Privacy Policy

We take data protection seriously: as a matter of principle, we only process personal data if this is necessary for the provision of a service or offer or if it is provided voluntarily by the user. We also use technical and operational security measures to protect personal data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. We regularly review and modernise these precautions.

If you have applied for a job with us, you will find the necessary data protection information here.

• Inventory data (e.g., names, addresses)
• Contact details (e.g., email, phone numbers)
• Content data (e.g., entries in online forms)
• Payment data (e.g., bank details, invoices, payment history)
• Contract data (e.g., subject matter of the contract, term)
• Usage data (e.g., websites visited, interest in content, access times)
• Meta/communication data (e.g., device information, IP addresses, ID)

We collect the data that is generated when you access our digital offers automatically. Otherwise, we collect data based on your entries or messages or through the use of cookies or similar technologies.

Bereitstellung der Inhalte

• Cookies und ähnliche Technologien
• technische Bereitstellung und Sicherheit
• Unbedingt erforderliche Technologie
• Einbindung von Kartendiensten
• Merkzettel
• Teilen von Inhalten

Produktoptimierung

• Reichweitenmessung
• Nutzungsanalyse

Kommunikation

• Kontakt und Kommunikation
• Anbieter kontaktieren

Werbung für unsere eigenen Produkte

• Direktwerbung
• Suchagent

Werbung durch Dritte

• Eigenvermarktung von Anzeigen
• Fremdvermarktung durch Dritte

If you have given your consent or we are otherwise legally authorized to do so, we will pass on your personal data to service providers (e.g., hosting, marketing, sales partners, payment service providers) for the above-mentioned purposes. In such cases, we comply with the legal requirements and, in particular, conclude appropriate contracts or agreements with the recipients of your data to protect your data.

We transfer personal data to other companies within our group of companies or grant them access to this data for administrative purposes. This transfer of data is based on our legitimate business and economic interests or takes place if it is necessary to fulfill our contractual obligations or if the consent of the data subjects or legal permission has been obtained.

In order to use our digital services, it may be necessary to transfer certain personal data to third countries, i.e. countries where the GDPR does not apply. However, we only allow your data to be processed in a third country if the specific requirements of Art. 44 ff. GDPR are met and thus an adequate level of data protection is guaranteed in that country. This means that the third country must either have an adequacy decision by the European Commission or suitable safeguards in accordance with Art. 46 GDPR or one of the conditions of Art. 49 GDPR. Unless otherwise stated below, we use the currently valid [standard contractual clauses](https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/? uri=CELEX:32021D0914&from=DE “current version of the standard contractual clauses”) for the transfer of personal data to processors in third countries.

In order to protect your privacy and ensure a level of protection appropriate to the risk, we take technical and organizational measures in accordance with legal requirements, taking into account the state of the art, implementation costs, and the nature, scope, circumstances, and purposes of processing, as well as the varying likelihood and severity of threats to the rights and freedoms of natural persons. These measures ensure the confidentiality, integrity, availability, and resilience of your data. This includes, among other things, the use of recognized encryption methods (SSL or TLS) and pseudonymization.

However, we would like to point out that, due to the structure of the Internet, it is possible that the rules of data protection and the above-mentioned security measures may not be observed by other persons or institutions outside our area of responsibility. In particular, unencrypted data disclosed, e.g., by email, may be read by third parties. We have no technical influence on this.

We delete or anonymize your personal data as soon as it is no longer required for the purposes for which we collected or used it.

However, we may still need to store your data until the expiry of the retention obligations and periods imposed by the legislator or supervisory authorities, which may arise from the German Commercial Code, the German Fiscal Code, and the German Money Laundering Act (usually 6 to 10 years). In addition, we may retain your data until the expiry of the statutory limitation periods (i.e., usually 3 years, but in individual cases up to 30 years) if this is necessary for the assertion, exercise, or defense of legal claims. After that, the relevant data will be deleted.

• Information
• Deletion
• Correction
• Objection

You can contact the data protection officer with your request by mail or by email at swmh-datenschutz@atarax.de.

This privacy policy is updated from time to time. The date of the last update can be found at the beginning of this information.

You can obtain an overview of all the tools and cookies we use as well as an option to withdraw your consent by clicking on Privacy settings at the bottom of the website you are visiting.

You will find detailed data protection information below.

If cookies, device identifiers, or other personal data are stored or accessed on your device for processing purposes, this is done on one of the legal bases of Art. 6 GDPR.

In order to be able to provide the telemedia service you have expressly requested, we also take into account the provisions of Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG), in particular the requirement under Section 25 (2) No. 2 TDDDG.

You can find an overview of the technologies used under Privacy settings.

Cookies are text files that contain data from visited websites or domains and are stored by a browser on users' devices. A cookie primarily serves to store information about a user during or after their visit to an online offering. The stored information may include, for example, language settings on a website, login status, a shopping cart, or video interactions. The term “cookies” also includes other technologies that perform the same functions as cookies (e.g., when user information is stored using pseudonymous online identifiers, also known as “user IDs”).

There are the following types of cookies and functions:

• Temporary cookies (also known as session cookies): Temporary cookies are deleted at the latest after a user leaves an online offering and closes their browser.
• Permanent cookies: Permanent cookies remain stored even after the browser is closed. This allows, for example, the login status to be saved or preferred content to be displayed directly when the user visits a website again. Similarly, the interests of users, which are used for reach measurement or marketing purposes, can be stored in such a cookie.
• First-party cookies: First-party cookies are set and used by us to process user information.
• Third-party cookies: Third-party cookies are mainly used by advertisers (so-called third parties) or other partners to process user information.
• Strictly necessary (also: essential or necessary) cookies: These cookies ensure functions without which these digital offerings could not be used as desired. They may be absolutely necessary for the operation of a website, for example to store logins or other user entries, or for security reasons.
• Analysis and statistics cookies: These cookies enable us to analyze the use of our digital offerings, in particular to measure reach—i.e., clicks, visits, and visitor numbers. The aim is to statistically determine the number of visits and visitors and their surfing behavior (duration, origin) and thus obtain market-wide comparable values. The information collected is evaluated in aggregate form in order to derive improvements and optimizations for our products.
• Marketing and personalization cookies: Cookies are also used to store a user's interests or behavior (e.g., viewing certain content, using functions, etc.) in a user profile. Such profiles are used, for example, to display content to users that corresponds to their potential interests. This process is also referred to as “tracking,” i.e., tracking the potential interests of users. If we use cookies or tracking technologies, we will provide separate information about this in our privacy policy or when obtaining consent.

When our offer is used, we automatically employ essential technologies and process the following information:

• Information about the accessing device and the software used
• Date and time of access
• Websites from which the user accesses our website or which the user visits via our website
• IP address

The collection of these logs and their temporary storage and processing are necessary to ensure system security and integrity (in particular to ward off and defend against attempts at attack or damage) and are carried out in accordance with our legitimate interest (§ 25 (2) No. 2 TDDDG, Art. 6 (1) f GDPR).

The storage period for this log data is usually seven days; for reliable detection of AI bots, it is 30 days. From this point on, this specific server log data is anonymized based on our legitimate interest in statistical evaluation to assess AI bots and their impact on our content (Art. 6 (1) f GDPR).

The legal basis for the aforementioned data processing is our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR.

The following tools and cookies are strictly necessary technologies, i.e., essential for providing our services as requested by the user.

The legal basis for the data processing described below is our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

The Google Tag Manager service is an organizational tool that enables us to control services. The tool only uses the IP address to establish a connection to the server and to function technically. Otherwise, no personal data is processed by the tool itself. Tag Manager ensures that other services are only executed if the conditions (tags) specified in Tag Manager are met. This allows us to ensure, for example, that tools requiring consent are only loaded after you have given your consent. Tag Manager does not access the data processed by the tools.

In order to obtain and store your consent under data protection law, we use the consent management platform from Sourcepoint (Sourcepoint Technologies, Inc., 228 Park Avenue South, #87903, New York, NY 10003-1502, United States). This platform uses strictly necessary cookies to query the consent status and thus display the corresponding content.

The data is stored for a maximum of 13 months.

Die Geolokalisierung und Darstellung unserer Angebote erfolgt mittels OpenStreetMap - Deutschland. Das dazu verwendete Karten-Plugin wird von deutschen Servern geladen. Die Dazu erforderliche Verarbeitung Ihrer IP-Adresse erfolgt mit unserem überwiegenden berechtigten Interesse (Art.6 Abs.1 S.1 lit.f) DSGVO). Sie können dem Einsatz des Karten-Dienstes widersprechen, indem Sie in den Datenschutz-Einstellungen die entsprechende Einstellung vornehmen.

Informationen zur Datenverarbeitung durch OpenstreetMap - Deutschland finden Sie hier.

Sie können bei uns den Merkzettel nutzen, wenn Sie sich Anzeigen merken möchten, in dem Sie bei der jeweiligen Anzeige auf "merken" klicken. Wir verknüpfen das jeweilige Angebot mit Ihrer E-Mail-Adresse, um es unter "Service" anzeigen zu können. Diese Datenverarbeitung erfolgt mit Ihrer Einwilligung (Art.6 Abs.1 S.1 lit.a) DSGVO), die Sie jederzeit durch Löschen der Markierung widerrufen können.

Sie können einen Suchagenten anlegen, der Sie immer dann per E-Mail informiert, wenn neue Angebote zu Ihrer Suche vorliegen. Wenn Sie den Suchagenten für Ihre Suche explizit bestellen, erhalten Sie eine E-Mail mit einem Bestätigungslink zugeschickt. Erst, wenn Sie diesen Link bestätigen, wird Ihre E-Mailadresse zusammen mit Ihren Suchparametern (Versand des Suchagenten) und dem Zeitstempel der Anmeldung (Nachweis Double Opt-In) in der Newsletter-Datenbank gespeichert. Ihre Daten werden an unseren Dienstleister für das Newsletter-Management weitergegeben. Rechtsgrundlage für die vorgenannten Datenverarbeitungsvorgänge sind Art. 6 Abs. 1 S. 1 lit. a DSGVO sowie Art. 6 Abs. 1 S.1 lit. b DSGVO.
Sie können sich von jedem Suchagenten jederzeit abmelden und Ihre Einwilligung in den Versand widerrufen, indem Sie am Ende des jeweiligen Suchagenten einfach den entsprechenden „Abmelden“-Link anklicken.

You have the option of recommending content on our websites via the buttons placed on the content; on mobile devices via the native sharing function. We provide the social networks with content - and no personal data - that is used exclusively to display content. If you use the buttons, we merely link to the page of the respective social media provider. We do not process any of your personal data.

Our website uses the multi-stage measurement method “INFOnline Measurement” from INFOnline GmbH (NFOnline GmbH, Brühler Str. 9, D-53119 Bonn) to determine statistical parameters (page impressions, visits, technical clients) relating to the use of our digital offering. The aim of usage measurement is to statistically determine the number of visits to our website, the number of website visitors, and their surfing behavior—based on a uniform standard procedure—and thus obtain market-wide comparable values. The purpose of data processing is therefore to generate digital performance values (page impressions, visits, and technical clients) in order to be able to track and verify the use of our offerings.

As a member of the Informationsgemeinschaft zur Feststellung der Verbreitung von Werbeträgern e.V. (IVW), usage statistics are regularly updated by the IVW with “page impressions” and “visits” in the IVW report.

As a participant in the agof study “daily digital facts,” the usage statistics of our digital offerings are regularly collected by the Arbeitsgemeinschaft Online-Forschung e.V. (Working Group for Online Research) and the Arbeitsgemeinschaft Media-Analyse e.V. (Working Group for Media Analysis) and published with the “unique user” metric.

Due to the nature and volume of the data collected by INFOnline Measurement, it is not possible to clearly assign a user to a specific person. A JavaScript code (known as a “measurement manager”) is used which, when called up via the user's browser or end device (client), automatically integrates and executes the necessary measurement sensors for anonymous and/or pseudonymous data processing to determine the key figures, based on the consent information from our Consent Management Platform (CMP). INFOnline Measurement is designed as an anonymous system (without customer identification) and as a pseudonymous system (with customer identification).

Type of data
Due to the type and volume of data, the data collected with INFOnline Measurement does not allow a user to be clearly assigned to a specific person. A JavaScript code (known as a “measurement manager”) is used which, when called up via the user's browser or end device (client), automatically integrates and executes the necessary measurement sensors for anonymous and/or pseudonymous data processing to determine the key figures based on the consent information from the consent management platform (CMP) used by the provider for the digital offering. INFOnline Measurement is designed as an anonymous system (without customer identification) and as a pseudonymous system (with customer identification).

Im anonymen Zählverfahren (IOMb) werden keinerlei personenbezogene Daten verarbeitet, insbesondere nicht die IP-Adresse. Sie wird vollständig aus der Kommunikation und Verarbeitung herausgenommen. Dazu verhindert eine Kommunikationsschnittstelle, die sogenannte "Serviceplattform", als Messendpunkt den Austausch der IP-Adresse des Nutzers mit den INFOnline-Systemen im Rahmen der INFOnline-Messung. Die IP-Adresse als personenbezogene Daten wird im Zählprozess auf der Serviceplattform verworfen, bevor der Messaufruf an INFOnline weitergeleitet wird. Es findet auch keine Geolokalisierung über die IP-Adresse statt. Der im Zählverfahren erzeugte Datensatz ist eine reine PI-Datenerhebung.

Bei der pseudonymisierten Messmethode (IOMp) werden mit dem 3rd Party Cookie 'i00' (ioam.de) und dem 1st Party Cookie 'ioma2018', der einen Personenbezug gemäß GDPR hat, folgende Daten erhoben:

• IP-Adresse
  Im Internet benötigt jedes Gerät eine eindeutige Adresse für die Übertragung von Daten, die sogenannte IP-Adresse. Die Speicherung der IP-Adresse, zumindest für eine kurze Zeit, ist aufgrund der Funktionsweise des Internets technisch notwendig. Die IP-Adressen werden vor jeder Verarbeitung um 1 Byte gekürzt und nur anonymisiert weiterverarbeitet. weiterverarbeitet. Die ungekürzten IP-Adressen werden nicht gespeichert oder verarbeitet.
• Eine zufällig generierte Client-Kennung
  Die Reichweitenmessung verwendet zur Erkennung von Computersystemen
  eindeutige Kennungen des Endgerätes, ein "Local Storage Object" (LSO) oder eine "Signatur", die aus verschiedenen automatisch übermittelten Informationen Ihres Browsers erstellt wird. Diese Kennung ist für einen Browser eindeutig, solange das Cookie oder Local Storage Object nicht gelöscht wird. Die Messung der Daten und die anschließende Zuordnung zu der jeweiligen Kennung ist unter Umständen auch möglich, wenn Sie andere Webseiten aufrufen, die ebenfalls das pseudonymisierte Messverfahren der INFOnline GmbH nutzen.

Die folgenden eindeutigen Kennungen können als Hash an die INFOnline GmbH übermittelt werden:

• verkürzte Client-IP oder X-Forwarded-For (XFF)
• Benutzer-Agent (als Hash)

Personenbezogene Daten im Sinne der EU-DSGVO werden für die Messung nur insoweit verwendet, als dass ein JavaScript gegenüber einem Nutzer eingesetzt wird, dem eine individuelle IP-Adresse und eine zufällig generierte Client-Kennung zum Abruf von Webinhalten zugeordnet wurde.

Das anonyme Messverfahren (IOMa) verwendet einen Messsensor (JavaScript), der die Metriken im Browser des Nutzers (LocalStorage (LSO)) berechnet, automatisch verschlüsselt und die aggregierten Nutzungsdaten an eine Kommunikationsschnittstelle, die so genannte "Serviceplattform", überträgt. In der Serviceplattform werden die für die Internetkommunikation notwendigen Identifikatoren (z.B. IP-Adresse des Clients) entfernt und die verschlüsselten, anonymisierten Messdaten um die Geolokalisierung ergänzt und an die zentrale Serverkomponente bei INFOnline übermittelt.

Sofern die erhobenen Messdaten mit einer Geolokation des Browsers angereichert werden, wird eine IP-Adresse ebenfalls nur zum Zweck der Erhebung der Geolokation und der Anreicherung mit den erhobenen Messdaten verwendet. Eine dafür benötigte IP-Adresse wird unmittelbar nach der Anreicherung verworfen.

Während der Implementierungsphase von IOMa wird ein 1st Party Cookie verwendet, um die Zeitstempel (Unix Epoch Timestamp) der letzten Nutzung pro Angebot und pro Seitencode zu speichern. Diese Werte werden als Benchmark für die Bildung zeitbezogener Metriken wie z.B. den Besuch beim Wechsel des HTTP-Ursprungs hinzugefügt. In dem Cookie werden keine weiteren personenbezogenen Daten/IDs gespeichert. Nach der Implementierungsphase sollte es dann gelöscht werden, so dass die Messung dann ganz ohne Cookies erfolgt.

Personenbezogene Daten im Sinne der GDPR werden für die Messung nur insoweit verwendet, als die Nutzung eines JavaScript gegenüber einem Nutzer erfolgt, dem eine individuelle IP-Adresse zum Abruf von Webinhalten zugewiesen wurde.

Insofern verarbeiten wir durch den Einsatz des anonymen Messverfahrens (IOMa) in INFOnline Measurement keine personenbezogenen Daten über Sie dauerhaft.

Datennutzung
Das auf dieser Website eingesetzte Messverfahren der INFOnline GmbH ermittelt Nutzungsdaten. Dies geschieht, um die Leistungswerte Page Impression, Visit und Client zu erheben.

• Geolokalisierung
  Im pseudonymisierten Messverfahren (IOMp) und im anonymisierten Messverfahren (IOMa) erfolgt die Zuordnung eines Webseitenaufrufs zum Ort des Aufrufs ausschließlich auf Basis der anonymisierten IP-Adresse und nur bis auf die geographische Ebene der Bundesländer/Regionen. Aus den so gewonnenen geografischen Informationen kann in keinem Fall ein Rückschluss auf den konkreten Wohnort eines Nutzers gezogen werden.
• Angebotsübergreifende Zusammenführung von Nutzungsdaten
  Die Nutzungsdaten eines technischen Clients (z.B. eines Browsers auf einem Gerät) werden im pseudonymisierten Messverfahren (IOMp) erhoben und in einer Datenbank gespeichert.

Dauer der Datenspeicherung
Die vollständige IP-Adresse wird von der INFOnline GmbH nicht gespeichert. Die IP-Adresse wird nur zum Empfang der Datenpakete verwendet und anschließend um 1 Byte gekürzt. Im Zählverfahren (IOMb) wird die gekürzte IP-Adresse verworfen, im pseudonymen (IOMp) und anonymen Verfahren (IOMa) wird die gekürzte IP-Adresse für maximal 60 Tage gespeichert. Im pseudonymen (IOMp) und (IOMa) Verfahren werden die Nutzungsdaten in Verbindung mit der eindeutigen Kennung für maximal 6 Monate gespeichert.
Die Gültigkeit des im pseudonymen Verfahren (IOMp) verwendeten Cookies "i00" und des Cookies "ioma2018" auf dem Endgerät des Nutzers ist auf maximal 1 Jahr begrenzt.

Rechtsgrundlage
Die Messung mit INFOnline Measurement (pseudonymes System: IOMp) sowie die Messung mit INFOnline Measurement (anonymisiertes System: IOMa) erfolgt mit Ihrer Einwilligung.

We want to continuously develop and improve our products. To do this, we need to analyze usage. This serves to evaluate visitor traffic to our digital offerings and may include behavior, interests, or demographic information about visitors, such as age or gender, as pseudonymous values. With its help, we can see, for example, when our digital offerings are used most frequently or which functions are popular. This enables us to identify areas that need optimization.

In addition to usage analysis, we also use testing procedures to test different versions of our digital offerings or their components, for example, and to increase certain user actions or reactions if necessary.
For these purposes, profiles, i.e., data summarized for a usage process, are created and information is stored in a browser or on a terminal device and read from it. The information collected includes, in particular, websites visited and elements used there, as well as technical information such as the browser used, the computer system used, and information on usage times.

The IP addresses of users are also stored. We use an IP masking procedure (i.e., pseudonymization by shortening the IP address) for your protection. In general, no clear data of users (such as email addresses or names) is stored in the context of web analysis, A/B testing, and optimization, but rather pseudonyms, so that neither we nor the providers of the software used, who act as processors for us, know the actual identity of the users.

Wir verwenden Google Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland) zur Messung und Analyse der Nutzung unseres Onlineangebotes auf der Grundlage einer pseudonymen Nutzeridentifikationsnummer. Diese Identifikationsnummer enthält keine eindeutigen Daten, wie Namen oder E-Mail-Adressen. Sie dient dazu, Analyseinformationen einem Endgerät zuzuordnen, um zu erkennen, welche Inhalte die Nutzer innerhalb eines oder verschiedener Nutzungsvorgänge aufgerufen haben, welche Suchbegriffe sie verwendet haben, diese erneut aufgerufen haben oder mit unserem Onlineangebot interagiert haben. Ebenso werden der Zeitpunkt der Nutzung und deren Dauer gespeichert, sowie die Quellen der Nutzer, die auf unser Onlineangebot verweisen und technische Aspekte ihrer Endgeräte und Browser. Dabei werden pseudonyme Profile von Nutzern mit Informationen aus der Nutzung verschiedener Geräte erstellt, wobei Cookies eingesetzt werden können. Google Analytics protokolliert und speichert keine individuellen IP-Adressen für EU-Nutzer. Analytics stellt jedoch grobe geografische Standortdaten bereit, indem es die folgenden Metadaten von IP-Adressen ableitet: Stadt (und der abgeleitete Breiten- und Längengrad der Stadt), Kontinent, Land, Region, Subkontinent (und ID-basierte Gegenstücke). Beim EU-Datenverkehr werden die IP-Adressdaten ausschließlich für diese Ableitung von Geolokalisierungsdaten verwendet, bevor sie sofort gelöscht werden. Sie werden nicht protokolliert, sind nicht zugänglich und werden nicht für weitere Verwendungszwecke genutzt. Wenn Google Analytics Messdaten sammelt, werden alle IP-Abfragen auf EU-basierten Servern durchgeführt, bevor der Verkehr zur Verarbeitung an Analytics-Server weitergeleitet wird.

Die Speicherdauer der Daten beträgt 14 Monate (betrifft Daten auf Nutzer- und Ereignisebene). Aggregierte Daten sind anonymisiert und werden nicht gelöscht.

Google ist unser Auftragsverarbeiter, mit dem wir die dazu erforderlichen Vereinbarungen geschlossen haben. Wir haben zudem Maßnahmen ergriffen, um geeignete und angemessene Garantien zum Schutz der personenbezogenen Daten beim Drittlanddatentransfer sicherzustellen, indem wir EU-Standardvertragsklauseln abgeschlossen haben und bei Bedarf zusätzliche Maßnahmen zum Schutz der Betroffenenrechte beachten.

The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

Wenn Sie Anzeigen buchen, benötigen wir bei Vertragsschluss Ihre Adress-, Kontakt- und Kommunikationsdaten sowie Ihre Bank- und gegebenenfalls Kreditkartendaten.

Die Verarbeitung dieser Daten ist zur Vertragsanbahnung oder Vertragserfüllung erforderlich (Art. 6 Abs. 1 S. 1 lit. b DSGVO).

Nach Beendigung des Vertrages löschen wir Ihre Daten oder sperren sie, sofern wir nicht gesetzlich verpflichtet sind, diese Daten aufzubewahren. Die Löschung erfolgt in der Regel spätestens nach zehn Jahren.

When you contact us, we only collect personal data (e.g. name, e-mail address, telephone number) if you provide it to us voluntarily. This information is expressly provided on a voluntary basis. The purpose of processing your data is to process and respond to your enquiry. This is also our legitimate interest in data processing in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR.

In the case of a telephone enquiry, your data will also be processed by telephone applications and in some cases also via a voice dialogue system in order to support us in the distribution and processing of enquiries.

We will delete your data that we have received in the course of contacting you as soon as your request has been fully processed and no further communication with you is required or requested by you.

Wenn Sie den Anbieter einer Immobilie kontaktieren möchten, können Sie Ihren Namen und Ihre E-Mail-Adresse sowie freiwillig Ihre Telefonnummer und Ihre Adresse in ein Kontaktformular eintragen. Die von Ihnen eingetragenen Daten dienen allein dem Zweck der Kontaktaufnahme mit dem Anbieter, werden von uns mit Ihrer Einwilligung (Art.6 Abs.1 S.1 lit.a) DSGVO) an diesen weitergeleitet und von uns nicht gespeichert.

We also use your contact data beyond contract-related use for advertising purposes. This is only done if you have expressly consented (Art. 6 para. 1 lit. a) GDPR) or on the basis of our legitimate interest in a personalised customer approach or direct advertising (Art. 6 para. 1 lit. f) GDPR), for example for information about the same and similar products of our company (Section 7 para. 3 UWG).

If you no longer wish to receive advertising, you can withdraw your consent or object to advertising at any time.

The data processed by us will be deleted as soon as they are no longer required for their intended purpose, you have objected to the advertising and the deletion does not conflict with any statutory retention requirements.

• per Mail an datenschutz@verlagsgruppe-hcs.de
• schriftlich an die HCS Medienwerk GmbH, Steinweg 51, 96450 Coburg
  (bitte Mailadresse und den Namen von der Registrierung angeben)
• oder telefonisch über 09561 / 850 – 300
• durch einen Klick auf den Abmelde-Link am Ende der Mail

Um unsere digitalen Angebote zu refinanzieren, vermarkten wir unsere Werbeflächen - über unsere Vermarktungsdienstleister aber auch über Dritte.

Eine Übersicht der Dritten und wie diese Ihre Daten zu welchem Zweck verarbeiten, finden Sie in den Datenschutz-Einstellungen im Footer der Website.

Unsere Werbevermarkter unterstützen uns bei der Vermarktung unserer Werbeflächen, indem sie Werbeanzeigen akquirieren und ausspielen.
Folgende Vermarkter setzen wir ein:

• Seeding-Alliance GmbH, c/o Ströer, Gustav-Heinemann-Ufer 74b, 50968 Köln
• RP Digital GmbH, Zülpicher Straße 10, 40549 Düsseldorf
• Taboola Inc., Oneustonsq, 40 Melton Street, 13th Floor, London, NW1 2FD

Wir haben mit diesen und den von ihnen im Rahmen der Vermarktung eingesetzten Dritten im Sinne von Art. 4 Nr. 10 DSGVO entweder eine Vereinbarung i.S.v. Art. 26 DSGVO geschlossen, in der wir die jeweiligen Verantwortlichkeiten für die Erfüllung der Verpflichtungen gemäß der DSGVO hinsichtlich der gemeinsamen Verarbeitung festgelegt haben, oder eine Auftragsverarbeitungsvereinbarung i.S.v. Art. 28 DSGVO.

Bei einer gemeinsamen Verantwortung sind wir verpflichtet, Ihnen die Erteilung und den Widerruf datenschutzrechtlicher Einwilligungen zu ermöglichen. Zudem sind wir die zentrale Anlaufstelle für Sie als betroffene Person. Wir leiten Betroffenenanfragen, die bei uns eingehen und die gemeinsame Verarbeitung betreffen, unverzüglich an unsere Vermarkter zur Beantwortung weiter. Dessen ungeachtet können Sie die Ihnen nach der DSGVO zustehenden Rechte als betroffene Person sowohl bei und gegenüber uns als auch bei und gegenüber jedem anderen Verantwortlichen geltend machen.

The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

When you access our digital offerings, you will also be shown content from third parties who use our advertising space to place adverts. We refinance our offering by displaying these adverts. If such content is loaded, this is done from the servers of the respective third-party providers. This always involves the transmission of certain data to the third-party providers, in many cases including personal data. In addition, cookies or similar technologies are used for most of the third-party services used to load the content.

In order to provide advertising that is relevant and tailored to current interests, an attempt is made to draw conclusions about current interests based on the website visit and surfing behaviour. This user data is used to communicate advertising in the form of banners and other marketing methods - possibly based on the user's interests. For the purpose of retargeting (remarketing) of website visitors, as well as for the purpose of measuring success, cookies from third-party providers (so-called third-party cookies) are used and, if necessary, user profiles are created under a pseudonym. These can be analysed for advertising and monitoring purposes. It is not possible to draw direct conclusions about a person.

An overview of the third parties and how they process your data and for what purpose can be found in the privacy settings.

The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

The publisher uses the Transparency and Consent Framework of IAB Europe 2.2 to manage this type of advertising in compliance with data protection regulations. This framework of the Interactive Advertising Bureau Europe ("IAB Europe"), an industry association for online marketing, defines and monitors the data protection-compliant display of advertising.

IAB Europe has defined the following purposes for the processing of data, including the personal data of users, in order to manage advertising in compliance with data protection regulations:

Saving or accessing information on a terminal device (Purpose 1)
Cookies, terminal device or similar online identifiers (e.g. login-based identifiers, randomly generated identifiers, network-based identifiers) may be stored on or read from your terminal device together with other information (e.g. browser type and browser information, language, screen size, supported technologies, etc.) in order to recognise it each time it accesses an app or a website. This is done for one or more of the processing purposes listed here.
Most of the processing purposes explained in this notice are based on the storage of or access to information on your device when you use an app or visit a website. For example, it may be necessary for a provider or website operator to store a cookie on your device when you first visit a website in order to recognise it on your next visits (by retrieving this cookie each time).

Use of reduced data to select adverts (Purpose 2)
Adverts presented to you on this service may be based on reduced data, such as the website or app you are currently using, your approximate location, your device type or the content you are interacting with (or have interacted with) (e.g. to limit the frequency of adverts displayed to you).

*Examples

• A car manufacturer wants to advertise its electric vehicles to environmentally conscious users who live in the city after hours. The advert is presented on a page with related content (e.g. an article about climate protection measures) after 6.30pm to users whose vague location suggests that they are in an urban area.
• A major manufacturer of watercolour paints wants to run an online advertising campaign for its latest watercolour range. The aim is to diversify the target audience to reach as many amateur and professional artists as possible and to avoid showing the advert alongside inappropriate content (e.g. articles about painting a house). The number of adverts you are presented with is determined and limited to avoid them being shown too often.

Creation of profiles for personalised advertising (Purpose 3)
Information about your activities on this service (such as completed forms, viewed content) may be stored and combined with other information about you (e.g. information from your previous activity on this service or other websites or apps) or similar users. This is then used to create or improve a profile about you (this may include, for example, possible interests and personal characteristics). Your profile may be used (including at a later date) to enable us to present you with adverts that are likely to be more relevant to you based on your potential interests.

*Examples

• For example, if you read several articles about the best bicycle accessories in the trade, this information can be used to create a profile about your interest in bicycle accessories. Such a profile can be used or improved at a later stage on the same or another website or app to show you adverts for a specific brand of bicycle accessories. If you are also looking at a configurator for a vehicle on a luxury car manufacturer's website, this information may be combined with your interest in bicycles to refine your profile and lead to the assumption that you are interested in luxury bicycle equipment.
• A clothing company wants to promote its new collection of high-quality baby clothes. It contacts an agency that has a network of high-income customers (e.g. high-end supermarkets) and asks the agency to create profiles of young parents or couples who can be assumed to be affluent and have recently had a baby, so that these can later be used to advertise in partner apps.

Use of profiles to select personalised advertising (Purpose 4)
Advertising displayed to you on this service may be based on your advertising profile. This advertising profile may include your activities (such as completed forms, viewed content) on this service or other websites or apps, possible interests and personal characteristics.

*Examples

• An online retailer wants to advertise a limited range of running shoes. They want to target adverts to users who have previously viewed running shoes in their mobile app. Tracking technologies could be used to recognise that you have previously used the mobile app to search for running shoes so that you are shown the relevant adverts in the app.
• A profile created for personalised advertising relating to a person who has searched for cycling accessories on a website may be used to present the relevant cycling accessories advertisement on another company's mobile app.

Creating profiles to personalise content (Purpose 5)
Information about your activities on this service (such as: completed forms, non-promotional content viewed) may be stored and combined with other information about you (such as your previous activity on this service or other websites or apps) or similar users.
This is then used to create or complete a profile about you (this may include, for example, possible interests and personal characteristics). Your profile may be used (including at a later date) to show you content that is likely to be more relevant to you based on your potential interests, for example by changing the order in which content is shown to you to make it even easier for you to find content that matches your interests.

*Examples

• You read several articles on a social media platform about how to build a tree house. This information can be added to a profile to record your interest in content about outdoor activities and do-it-yourself instructions (with the aim of enabling the personalisation of content so that you are presented with more blog posts and articles about treehouses and wooden cabins in the future, for example).
• You watched three videos about space exploration on different TV apps. An independent news platform that you have not previously used creates a profile based on this usage behaviour and identifies space exploration as a topic of potential interest for future videos.

Use of profiles to select personalised content (Purpose 6)
Content presented to you on this service may be based on your personalised content profiles, which include your activities on this or other services (such as forms you submit, content you view), possible interests and personal characteristics, such as the changed order in which content is displayed to you, to make it even easier for you to find (non-advertising) content that matches your interests.

*Examples

• You read articles about vegetarian food on a social media platform and then use the cooking app of a company that is independent of the platform. The profile created about you on the social media platform is used to present you with vegetarian recipes on the home page of the cookery app.
• You have watched three rowing videos on various websites. When you use your TV app, a video sharing platform that is independent of the websites recommends five more rowing videos that may be of interest to you, based on a profile that was created about you when you watched the online videos on these websites.

Measurement of advertising performance (Purpose 7)
Information about which adverts are presented to you and how you interact with them can be used to determine how much an advert has appealed to you or other users and whether the objectives of the advertising campaign have been achieved. The information includes, for example, whether you have viewed an advert, whether you have clicked on it, whether it has encouraged you to buy a product or visit a website, etc. This information is helpful in determining the relevance of advertising campaigns.

*Examples

• You clicked on an advert on a website operator's website about a "Black Friday" discount from an online shop and bought a product. Your click is linked to this purchase. Your interaction and that of other users is measured to find out how many clicks on the advert led to a purchase.
• Sie gehören zu den wenigen, die in der App eines App-Betreibers auf eine Werbung, über einen Rabatt anlässlich eines besonderen Ereignisses (z.B. „internationaler Tag der Anerkennung“), eines Online-Geschenkeshops geklickt haben. Der App-Betreiber möchte Statistiken darüber erhalten, wie oft eine bestimmte Anzeige innerhalb der App, insbesondere die Anzeige zu einem besonderen Ereignis (z.B. „internationaler Tag der Anerkennung“) von Ihnen und anderen Benutzern angesehen oder angeklickt wurde, um dem App-Betreiber und seinen Partnern (wie Agenturen) zu helfen, die Anzeigenschaltung zu optimieren.

Measuring the performance of content (Purpose 8)
Information about what advertising is presented to you and how you interact with it can be used to determine whether (non-advertising) content has reached the intended target group and matched your interests, for example. This includes, for example, information about whether you have read a particular article, watched a particular video, listened to a particular podcast or looked at a particular product description, how much time you have spent on that service and the websites you have visited, and so on. This information helps to determine the relevance of (non-advertising) content that is displayed to you.

*Examples

• You have read a blog post about hiking in the mobile app of an app operator and tapped on a link to a recommended similar post. Your interactions are recorded to show that the first post about hiking was useful to you and that it successfully encouraged you to read the similar post. This information is measured to determine whether more posts about hiking should be created in the future and where they should be placed on the home screen of the mobile app.
• You were presented with a video about fashion trends, but you and several other users cancelled it after 30 seconds. This information will be used to evaluate the appropriate length of future fashion trend videos.

Analysing target groups through statistics or combinations of data from different sources (Purpose 9)
Based on the combination of data sets (such as user profiles, statistics, market research, analytics data), reports can be created about your interactions and those of other users with advertising or (non-advertising) content in order to identify common characteristics (e.g. to determine which target groups are receptive to an advertising campaign or to certain content).

*Examples

• The owner of an online bookstore wants to analyse how many visitors have visited his website without buying anything, or how many have visited the website to buy the latest celebrity biography of the month, as well as the average age of visitors and how many of them are male or female, broken down by category. Data about your navigation on the website and your personal characteristics is then used and combined with other such data to create these statistics.
• An advertiser wants to better understand the type of audience that interacts with their adverts. They commission a research organisation to compare the characteristics of users who have interacted with the ad with typical attributes of users of similar platforms across different devices. This comparison shows the advertiser that their target audience mainly accesses the advert via mobile devices and is likely to be between the ages of 45-60.

Development and improvement of offers (Purpose 10)
Information about your activities on this website, such as your interaction with adverts or content, can help to improve products and offers and to develop new products and offers based on user interactions, the type of target group, etc. This processing purpose does not include the development, supplementation or improvement of user profiles and identifiers. This processing purpose does not include the development, enhancement or improvement of user profiles and identifiers.

*Examples

• Information about your activities on this offer, such as your interaction with adverts or content, can help to improve products and offers and to develop new products and offers based on user interactions, the type of target group, etc. This processing purpose does not include the development, enhancement or improvement of user profiles and identifiers.
• An advertiser is looking for a way to display adverts on a new type of device. It collects information about how users interact with this new type of device in order to determine whether it can develop a new mechanism for displaying adverts on this type of device.

Use of reduced data to select content (Purpose 11)
Content presented to you on this service may be based on reduced data, such as the website or app you are using, your approximate location, your device type or information about what content you interact (or have interacted) with (e.g. to limit how often you are shown a video or article).

*Examples

• A travel magazine has published an article on its website about the new online courses offered by a language school to improve the travelling experience abroad. The travel school's blog posts are inserted directly at the bottom of the page and selected based on your approximate location (e.g. blog posts with the syllabus for the course of a language that is not the language of your country).
• A mobile app for sports news has introduced a new section with articles about the latest football matches. Each article contains videos with highlights of the game hosted by an external streaming platform. If you fast-forward a video, this information can be used to play a shorter video afterwards.

Special processing purposes
The user has no choice for the following two special processing purposes, as these are absolutely necessary to provide the service.

• Ensuring security, preventing and detecting fraud and troubleshooting: Your data may be used to monitor and prevent unusual and potentially fraudulent activities (for example, regarding advertising, advertising clicks by bots) and to ensure that systems and processes function properly and securely. The data may also be used to resolve problems that you, the website or app operator or the advertiser may have in delivering content and adverts and in your interaction with them.
  Example
  An advertising intermediary delivers adverts from different advertisers to its network of partner websites and apps. The advertising intermediary notices a sharp increase in clicks on adverts from a particular advertiser. He analyses the data regarding the source of the clicks and finds that 80% of the clicks are from bots and not humans.
• Provision and display of advertising and content: Certain information (such as IP address or device features) is used to ensure the technical compatibility of the content or advertising and to enable the transfer of the content or advertising to your device.
  Example
  When you click on a link in an article, you are usually redirected to another page or another part of the article. To this end, 1°) your browser sends a request to a server linked to the website, 2°) the server responds to the request ("here is the article you requested") using technical information contained by default in the request sent by your terminal in order to properly display the information/images that are part of the article you requested. Technically, such an exchange of information is necessary to provide the content that is displayed on your screen.
• Store and transmit your data protection choices: The choices you make in relation to the purposes and companies listed in this notice will be stored and made available to the companies concerned in the form of digital signals (e.g. a character string). Only in this way can both this service and the companies concerned respect the respective decisions.
  Example:
  If you visit a website and are given the choice of whether or not to consent to the use of profiles for personalised advertising, the decision you make will be stored and transmitted to the advertising providers concerned so that your decision is taken into account in the advertising presented to you.

Functions
For the following functions, personal data will be used for one or more of the above purposes if you consent to these purposes.

• Matching and combining data from different data sources:__ Information about your activities on this service may be matched and combined with other information about you from different sources (e.g. your activities on another online service, your use of an in-store loyalty card or your responses to a survey) to support the purposes explained in this framework.
• Linking of different devices:__ To support the purposes set out in this framework, it may be determined whether it is likely that your device is connected to other devices belonging to you or your household (e.g. because you are logged into the same service on both your mobile phone and your computer or because you use the same internet connection on both devices).
• Identification of end devices based on automatically transmitted information: Your end device can be distinguished to support the purposes explained in this framework using information that it automatically transmits when accessing the Internet (e.g. the IP address of your Internet connection or the type of browser you use).

Special functions
For the following special functions, personal data will be used for one or more of the above-mentioned purposes, provided that you consent to these purposes.

• Use of precise geographical data: With your consent, your precise location (within a radius of less than 500 metres) may be used to support the above purposes.
• Active scanning of device characteristics for identification: With your consent, certain characteristics of your device may be queried and used to distinguish it from other devices (e.g. the fonts or plugins installed, the resolution of your screen) to support the above purposes.

HCS Medienwerk GmbH
Steinweg 51
96450 Coburg

atarax group of companies

Luitpold-Maier-Str. 7
D-91074 Herzogenaurach
Phone: 09132 79800
Email: swmh-datenschutz@atarax.de.

• In accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by us. In this context, you also have the right to receive a copy of your personal data processed by us in accordance with Art. 15 para. 3-4 GDPR.
• In accordance with Art. 16 GDPR, you can immediately request the correction of incorrect or the completion of your personal data stored by us.
• In accordance with Art. 17 GDPR, you can request the erasure of your personal data stored by us.
• In accordance with Art. 18 GDPR, you can request the restriction of the processing of your personal data.
• In accordance with Art. 20 GDPR, you can request to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format and you can request the transfer to another controller.
• In accordance with Art. 7 para. 3 GDPR, you can revoke your consent once given to us at any time. This means that the processing carried out on the basis of the consent prior to the revocation was lawful and has the consequence that we may no longer continue the data processing based on this consent in the future.

Right to object

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR or Art. 6 para. 1 sentence 1 lit. e) GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR. In the event of such an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
In the case of direct marketing, you have the right to object at any time to the processing of personal data concerning you. If you object to processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority against the processing of your personal data if you feel that your rights under the GDPR have been violated. As a rule, you can contact the supervisory authority of your usual place of residence, your workplace or our company headquarters.

With this privacy policy, we fulfil the information obligations under the GDPR. Our General Terms and Conditions also contain data protection information. These explain in detail how your personal data, which we require to fulfil contracts and for the purpose of identity and credit checks, is processed.

We link to websites of other providers or have integrated elements from them into our website. This data protection information does not apply to them - we have no influence on these sites and cannot check that others comply with the applicable data protection regulations.

We reserve the right to change or adapt this privacy policy at any time in compliance with the applicable data protection regulations.