Privacy policy
With this privacy policy, we would like to inform you about the scope of the processing of your personal data (hereinafter referred to as "Data").
1. Data controller
The data controller responsible for data processing according to the provisions of the General Data Protection Regulation (GDPR) is:
Fachverlag Hans Carl GmbH
Andernacher Str. 33a
90411 Nuremberg
Germany
Phone: +49 (0)911/952 85-0
Website: http://www.carllibri.com
E-mail: info[at]hanscarl.com
2. Our data protection officer's contact details
You can contact our data protection officer at:
3. General information on data processing
We process data as part of our business and website operations. This also includes disclosure through transmission to third parties and possibly to so-called third countries outside the European Union (“EU”) and the European Economic Area (“EEA”). Insofar as we transmit data outside the EU or the EEA, we have marked this accordingly below.
4. Data processing
The specific data concerned, reasons for processing, legal bases, recipients and, if applicable, transfers to third countries are listed below:
a) Log file when visiting the website
We log your website visit. We process:
- Name(s) of our accessed website(s)
- Date and time of the access
- The amount of data transferred
- Browser type and version
- Your operating system
- The referrer URL (the previously visited website)
- Your IP address
- The requesting provider
According to Art. 6 para. 1 f) GDPR, the legal basis for data processing is our overriding legitimate interest in the ongoing provision and security of our website.
The log file is deleted after seven days, unless it is required to prove or clarify specific legal violations that have become known within the retention period.
b) Hosting
To provide our online presence, we use the services of web hosting providers who process the above-mentioned and all data to be processed in connection with the operation of this website (log file when visiting the website) on our behalf.
According to Art. 6 para. 1 f) GDPR , the legal basis for data processing is our overriding legitimate interest in the provision of our website.
c) Contact
If you contact us, we will process the following data from you for the purpose of processing and handling your request: Name, contact details – if you have provided them – and your message.
The legal basis for data processing is our obligation to fulfill the contract and/or to fulfill our pre-contractual obligations in accordance with Art. 6 para. 1 b) GDPR and/or our overriding legitimate interest in processing your request in accordance with Art. 6 para. 1 f) GDPR.
d) Contract processing
We process your order data to execute the contractual relationship between you and us.
Pursuant to Art. 6 para. 1 b) GDPR, the legal basis for data processing is the fulfilment of our contractual obligations and, in individual cases, the fulfilment of our legal obligations pursuant to Art. 6 para. 1 c) GDPR.
We transmit your address data to the company commissioned with delivery. If necessary for the execution of the contract, we will additionally transmit your email address or your telephone number to the company commissioned with delivery for the purpose of coordinating a delivery date (Avis).
We will submit our transaction data (name, date of order, method of payment, date of dispatch and/or receipt, amount and payee, and if applicable, bank details or credit card information) to the payment service responsible for processing the payment.
e) Customer account
In connection with the opening and use of a customer account, we process your inventory data (name, address, email address, bank details) as well as your user data (username, password). This allows you to manage your orders and we can identify you as a customer. The legal basis of this data processing is your consent in accordance with Art. 6 para. 1 lit a) GDPR.
f) reCAPTCHA
To protect the input forms on our websites from spam and abuse, we use the external service reCAPTCHA. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google"). Data may also be transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 in the USA. reCAPTCHA makes it possible to differentiate between inputs of human origin and those that are improperly inputted by automated software (also known as bots).
When using the service, the following data is transmitted to the Google server in the USA:
- Referrer URL
- User's IP address
- User's input behaviour as well as mouse movements in the area of the "reCAPTCHA" checkboxes
- Google account: If the user is logged into their Google account at the same time, this will be recognized and assigned
- Information about the browser used, browser size, browser resolution, browser plugins, language settings, date
- Mouse and touch events within the page
- Scripts and display instructions for the website
- Cookies
Processing is carried out on the basis of our legitimate interest in the security of our website according to Art. 6 para. 1 f) GDPR.
There is no adequacy decision by the EU Commission for data transfers to the USA. Google ensures an appropriate level of data protection through the EU standard contractual clauses. A copy of the relevant EU Standard Contractual Clause shall be made available upon request. For this, please contact datenschutz[at]hanscarl.com.
g) Application of cookies
We use "cookies" on our website. Cookies are small text files that are stored on your respective end device (PC, smartphone, tablet, etc.) and saved by your browser.
Information about the specific cookies we use, their providers and purposes can be found in our consent banner. In the cookie banner, you provide your consent to the respective services; you can revoke them or adjust your settings afterwards.
Our consent banner
We use a consent banner to document your selection for certain data processing processes and to meet our data protection obligations. When you visit our website, your cookie preferences will be queried via a banner. We then set a cookie in which data on granted or revoked consent is stored. The data processing takes place to fulfill our legal obligations according to Art 6 para. 1 c) GDPR.
h) Analysis / marketing
aa) Google Services
We use various services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google") on our website. Data may also be transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 in the USA.
There is no adequacy decision by the EU Commission for data transfers to the USA. Google ensures an appropriate level of data protection through the EU standard contractual clauses. A copy of the relevant EU Standard Contractual Clause shall be made available upon request. For this, please contact datenschutz[at]hanscarl.com.
Google Analytics
We use the Google Analytics tracking tool from Google on our website. We use Google Analytics to evaluate your use of the website, to compile reports on the activities within this website and to provide other services associated with the use of the website and thus improve user-friendliness.
When Google Analytics is used, interactions between website visitors are primarily recorded using cookies and systematically evaluated.
We use Google Analytics with the extension "anonymizeIp()". This truncates IP addresses within the Member States of the EU or EEA. If transmission to the servers of Google in the USA takes place, the full IP address will only be transmitted in exceptional cases, where it will be truncated. A direct personal reference is thus generally excluded. In particular, an assignment to the accessed computer or terminal of the website visitor is no longer possible.
The following data is processed through the use of Google Analytics:
- 3 bytes of the IP address of the accessed system of the website visitor (anonymised IP address),
- the website accessed,
- the website from which the user has accessed our website (referrer),
- subpages that are accessed from the website,
- the duration of stay on the website,
- the frequency with which the website is accessed.
According to its own information, Google will not associate your IP address with any other data held by Google.
Legal basis and withdrawal
The legal basis for data processing within the framework of the aforementioned Google services is your prior consent in accordance with Art. 6 para. 1 c) GDPR.
You can withdraw your consent at any time with future effect by adjusting your preferences in our consent banner.
5. Data retention period
We only store personal data for as long as it is necessary for the purposes for which it is processed or you have withdrawn your consent. As far as statutory storage requirements are concerned, the storage period for certain data can be up to 10 years regardless of the processing purposes.
6. Your rights as a data subject
a) Information
On request and at no cost, you may receive information about the personal data that we have stored about you at any time.
b) Correction, erasure, restriction of processing (blocking), objection
In the event that you are no longer happy for your personal data to be stored or if the personal data is no longer correct, then with appropriate notice we will have your data deleted or blocked or make the necessary corrections (to the extent that this is possible, according to the applicable law). The same applies if we should only process data to a limited extent in the future. You have a right of objection in particular in those cases in which your data is required due to the performance of a task that is in the public interest or our legitimate interest to data processing, as well as profiling based thereon. You also have such a right of objection in the case of data processing for the purpose of direct advertising.
c) Right to withdraw consent with future effect
Expressed consent may be withdrawn at any time, applicable for future interactions. Your withdrawal does not affect the legality of the processing up to the point in time of the withdrawal.
d) Data portability
If data processing takes place on the basis of a contract, pre-contractual negotiations, consent or using automated procedures, you have the right to data portability. Upon request, we will provide you with your data in a common, structured and machine-readable format so that you can transfer the data to another data controller if you wish.
e) Restrict the processing of your data
Data from which we are unable to identify the data subject, for example if it has been anonymised for analysis purposes, are not covered by the above rights. Information, deletion, blocking, correction or transfer to another company may be possible with respect to such information if you provide us with additional information that allows us to identify you.
f) Exercising your rights as a data subject and the right to lodge a complaint
If you have any questions about the processing of your personal data, information, correction, blocking, objection or deletion of data or the request to transfer the data to another company, please contact datenschutz[at]hanscarl.com.
You also have the opportunity to lodge a complaint with a supervisory authority about your rights as a data s
g) Exercising your rights as data subject
If you have any questions about the processing of your personal data with regard to information about the data and its correction, blocking, withdrawal or deletion or its transfer to another company, please contact info@hanscarl.com.
August 21, 2024
