Privacy Policy

14.11.2025

Wenn Sie ein Angebot der Suhler Verlagsgesellschaft mbH & Co. KG nutzen, verarbeitet diese Ihre personenbezogenen Daten. Mit diesen Datenschutzhinweisen informieren wir Sie, wie und warum wir Ihre Daten verarbeiten und wie wir gewährleisten, dass sie vertraulich bleiben und geschützt sind.

save as PDF
Die wichtigsten Themen auf einen Blick

Data protection at a glance

What data do we collect?

  • Inventory data (e.g., names, addresses)
  • Contact details (e.g., email, phone numbers)
  • Content data (e.g., entries in online forms)
  • Payment data (e.g., bank details, invoices, payment history)
  • Contract data (e.g., subject matter of the contract, term)
  • Usage data (e.g., websites visited, interest in content, access times)
  • Meta/communication data (e.g., device information, IP addresses, ID)

How do we collect the data?

We collect the data that is generated when you access our digital offers automatically. Otherwise, we collect data based on your entries or messages or through the use of cookies or similar technologies.

What do we use the data for?

Do we share data?

If you have given your consent or we are otherwise legally authorized to do so, we will pass on your personal data to service providers (e.g., hosting, marketing, sales partners, payment service providers) for the above-mentioned purposes. In such cases, we comply with the legal requirements and, in particular, conclude appropriate contracts or agreements with the recipients of your data to protect your data.

We transfer personal data to other companies within our group of companies or grant them access to this data for administrative purposes. This transfer of data is based on our legitimate business and economic interests or takes place if it is necessary to fulfill our contractual obligations or if the consent of the data subjects or legal permission has been obtained.

Do we transfer data to third countries?

In order to use our digital services, it may be necessary to transfer certain personal data to third countries, i.e. countries where the GDPR does not apply. However, we only allow your data to be processed in a third country if the specific requirements of Art. 44 ff. GDPR are met and thus an adequate level of data protection is guaranteed in that country. This means that the third country must either have an adequacy decision by the European Commission or suitable safeguards in accordance with Art. 46 GDPR or one of the conditions of Art. 49 GDPR. Unless otherwise stated below, we use the currently valid [standard contractual clauses](https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/? uri=CELEX:32021D0914&from=DE “current version of the standard contractual clauses”) for the transfer of personal data to processors in third countries.

How do we secure the data?

In order to protect your privacy and ensure a level of protection appropriate to the risk, we take technical and organizational measures in accordance with legal requirements, taking into account the state of the art, implementation costs, and the nature, scope, circumstances, and purposes of processing, as well as the varying likelihood and severity of threats to the rights and freedoms of natural persons. These measures ensure the confidentiality, integrity, availability, and resilience of your data. This includes, among other things, the use of recognized encryption methods (SSL or TLS) and pseudonymization.

However, we would like to point out that, due to the structure of the Internet, it is possible that the rules of data protection and the above-mentioned security measures may not be observed by other persons or institutions outside our area of responsibility. In particular, unencrypted data disclosed, e.g., by email, may be read by third parties. We have no technical influence on this.

When do we delete the data?

We delete or anonymize your personal data as soon as it is no longer required for the purposes for which we collected or used it.

However, we may still need to store your data until the expiry of the retention obligations and periods imposed by the legislator or supervisory authorities, which may arise from the German Commercial Code, the German Fiscal Code, and the German Money Laundering Act (usually 6 to 10 years). In addition, we may retain your data until the expiry of the statutory limitation periods (i.e., usually 3 years, but in individual cases up to 30 years) if this is necessary for the assertion, exercise, or defense of legal claims. After that, the relevant data will be deleted.

What rights do you have?

  • Information
  • Deletion
  • Correction
  • Objection

You can contact the data protection officer with your request by mail or by email at swmh-datenschutz@atarax.de.

This privacy policy is updated from time to time. The date of the last update can be found at the beginning of this information.

Privacy Manager

You can obtain an overview of all the tools and cookies we use as well as an option to withdraw your consent by clicking on Privacy settings at the bottom of the website you are visiting.

You will find detailed data protection information below.

How we make our content available to you

Cookies and similar technologies

If cookies, device identifiers, or other personal data are stored or accessed on your device for processing purposes, this is done on one of the legal bases of Art. 6 GDPR.

In order to be able to provide the telemedia service you have expressly requested, we also take into account the provisions of Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG), in particular the requirement under Section 25 (2) No. 2 TDDDG.

You can find an overview of the technologies used under Privacy settings.

Types and functions of cookies

Cookies are text files that contain data from visited websites or domains and are stored by a browser on users' devices. A cookie primarily serves to store information about a user during or after their visit to an online offering. The stored information may include, for example, language settings on a website, login status, a shopping cart, or video interactions. The term “cookies” also includes other technologies that perform the same functions as cookies (e.g., when user information is stored using pseudonymous online identifiers, also known as “user IDs”).

There are the following types of cookies and functions:

  • Temporary cookies (also known as session cookies): Temporary cookies are deleted at the latest after a user leaves an online offering and closes their browser.
  • Permanent cookies: Permanent cookies remain stored even after the browser is closed. This allows, for example, the login status to be saved or preferred content to be displayed directly when the user visits a website again. Similarly, the interests of users, which are used for reach measurement or marketing purposes, can be stored in such a cookie.
  • First-party cookies: First-party cookies are set and used by us to process user information.
  • Third-party cookies: Third-party cookies are mainly used by advertisers (so-called third parties) or other partners to process user information.
  • Strictly necessary (also: essential or necessary) cookies: These cookies ensure functions without which these digital offerings could not be used as desired. They may be absolutely necessary for the operation of a website, for example to store logins or other user entries, or for security reasons.
  • Analysis and statistics cookies: These cookies enable us to analyze the use of our digital offerings, in particular to measure reach—i.e., clicks, visits, and visitor numbers. The aim is to statistically determine the number of visits and visitors and their surfing behavior (duration, origin) and thus obtain market-wide comparable values. The information collected is evaluated in aggregate form in order to derive improvements and optimizations for our products.
  • Marketing and personalization cookies: Cookies are also used to store a user's interests or behavior (e.g., viewing certain content, using functions, etc.) in a user profile. Such profiles are used, for example, to display content to users that corresponds to their potential interests. This process is also referred to as “tracking,” i.e., tracking the potential interests of users. If we use cookies or tracking technologies, we will provide separate information about this in our privacy policy or when obtaining consent.

Technical provision and security

When our offer is used, we automatically employ essential technologies and process the following information:

  • Information about the accessing device and the software used
  • Date and time of access
  • Websites from which the user accesses our website or which the user visits via our website
  • IP address

The collection of these logs and their temporary storage and processing are necessary to ensure system security and integrity (in particular to ward off and defend against attempts at attack or damage) and are carried out in accordance with our legitimate interest (§ 25 (2) No. 2 TDDDG, Art. 6 (1) f GDPR).

The storage period for this log data is usually seven days; for reliable detection of AI bots, it is 30 days. From this point on, this specific server log data is anonymized based on our legitimate interest in statistical evaluation to assess AI bots and their impact on our content (Art. 6 (1) f GDPR).

The legal basis for the aforementioned data processing is our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR.

Essential technology

The following tools and cookies are strictly necessary technologies, i.e., essential for providing our services as requested by the user.

The legal basis for the data processing described below is our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

Google Tag Manager

The Google Tag Manager service is an organizational tool that enables us to control services. The tool only uses the IP address to establish a connection to the server and to function technically. Otherwise, no personal data is processed by the tool itself. Tag Manager ensures that other services are only executed if the conditions (tags) specified in Tag Manager are met. This allows us to ensure, for example, that tools requiring consent are only loaded after you have given your consent. Tag Manager does not access the data processed by the tools.

Complianz

Um Ihre datenschutzrechtliche Einwilligung einholen und speichern zu können, verwenden wir Complianz (Complianz BV, CoC 717814475,Kalmarweg 14-5,9723 JG, Groningen (NL)). Diese setzt unbedingt erforderliche Cookies, um den Consent-Status abfragen und damit entsprechende Inhalte ausspielen zu können.

Die Cookies werden gespeichert und spätestens nach 13 Monaten gelöscht.

Rechtsgrundlage für die vorgenannten Datenverarbeitungsvorgänge ist unser berechtigtes Interesse gemäß Art. 6 Abs. 1 S. 1 lit. f) DSGVO.

How we optimize our products

Further development of user-friendliness

We use cookies and tracking tools to optimize our digital offerings based on your usage. To do this, we measure the development of reach and the use of content and functions, and use A/B testing to determine which variants users prefer.

Usage analysis

We want to continuously develop and improve our products. To do this, we need to analyze usage. This serves to evaluate visitor traffic to our digital offerings and may include behavior, interests, or demographic information about visitors, such as age or gender, as pseudonymous values. With its help, we can see, for example, when our digital offerings are used most frequently or which functions are popular. This enables us to identify areas that need optimization.

In addition to usage analysis, we also use testing procedures to test different versions of our digital offerings or their components, for example, and to increase certain user actions or reactions if necessary.
For these purposes, profiles, i.e., data summarized for a usage process, are created and information is stored in a browser or on a terminal device and read from it. The information collected includes, in particular, websites visited and elements used there, as well as technical information such as the browser used, the computer system used, and information on usage times.

The IP addresses of users are also stored. We use an IP masking procedure (i.e., pseudonymization by shortening the IP address) for your protection. In general, no clear data of users (such as email addresses or names) is stored in the context of web analysis, A/B testing, and optimization, but rather pseudonyms, so that neither we nor the providers of the software used, who act as processors for us, know the actual identity of the users.

Google Analytics

Wir verwenden Google Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland) zur Messung und Analyse der Nutzung unseres Onlineangebotes auf der Grundlage einer pseudonymen Nutzeridentifikationsnummer. Diese Identifikationsnummer enthält keine eindeutigen Daten, wie Namen oder E-Mail-Adressen. Sie dient dazu, Analyseinformationen einem Endgerät zuzuordnen, um zu erkennen, welche Inhalte die Nutzer innerhalb eines oder verschiedener Nutzungsvorgänge aufgerufen haben, welche Suchbegriffe sie verwendet haben, diese erneut aufgerufen haben oder mit unserem Onlineangebot interagiert haben. Ebenso werden der Zeitpunkt der Nutzung und deren Dauer gespeichert, sowie die Quellen der Nutzer, die auf unser Onlineangebot verweisen und technische Aspekte ihrer Endgeräte und Browser. Dabei werden pseudonyme Profile von Nutzern mit Informationen aus der Nutzung verschiedener Geräte erstellt, wobei Cookies eingesetzt werden können. Google Analytics protokolliert und speichert keine individuellen IP-Adressen für EU-Nutzer. Analytics stellt jedoch grobe geografische Standortdaten bereit, indem es die folgenden Metadaten von IP-Adressen ableitet: Stadt (und der abgeleitete Breiten- und Längengrad der Stadt), Kontinent, Land, Region, Subkontinent (und ID-basierte Gegenstücke). Beim EU-Datenverkehr werden die IP-Adressdaten ausschließlich für diese Ableitung von Geolokalisierungsdaten verwendet, bevor sie sofort gelöscht werden. Sie werden nicht protokolliert, sind nicht zugänglich und werden nicht für weitere Verwendungszwecke genutzt. Wenn Google Analytics Messdaten sammelt, werden alle IP-Abfragen auf EU-basierten Servern durchgeführt, bevor der Verkehr zur Verarbeitung an Analytics-Server weitergeleitet wird.

Die Speicherdauer der Daten beträgt 14 Monate (betrifft Daten auf Nutzer- und Ereignisebene). Aggregierte Daten sind anonymisiert und werden nicht gelöscht.

Google ist unser Auftragsverarbeiter, mit dem wir die dazu erforderlichen Vereinbarungen geschlossen haben. Wir haben zudem Maßnahmen ergriffen, um geeignete und angemessene Garantien zum Schutz der personenbezogenen Daten beim Drittlanddatentransfer sicherzustellen, indem wir EU-Standardvertragsklauseln abgeschlossen haben und bei Bedarf zusätzliche Maßnahmen zum Schutz der Betroffenenrechte beachten.

The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

Participate in surveys

To find out how satisfied you are with our products, you can participate in our surveys. For each survey, you decide individually whether you want to participate and what information you want to give us.

To enable participants to interrupt a survey embedded in the website and continue it with the same browser, a session cookie is created when the survey participation starts. This also prevents the same survey from being displayed to you multiple times.

You can delete this cookie at any time in your browser's privacy settings. However, this will remove the option to continue a partially completed survey from the point where you left off and the protection against the survey being displayed again.

If personal data is collected in a survey, it will be deleted at the latest at the end of the year in which the survey and its evaluation were completed.

The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

  • Campanero der DRID Kommunikation und Design GmbH, Arnoldstraße 16, 22765 Hamburg. Alle Daten werden auf den DRID-Servern bei Host Europa gespeichert, Informationen zu deren Datenschutz erhalten Sie unter hier.

When you contact us

Contacting us

When you contact us, we only collect personal data (e.g. name, e-mail address, telephone number) if you provide it to us voluntarily. This information is expressly provided on a voluntary basis. The purpose of processing your data is to process and respond to your enquiry. This is also our legitimate interest in data processing in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR.

In the case of a telephone enquiry, your data will also be processed by telephone applications and in some cases also via a voice dialogue system in order to support us in the distribution and processing of enquiries.

We will delete your data that we have received in the course of contacting you as soon as your request has been fully processed and no further communication with you is required or requested by you.

Wenn Sie Angebote bestellen

Ordering products

If you order one of our offers or products, we need your address, contact and communication data as well as your bank and, if applicable, credit card data when the contract is concluded.

The processing of this data is necessary for the initiation or fulfilment of the contract (Art. 6 para. 1 sentence 1 lit. b GDPR).

After termination of the contract, we delete your data or block it, unless we are legally obliged to retain this data. The deletion usually takes place after ten years at the latest.

Payment

In order to offer you various payment functions, we use software from service providers who support us in processing the payment transaction. The software also manages transactions and controls access control, billing, the checkout process, invoice dispatch, and payment transactions. It also supports our user, product, and price management. In doing so, we process your personal master data (e.g., name, address data), your communication data (e.g., email), order data, contract billing and payment data, and our planning and control data.

The legal basis for this is the fulfillment of the contract (Art. 6 (1) (b) GDPR) and our legitimate interest in proper and functioning payment processing (Art. 6 (1) (f) GDPR).

Events

For events, we process your name, contact and address data required for the purpose of organising the events. The legal basis for this is Art. 6 para. 1 sentence 1 b) GDPR. Without processing the personal data, we would not be able to organise the events or offer this service to the participants. The data will not be used for advertising purposes and will only be passed on to third parties if a co-organiser or event service provider is permitted to receive this data or if an increased level of security is required (e.g. forwarding to the police, BKA).

As soon as the purpose for collecting the data and statutory retention obligations have been fulfilled, the data will be deleted.

Wenn wir für unsere Produkte werben

Newsletter

Sie erhalten von uns Newsletter, wenn Sie diese explizit unter Angabe Ihres Namens und Ihrer E-Mail-Adresse bestellen. Die angegebene E-Mail-Adresse wird mit Hilfe einer Bestätigungsmail an diese überprüft („Double-Opt-In-Verfahren“). Diese personenbezogenen Daten verarbeiten wir mit Ihrer Einwilligung nach Art. 6 Abs. 1 lit. a) DSGVO.

Wenn Sie eingewilligt haben, werten wir Ihre Klicks in Newslettern mit Hilfe sogenannter Tracking-Pixel, also unsichtbarer Bilddateien aus. Diese sind Ihrer Mail-Adresse zugeordnet und werden mit einer eigenen ID verknüpft, um Klicks im Newsletter eindeutig Ihnen zuzuordnen. Das Nutzungsprofil soll dazu dienen, das Newsletter-Angebot auf Ihre Interessen zuschneiden zu können. Wir erfassen, wann Sie Newsletter lesen und welche Links Sie anklicken, und folgern daraus ein Interessenprofil.

Sie können sich von jedem Newsletter jederzeit abmelden und Ihre Einwilligung in den Versand und die Auswertung widerrufen — Sie erhalten dann allerdings keinen Newsletter mehr. Zu diesem Zweck findet sich in jedem Newsletter ein entsprechender Link.

Die Löschung Ihrer Daten erfolgt nach Abbestellung des Newsletters zum Ende des Jahres, in dem Sie sich vom Newsletter abgemeldet haben.

Newsletter - Data processing in detail

Data Purpose of processing Legal basis for processing Storage period
E-mail address Sending the newsletter Consent until cancellation
IP address for opt-in Proof of double opt-in Consent until cancellation
Time of DOI verification Proof of double opt-in In Consent until revocation
Salutation* Direct address Consent until revocation
First name* Direct address Consent until revocation
Last name* Direct address Consent until revocation
Usage data Further development and improvement of the service Consent until revocation
End devices Correct delivery of the newsletter Consent until revocation

*Voluntary information

Competitions

Für die Teilnahme an Gewinnspielen ist es mitunter erforderlich, dass Sie sich

  • registrieren,
  • die Teilnahmebedingungen akzeptieren und
  • den Datenschutz-Hinweis lesen.

Bei der Auslobung von (Sach-)Preisen werden insbesondere nach Ende des Gewinnspiels von den Gewinnern weitere persönliche Daten benötigt, wie etwa die Anschrift, um diese im Falle des Gewinns benachrichtigen und den Gewinn übermitteln zu können.

Die Erfassung und Verarbeitung der personenbezogenen Daten dient zur Durchführung des jeweiligen Gewinnspiels und der Quizze sowie gegebenenfalls zur Zusendung von Gewinnen. Die Daten werden mit Ihrer Einwilligung verarbeitet (Art. 6 Abs. 1 S.1 lit. a) DSGVO), bei Gewinnspielen nach Art. 6 Abs. 1 S.1 lit. b) DSGVO. Sämtliche Daten werden für den Zweck und für die Dauer des Gewinnspiels gespeichert und nach Ablauf der Aktion gelöscht, sofern keine gesetzlichen Aufbewahrungspflichten bestehen. Der Benutzername, der in den Highscores/Bestenlisten veröffentlicht wird, wird nur auf Widerruf gelöscht.

Ihre Daten werden gegebenenfalls an unsere Gewinnspiel-Dienstleister und Sponsoren im Rahmen der Teilnahmebedingungen weitergegeben, denen Sie zugestimmt haben, und gelöscht, sofern diese nicht mehr erforderlich sind.

Weitere Einzelheiten im Zusammenhang mit dem jeweiligen Gewinnspiel entnehmen Sie bitte den Teilnahmebedingungen.

Sie haben das Recht, erteilte Einwilligungen gemäß Art. 7 Abs. 3 DSGVO mit Wirkung für die Zukunft zu widerrufen unter leserservice@verlagsgruppe-hcs.de.

What else you should know

Controller

Verantwortlicher im Sinne der DSGVO ist die

Suhler Verlagsgesellschaft mbH & Co. KG
Schützenstraße 2
98527 Suhl

Data Protection Officer

atarax group of companies

Luitpold-Maier-Str. 7
D-91074 Herzogenaurach
Phone: 09132 79800
Email: swmh-datenschutz@atarax.de.

Your rights

  • In accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by us. In this context, you also have the right to receive a copy of your personal data processed by us in accordance with Art. 15 para. 3-4 GDPR.
  • In accordance with Art. 16 GDPR, you can immediately request the correction of incorrect or the completion of your personal data stored by us.
  • In accordance with Art. 17 GDPR, you can request the erasure of your personal data stored by us.
  • In accordance with Art. 18 GDPR, you can request the restriction of the processing of your personal data.
  • In accordance with Art. 20 GDPR, you can request to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format and you can request the transfer to another controller.
  • In accordance with Art. 7 para. 3 GDPR, you can revoke your consent once given to us at any time. This means that the processing carried out on the basis of the consent prior to the revocation was lawful and has the consequence that we may no longer continue the data processing based on this consent in the future.

Right to object

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR or Art. 6 para. 1 sentence 1 lit. e) GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR. In the event of such an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
In the case of direct marketing, you have the right to object at any time to the processing of personal data concerning you. If you object to processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority against the processing of your personal data if you feel that your rights under the GDPR have been violated. As a rule, you can contact the supervisory authority of your usual place of residence, your workplace or our company headquarters.

Changes to the privacy policy

We reserve the right to change or adapt this privacy policy at any time in compliance with the applicable data protection regulations.