Privacy Policy

05.08.2025

Wenn Sie die SZ Zeitung (Web oder App) nutzen, verarbeitet die Süddeutsche Zeitung GmbH Ihre personenbezogenen Daten. Mit diesen Datenschutzhinweisen informieren wir Sie, wie und warum wir Ihre Daten verarbeiten und wie wir gewährleisten, dass sie vertraulich bleiben und geschützt sind.

save as PDF
Die wichtigsten Themen auf einen Blick

Data protection at a glance

Controller

Controller

Süddeutsche Zeitung GmbH

Hultschiner Str. 8
D-81677 Munich

What data do we collect?

  • Bestandsdaten (z.B. Namen, Adressen)
  • Kontaktdaten (z.B. E-Mail, Telefonnummern)
  • Inhaltsdaten (z.B. Eingaben in Onlineformularen)
  • Zahlungsdaten (z.B. Bankverbindungen, Rechnungen, Zahlungshistorie)
  • Vertragsdaten (z.B. Vertragsgegenstand, Laufzeit)
  • Nutzungsdaten (z.B. besuchte Webseiten, Interesse an Inhalten, Zugriffszeiten)

Ihr Endgerät übermittelt bei der Nutzung des Service aus technischen Gründen automatisch Daten an unseren Webserver. Es handelt sich dabei unter anderem um

  • Datum und Uhrzeit des letzten Zugriffs,
  • Anzahl der abgegebenen Bewertungen, Marktplatzeinträge und App Starts,
  • ausgewählter Standort,
  • Geräte-Anmeldedaten (insbesondere Geräte-Typ und Betriebssystem, App-Version)
  • eine eindeutige Nutzer ID pro Gerät und App Installation sowie
  • Ihre zuletzt verwendete IP-Adresse.

How do we collect the data?

Die Daten, die beim Herunterladen bzw. Aufrufen der Services anfallen, erheben wir automatisiert. Wir erfassen und speichern zudem die Informationen, die Sie eingeben oder uns in anderer Weise übermitteln, sowie durch den Einsatz von Cookies und ähnlichen Technologien.

What do we use the data for?

Do we share data?

If you have given your consent or we are otherwise legally authorized to do so, we will pass on your personal data to service providers (e.g., hosting, marketing, sales partners, payment service providers) for the above-mentioned purposes. In such cases, we comply with the legal requirements and, in particular, conclude appropriate contracts or agreements with the recipients of your data to protect your data.

We transfer personal data to other companies within our group of companies or grant them access to this data for administrative purposes. This transfer of data is based on our legitimate business and economic interests or takes place if it is necessary to fulfill our contractual obligations or if the consent of the data subjects or legal permission has been obtained.

Do we transfer data to third countries?

In order to use our digital services, it may be necessary to transfer certain personal data to third countries, i.e. countries where the GDPR does not apply. However, we only allow your data to be processed in a third country if the specific requirements of Art. 44 ff. GDPR are met and thus an adequate level of data protection is guaranteed in that country. This means that the third country must either have an adequacy decision by the European Commission or suitable safeguards in accordance with Art. 46 GDPR or one of the conditions of Art. 49 GDPR. Unless otherwise stated below, we use the currently valid [standard contractual clauses](https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/? uri=CELEX:32021D0914&from=DE “current version of the standard contractual clauses”) for the transfer of personal data to processors in third countries.

How do we secure the data?

In order to protect your privacy and ensure a level of protection appropriate to the risk, we take technical and organizational measures in accordance with legal requirements, taking into account the state of the art, implementation costs, and the nature, scope, circumstances, and purposes of processing, as well as the varying likelihood and severity of threats to the rights and freedoms of natural persons. These measures ensure the confidentiality, integrity, availability, and resilience of your data. This includes, among other things, the use of recognized encryption methods (SSL or TLS) and pseudonymization.

However, we would like to point out that, due to the structure of the Internet, it is possible that the rules of data protection and the above-mentioned security measures may not be observed by other persons or institutions outside our area of responsibility. In particular, unencrypted data disclosed, e.g., by email, may be read by third parties. We have no technical influence on this.

What rights do you have?

  • Information
  • Deletion
  • Correction
  • Objection

You can contact the data protection officer with your request by mail or by email at swmh-datenschutz@atarax.de.

This privacy policy is updated from time to time. The date of the last update can be found at the beginning of this information.

How we make our content available to you

Cookies and similar technologies

Werden zur Verarbeitung Cookies, Gerätekennungen oder andere personenbezogene Daten auf Ihrem Endgerät gespeichert oder abgerufen, erfolgt dies auf einer der Rechtsgrundlagen von Art. 6 DSGVO.

Um den von Ihnen ausdrücklich gewünschten Telemediendienst erbringen zu können, berücksichtigen wir darüber hinaus die Regelungen des § 25 Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz (TDDDG), insbesondere die Erforderlichkeit nach § 25 Abs. 2 Nr. 2 TDDDG.

Essential technology

The following tools and cookies are strictly necessary technologies, i.e., essential for providing our services as requested by the user.

The legal basis for the data processing described below is our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

Cookie Purpose Duration Type
consentUUID UniqueUserID to store the user's consent status 12 months Cookie
_sp_su Identification of users for sampling consent rates reporting 12 months Cookie
_sp_user_consent UniqueUserID to retrieve the user's consent status stored in our database if necessary Unlimited Local storage
_sp_local_state Determines whether a user has seen the consent banner so that it is only shown once unlimited local storage
_sp_non_keyed_local_state Information about the metadata and the user's UniqueUserID unlimited local storage

Registration

Wenn Sie ein Benutzerkonto erstellen oder sich anmelden, verarbeiten wir Ihre Zugangsdaten (E-Mail-Adresse und Passwort) zur Vertragserfüllung (Art. 6 Abs. 1 lit. b) DSGVO).

Die Daten werden gelöscht, wenn Sie Ihr Konto löschen oder dieses zwei Jahre lang nicht verwendet haben.

“Stay logged in” function

We use cookies based on our legitimate interest in providing a user-friendly service (Art. 6 (1) (f) GDPR) so that you do not have to log in again when you return to the website or app and so that we can automatically recognize you. The function is deleted after 30 days of inactivity. Once the “Stay logged in” function has expired, you will be asked to log in again.

Push notifications

If you allow push notifications, you give your consent to receive the notification and for the statistical analysis with which we can recognise whether and when our push notifications were displayed and clicked on (Art. 6 para. 1 sentence 1 lit. a) GDPR). This includes storing the time of registration and your browser ID or device ID.

Your data will be deleted as soon as you withdraw your consent.

You can revoke your consent at any time with effect for the future by clicking on the corresponding symbol in front of the address bar in your browser and deactivating the notifications.

Podcasts

Mit dem Ausspielen und Anzeigen von Podcasts und Videos haben wir Dienstleister beauftragt, die in unserem Auftrag und nach unserer Weisung ihre Dienste und Tools in unsere digitalen Angebote einbinden. Dabei werden die IP-Adresse und Geräteinformationen für das technische Bereitstellen dieser Dienste sowie das Erheben statistischer Daten wie beispielsweise von Abrufzahlen verarbeitet. Diese Daten werden vor der Speicherung in der Datenbank anonymisiert oder pseudonymisiert, sofern sie für die Bereitstellung der Podcasts nicht erforderlich sind.

Rechtsgrundlage für die vorgenannten Datenverarbeitungen ist unser berechtigtes Interesse an der technischen Bereitstellung gemäß Art. 6 Abs. 1 S. 1 lit. f) DSGVO.

How we optimize our products

Further development of user-friendliness

We use cookies and tracking tools to optimize our digital offerings based on your usage. To do this, we measure the development of reach and the use of content and functions, and use A/B testing to determine which variants users prefer.

Usage analysis

We want to continuously develop and improve our products. To do this, we need to analyze usage. This serves to evaluate visitor traffic to our digital offerings and may include behavior, interests, or demographic information about visitors, such as age or gender, as pseudonymous values. With its help, we can see, for example, when our digital offerings are used most frequently or which functions are popular. This enables us to identify areas that need optimization.

In addition to usage analysis, we also use testing procedures to test different versions of our digital offerings or their components, for example, and to increase certain user actions or reactions if necessary.
For these purposes, profiles, i.e., data summarized for a usage process, are created and information is stored in a browser or on a terminal device and read from it. The information collected includes, in particular, websites visited and elements used there, as well as technical information such as the browser used, the computer system used, and information on usage times.

The IP addresses of users are also stored. We use an IP masking procedure (i.e., pseudonymization by shortening the IP address) for your protection. In general, no clear data of users (such as email addresses or names) is stored in the context of web analysis, A/B testing, and optimization, but rather pseudonyms, so that neither we nor the providers of the software used, who act as processors for us, know the actual identity of the users.

The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

When you order offers

Ordering products

If you order one of our offers or products, we need your address, contact and communication data as well as your bank and, if applicable, credit card data when the contract is concluded.

The processing of this data is necessary for the initiation or fulfilment of the contract (Art. 6 para. 1 sentence 1 lit. b GDPR).

After termination of the contract, we delete your data or block it, unless we are legally obliged to retain this data. The deletion usually takes place after ten years at the latest.

When you contact us

Contacting us

When you contact us, we only collect personal data (e.g. name, e-mail address, telephone number) if you provide it to us voluntarily. This information is expressly provided on a voluntary basis. The purpose of processing your data is to process and respond to your enquiry. This is also our legitimate interest in data processing in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR.

In the case of a telephone enquiry, your data will also be processed by telephone applications and in some cases also via a voice dialogue system in order to support us in the distribution and processing of enquiries.

We will delete your data that we have received in the course of contacting you as soon as your request has been fully processed and no further communication with you is required or requested by you.

Wenn Sie Werbung sehen

Um Ihnen Werbung für unsere eigenen und für fremde Produkte zeigen zu können, nutzen wir Dienste von Werbepartnern oder kooperieren mit Werbepartnern und Werbenetzwerken.

Bei Werbung durch Dritte erfolgt keinerlei Tracking oder Personalisierung.

Performance measurement

To find out whether and how effective our advertising for our own products is, we use conversion measurement by embedding a conversion tracking tag or code snippet in our digital products. When you view our ads, a temporary cookie is stored on your computer or mobile device. As soon as you complete an action, our system recognizes the cookie and we record a conversion.

In order to measure how many users have responded to a particular advertising campaign for our products and offers and have placed orders, we use a URL parameter that also sets a cookie (tpcc_). The cookie is deleted after 90 days.

To optimize our marketing campaigns, we process data that shows us how people interact with our advertising materials, as well as installation and event data, and use this to create anonymous evaluations.
This data will be stored for a maximum of 24 months.

The legal basis for data processing is your consent in accordance with Art. 6 (1) (a) GDPR.

The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

What else you should know

Controller

Controller

Süddeutsche Zeitung GmbH

Hultschiner Str. 8
D-81677 Munich

Data Protection Officer

atarax group of companies

Luitpold-Maier-Str. 7
D-91074 Herzogenaurach
Phone: 09132 79800
Email: swmh-datenschutz@atarax.de.

Your rights

Aus der DSGVO ergeben sich für Sie als Betroffener einer Verarbeitung personenbezogener Daten die folgenden Rechte:

  • Auskunft (Art. 15 DS-GVO),
  • Berichtigung (Art. 16 DS-GVO),
  • Löschung (Art. 17 DS-GVO),
  • Einschränkung der Verarbeitung (Art. 18 DS-GVO),
  • Datenübertragbarkeit (Art. 20 DS-GVO) und
  • ein Widerspruchsrecht gegen die Verarbeitung (Art. 21 DS-GVO).

Im Falle datenschutzrechtlicher Verstöße steht Ihnen ein Beschwerderecht bei einer Datenschutz-Aufsichtsbehörde zu.

Sie haben das Recht, erteilte Einwilligungen gem. Art. 7 Abs. 3 DS-GVO mit Wirkung für die Zukunft zu widerrufen unter datenschutz@sz.de.

Changes to the privacy policy

We reserve the right to change or adapt this privacy policy at any time in compliance with the applicable data protection regulations.