Information about data protection

Privacy Policy

We are highly committed to protecting your privacy. Hence, we would like to provide information to you hereinafter about the nature and purpose of the use of your personal data while you are on our website. If you have any further questions concerning data protection, feel free to contact our Data Protection Officer.
Adaptation of our privacy policy may be required as a result of continuous further technological developments as well as modifications of our services and of the legal situation, and for other reasons. Therefore, we reserve the right to amend this privacy statement at any time and ask you to keep up with the status quo on a continuous basis.

Name and address of controller
The controller, within the scope of the General Data Protection Regulation and other national data protection regulations of EU member states as well as other data protection provisions, is:

Hatje Cantz Verlag GmbH
Mommsenstraße 27
10629 Berlin
Germany
Tel.: +49 30 3464678-00
E-Mail: contact@hatjecantz.de
Website: www.hatjecantz.de

Basic information
The meaning of “personal data” is defined in Art. 4 no 1 of the General Data Protection Regulation (GDPR). According to the new regulation, personal data includes all information that refers to an identified or identifiable natural person. This can include, for example, your rightful name, your address, your telephone number or your date of birth.
Unless otherwise specified within the following sections, in principle, we do not collect, process or use personal data while you are using our website.
When browsing our website, some information is transmitted, such as the IP address, the type and version of the web browser used, the operating system used, the web page you came from and the time of the query. We are unable to use this information to identify the individual user. The information is analyzed by us only for statistical purposes and is used exclusively to improve the attractiveness, content and functionality of our websites.

Legal basis for the processing of personal data
Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) is the legal basis for us to obtain the consent of the data subject for processing of personal data.
When processing personal data necessary for the performance of a contract of which the data subject is a party, Art. 6 para. 1 lit. b DSGVO is the legal basis. This also applies to processing operations required to carry out pre-contractual actions.
Where processing of personal data is required to fulfill a legal obligation that is subject to our company, Art. 6 para. 1 lit. c DSGVO is the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d DSGVO is the legal basis.
If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and privileges of the data subject do not prevail over the primary interest, Art. 6 para. 1 lit. f DSGVO is the legal basis for processing.

Data deletion and duration of storage  
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage has elapsed. In addition, such storage may be provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for concluding or fulfilling the contract.

Contact
You have the possibility to contact us via our e-mail address. Of course, we will only use the personal data transmitted to us for the purpose for which you provide us with these when contacting us.
For querying inputs that are not required for a contact, we always mark these as optional. This information serves to concretize your request and to improve the handling of your request. A statement of this information is expressly provided on a voluntary basis and with your consent. With respect to this information relating to communication channels (for example, e-mail address, telephone number), you also agree that we may also contact you via this communication channel to answer your request.
Obviously, you are free to withdraw this consent at any time in the future. Please contact our data protection officer, whose contact details are provided below.

Newsletter
To register for our newsletter, we use the so-called double opt-in procedure. This means that after stating your e-mail address, we will send you a confirmation e-mail to the specified e-mail address asking you to confirm that you wish to receive the newsletter. If you do not confirm within 24 hours your registration will be automatically deleted. If you confirm your wish to receive the newsletter, we will save your e-mail address until you unsubscribe from the newsletter. The sole purpose of the storage is to send you the newsletter. Furthermore, we store your IP addresses and the times when you register and confirm, in order to prevent misuse of your personal data.
The e-mail address alone is the only obligatory part for the transmission of the newsletter. The specification of further, separately marked information is voluntary and is used solely for personalization of the newsletter. This data will also be completely deleted upon revocation.
You can withdraw your consent to the sending of the newsletter at any time. You can trigger the revocation by clicking on the link provided in each newsletter e-mail, by e-mail to the address or by contacting the data protection officer. Your data will not be disclosed to third parties.
We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons, also called tracking pixels. These are one-pixel image files that link to our website, allowing us to evaluate your user behavior. This is done by collecting web beacons, which are assigned to your e-mail address and linked with your own ID. The links within the newsletter contain these too. The data is collected exclusively pseudonymized, so the IDs are not linked to your other personal data, so a direct personal reference is excluded.
The information collected in this way is stored by the newsletter provider on its server in Germany. You can object to this tracking at any time by clicking on the separate link provided in each e-mail or by contacting us via the contact channels. Such tracking is not possible even if you have disabled the display of images in your e-mail program by default. However, in this case the newsletter will not be displayed completely and you may not be able to use all the features.
If you display the images manually, the above tracking is carried out.

Data transmission
We will not transfer your data to third parties unless we are legally obliged to do so, or the data transfer is necessary for the execution of the contractual relationship, or you have previously expressly consented to the disclosure of your data. External service providers and partner companies, such as online payment providers or the shipping company commissioned with the delivery will only receive your data if this is necessary for the processing of your order. In these cases, however, the amount of data transmitted is limited to the minimum required. With respect to our service providers accessing your personal data, we ensure that they comply with the provisions of the data protection laws in the same manner. Please also note the respective privacy policy of the provider. The respective service provider is responsible for the content of third-party services, whereby we check the rationality of the services for compliance with legal requirements.

Online Orders – Shop
When you place an order online on our website, we collect various data required for the conclusion of the contract. The legal basis is the conclusion and execution of a contract pursuant to Art. 6 para. 1 b DSGVO. The data is stored for the duration of the contract and according to legal obligations. For payments, we use various payment service providers, which are always identified and directly accept your input and, thus, are recipients of your personal data collected relating to the payment process. The legal basis for the intervention payment service providers is the execution of contracts in accordance with Art. 6 para 1 b DSGVO. The storage for the purpose of payment is made for the duration of the payment.

Participation in sweepstakes
If you participate in sweepstakes, we will collect information necessary to conduct the Sweepstakes. These are usually an individual contest entry (for example, a comment or a photo), as well as name and contact details. It may be that we pass on your data to our raffle partners, e.g. to give you the prize. The data processing and data transfer may vary depending on the competition and is, therefore, described in detail in the respective conditions of participation. Participation in the raffle and the associated data collection is, of course, voluntary. The legal basis for data processing is your consent in accordance with Art. 6 (1) a DSGVO. Your data will be deleted following the end of the competition.

Data security
We have taken extensive technical and operational safeguards to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.

Cookies
In order to improve our website and for you to make the best use possible of it, whilst also for advertising purposes, we use cookies. Cookies are small text files that are stored on your computer when you visit our website and allow you to reassign your browser. Cookies store information, such as your language setting, the duration of your visit to our website or your entries there. This avoids having to re-enter all required data every time it is used. In addition, cookies enable us to recognize your preferences and align our website with your interests.
Most browsers accept cookies automatically. If you want to prevent the storage of cookies, you can choose "do not accept cookies" in the browser settings. If you wish detailed information on how this works, you can refer to the instructions of your browser manufacturer. Cookies that are already stored on your computer can be deleted at any time. We point out, however, that our web site may be of limited use if cookies are not enabled.

First-party cookies
This type of cookies is set by the website that the user visits. Only this website may read information from the cookies.

Third-party cookies
Third party cookies are set by organizations that are not operators of the website the user visits. These cookies are used, for example, by marketing companies.

Session cookies
Session cookies are temporary cookies that are stored in the user's Internet browser until the browser window is closed and the session cookies are deleted.

Persistent cookies
Persistent cookies are used for repeat visits and stored in the user's browser for a specified period of time (typically 1 year or more). These cookies will not be deleted when the browser is closed. This type of cookie is used to reuse a user's preferences when he returns to the page.

Social Bookmarks
So-called social bookmarks (e.g. from Facebook, Twitter and Instagram) are integrated on our website. Social bookmarks are Internet bookmarks that allow users of such a service to collect links and news items. These are only included on our website as a link to the corresponding services. After clicking on the integrated graphic, you will be redirected to the page of the respective provider, and only then will user information be transmitted to the respective provider. For information on the handling of your personal data when using this website, please refer to the respective privacy policy of the provider.

Twitter advertising
Usage-based online advertising also uses Twitter's tracking code (Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA). Basically, a non-reversible and non-personal checksum (hash value) is generated from your usage data, which can be transmitted to Twitter for analysis and marketing purposes. A Twitter cookie is set. It collects information about your activities on the website (e.g. surfing behavior, visited subpages, etc.). For the geographical control of advertising, your IP address is stored and used.

For more information on the purpose and scope of the data collection and further processing and usage of the data, as well as the privacy settings, please refer to Twitter’s privacy policy.

Social plugins
This website uses social plugins of the provider(s)

- Facebook (Operator: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA)
- Twitter (Operator: Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA)
- Instagram (Operator: Instagram LLC, Represented by Kevin Systrom and Mike Krieger, 1601 Willow Rd, Menlo Park CA 94025, USA)

By default, these plugins collect data from you and send it to the servers of the respective provider. To protect your privacy, we have taken technical measures to ensure that your information cannot be collected by the providers of the plug-in without your consent. When a page is called up, on which the plugins are integrated, these are initially deactivated. Only by clicking on the respective symbol are the plugins activated, and you give your consent that your data will be transmitted to the respective provider.

After activation, the plugins also record personal data such as your IP address and send it to the servers of the respective provider, where they are stored. In addition, activated social plug-ins set a cookie with a unique identifier when the relevant website is called up. This allows providers to create profiles of their usage behavior. This happens even if you are not a member of the social network of the respective provider. If you are a member of the provider's social network and you are logged into the social network when browsing this website, your data and information about the visit to this website may be linked to your profile on the social network. We have no influence on the exact scope of the data collected by you from the respective provider. For more information on the scope, nature and purpose of the data processing and rights and settings options for the protection of your privacy, please refer to the privacy policy of the respective provider of the social network. These are available at the following addresses:

Facebook: https://www.facebook.com/policy.php
Twitter: https://twitter.com/privacy/
Instagram: https://help.instagram.com/155833707900388

Google Analytics and Conversion Tracking
This website uses Google Analytics. On behalf of the operator of this website, Google will evaluate your use of the website to compile reports on website activity and provide other services related to website activity and internet usage to the website operator.
Since the vote of the Hamburg commissioner for data protection and freedom of information with Google based on the decision of the Dusseldorf circle for the privacy-compliant design of analysis methods for measuring range in Internet offers a privacy-compliant, and complaint-free use of Google Analytics is possible under certain conditions. Of course, we adhere to these requirements. In particular, we point out that on this website Google Analytics has been extended by the code "gat._anonymizeIp ();" in order to ensure an anonymous collection of IP addresses (so-called IP-Masking). Your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. The IP address provided by Google Analytics as part of Google Analytics will not be merged with any other Google data.
For more information about Terms of Use and Privacy see
https://www.google.com/analytics/terms/en.html or https://www.google.com/intl/en/policies/.
Google Analytics uses so-called "cookies"; text files that are stored on your computer. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. You can prevent the storage of cookies by a corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser add-on.
If you click here, an opt-out cookie will be set to prevent future collection of your data when you visit this site: disable Google Analytics.

In addition, we use Google Conversion Tracking in connection with Google Analytics. This allows us to capture the behavior of our website visitors. For example, we see how many PDFs were downloaded on our website or how often the contact form was filled out. We also know how many clicks on ads from external sources (AdWords, LinkedIn, Xing, Bing) have had users redirected  to our website.

Your rights
The following list includes all rights of the data subject according to the GDPR. Rights that have no relevance for your own website need not be mentioned. In that regard, the listing can be shortened.
If your personal data is processed, this means that you are a data subject under GDPR, and you have the following rights from the controller:

Right of access by the data subject
You may ask the person in charge to confirm if personal data concerning you is processed by us.
If such processing is available, you can request information from the person responsible about the following information:
(1) the purposes for which the personal data is processed;
(2) the categories of personal data being processed;
(3) the recipients or categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;
(4) the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;
(5) the existence of a right to rectification or deletion of personal data relating to you, a right to restriction of processing by the controller or a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) all available information on the source of the data if the personal data is not collected from the data subject;
(8) the existence of automated decision-making including profiling under Article 22 (1) and (4) GDPR and, at least in such cases, meaningful information about the logic involved, and the scope and intended impact of such processing on the data subject.

You have the right to request information about whether your personal information relates to a third country or an international organization. In this connection, you can request the appropriate guarantees in accordance with. Art. 46 GDPR relating to the transfer.
For data processing for scientific, historical or statistical research purposes:
This right of access may be limited to the extent that it is likely to render impossible or seriously affect the fulfilment of the research or statistical purposes and the restriction is necessary for the performance of the research or statistical purposes.

Right to rectification
You have a right to rectification and / or completion to the controller, if the personal data you process is incorrect or incomplete. The responsible person must make the correction without delay.
For data processing for scientific, historical or statistical research purposes:
The right to rectification may be limited to the extent that it is likely to render impossible or seriously affect the fulfilment of research or statistical purposes and the restriction is necessary for the performance of research or statistical purposes.
Right to restriction of processing
You may request the restriction of the processing of your personal data under the following conditions:
(1) if you dispute the accuracy of your personal information for a period of time that enables the controller to verify the accuracy of your personal information;
(2) the processing is unlawful and you refuse the deletion of the personal data and instead demand the restriction of the use of the personal data;
(3) the controller no longer needs the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims; or
(4) if you have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet certain whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State.

If the restriction of the processing is limited in accordance with the above-mentioned conditions, you will be informed by the person responsible before the restriction is lifted.

For data processing for scientific, historical or statistical research purposes:
The right to restriction of processing may be restricted to the extent that it is likely to render impossible or seriously affect the fulfilment of the research or statistical purposes and the restriction is necessary for the performance of the research or statistical purposes.

Right to restriction of processing
You may request the restriction of the processing of your personal data under the following conditions:
(1) if you contest the accuracy of your personal information for a period of time that enables the controller to verify the accuracy of your personal information;
(2) the processing is unlawful and you refuse the deletion of the personal data and instead demand the restriction of the use of the personal data;
(3) the controller no longer needs the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims; or
(4) if you have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet certain whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State.

If the restriction of the processing is limited in accordance with the above-mentioned conditions, you will be informed by the person responsible before the restriction is lifted.

For data processing for scientific, historical or statistical research purposes:
Its right to restriction of processing may be restricted to the extent that it is likely to render impossible or seriously affect the fulfilment of the research or statistical purposes and the restriction is necessary for the performance of the research or statistical purposes.

Right to deletion

Deletion obligations
You may require the controller to delete your personal information without delay, and the controller is required to delete that information immediately if one of the following applies:
(1) Personal data concerning you is no longer necessary for the purposes for which they were collected or otherwise processed.
(2) You withdraw your consent, to which the processing acc. Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. DSGVO and there is no other legal basis for processing.
(3) According to. Art. 21 para. 1 DSGVO objection to the processing and there are no prior justifiable reasons for the processing, or you  oppose to processing in accordance with Art. 21 para. 2 DSGVO.
(4) Your personal data has been processed unlawfully.
(5) The deletion of personal data concerning you shall be required to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.
(6) The personal data concerning you was collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.

Information to third parties
If the person in charge has made the personal data concerning you public as per Article 17 (1) of the GDPR, it shall take appropriate measures, including technical means, to inform data controllers who process the personal data that you have been identified as being affected, taking into account available technology and implementation costs and persons requesting deletion of all links to such personal data or of copies or replications of such personal data.

Exceptions
The right to deletion does not exist if the processing is necessary
(1) to exercise the right to freedom of expression and information;
(2) to fulfill a legal obligation that requires processing under Union or Member State law to which the controller is subject or for the performance of a task of public interest or in the exercise of official authority conferring on the controller has been;
(3) for reasons of public interest in the field of public health pursuant to Art. 9 (2) lit. h and i and Art. 9 (3) GDPR;
(4) for archival purposes of public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1) GDPR, to the extent that the law referred to in subparagraph (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
(5) to assert, exercise or defend legal claims.

Right to information
If you have the right of rectification, deletion or restriction of processing to the controller, he / she is obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless: this proves to be impossible or involves a disproportionate effort.
You have a right to the person responsible to be informed about these recipients.

Right to data portability
You have the right to receive personally identifiable information you provide to the controller in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another person without hindrance by the person responsible for providing the personal data, provided that
(1) the processing on a consent in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a DSGVO or on a contract in accordance with Art. 6 para. 1 lit. b DSGVO is based and
(2) the processing is done by automated means.
In exercising this right, you also have the right to obtain that your personal data relating to you is transmitted directly from one person to another, where technically feasible. Privileges and rights of other persons may not be affected.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public’s interest or in tasks of official authority delegated to the controller.

Right to object
You have the right to object at any time, for reasons that arise from your particular situation, in relation to the processing of your personal data, which, pursuant to Art. 6 para. 1 lit. e or f DSGVO you object to; this also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you unless he can demonstrate convincing legitimate grounds for processing that outweigh your interests, rights and privileges, or the processing is for the purpose of enforcing, exercising or defending legal claims.

If the personal data relating to you is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling where it is associated with direct mail of this nature.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

Regardless of Directive 2002/58 / EC, you have the option, in the context of using information society services, of exercising your right to object through automated procedures that use technical specifications.

For data processing for scientific, historical or statistical research purposes:
You also have the right, for reasons that arise from your particular situation, in processing personal data relating to you for scientific or historical research purposes or for statistical purposes contradicting Art. 89 para. 1 GDPR.

Its right of objection may be limited to the extent that it is likely to render impossible or seriously affect the fulfilment of the research or statistical purposes, and that the restriction is necessary for the performance of the research or statistical purposes.

Right to withdraw the data protection consent declaration
You have the right to withdraw your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out up until the point at which consent is withdrawn.
Automated decision on an individual basis including profiling
You have the right not to be subjected to a decision based solely on automated processing - including profiling - that will have legal effect or,  likewise, affect you in a similar manner. This does not apply if the decision
(1) is required for the conclusion or performance of a contract between you and the controller,
(2) is permitted by Union or Member State legislation to which the controller is subject, and where such legislation contains appropriate measures to safeguard your rights and privileges and legitimate interests, or
(3) with your express consent.
However, these decisions must not be based on special categories of personal data under Art. 9 (1) GDPR, unless Art. 9 (2) lit. a or g DSGVO applies and reasonable measures have been taken to protect the rights and privileges as well as your legitimate interests.

With regard to the cases referred to in (1) and (3), the person responsible shall take appropriate measures to uphold the rights and privileges and their legitimate interests, including, at least, the right to obtain the intervention of a person by the controller, to express his / her own position and be able to challenge the decision.
Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority - in particular in the Member State of its residence, place of work or place of alleged infringement - if you believe that the processing of the personal data concerning you contravenes the DSGVO.

The supervisory authority to which the complaint is submitted shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.

External Data Protection Officer
For questions about data protection, please contact our external data protection officer:
Personal / Confidential
Mr. Matthias Lindner

c/o intersoft consulting services AG
Beim Strohhause 17

20097 Hamburg

Changes to the privacy policy
These established data usage regulations and data protection regulations shall continue to be updated in the course of the further development of the internet or what we offer. Changes will be communicated in due course on this website. To keep up-to-date about the current status of our data usage regulations, this page should be visited on a regular basis.




Recommend this page