We take the protection of your personal data very seriously. You can learn about the purposes we use your data for when you visit our website in the following Privacy Notice. If you still have queries related to how we handle your personal data, please contact our data protection officer. Our Privacy Notice is subject to modification to account for ongoing technological advancement, changes to our services, legal bases and other grounds. We reserve the right to amend this Privacy Notice at any time and kindly ask that you regularly check it for updates.
Name and address of the data controller
The data controller as per the European General Data Protection Regulation (GDPR) and other applicable national data protection regulations valid in the member states and other data protection provisions is:
Jahreszeiten Verlag GmbH
Harvestehuder Weg 42
20149 Hamburg
Phone +49/40/2717-0
Fax +49/40/2717-20 56
Email jahreszeitenverlag@jalag.de
Website: https://jalag.de
General information
Der Begriff der personenbezogenen Daten ist in § 4 Nr. 1 der Europäischen Datenschutzgrundverordnung (DSGVO) The term ‘personal data’ is defined as follows in Art. 4(1) of the European General Data Protection Regulation (GDPR). Accordingly, ‘personal data’ means any information relating to an identified or identifiable natural person. This entails, for example, your real name, address, phone number and date of birth. In the absence of any provisions to the contrary in the following paragraphs, your personal data shall not be collected, processed or used when your use our website. When you visit our website, certain information is transferred to our servers, such as your IP address, type and version of the web browser used, the operating system used, the website you accessed our website from and the time of your visit. We are not able to use this data to identify individual users. We solely analyse this information for statistical purposes and only use it to improve the appeal, content and features on our website.
Legal bases for the processing of personal data
If we obtain consent from the data subject for the processing of personal data, the respective processing takes place on the legal basis of Art. 6(1) lit. a GDPR. Art. 6(1) lit. b GDPR provides the legal basis for processing of personal data necessary for the performance of a contract to which the data subject is party. This also applies to processing that is necessary to take steps prior to entering into a contract. If the processing of personal data is required to fulfil statutory obligations to which we are subject, Art. 6(1) lit. c GDPR shall serve as the legal basis.
If the vital interest of the data subject or of another natural person necessitates the processing of personal data, this processing takes place on the legal basis of Art. 6(1) lit. d GDPR. If we are required to process your personal data to safeguard our own legitimate interest or the legitimate interest of a third party, and this interest outweighs the interests, fundamental rights and freedoms of the data subject, Art. 6(1) lit. f GDPR serves as the legal basis for this processing.
Data erasure and retention periods
The data subject’s personal data must be erased or blocked when it is no longer required in relation to the purposes for which it was collected. However, the storage of personal data may be permissible for compliance with legal obligations issued by the national or European legislator in the form of Union directives, laws or other legal provisions to which the controller is subject. In this case, your data will only be blocked or erased once the specified statutory retention period expires, provided continued storage is not required to conclude a contract or fulfil contractual duties.
Data security
We have implemented extensive technical and organisational measures to protect your data against unintentional or intentional tampering, loss, destruction or unauthorised third-party access. Our security procedures are regularly reviewed and updated in line with technological advancements.
Your rights If we process your personal data, you are considered the data subject according to the GDPR, and you are therefore entitled to assert the following rights against the controller:
You are entitled to request confirmation from the data controller on whether your personal data is processed by us.
- Right to information
If this processing occurs, you are entitled to request the following information from the controller:
(1) the purposes for which your personal data is processed;
(2) the categories of personal data processed by us;
(3) the recipients or categories of recipients to whom the personal data has been or will be disclosed;
(4)the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
(5) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing;
(6) the right to lodge a complaint with a supervisory authority;
(7) all available information about the origin of the personal data where the personal data is not collected from the data subject;
(8) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
You are also entitled to obtain information on whether personal data related to you is transferred to a third country or to an international organisation. In this case, you shall have the right to be informed of the appropriate safeguards relating to the transfer as per Art. 46 GDPR.
2. Right to rectify
You reserve the right to demand the rectification of any inaccurate personal data and/or the completion of incomplete personal data relating to you stored by us. The controller must ensure this request is executed without undue delay.
3. Right to restrict data processing
Where one of the following grounds applies, you can demand that we restrict processing of your personal data:
(1) you contest the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data;
(2) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead;
(3) the controller no longer needs the personal data for the purposes of the processing, but you require this data for the establishment, exercise or defence of legal claims, or;
(4) you have objected to processing pursuant to Art. 21(1) GDPR and the verification whether the legitimate grounds of the controller override yours is pending.
If processing of your personal data is restricted, this data – with the exception of the storage thereof – shall only be processed with your consent or to assert, exercise or defend against legal claims, to protect the rights of another natural or legal person, or for significant grounds in the public interest of the European Union or a Member State.
If the processing is restricted in accordance with the above provisions, you shall be contacted by the data controller prior to the removal of the respective restriction.
4. Right to erasure
a) Erasure obligation
You have the right to obtain from the controller the erasure of personal data concerning you without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:
(1) the personal data concerning you is no longer required for the purposes for which it was collected or otherwise processed;
(2) you withdraw your consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2), and where there is no other legal ground for the processing;
(3) you object to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2);
(4) the personal data concerning you has been unlawfully processed;
(5) the personal data concerning you has to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
(6) your personal data has been collected in relation to the offer of information society services referred to in Article 8(1).
b) Disclosures to third parties
Where the controller has made your personal data public and is obliged pursuant to 17(1) GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers, which process the personal data, that the data subject has requested the erasure by such controllers of any links to, or copies or replication of, this personal data.
c) Exceptions to the above
The data subject shall not be entitled to demand erasure if processing is deemed necessary:
(1) to exercise our right to freedom of speech and information;
(2) for compliance with a legal obligation in Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest
or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the area of public health as per Art. 9(2) lit. h and i GDPR in addition to Art. 9(3) GDPR;
(4) for archiving, scientific or historical research purposes or statistical purposes in the public interest pursuant to Art. 89(1) GDPR, provided the right stipulated under a) does not potentially render impossible or seriously adversely affect the realisation of the objectives of this processing, or
(5) to assert, exercise of defend legal claims.
5. Right to notification
If you have exercised your right to rectification, erasure or to restrict processing against the controller, the controller must inform all recipients who received your personal data of
this corresponding rectification or erasure of the data or the restriction of processing unless this proves impossible or involves disproportionate effort.
Furthermore, you are also entitled to receive information on the recipients of your personal data from the controller.
6. Right to data portability
You are entitled to the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. Furthermore, you are also entitled to the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, where the processing is based on consent pursuant
(1) to Art. 6(1) lit. a GDPR and Art. 9(2) lit. a GDPR or on a contract pursuant to Art. 6(1) lit. b GDPR and
(2) and the processing is performed through an automated process.
In asserting this right, you also have the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided this does not adversely affect the rights and freedoms of others.
The right to data portability does not apply to processing of personal data required for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
7. Right to object
You reserve the right to lodge an objection to the processing of your personal data at any time for grounds pertaining to your personal situation on the legal basis of Art. 6 (1) lit. e or f GDPR; this also applies to any profiling that takes place on the basis of these provisions.
If you lodge an objection, the controller shall no longer process your personal data, unless it is able to provide compelling and legitimate grounds for continued processing that override your interests, rights and liberties, or the processing takes place in order to assert, exercise or defend legal claims.
If your personal data is processed for the purpose of direct advertising, you are entitled to object to any processing of your personal data that takes place for this sort of marketing at any time; this also applies to profiling, provided it is linked to the direct advertising.
If you lodge an objection to the processing of your data for direct advertising purposes, we shall no longer process your personal data for these purposes.
Furthermore, in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may also exercise your right to object by automated means using technical specifications.
8. Right to revoke consent granted in a declaration of consent under data protection law
You reserve the right to revoke consent granted in a declaration of consent under data protection law at any time. In this case, any processing of personal data that occurs prior to the revocation shall remain lawful.
9. Automated individual decision-making, including profiling
You also have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
This shall not apply if the decision
(1) is necessary for entering into, or performance of, a contract between yourself and the controller;
(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or;
(3) is based on your explicit consent.
However, these decisions must not be based on special categories of personal data as per Art. 9(1) GDPR, provided Art. 9(2) lit. a or g GDPR do not apply and adequate measures have been taken to safeguard your rights, freedoms and legitimate interests.
External data protection officer
If you have any queries related to data protection, please contact our external data protection officer:
Personal/confidential
Frau Daniela Schott
Consultant Datenschutz
Phone.: +49 (0)40 790 235-240
Email: dschott@intersoft-consulting.de
Changes to this Privacy Notice
The data usage terms listed above and this Privacy Notice are subject to modification to account for changes to the internet or our services. All changes will be announced in good time on this website. We recommend that you regularly visit this website to check for updates to our Privacy Notice.