services, measures, and activities required to do so.

The following personal data are collected and processed when orders are placed:

• Salutation
• Company
• First name, surname
• Address
• Payment details if you do not pay by invoice
• A valid e-mail address

You can also provide further information on a voluntary basis. These data are processed on the basis of our legitimate commercial interest pursuant to Art. 6 (1f) GDPR to ensure the smooth, easy processing of your order and the efficient handling of any queries.

• Title
• Telephone number
• Fax number
• An alternative delivery address

3.2.1 Information regarding the use of apps

If we become your contractual partner in accordance with the applicable terms of use of a third-party provider from whom you download an app (such as iTunes, Google, etc.), we will process the data provided to us by the third-party provider, e.g. your device ID, to the extent necessary for the fulfillment of the contract so that you can download the app to your mobile device.

As a precaution, we wish to point out that when you use our products, online offers, and services via mobile devices (smartphones, mobile phones, tablets, etc.), precise location data may be collected, used, and passed on, including the geographical location of your mobile device. Moreover, further data may be collected, processed, and used within the framework of the terms of use of your respective telecommunications provider.

3.2.2 Face-to-face events

Processing personal data

At our face-to-face events (trade shows, congresses, seminars, workshops, etc.), in the course of registration we collect data from participants such as their first name, surname, title, address, and e-mail address as well as their company, professional position, and industry as mandatory information. Firstly, the information enables us to determine whether the participants have a professional connection to the particular event and secondly, we can use their personal data sets to implement "lead management" offers.

For lead management purposes, participants can have the barcode or QR code printed on their ticket scanned, e.g. by exhibitors, to enable them to subsequently access your data for promotional purposes or to provide discounts and vouchers from exhibitors or sponsors. In the context of lead management, the legal basis set out in Art. 6 (1a) GDPR applies. Participants give their consent to data processing by having their QR code scanned by the exhibitor, sponsor, or organizer.

Furthermore, we process the data collected pursuant to Art. 6 (b) GDPR in order to fulfill the existing contract with a participant, usually for the purpose of attending the event. This also includes the associated customer support, in particular the provision of participants with necessary and useful information during the planning, registration, participation, and follow-up of a face-to-face event.

On our websites, interested parties, exhibitors, and participants have the opportunity to order programs and catalogs for our events. In order to do so, we require the first name, surname, e-mail address, and the desired postal address. Any further information can be provided on a voluntary basis.

Any companies wishing to participate in our events as exhibitors are required to send us registration documents or complete an online form. In the course of registration, we collect all the data required to process the statement of participation and to prepare, organize, and process the participation.

In the case of accredited press representatives, an agreement is concluded through the application and acceptance of the accreditation, which also forms the legal basis for processing the data of accredited press representatives pursuant to Art. 6 (1b) GDPR.

If the data are not processed for the purpose of fulfilling a contract, they are processed on the basis of our legitimate interest pursuant to Art. 6 (1f) GDPR.

This applies in particular to the processing and use of exhibitors' and participants' data for the purpose of advertising by post or e-mail. The data are processed in order to inform exhibitors and participants about our events and related topics and products as well as to promote the commercial activities of our company, in particular to improve the range of events we offer.

In specific terms, our legitimate interest lies in the fact that the collection and processing of this data supports and promotes the implementation and organization of the face-to-face event and partially enables its continued existence.

In this context, we also assume that the participants in the face-to-face event are well aware from our transparent information policy that the face-to-face event could not continue to exist without the willingness to enable data processing and data transfer to the exhibitors or that unreasonably high participation fees would have to be charged, which in turn would prevent the majority of interested parties from continuing to attend the event. The data are therefore not only processed in the interest of the data controller, but at least to an equal degree in the interest of each individual participant and therefore also in the interest of all participants in the face-to-face event.

In the case of e-mails, we analyze usage behavior on the basis of Section 7 (3) of the Act against Unfair Competition (UWG) in order to advertise our events and services in a more target group-oriented manner. The legal basis for the analysis is our legitimate interest in direct advertising tailored to the requirements of the addressees, which is in line with the interest of e-mail recipients in only receiving information that is of interest to them. Your rights and freedoms have been weighed against this interest and are deemed to be of secondary importance.

You may object to the future sending of e-mails for the purpose of direct advertising at any time by writing to HUSS-VERLAG GmbH, Joseph-Dollinger-Bogen 5, D-80807 Munich (e-mail: datenschutzrichtlinie@hussverlag.de).

After the contract has been fully processed, as soon as our interest in further processing has ceased or if you have revoked any consent you may have given, your data will be deleted, taking into account the retention periods under tax and commercial law, unless you have expressly consented to the further use of your data.

Photos/films

We wish to point out that photos may be taken and video recordings made during face-to-face events. These photos and/or videos may be subsequently published in various media (print as well as online media and social media channels).

The legal basis for the recording of photo and video material is Art. 6 (1f) GDPR. The photographs and video recordings are created for the purposes of reporting, marketing, public relations, and the informative presentation of our commercial services. Our legitimate interest in data processing also relates to these purposes. The photos and videos will be deleted as soon as they are no longer necessary to achieve the purpose for which they were processed.

If you do not wish to be photographed, please make this fact clear to the photographer.

Disclosure of data to third parties

Your personal data will only be passed on to third parties to the extent legally permissible and necessary for processing contractual relationships with you pursuant to Art. 6 (b) GDPR. This includes, in particular, disclosure to event partners for the purpose of planning and organizing the event as well as disclosure to service providers, such as, in the case of payment data, to the payment service provider or credit institutions, in order to process the payment of participation fees.

If participants have redeemed an entry code for a ticket from an exhibitor, we will pass on their personal data to the exhibitor who invited them. Details of the exhibitor are available in the list of exhibitors of a trade show, alongside their respective contact details. This is necessary so that we can offer the face-to-face event at the given conditions. Otherwise we would have to offer the face-to-face event at a higher price.

The legal basis for transmitting the data to the exhibitor is Art. 6 (1f) GDPR.

3.2.3 Online events

On the event platform https://conference-days.de, we offer digital event formats for our customers and interested parties, such as live seminars, product presentations, panel discussions and interviews. Visitors and partners can network with each other by interacting within the event platform using tools such as messaging.

By entering your personal data and confirming your registration and login with a mouse click, you agree to the use of your data for the following purposes:

Processing personal data

The participant must be registered and admitted in order to make full use of the online events. During these processes, we collect company data as well as the personal data of the contact person in order to ensure the best possible implementation of the online event.

During the use of the platform for the online event, we collect the following data:

• IP address – anonymized
• User's operating system
• Time the user is online
• Password
• Other information (chat option via third-party providers)

In the course of the registration/admission process, we currently collect the following personal data, among others, as mandatory information from the contact person:

• Salutation
• Company
• Position or function
• First name
• Surname
• Address
• Contact details (e-mail address)

The user can obtain details of all mandatory and other voluntary information from the current registration form as part of the registration/admission process.

We use the stored data to ensure that the services offered by the online event are implemented and processed (e.g. to manage and answer inquiries, send registration confirmation to your specified e-mail address, identify participants, sell tickets, process warranty claims or other complaints, send scripts, conduct presentations after an online event has ended, repeat the online event, etc.) and to improve our website (legal basis Art. 6 (1b) GDPR). In the case of online events, this data is also used for identification purposes when interacting with the speaker via the chat function, assuming this option is offered in an online event.

If these data are not provided, we are unfortunately unable to register the participant for one of our online events. We do not use automated decision-making processes.

Unless a case of contract fulfillment pursuant to Art. 6 (1b) GDPR already exists, the legal basis pursuant to Art. 6 (1f) GDPR is our legitimate interest in our own addressee-oriented direct advertising by means of e-mail or postal mailing for sector-related or comparable offers from our line of business (online events and product information) in order to achieve long-term customer loyalty. This approach is in line with the interest of participants in only receiving information from us that is also of interest to them, such as pre- and post-event reports, or information on further dates and subsequent events following an online event.

If participants have objected to the use of their postal and e-mail addresses for this purpose (datenschutzrichtlinie@hussverlag.de), we will no longer send them information by post or e-mail in the future.

We delete the data as soon as they are no longer required to achieve the purpose of their processing, but at the latest after consent has been revoked, unless there is a legitimate interest in their continued storage.

Disclosure of data to third parties

Cooperation partners

The participation contract also includes data processing for the purpose of passing on the data to cooperation partners (such as co-organizers, sponsors, or advertising partners) in return for the free or low-cost opportunity to participate in the online event.

We pass on the personalized data of participants (if requested: company, title, first name, surname, position/function, address, e-mail address) to our respective cooperation partners for the purpose of conducting the online event pursuant to Art. 6 (b) GDPR as well as for sending direct advertising with regard to sector-related or comparable online events as well as product information by e-mail. These cooperation partners can be viewed by name in the program documents during the online event.

If we do not have the separate consent of the respective participant, the participants' data will be passed on to the cooperation partners for the purpose of direct advertising in accordance with a balancing of interests pursuant to Art. 6 (f) GDPR.

The participants are aware that the personal data provided by them represent the contractual consideration that is provided in return for the free or low-cost provision of the online event.

In this context, we assume that due to our transparent information policy the participants in the online event are well aware that the event could not continue to exist without their willingness to enable data processing for the data transfer to cooperation partners or that unreasonably high participation fees would have to be charged, which in turn would discourage the majority of interested parties from participating. Without the cooperation partners and the sponsoring, we would be unable to offer any of the online events at the stated conditions.

The data are therefore not only processed in the interest of the data controller, but at least to an equal degree in the interest of each individual participant and therefore also in the interest of all participants in the online event.

Furthermore, the disclosure of data (company, title, first name, surname, position/function, address, e-mail address) can be justified via Art. 6 (f) GDPR with the legitimate interest of the cooperation partners. Since this event is jointly organized together with the cooperation partners, these partners have a fundamental interest in knowing who attends the event. In particular, the cooperation partners have a sales-related interest in knowing who participates in the event. This represents a legitimate interest and a characteristic, particularly in terms of the sponsoring or participation of our partners and customers in the event. The aim of any such participation is always to promote the sale of products and services and is thus in the primary interest of our cooperation partners to organize or sponsor events together with us.

We only process and use your data in accordance with the provisions of German and European data protection law. Furthermore, the cooperation partners are required to process the data we have entered and transmitted exclusively for the intended purpose and in accordance with the law. The cooperation partners are independently responsible for the further processing of the data transmitted via this method and their use.

Assuming the requirements of Art. 26 GDPR are met, together with the cooperation partner we are jointly responsible for data processing until the data are transferred to the cooperation partner. In this case, we have concluded a contract with the cooperation partner regarding the joint responsibility for data processing, which essentially states that as of the transmission of the data to the cooperation partner, the latter is solely responsible for the further processing of the data. Requests for information and other data subject rights can be asserted both with us and with the cooperation partner.

You may object to the future processing and disclosure of your transmitted data by the organizer at any time by writing to HUSS-VERLAG GmbH, Joseph-Dollinger-Bogen 5, D-80807 Munich or by e-mail to datenschutzrichtlinie@hussverlag.de.

If a cooperation partner processes and uses the participant's data that were provided by us, it is advisable to contact the respective cooperation partner directly at the revocation e-mail address provided in the cooperation partner's data protection statement for the purpose of objecting and asserting further data subject rights. Details of the various cooperation partners are available in the online event program alongside their respective contact details.

Otherwise, the following applies to all your rights and enquiries: If you contact us, we will answer your enquiry ourselves to the extent that we are able to do so on the basis of our own data processing and will otherwise pass on your enquiry directly to the cooperation partner with the request that it be dealt with, as we have no insight into how the cooperation partner processes its data.

Provider customers

Within the framework of our online events, participants can register for networking and/or online events organized by our provider customers (generally the providers of their own events such as webinars, workshops, live chats, and product information within the framework of our online events).

During the event, our respective provider customer is able to see which users have visited the online events it has held, as well as the data stored about the users. This includes all the data that each user provided during registration (salutation, first name, surname, position, company, e-mail address). In addition, depending on the business model (networking only), the provider customer can gain insight into the data of all registered users. Users who have registered and logged in agree to the forwarding of this data to the provider customers.

The provider customers process and use the data solely in accordance with the provisions of German and European data protection law. The regulations set out in this policy apply accordingly.

On the basis of Art. 6 (1f) GDPR, we transmit the registration data of the users to the provider customers to implement so-called "lead management" offers. The individual events organized by the provider customers within the scope of our online events are offered to the users either free of charge or at low cost. The provider customers receive the users' transmitted data from us in return. This is necessary to enable all participants to interact (dialog, networking, cultivating business relationships) and subsequently establish contact for the purpose of targeted direct advertising by mail and e-mail to promote comparable services and products offered by the provider customers from their line of business.

Moreover, that is the only way we can offer the online event at the given conditions. Otherwise, we would have to charge a higher price. With respect to the necessary balancing of interests, we have weighed up your interest in the confidentiality of your personal data and our interest in providing our online events. Your interest in confidentiality is of secondary importance, as otherwise we would not be able to provide you with our range of free events.

Any further processing of this data is the sole responsibility of the respective provider customer.

However, we and the provider customer are jointly responsible for data processing until the data are transferred to the provider customer (Art. 26 GDPR).

Once the data have been transmitted, the provider customer is solely responsible for the further processing of the data. Requests for information and other data subject rights can be asserted both with us and with the provider customer. If you contact us, we will answer your enquiry ourselves to the extent that we are able to do so on the basis of our own data processing and will otherwise pass on your enquiry directly to the provider customer with the request that it be dealt with, as we have no insight into how the provider customer processes its data.

We only pass on the above-mentioned data collected and entered by the system to third parties outside the scope described here in accordance with statutory provisions or with the express consent of the data subject.

Service providers used

To the extent that we use external service providers for the provision of our services (e.g. for hosting the event platform, technically implementing online events, offering the respective event functions, or payment processing), any disclosure of personal data is justified by the fact that we have either carefully selected our third-party companies and external service providers as order processors as defined under Art. 28 (1) GDPR, regularly reviewed them and contractually obligated them to process all personal data exclusively in accordance with our instructions or have jointly determined the purposes and means of processing as jointly responsible parties as defined under Art. 26 (1) GDPR.

Third-party software and platforms

We use software applications from third-party providers, such as BigMarker webinar software (https://get.bigmarker.com/legal/privacy-policy), for the technical realisation of these online events. As our online events take place via the websites operated by third-party providers, personal data may be processed there through the use of cookies (e.g. the IP address). We have no influence on the processing of such personal data by third-party providers. We therefore refer to the data protection guidelines of these third-party providers in the respective registration process.

The use of third-party providers may be part of our (pre-)contractual services, provided their use has been agreed upon within this framework (Art. 6 (b) GDPR). Otherwise, the participants' data are processed on the basis of our legitimate interest in efficient, secure communication with our communication partners (Art. 6 (f) GDPR).

Payment service providers

Within the framework of contractual and other legal relationships, due to legal obligations or otherwise on the basis of our legitimate interests, we offer participants efficient, secure payment options for products and services that are subject to a charge (e.g. purchasing a ticket for a Networking Pass) and, in addition to banks and credit institutions, we use other payment service providers for this purpose, such as Unzer GmbH (https://www.unzer.com/de/datenschutz/) and Paypal (https://www.paypal.com/de/webapps/mpp/ua/privacy-full/).

The data processed by the payment service providers can include personal data such as first name, surname, and address, bank data such as account numbers, credit card numbers, passwords, TANs, and checksums as well as contract-, amount-, and recipient-related data. The information is required in order to conduct the transactions. However, the data entered are processed and stored solely by the payment service providers. In other words, we do not receive any account- or credit card-related information, but only confirmation of payment or non-payment. Under certain circumstances, the payment service providers may transmit the data to credit agencies in order to check identity and creditworthiness. For more information, please see the general terms and conditions and the data protection policies of the payment service providers.

The terms and conditions and the data protection policies of the respective payment service providers, which are available within the respective websites or transaction applications, are applicable for the payment transactions. Please see these documents for further information, also with regard to the assertion of revocation, informational, and other data subject rights.

The legal bases are Art. 6 (b) GDPR and Art. 6 (f) GDPR.

3.3 Should the processing of personal data be necessary to fulfill a legal obligation of our company, Art. 6 (1c) GDPR serves as the legal basis.

These are primarily legal requirements (e.g. commercial and tax laws) but also regulatory or other official requirements under certain circumstances. The purposes of the processing may include identity and age verification, fraud and money laundering prevention, the prevention, combatting, and investigation of criminal offences endangering assets, the fulfillment of controlling and reporting obligations under tax law, and the archiving of data for data protection and data security purposes as well as auditing by tax and other authorities. Furthermore, it may become necessary to disclose personal data in the context of official or court measures for the purpose of collecting evidence, criminal prosecution, or the enforcement of civil claims.

3.4 If processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights, and freedoms of the data subject do not override the initially mentioned interest, Art. 6 (f) GDPR serves as the legal basis. According to Recital 47 of the GDPR, this is the case, for example, if there is a relevant and appropriate relationship between the data subject and the data controller, such as if the data subject is a customer of the data controller. But also for the following purposes:

• To ensure the smooth connectivity of the websites
• To ensure that our websites are easy to use
• To analyze system security and stability
• For other administrative purposes
• For advertising or market and opinion research, assuming you have not objected to the use of your data
• To obtain information and exchange data with credit agencies, provided this exceeds our economic risk
• To test and optimize requirements analysis procedures
• To further develop services and products as well as existing systems and processes
• Statistical or market analyses
• To assert legal claims and for reasons of defense in legal disputes that are not directly attributable to the contractual relationship
• To develop scoring systems or automated decision-making processes

For building and plant security (e.g. via access controls and video surveillance), to the extent that this goes beyond the general duty of care

4. Providing the websites and creating log files

Each time you visit our website, our system automatically collects data and information from the system of the computer used to do so. The following data are collected:

• (1)    Information on the type of browser and the version used
• (2)    The user's operating system
• (3)    The user's Internet Service Provider
• (4)    The user's IP address
• (5)    The date and time of access
• (6)    Websites from which the user's system accesses our website
• (7)    Websites that are visited by the user's system via our websites

The data are also stored in our system's log files. These data are not stored together with the user's other personal data.

The data are stored in log files in order to ensure the functionality of the websites. We also use the data to optimize our websites and ensure the security of our IT systems. The data are not analyzed for marketing purposes in this context.

The legal basis for the temporary storage of the data and the log files is Art. 6 (f) GDPR.

The data are deleted as soon as they are no longer required to achieve the purpose for which they were processed and after no later than 14 days.

In order to provide and operate the websites, it is absolutely necessary to collect the data and store it in log files. Consequently, the user does not have the option to object to their use.

5. The categories of data we process, if we do not receive data directly from you, and their origin

To the extent necessary to provide our services, we process personal data legally received from other companies or other third parties (such as credit agencies or address publishers). We also process personal data that we have lawfully obtained, received, or acquired from publicly accessible sources (such as telephone directories, commercial and association registers, civil registers, debtor directories, the press, the Internet, and other media) and are permitted to process.

Relevant categories of personal data can include in particular:

• Personal data (name, profession, industry, and similar data)
• Contact details (address, e-mail address, telephone number, and similar data)
• Address data (registration data and similar data)
• Confirmation of payment/coverage for bank and credit cards
• Information on your financial situation (creditworthiness data including scoring, i.e. data for assessing economic risk)
• Customer history
• Data regarding your use of the telemedia we offer (such as the time at which you visited our websites, apps, or newsletters, pages, and links you clicked on or entries and similar data)

6. Recipients or categories of recipients of your data

Within our company, only authorized employees receive your data who require it in order to fulfill our contractual and legal obligations or in the course of processing and implementing our legitimate interests. Your data are only passed on externally

• In order to process a contract
• In order to fulfill legal requirements according to which we are required to provide information, report or pass on data, or if the passing on of data is in the public interest
• If external service providers process data on our behalf as order processors or function transferees (e.g. customer service centers, delivery companies, letter shop services, accounting services, hosting service providers, advertising agencies, external data centers, IT applications support/maintenance, archiving, document processing, call center services, compliance services, controlling, data validation and plausibility checks, data destruction, purchasing/procurement, customer administration, marketing, media technology, research, risk controlling, billing, telephoning, website management, auditing services, credit institutions, printers, data disposal specialists, courier services, logistics services)
• On the basis of our legitimate interest or the legitimate interest of the third party for the purposes stated (e.g. to authorities, credit agencies, debt collection agencies, lawyers, courts, appraisers, HUSS Group companies – addresses of which are available on our website – committees, and supervisory bodies, etc.)
• If you have given us consent to transfer your data to third parties

Order processor: A natural or legal person, public authority, agency, or other body that processes personal data on behalf of the data controller.

7. Disclosure of data

The data collected will only be sold or passed on to third parties for other reasons if you have given us your express consent or if there is a legal reason for allowing address trading and advertising in accordance with a balancing of interests (Art. 6 (f) GDPR in conjunction with Recital 47 GDPR). This applies in particular to our address trading with B2B addresses. You may object to the use of your personal data for the purpose of direct advertising at any time.

If we commission external service providers to perform order processing, your data are subject to the same security standards externally as they are within our company. In all other cases, the recipients may use the data only for the purposes for which they were transmitted to them.

8. Use of links to and from external providers

Please note that our websites contain links to external third parties (e.g. advertising banners) and that links may be mentioned in articles. If you click on any of these links, you will find yourself on the website of a third party over whose data protection and security measures we have no control.

We do not monitor these websites and are not responsible for the content and data processing policies of third-party websites.

9. Processing of your data in a third country or by an international organization

Visiting our website and using our services may involve the transfer of certain personal data to third countries, i.e. countries in which the GDPR is not applicable law. Such a transfer is permitted if the European Commission has determined that an adequate level of data protection is required in the third country. If there is no adequacy decision by the European Commission, personal data will only be transferred to a third country if there are suitable guarantees in accordance with Art. 46 GDPR or if one of the requirements of Art. 49 GDPR is met.

Unless otherwise stated below, we use the standard contractual clauses for the transfer of personal data to processors in third countries as suitable guarantees: https://commission.europa.eu/publications/standard-contractual-clauses-international-transfers_de

Note on third country transfers to the USA:

The EU-US Data Privacy Framework Programme has been in force since July 2023. This means that all US companies and organisations that are certified for this programme are subject to an adequacy decision by the EU Commission. A complete list of certified companies can be found on the website of the US Department of Commerce at https://www.dataprivacyframework.gov/s/participant-search. Google LLC, based in California, is certified for this programme, data transmission is therefore considered secure and is permitted without restriction.

10. Collecting and processing personal data from job applications and during the application procedure

We collect and process the personal data of job applicants in order to implement the application procedure. Processing may also be performed electronically, which is the case in particular when an applicant sends the relevant application documents to the data controller electronically, for example by e-mail or by completing a form available on the website. If the data controller enters into an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with statutory provisions. However, if the data controller decides not to enter into an employment contract with the applicant, once the applicant has been notified accordingly, the application documents will be deleted within a maximum period of 6 months after the application process has been completed, assuming no other legitimate interest of the data controller prevents their deletion. In this case, other legitimate interests could be, for example, a duty to provide evidence in possible proceedings in accordance with the General Equal Treatment Act (AGG). The legal basis for the processing is Art. 6 (1b) GDPR.

11. Data deletion and storage period

The personal data of the data subject are deleted or blocked as soon as the purpose of the storage ceases to apply. Furthermore, data may be stored as long as storage is provided for by the European or national legislator in EU regulations, laws, or other provisions to which the data controller is subject (such as storage and documentation requirements as defined in the German Commercial Code (HGB) or the German Fiscal Code (AO) as well as within the scope of statutory limitation provisions as defined in the German Civil Code (BGB). Data will also be blocked or deleted if a storage period prescribed by the above-mentioned standards expires, unless there is a need to continue storing the data for the purpose of concluding or fulfilling a contract.

12. Your data protection rights

If your personal data are processed, you are a data subject as defined in the General Data Protection Regulation (GDPR) and therefore entitled to the following rights:

• You have the right to receive information from us about any of your personal data we may have stored, their origin and recipients, and the purpose of the data processing in accordance with the rules set out in Art. 15 GDPR, possibly with restrictions pursuant to Section 34 of the Federal Data Protection Act (BDSG).
• At your request, we will correct the data stored about you pursuant to Art. 16 GDPR if they are inaccurate or incorrect.
• If you wish, we will delete your data in accordance with the principles of Art. 17 GDPR, provided no other legal stipulations (such as statutory retention obligations or restrictions pursuant to Section 35 BDSG) or an overriding interest on our part (e.g. to defend our rights and claims) prevent us from doing so.
• Taking the requirements of Art. 18 GDPR into account, you have the right to request us to restrict the processing of your data.
• Furthermore, you can object to the processing of your data pursuant to Art. 21 GDPR, on the basis of which we are required to cease processing your data. However, this right of objection only applies under very special personal circumstances, whereby the rights of our company may possibly conflict with your right of objection. See below for further details.
• In line with the requirements of Art. 20 GDPR, you also have the right to receive your data in a structured, commonly used, machine-readable format or transmit them to a third party.
• Furthermore, you have the right to revoke your consent to the processing of your personal data at any time with immediate effect.
• You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The supervisory authority responsible for data protection issues is the Bavarian State Office for Data Protection Supervision (https://www.lda.bayern.de/de/impressum.html). However, we recommend firstly directing any complaints you may have to our data protection officer.

If possible, any requests about exercising your rights should be sent to our address above. An informal e-mail message is sufficient for this purpose. Information about your right of objection is contained in Art. 21 GDPR.

You have the right to object at any time to the processing of your data that is carried out on the basis of Art. 6 (f) GDPR (data processing based on a balancing of interests) if there are any grounds for doing so that relate to your particular circumstances. This also applies to profiling based on this provision as defined in Art. 4 (4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims. We may also process your personal data for direct advertising purposes. If you do not wish to receive advertising, you have the right to object to this at any time; this also applies to profiling if performed in conjunction with any such direct advertising. We will comply with your objection with immediate effect.

13. Security

Our websites use SSL or TLS encryption for security reasons and to safeguard the transmission of confidential content, such as any orders or enquiries that you send to us. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the "lock" symbol in your browser line. If SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Moreover, we take precautions to protect your personal data from loss, destruction, falsification, tampering, and unauthorized access. We comply, of course, with the statutory data protection regulations of the Federal Republic of Germany.

Please note, however, that data transmission via the Internet is never completely secure. We cannot guarantee the security of any data entered on our website during their transmission via the Internet, which you do at your own risk.

14. Advertising- and tracking-free service

14.1 Consent Management

We have integrated the consent management tool "consentmanager" (www.consentmanager.net) provided by the company consentmanager AB (Håltgelvågen 1b, 72348 Västerås, Sweden, info@consentmanager.net) on our website in order to request consent for data processing or the use of cookies and similar functions. With the help of "consentmanager" you have the option to give or refuse your consent to the use of certain functionalities of our website, e.g. for the purpose of integrating external elements, integrating streaming content, statistical analysis, reach measurement and personalised advertising. You can use "consentmanager" to give or refuse your consent to the use of all functions, for individual purposes or individual functions. You can also change the settings you have made at any later point in time. The purpose of integrating "consentmanager" is to allow users of our website to decide on the above points and, in the course of further using our website, to offer them the option of changing settings that have already been entered. In the course of using "consentmanager", personal data and information on the terminal devices used (IP address, language, browser, etc.) are processed and sent to the company “consentmanager AB”. The information on the settings you have entered will also be stored in your terminal device.

The legal basis for processing is Art. 6 (1) (c) GDPR in conjunction with Art. 7 (1) GDPR, assuming processing serves to comply with the legally standardised obligation to provide proof of consent. In all other respects, the relevant legal basis is Art. 6 (1) (f) GDPR. Our legitimate interests in processing are the storage of user settings and preferences in relation to the use of cookies and the analysis of consent rates. Consent must be requested again no later than twenty-four months after the user settings have been entered. The user settings entered will then be stored again for this period, unless you delete the information regarding your user settings yourself in the designated terminal device storage capacities beforehand.

You may object to processing on the basis of Art. 6 (1) (f) GDPR. You have the right to object on grounds relating to your particular situation. If you wish to object, please contact us by e-mail at info@consentmanager.net.

14.2 contentpass

On our websites logistik-heute.de, logistra.de, profi-werkstatt.net, vision-mobility.de, unterwegs-auf-der-autobahn.de we offer you a service free of advertising and tracking.

The service is known as contentpass and provided by Content Pass GmbH, Wolfswerder 58, 14532 Kleinmachnow, Germany. For more information about the service, please see the General Terms and Conditions of contentpass.

In order to offer you this service on our website, we send your IP address to contentpass at the beginning of your registration. contentpass is responsible for the registration and the associated data processing as defined by the GDPR. We are solely responsible for the transmission of your IP address to contentpass. The transmission is necessary for technical reasons in order to direct you to the registration page operated by contentpass. For further information regarding data processing at contentpass, please read the privacy policy on the contentpass website.

The basis for data transmission is our legitimate interest in making our website available without advertising and tracking and your legitimate interest in using our website practically without advertising and tracking, Art. 6 (1) (f) GDPR.

15. Amendments to this data protection policy

Changes to the law or changes to our internal processes may make it necessary to amend this privacy policy. We reserve the right to amend, update or supplement this Privacy Policy at any time. Any revised information on data processing will only apply to personal data collected or modified after the effective date.

We will inform you as soon as the changes require an act of cooperation on your part (e.g. consent) or other individual notification.

If we provide addresses and contact information of companies and organizations in this privacy policy, please note that the addresses may change over time and please check the information before contacting us.

Part 2: Information about data protection on our websites

1. provision of the website (web host)

Our website is hosted by:
minuskel screen partner GmbH, Am Friedrichshain 22, 10407 Berlin, Germany

When you visit our website, we automatically collect and store information in so-called server log files. Your browser automatically transmits this information to our server or to the server of our hosting company.

These are
- IP address of the website visitor's end device
- Device used
- Host name of the accessing computer
- Operating system of the visitor
- Browser type and version
- Name of the retrieved file
- Time of the server request
- Amount of data
- Information as to whether the retrieval of the data was successful

This data is not merged with other data sources.

The legal basis for the processing of this data is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the technically error-free presentation and optimisation of this website.

Instead of operating this website on our own server, we can also have it operated on the server of an external service provider (hosting company). In this case, the personal data collected on this website will be stored on the hosting company's servers. In addition to the data mentioned above, this may include, for example, contact requests, contact data, names, website access data, meta and communication data, contract data and other data generated via a website.

The purpose of pre-contractual or contractual fulfilment vis-à-vis the data subject is cited as a further legal basis. (Art. 6 para. 1 lit. b GDPR). In the event that we have commissioned a hosting company, there is an order processing contract with this service provider.

2. use of cookies

Our website uses "cookies". Cookies are information that a web server (server that provides web content) stores on your end device in order to be able to identify this end device. They are either stored temporarily for the duration of a session (session cookies) and deleted at the end of your visit to a website or permanently (permanent cookies) on your end device until you delete them yourself or they are automatically deleted by your web browser.

Cookies can also be stored on your device by third-party companies when you visit our website (third-party requests). This enables us, as the operator, and you, as a visitor to this website, to utilise certain third-party services that are installed on this website. Examples of this are cookies for processing payment services or cookies for displaying videos.

Cookies have a wide range of uses. They can improve the functionality of a website, control shopping basket functions, increase the security and convenience of website use and carry out analyses of visitor flows and behaviour. Depending on the individual functions, cookies must be categorised under data protection law. If they are necessary for the operation of the website and are intended to provide certain functions (shopping basket function) or serve to optimise the website (e.g. cookies to measure visitor behaviour), they are used on the basis of Art. 6 para. 1 lit. f GDPR. As the website operator, we have a legitimate interest in the storage of cookies for the technically error-free and optimised provision of our services. In all other cases, cookies are only stored with your express consent (Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG).

If cookies are used by third-party companies or for analysis purposes, we will inform you about this separately in this data protection notice. Your required consent will be requested and can be revoked at any time.

3. use of external services

External services are used on our website. External services are services from third-party providers that are used on our website. This can be done for various reasons, for example for embedding videos or for the security of the website. When using these services, personal data is also passed on to the respective providers of these external services. If we do not have a legitimate interest in the use of these services, we will obtain your consent, which can be revoked at any time, as a visitor to our website before using them (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG).

4. analysis and tracking tools

We use third-party providers that use cookies and similar technologies if your device settings allow this. This enables us to analyse your use of our websites and applications. The information generated about your use is regularly transmitted to a server of the web analysis service and stored and processed there.

4.1 Matomo

We use the Matomo web analysis service. Matomo is a software application created by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. Further information is available on the website www.matomo.org.

Via this software, data are collected and stored to statistically analyze the use of the website. Cookies are used for this purpose (for more information on cookies, see Section 1). The data are collected and stored in order to statistically analyze user behavior, which helps evaluate the use of the website and enables it to be designed in line with requirements. For these purposes, pseudonymized user profiles can be created from the data. The IP addresses collected are automatically anonymized by making parts of the IP address unrecognizable (so-called IP masking). The IP address and other information contained in the pseudonymized user profile are not used to identify the user and not merged with the user's other personal data.

The software is operated on the server of the data controller (HUSS-VERLAG GmbH). The log files, which are classified as sensitive under data protection law, are collected, stored, and processed exclusively on this server and not transmitted to third parties.

Data subjects can prevent our website from placing cookies at any time by means of a respective setting in their Internet browser and thus permanently object to the placing of cookies. Setting the Internet browser accordingly also prevents Matomo from placing a cookie on the data subject's IT system. Moreover, a cookie previously placed by Matomo can be deleted via an Internet browser or other software programs at any time.

The legal basis for the data processing is Art. 6 (1f) GDPR. The legitimate interest is the website use analysis, which forms an essential basis for designing the pricing policy of specialized online media services.

4.2 Use of the “INFOnline Measurement” measurement method

Our websites logistik-heute.de, vision-mobility.de and transport-online.de use the multi-level measurement method 'INFOnline Measurement' from INFOnline GmbH (https://www.INFOnline.de) to determine statistical parameters (page impression, visit, (technical) client) on the use of our digital offering. The aim of usage measurement is to statistically determine the number of visits to our websites, the number of website visitors and their surfing behavior - on the basis of a uniform standard procedure - and thus to obtain market-wide comparable values. As a member of the Informationsgemeinschaft zur Feststellung der Verbreitung von Werbeträgern e.V. (IVW - https://www.ivw.eu), the usage statistics are regularly provided by the IVW with the performance values 'Page Impression' and 'Visit' in the IVW statement (https://ausweisung-digital.ivw.de/).

(1) Legal basis for processing

The measurement with INFOnline Measurement (pseudonymous system: IOMp) by INFOnline GmbH is carried out as part of a usage measurement with consent in accordance with Art. 6 para. 1 lit. a) GDPR. The purpose of processing personal data is to generate digital performance values (page impression, visit and (technical) client) for the creation of statistics. The statistics are used to track and document the use of our website.

Furthermore, we have a legitimate interest in making the pseudonymized data available to INFOnline, AGOF, and IVW for market research (AGOF, agma) and statistical purposes (INFOnline, IVW). We also have a legitimate interest in making the pseudonymized data available to INFOnline for the further development and provision of interest-based advertising material.

(2) Type of data

The data collected with INFOnline Measurement does not allow a user to be clearly identified as a person due to the data types and data volume. A JavaScript code (so-called 'Measurement Manager') is used, which automatically integrates and executes the necessary measurement sensors for anonymous and / or pseudonymous data processing to determine the key figures on the basis of the consent information from the Consent Management Platform (CMP) used by the provider for the digital offer when called up via the browser or the user's end device (client). INFOnline Measurement is designed as an anonymous system (without client identifier) and as a pseudonymous system (with client identifier).

The anonymous census procedure (IOMb) does not process any personally identifiable information at all, in particular the IP address. This is completely removed from communication and processing. For this purpose, a communication interface, the so-called 'service platform', prevents the exchange of the user's IP address with the INFOnline systems as a measurement endpoint within the framework of INFOnline Measurement. The IP address as personal data is discarded in the census procedure on the service platform before the measurement call is forwarded to INFOnline. There is also no geolocalization using the IP address. The data set generated in the census procedure is a pure PI data collection.

With the pseudonymous measurement method (IOMp), the following data is collected with the 3rd party cookie 'i00' (ioam.de) and the 1st party cookie 'ioam2018', which has a personal reference according to the EU GDPR:

• IP address:
  On the Internet, every device requires a unique address, the so-called IP address, to transmit data. The at least temporary storage of the IP address is technically necessary due to the way the Internet works. The IP addresses are shortened by 1 byte before any processing and only processed further in anonymized form. The unabridged IP addresses are not stored or processed.

• A randomly generated client identifier: Reach measurement uses unique identifiers of the end device, a 'Local Storage Object' (LSO) or a signature created from various automatically transmitted information from your browser to recognize computer systems. This identifier is unique for a browser as long as the cookie or local storage object is not deleted. It may also be possible to measure the data and subsequently assign it to the respective identifier if you visit other websites that also use INFOnline GmbH's pseudonymous measurement method. The following unique identifiers can be transmitted to INFOnline GmbH as a hash:
  - shortened client IP or X-Forwarded-For (XFF)
  - User agent (as hash)

(3) Data usage

The INFOnline GmbH measurement method used on this website determines usage data. This is done in order to collect the performance values Page Impression, Visit and Client.

• Geolocalization
  The pseudonymous measurement method (IOMp) is used to assign a website visit to the location of the visit exclusively on the basis of the anonymized IP address and only up to the geographical level of the federal states / regions. Under no circumstances can the geographical information obtained in this way be used to draw conclusions about a user's specific place of residence.
   
• Cross-offer consolidation of usage data
  The usage data of a (technical) client (e.g. a browser on a device) is merged across websites using the pseudonymous measurement method (IOMp) and stored in a database.

(4) Storage duration of the data

The complete IP address is not stored by INFOnline GmbH. The IP address is only used to receive the data packets and is then shortened by 1 byte.

In the census procedure, the shortened IP address is discarded; in the pseudonymous procedure, it is stored for a maximum of 60 days. In the pseudonymous procedure, the usage data is stored for a maximum of 6 months in conjunction with the unique identifier. The validity of the 'i00' cookie used in the pseudonymous procedure and the 'ioam2018' cookie on the user's end device is limited to a maximum of 1 year.

(5) Forwarding of the data

The IP address and the shortened IP address are not passed on.

(6) Rights of the data subject

The data subject has the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to object (Art. 21 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 et seq. GDPR)
- Right to data portability (Art. 20 GDPR)
- Right of revocation (Art. 7 para. 3 GDPR) (with consent)

For requests of this kind, please contact datenschutz@hussverlag.de. Please note that we must ensure that we are actually dealing with the data subject for such requests. The data subject has the right to lodge a complaint with a data protection authority.Further information on data protection in INFOnline Measurement can be found on the website of INFOnline GmbH (https://www.infonline.de), which operates the measurement procedure.

5. consent management

In order to comply with data protection requirements, we use the Consent Manager service on our website. The provider of this service is consentmanager AB, Håltegelvägen 1b, 72348 Västerås, Sweden, as described in Part I Section 14.1.

We use this tool to obtain the necessary consent for the setting of cookies or the use of external services. The consents are stored.

The processing is necessary for compliance with a legal obligation to which the controller (website operator) is subject. Art. 6 para. 1 lit. c GDPR is therefore used as the legal basis for processing.

Further information can be found in the provider's data protection information at the following URL: https://www.consentmanager.de/datenschutz/.

6. Content delivery network (CDN)

We use a content delivery network (CDN) to optimise the performance and availability of our website. For this purpose, the service provider that makes this network available processes your IP address and the information about when you visited our website. All further information on data processing by this service provider can be found in its privacy policy.

We base this processing on a legitimate interest (Art. 6 para. 1 lit. f GDPR).

Our legitimate interest in using a content delivery network is to be able to display our website as quickly, securely and reliably as possible.

6.1 Google APIs CDN

We use the Google APIs CDN service on our website. The provider of this service is Google Ireland Ltd, Gordon House, Barrow Street Dublin 4, Ireland.

As this service is hosted locally on the web server, no data is transferred to third parties.

6.2 CloudFlare

We use the CloudFlare service on our website. The provider of the service is Cloudflare Ltd, 2nd Floor 25 Lavington Street London SE1 0NZ, United Kingdom.

Use of the service may result in data being transferred to a third country (USA).

Further information can be found in the provider's data protection information at the following URL: https://www.cloudflare.com/de-de/privacypolicy/.

6.3. jsDelivr

We use the jsDelivr service on our website. The provider of the service is Prospect One Ltd, Królewska 65A/1, PL-30-081 Krakow, Poland.

By using the service, data may be transferred to a third country (USA).

Further information can be found in the provider's data protection information at the following URL: https://www.jsdelivr.com/terms/privacy-policy-jsdelivr-net.

6.4. unpkg

We use the unpkg service on our website. The provider of the service is unpkg, 1999 Harrison Street Suite 1150, Oakland, California, 94612, United States, USA.

By using the service, data may be transferred to a third country (USA).

7. Content management system

A content management system enables the creation, editing, organisation and presentation of digital content. We use a content management system to create content for our website. This enables us to design a more appealing website.

We base this processing on a legitimate interest (Art. 6 para. 1 lit. f GDPR).

Our legitimate interest lies in the technically error-free presentation and optimisation of the website.

7.1 Drupal CMS

We use the Drupal CMS service on our website. The provider of the service is the Drupal Association, 3439 NE Sandy Blvd, #269, Portland, Oregon, 97232, USA.

As this service is hosted locally on the web server, no data is transferred to third parties.

8. display optimisation

We use tools that serve to optimise the presentation of our website. Among other things, these tools help us to display the website in other languages or in a more accessible way.

Processing only takes place if you expressly consent to this data processing (via our consent banner on the website). The legal basis for consent is Art. 6 para. 1 lit. a GDPR. Without your consent, data will not be processed in the manner described above. If you withdraw your consent (e.g. via the consent banner or other options provided on this website), we will terminate this data processing. This does not affect the lawfulness of the processing carried out up to the revocation.

8.1 Printfriendly

We use the Printfriendly service on our website. The provider of the service is Printfriendly, PO Box 28471, Scottsdale, Arizona, 85255, USA.

By using the service, data may be transferred to a third country (USA).

Further information can be found in the provider's data protection information at the following URL: https://www.printfriendly.com/privacy#PrintFriendly-Consumer-Policy.

9. map service

We use a map service on this website. In order for the map to be used and displayed on the website, the map must be loaded from the provider's server. This involves transferring your IP address to the provider's server. Depending on the provider, cookies and other technologies, including fonts, may be loaded. You can find more information on this in the provider's privacy policy.

Processing will only take place if you expressly consent to this data processing (via our consent banner on the website). The legal basis for consent is Art. 6 para. 1 lit. a GDPR. Without your consent, data will not be processed in the manner described above. If you withdraw your consent (e.g. via the consent banner or other options provided on this website), we will terminate this data processing. This does not affect the legality of the processing carried out up to the point of withdrawal.

9.1 OpenStreetMap

We use the OpenStreetMap service on our website. The provider of the service is the OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom.

Further information can be found in the provider's data protection information at the following URL: https://wiki.osmfoundation.org/wiki/Privacy_Policy.

9.2 Google Maps

On our website we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Maps is a web service for displaying interactive maps to visually present geographical information. This service shows you our location and the easiest way to get there if you need to do so.

When you visit the sub-pages in which Google Maps are integrated, information about your use of our website (such as your IP address) is transmitted to Google servers and stored there, which may also result in the information being transmitted to the servers of Google LLC in the USA. This is done regardless of whether Google provides a user account via which you are logged in or whether a user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not want the data to be assigned to your profile at Google, you need to log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them. The collection, storage, and analysis are carried out pursuant to Art. 6 (1f) GDPR, based on Google's legitimate interest in displaying personalized advertising, market research, and/or the requirements-based design of Google websites. You have the right to object to the creation of these usage profiles. However, you need to contact Google in order to exercise this right.

If you do not agree with the future transmission of your data to Google in connection with the use of Google Maps, you also have the option to completely disable the Google Maps web service by switching off the application JavaScript in your browser. If you do so, Google Maps and thus the map display on this website cannot be used.

You can view Google's terms of use at https://www.google.de/intl/de/policies/terms/regional.html; the additional terms of use for Google Maps are available at https://www.google.com/intl/de_US/help/terms_maps.html

Detailed information on data protection in connection with the use of Google Maps is available on the Google website ("Google Privacy Policy"): https://www.google.com/intl/de/policies/privacy/

10 Marketing

Tools are used on our website that offer services relating to campaigns, web analysis and personalisation. This enables a central and comprehensive collection of all data, which in turn is necessary for the optimisation and planning of digital campaigns. These services can be set and used by our advertising partners via our website to create a profile of your interests and show you relevant adverts on other websites.

The processing of the data is based on the legal basis of consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG). As a website visitor, you have consented to the processing of your personal data with your voluntary, express and prior consent. Without separate consent, the personal data will not be processed by us in the manner described above, provided that there is no other legal basis within the meaning of Art. 6 para. 1 GDPR on which we base the processing. We will proceed in the same way if you withdraw your consent. This will not affect the lawfulness of the processing carried out until you withdraw your consent.

10.1 iq digital

The secondary marketing of the advertising space on our website is carried out by iq digital media marketing gmbh, Toulouser Allee 27, D-40211 Düsseldorf, on our behalf and according to our instructions. Please read the data protection policy (https://www.iqdigital.de/service/datenschutz-nach-tcf/) published by iq digital in order to find out more about the partners and tool providers used by iq digital and the respective data processing policies. In iq digital's data protection policy you will find information about the data recipients, deletion periods, permissions, and detailed information on the more specific purposes of data processing by each individual partner and tool provider.

Our service provider iq media marketing gmbh, Toulouser Allee 27, D-40211 Düsseldorf, places cookies in the browsers of users when they visit websites in its marketing portfolio (http://iqdigital.de). In order to avoid scattering losses when displaying advertising material, iq digital also compares its own cookies with cookies that it receives from third parties, for example, to avoid duplicate targeting of the same user or to increase the targeting accuracy of advertising material. In some cases, iq digital also enables third parties to place their own cookies in the iq digital portfolio on the basis of corresponding contracts or makes data segments collected by means of cookies available to third parties.

Users can influence the use of cookies. Most browsers provide an option to either restrict or completely prevent cookies from being stored. Users do not receive less advertising as a result, it is just less relevant to them. The company iq digital also provides an option to block or delete cookies on an individual basis. Below, iq digital presents the cookies it uses.

In order to facilitate the overview of the cookies used by iq digital, the following links are available via www.iqdigital.de/transparenz with general information on the purposes of their use. For each cookie used, iq digital also provides detailed information via a software tool about the general purpose of the cookie (which can go beyond its use at iq digital), the provider, and the opt-out options. More information is available here https://l3.evidon.com/site/3903/5665/1.

The following types of cookies are used by iq digital:

• Cookies for campaign validation: these cookies are used to check whether an advertising campaign has been carried out by iq digital for an advertising customer in accordance with the order. They include cookies from both iq digital and its partners that determine whether an advertising banner has been placed on a website at the agreed frequency.
• Cookies from the service provider that technically displays the advertising material for iq digital: These are used to comply with and check additional campaign specifications agreed with a customer (e.g. agreed time at which advertising material is displayed, geographical campaign territory, multiple sending of the same advertising material to a user, or whether it has called up an underlying format). Further details on the individual cookies for campaign validation are available here.
• Cookies to achieve greater targeting accuracy: Cookies only transmit pseudonymized data. It is not possible to identify users according to gender or areas of interest by using a cookie. The cookie does not know which user is currently accessing the browser. For this reason, cookies from iq digital are matched with those from other service providers in order to increase the probability of a hit in a certain segment (e.g. gender). iq digital uses the following cookies for these comparisons ◾ Cookies placed in the course of user surveys
• Cookies placed by service providers on behalf of iq digital to track online surfing behavior (pages visited by a user)
• Cookies that iq digital receives from third parties in order to match them with its own segmentations
• Cookies that iq digital's partners place in order to achieve greater targeting accuracy and match them with their own pseudonymized data.
  More details on the various cookies used to achieve greater targeting accuracy are available here.

The personal (pseudonymized) data are processed by iq digital on the basis of Art. 6 (1f) GDPR. This authorization permits the processing of personal data if there is a "legitimate interest" on the part of the data controller that does not conflict with the overriding interests of a user. We have a legitimate interest in providing the functionality of our websites and apps. Both of these contain extensively researched information, which we provide free of charge to a considerable extent. The marketing of advertising space on our websites enables us to continue making these offerings largely available to everyone in this form and thus make a significant contribution to knowledge transfer, public information, and the exchange of opinions. When displaying advertising media on a user-related basis, we are guided by the selections that are also customary in the print sector. Here, too, advertising media are ordered on an environment- and reader-related basis and examined for perception by the relevant target groups using reader reach analyses. Unlike the print sector, where reader structures are also known to a large extent via the number of subscriptions, only pseudonymized data are available, so cookies are used to validate the segments displayed.

You can object to the processing of your data at any time if there are reasons relating to your particular situation that speak against it.

10.2 Aumago GmbH

We work together with Aumago GmbH (“Aumago”), Berlin, a target group marketer. Aumago uses so-called cookies, a text file that is stored in the computer's browser. Pseudonymous usage data is collected in the form of cookie IDs and advertising IDs. Furthermore, so-called web beacons (invisible graphics) may be used. If IP addresses are collected, they are stored anonymously by deleting the last number block.

Based on the user's surfing behavior (e.g. website visited, categories, product pages, content read), Aumago assumes an interest in a specific B2B industry or topic and uses this information on our behalf to display targeted, usage-based online advertising to these users on the Internet. In this respect, the cookies can be synchronized with other technology platforms via so-called cookie matching. The current list of matching partners can be found under the following link.

The cookies are either Aumago cookies or cookies from service providers that Aumago uses, such as The ADEX GmbH or B2B Media Group GmbH. Aumago operates under the brand name B2B Media Group under the company name B2B Media Group Berlin GmbH.

The user can opt out at any time and thus object to cookie tracking in this regard: 
Aumago GmbH Opt-Out: https://theadex.com/privacy-opt-out/
B2B Media Group opt-out: https://www.b2biq.net/optout?locale=en

This sets a so-called opt-out cookie. The opt-out cookie requires that a setting in the browser does not prevent the storage of cookies or deletes the cookie. After deleting the opt-out cookie, the user must repeat the objection. Alternatively, the user can delete the cookies directly in the browser, set their browser settings to “Do-not-track” from the outset or manage their cookie preferences here. If you wish to receive information about the information stored in your cookie, please send your cookie ID either to us or to Aumago GmbH, Savignyplatz 9/10, 10623 Berlin (https://www.aumago.com/datenschutz/) or to privacy@aumago.com..Weitere. Information and the applicable data protection provisions of B2B Media Group, Bahnhofstr. 5, 91245 Simmelsdorf, can be found at https://www.b2bmg.com/de/datenschutz. E-mail contact: privacy@b2bmg.com

11. interface software

Business processes are cheaper, faster and more error-free when they are automated with the help of software via interfaces. This allows them to be efficiently integrated into company processes via your own website or social networks. We use interface software on our website to link different applications with each other and to transfer personal data securely from one application to another.

The processing of the data is based on the legal basis of consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG). As a website visitor, you have consented to the processing of your personal data with your voluntary, explicit and prior consent. Without separate consent, the personal data will not be processed by us in the manner described above, provided that there is no other legal basis within the meaning of Art. 6 para. 1 GDPR on which we base the processing. We will proceed in the same way if you withdraw your consent. This will not affect the lawfulness of the processing carried out until you withdraw your consent.

11.1 Google APIs

We use the Google APIs service on our website. The provider of the service is Google Ireland Ltd, Gordon House, Barrow Street Dublin 4, Ireland.

Use of the service may result in data being transferred to a third country (USA).

Further information can be found in the provider's data protection information at the following URL: https://policies.google.com/privacy.

11.2 Google Tag Manager

We use the Google Tag Manager service on our website. The provider of the service is Google Ireland Ltd, Gordon House, Barrow Street Dublin 4, Ireland.

Use of the service may result in data being transferred to a third country (USA).

Further information can be found in the provider's data protection information at the following URL: https://policies.google.com/privacy.

12. video/music service

Audio and videos are integrated on our website. These are retrieved from the server of our provider, the so-called audio or video platform. In order to be able to play an audio or video, your end device establishes a connection with the audio or video platform and transmits personal data to it. This includes, in particular, the IP address, any location data or information about the user's browser and end device.

Processing only takes place if you expressly consent to this data processing (via our consent banner on the website). The legal basis for consent is Art. 6 para. 1 lit. a GDPR. Without your consent, data will not be processed in the manner described above. If you withdraw your consent (e.g. via the consent banner or other options provided on this website), we will terminate this data processing. This does not affect the legality of the processing carried out up to the point of withdrawal.

12.1 YouTube

We use the YouTube service on our website. The provider of the service in Europe is Google Ireland Ltd, Gordon House, Barrow Street Dublin 4, Ireland.

The use of the service may result in data being transferred to a third country (USA). The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Further information can be found in the provider's data protection information at the following URL: https://policies.google.com/privacy.

13. web fonts

This site uses so-called web fonts for the standardised display of fonts, which are provided by an external provider and are loaded by the browser when the website is accessed. The provider of the web font becomes aware that our website has been accessed from your IP address, as your browser establishes a direct connection to the provider of the web font.

The processing of the data is based on the legal basis of consent (Art. 6 para. 1 lit. a GDPR). As a website visitor, you have consented to the processing of your personal data with your voluntary, explicit and prior consent. Without separate consent, the personal data will not be processed by us in the manner described above, provided that there is no other legal basis within the meaning of Art. 6 para. 1 GDPR on which we base the processing. We will proceed in the same way if you withdraw your consent. This will not affect the lawfulness of the processing carried out until you withdraw your consent.

13.1 Google Fonts

We use the Google Fonts service on our website. The provider of the service is Google Ireland Ltd, Gordon House, Barrow Street Dublin 4, Ireland.

The use of the service may result in data being transferred to a third country (USA).

Further information can be found in the provider's data protection information at the following URL: https://policies.google.com/privacy.

14 Websecurity

We use tools on our website that protect against unauthorised access, spam or other attacks. This increases the security of our website.

We base this processing on a legitimate interest (Art. 6 para. 1 lit. f GDPR).

Our legitimate interest is to be able to guarantee the security of our website and to protect us from unauthorised access, spam and other attacks.

14.1 Google Recaptcha

We use the Google Recaptcha service on our website. The provider of the service is Google Ireland Ltd, Gordon House, Barrow Street Dublin 4, Ireland.

Use of the service may result in data being transferred to a third country (USA).

Further information can be found in the provider's data protection information at the following URL: https://policies.google.com/privacy.

15. Search Engine

A search engine has been implemented to make it easier to find content on our website.

Processing will only take place if you expressly consent to this data processing (via our consent banner on the website). The legal basis for consent is Art. 6 para. 1 lit. a GDPR. Without your consent, data will not be processed in the manner described above. If you withdraw your consent (e.g. via the consent banner or other options provided on this website), we will terminate this data processing. This does not affect the lawfulness of the processing carried out up to the point of withdrawal.

15.1. Google

We use the Google service on our website. The provider of the service is Google Ireland Ltd, Gordon House, Barrow Street Dublin 4, Ireland.

Use of the service may result in data being transferred to a third country (USA).

Further information can be found in the provider's data protection information at the following URL: https://policies.google.com/privacy.

16. software framework

Software frameworks facilitate interaction with a platform by creating a standardised interface to it. Frameworks are used to reduce the development effort for recurring software requirements.

Processing only takes place if you expressly consent to this data processing (via our consent banner on the website). The legal basis for consent is Art. 6 para. 1 lit. a GDPR. Without your consent, data will not be processed in the manner described above. If you withdraw your consent (e.g. via the consent banner or other options provided on this website), we will terminate this data processing. This does not affect the lawfulness of the processing carried out up to the revocation.

16.1 Polyfill.io

We use the Polyfill.io service on our website. The provider of the service is The Financial Times Ltd, 1 Friday St., London, United Kingdom.

Use of the service may result in data being transferred to a third country (USA).

Further information can be found in the provider's data protection information at the following URL: https://help.ft.com/legal- privacy/privacy-policy/.

17. social media

We use social media plugins to connect our website with our social media channels. The integration of the plugins is intended to make it easier for visitors to our website to follow our channels on social networks, share, like or comment on content. Some social media plugins make it possible to analyse the user behaviour of visitors to the website with regard to their behaviour on social networks. The use of plugins is intended to increase awareness and the number of followers of our channels.

The plugins also process personal data and transfer data to these social networks. This transfer occurs as soon as the website is accessed. Processed data includes, for example Name, address, email address, telephone number, access time, device information, IP address.

The processing of the data is based on the legal basis of consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG). As a website visitor, you have consented to the processing of your personal data with your voluntary, explicit and prior consent. Without separate consent, the personal data will not be processed by us in the manner described above, provided that there is no other legal basis within the meaning of Art. 6 para. 1 GDPR on which we base the processing. We will proceed in the same way if you withdraw your consent. This will not affect the lawfulness of the processing carried out until you withdraw your consent.

17.1 X (formerly Twitter)

We use the service X (Twitter) on our website. The provider of the service in Europe is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland.

Use of the service may result in data being transferred to a third country (USA). The operating company of X (Twitter) is X Corp, 865 FM 1209, Building 2, Bastrop, TX 78602, USA.

Further information can be found in the provider's data protection information at the following URL: https://x.com/de/privacy

17.2 X Syndication (formerly Twitter Syndication)

We use the X Syndication (Twitter Syndication) service on our website. The provider of the service is X Corp, 865 FM 1209, Building 2, Bastrop, TX 78602, USA.

By using the service, data may be transferred to a third country (USA).

Further information can be found in the provider's data protection information at the following URL: https://x.com/de/privacy.

17.3 Further tools

On our websites, we also offer you the option of communicating the content of our magazines via other social media. The following options can be offered in addition to X and YouTube:
- Facebook
- LinkedIn
- Xing
- LinkedIN

The respective buttons with the symbols of the providers are merely links to the pages of the external service providers. Data is only collected or transmitted after you have clicked on the corresponding link and are on the respective website or have logged in to the respective service. In this context, the exchange of data between us and the respective service provider is limited to the extent necessary for the function of this communication option.

18 Technical service providers

18.1 Episerver (formerly Optivo)

The newsletter is sent using Episerver Campaign (formerly optivo® broadmail), an e-mail marketing software application provided by Episerver GmbH, Wallstraße 16, D-10179 Berlin. The e-mail addresses of our newsletter recipients, as well as their other data described in this policy, are stored on Episerver's servers in data centers within Germany and are subject to the EU General Data Protection Regulation as well as supplementary German data protection law. Episerver uses this information to send and analyze the newsletter on our behalf. Furthermore, Episerver may use the data to optimize or improve its own services, e.g. to technically optimize the dispatch and presentation of the newsletter. However, Episerver does not use our newsletter recipients' data to write to them itself or pass the data on to third parties. Data security has always been a top priority at Episerver. The comprehensive and valid security concept for the company's omnichannel and e-mail marketing cloud Episerver Campaign is certified in accordance with the internationally recognized ISO 27001 standard. Further information is available at https://www.episerver.de/produkte/plattform/episerver-campaign/sicherheit/ and https://www.episerver.de/legal/privacy-statement

Statistical analysis of newsletters

The newsletters contain a pixel-sized image (tracking pixel), which is retrieved by the Episerver server when the newsletter is opened. In the course of retrieval technical data are collected, including information on your browser or system, your IP address, and the time of retrieval. The information is used to technically improve the services. Statistical surveys include determining whether newsletters are opened, when they are opened, and which links are clicked on. The information serves to identify the reading habits of our users, adapt our content to them, or send different content according to the interests of our users. Your consent to receive a newsletter includes performance measurement. To object to the analysis of the newsletter, send an e-mail to multimedia@huss-verlag.de

18.2 Logistics jobs, logistics dictionary, logistics lexicon

In these three areas on the Logistik-Heute.de website, we work together with the company logistik jobs GmbH, Hegelstraße 39 in 39104 Magdeburg. We integrate these offers into the website via so-called iFrame. The provider does not set any cookies. You can view the data protection provisions of logistik jobs GmbH as follows: Dictionary: logistik-woerterbuch.de/index_datenschutz.php | Lexicon: lexikon- logistik.de/index_datenschutz.php | Job exchange: logistik-jobs.de/content_datenschutz.php

18.3 GBI-Genios article archive

We work together with GBI-Genios Deutsche Wirtschaftsdatenbank GmbH (Genios GmbH), Freischützstraße 96, D-81927 Munich, which operates the article archive of the magazine LOGISTIK HEUTE as a service provider on our behalf. Genios GmbH only sets functional cookies within the archive and also has its own data protection policy, which you can view here https://www.genios.de/popup/datenschutz

18.4 Revive ad server

Our websites and apps use the "ad server" software Revive for the integration and anonymous statistical analysis of advertisements (banners). Personal data are not collected, processed, or stored via Revive. The legal basis for the use of the Revive ad server is Art. 6 (1f) GDPR.
In order to control and measure the display of advertisements, Revive places a cookie on your computer if you have cookies enabled in your browser. You can disable the placing of cookies in your browser settings or by using an advertising blocker, which may, however, lead to permanently restricted use of this and other websites.

Revive (OpenX): https://www.revive-adserver.com/
https://www.revive-adserver.com/privacy/

18.5 Google Ad Manager (formerly DoubleClick for Publishers)

The Google Marketing Platform / Google Ad Manager service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") is used on our website for the purpose of analysing, optimising and economically operating our online offering.
We use Google "Ad Manager" to deliver and optimise advertisements. This web analysis service makes it possible to measure the delivery of adverts on this website, e.g. the number of clicks on an advert or how often an advert was delivered to an individual page visitor. For this purpose, Google uses cookies to present adverts on our website and to collect statistical information about visits to our website (e.g. browser used, operating system, previously visited page, IP address, date/time).

This is done by means of a pseudonymous identification number (pID), which is assigned to the user's browser. This pID enables the service to recognise which advertisements have already been displayed to the user and which have been accessed. The data is used to display adverts across websites by enabling Google to identify the pages visited.

The information generated is transmitted by Google to a server in the USA for analysis and stored there. Google will only transfer the data to third parties on the basis of legal regulations or as part of order data processing. Under no circumstances will Google combine your data with other data collected by Google.

Recipients of the data are/may be
    Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
    Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
    Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

The processing of user data is based on consent within the meaning of Art. 6 para. 1 (a) GDPR. The user can prevent the setting of cookies at any time by means of a setting in the consent management tool or by means of a corresponding setting in the browser used and thus object.
Users can find out exactly where Google data centres are located here: https://www.google.com/about/datacenters/inside/locations/

Users can find further information on the use of data by Google, as well as setting and objection options, in Google's privacy policy at https://policies.google.com/technologies/ads and in the settings for the display of advertisements by Google at https://adssettings.google.com/authenticated
Data processing conditions for Google advertising products: Information on the services Data processing conditions between controllers and standard contractual clauses for third country transfers of data: https://business.safety.google/adscontrollerterms

19. data protection settings

You can obtain an overview of all the tools and cookies we use as well as a cancellation option by clicking on the "Cookie settings" link (in the website footer) on the respective domain page.

You can make data protection settings via a link in the website footer ("Cookie settings") or in the respective cookie consent query window ("About settings").

The European Commission provides a platform for out-of-court online dispute resolution (ODR platform) at https://ec.europa.eu/consumers/odr/. We would like to point out that we do not participate in dispute resolution proceedings before a consumer dispute resolution body.

Status: October 2024