Datenschutz
Datenschutz
Datenschutz
Wenn Sie ein Angebot der Nordbayerischer Kurier Zeitungsverlag GmbH nutzen, verarbeitet diese Ihre personenbezogenen Daten. Mit dieser Datenschutzerklärung informieren wir Sie, wie und warum wir Ihre Daten verarbeiten und wie wir gewährleisten, dass sie vertraulich bleiben und geschützt sind.
We take data protection seriously: as a matter of principle, we only process personal data if this is necessary for the provision of a service or offer or if it is provided voluntarily by the user. We also use technical and operational security measures to protect personal data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. We regularly review and modernise these precautions.
We collect the data that is generated when you access our digital offers automatically. Otherwise, we collect data based on your entries or messages or through the use of cookies or similar technologies.
Bereitstellung der Inhalte
Produktoptimierung
Kommunikation
In order to use our digital services, it may be necessary to transfer certain personal data to third countries, i.e. countries where the GDPR does not apply. However, we only allow your data to be processed in a third country if the specific requirements of Art. 44 ff. GDPR are met and thus an adequate level of data protection is guaranteed in that country. This means that the third country must either have an adequacy decision by the European Commission or suitable safeguards in accordance with Art. 46 GDPR or one of the conditions of Art. 49 GDPR. Unless otherwise stated below, we use the currently valid [standard contractual clauses](https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/? uri=CELEX:32021D0914&from=DE “current version of the standard contractual clauses”) for the transfer of personal data to processors in third countries.
In order to protect your privacy and ensure a level of protection appropriate to the risk, we take technical and organizational measures in accordance with legal requirements, taking into account the state of the art, implementation costs, and the nature, scope, circumstances, and purposes of processing, as well as the varying likelihood and severity of threats to the rights and freedoms of natural persons. These measures ensure the confidentiality, integrity, availability, and resilience of your data. This includes, among other things, the use of recognized encryption methods (SSL or TLS) and pseudonymization.
However, we would like to point out that, due to the structure of the Internet, it is possible that the rules of data protection and the above-mentioned security measures may not be observed by other persons or institutions outside our area of responsibility. In particular, unencrypted data disclosed, e.g., by email, may be read by third parties. We have no technical influence on this.
We delete or anonymize your personal data as soon as it is no longer required for the purposes for which we collected or used it.
However, we may still need to store your data until the expiry of the retention obligations and periods imposed by the legislator or supervisory authorities, which may arise from the German Commercial Code, the German Fiscal Code, and the German Money Laundering Act (usually 6 to 10 years). In addition, we may retain your data until the expiry of the statutory limitation periods (i.e., usually 3 years, but in individual cases up to 30 years) if this is necessary for the assertion, exercise, or defense of legal claims. After that, the relevant data will be deleted.
You can contact the data protection officer with your request by mail or by email at swmh-datenschutz@atarax.de.
This privacy policy is updated from time to time. The date of the last update can be found at the beginning of this information.
You can obtain an overview of all the tools and cookies we use as well as an option to withdraw your consent by clicking on Privacy settings at the bottom of the website you are visiting.
You will find detailed data protection information below.
If cookies, device identifiers, or other personal data are stored or accessed on your device for processing purposes, this is done on one of the legal bases of Art. 6 GDPR.
In order to be able to provide the telemedia service you have expressly requested, we also take into account the provisions of Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG), in particular the requirement under Section 25 (2) No. 2 TDDDG.
You can find an overview of the technologies used under Privacy settings.
Cookies are text files that contain data from visited websites or domains and are stored by a browser on users' devices. A cookie primarily serves to store information about a user during or after their visit to an online offering. The stored information may include, for example, language settings on a website, login status, a shopping cart, or video interactions. The term “cookies” also includes other technologies that perform the same functions as cookies (e.g., when user information is stored using pseudonymous online identifiers, also known as “user IDs”).
There are the following types of cookies and functions:
When our offer is used, we automatically employ essential technologies and process the following information:
The collection of these logs and their temporary storage and processing are necessary to ensure system security and integrity (in particular to ward off and defend against attempts at attack or damage) and are carried out in accordance with our legitimate interest (§ 25 (2) No. 2 TDDDG, Art. 6 (1) f GDPR).
The storage period for this log data is usually seven days; for reliable detection of AI bots, it is 30 days. From this point on, this specific server log data is anonymized based on our legitimate interest in statistical evaluation to assess AI bots and their impact on our content (Art. 6 (1) f GDPR).
The legal basis for the aforementioned data processing is our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR.
The following tools and cookies are strictly necessary technologies, i.e., essential for providing our services as requested by the user.
The legal basis for the data processing described below is our legitimate interest pursuant to Art. 6 (1) (f) GDPR.
The Google Tag Manager service is an organizational tool that enables us to control services. The tool only uses the IP address to establish a connection to the server and to function technically. Otherwise, no personal data is processed by the tool itself. Tag Manager ensures that other services are only executed if the conditions (tags) specified in Tag Manager are met. This allows us to ensure, for example, that tools requiring consent are only loaded after you have given your consent. Tag Manager does not access the data processed by the tools.
In order to obtain and store your consent under data protection law, we use the consent management platform from Sourcepoint (Sourcepoint Technologies, Inc., 228 Park Avenue South, #87903, New York, NY 10003-1502, United States). This platform uses strictly necessary cookies to query the consent status and thus display the corresponding content.
The data is stored for a maximum of 13 months.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| consentUUID | UniqueUserID to store the user's consent status | 12 months | Cookie |
| _sp_su | Identification of users for sampling consent rates reporting | 12 months | Cookie |
| _sp_user_consent | UniqueUserID to retrieve the user's consent status stored in our database if necessary | Unlimited | Local storage |
| _sp_local_state | Determines whether a user has seen the consent banner so that it is only shown once | unlimited | local storage |
| _sp_non_keyed_local_state | Information about the metadata and the user's UniqueUserID | unlimited | local storage |
Die Einbettung eines YouTube-Videos erfolgt durch Framing.
Das Ausspielen der Videos und die Analyse sowie Optimierung unseres Videoangebotes erfolgt auf Grundlage Ihrer Einwilligung gem. Art. 6 Abs. 1 S. 1 lit. a) DSGVO.
Hier finden Sie nähere Informationen zu Zweck und Umfang der Datenverarbeitung durch Google und Ihre diesbezüglichen Einstellungsmöglichkeiten zum Schutz Ihrer Privatsphäre.
Die Geolokalisierung und Darstellung unserer Angebote erfolgt mittels OpenStreetMap - Deutschland. Das dazu verwendete Karten-Plugin wird von deutschen Servern geladen. Die Dazu erforderliche Verarbeitung Ihrer IP-Adresse erfolgt mit unserem überwiegenden berechtigten Interesse (Art.6 Abs.1 S.1 lit.f) DSGVO). Sie können dem Einsatz des Karten-Dienstes widersprechen, indem Sie in den Datenschutz-Einstellungen die entsprechende Einstellung vornehmen.
Informationen zur Datenverarbeitung durch OpenstreetMap - Deutschland finden Sie hier.
Wenn Sie sich auf unserer Website registrieren oder anmelden, fragen wir Ihre E-Mail-Adresse sowie ein Passwort, sowie Ihren Namen ab.
Die Verarbeitung dieser Daten erfolgt zur Vertragserfüllung gemäß Art. 6 Abs. 1 S. 1 lit. b) DSGVO. Damit können wir Ihre Berechtigung zur Verwaltung des Benutzerkontos verifizieren, die Nutzungsbedingungen mit allen damit verbundenen Rechten und Pflichten durchsetzen und mit Ihnen in Kontakt treten, um Ihnen technische oder rechtliche Hinweise zu geben, ebenso Updates, Sicherheitsmeldungen oder andere Nachrichten, die etwa die Verwaltung des Nutzeraccounts betreffen (z.B. Anfragen zur Rücksetzung Ihres Passwortes).
Sie haben die Möglichkeit, weitere Angaben auf freiwilliger Basis in einem Profil zu ergänzen. Die Verwendung dieser Informationen beruht auf Ihrer Einwilligung gemäß Art. 6 Abs. 1 S. 1 lit. a) DSGVO.
Sie können eine Kerze anzünden und dabei Ihren Namen zusammen mit einen Text veröffentlichen. Dies erfolgt mit Ihrer Einwilligung (Art. 6 Abs. 1 lit. a) DSGVO). Diese können Sie unter Kerze leserservice@verlagsgruppe-hcsb.de widerrufen.
Wenn Sie Kondolieren veröffentlichen wir Ihre Namen zusammen mit einem Text. Ihre Email Adresse verarbeiten wir zur Kontaktaufnahme durch die Trauernden. Dies erfolgt mit Ihrer Einwilligung (Art.6 Abs.1 S.1 lit.a) DSGVO). Diese können Sie unter verlagsgruppe@leserservice-hcsb.de widerrufen.
Wenn Sie auf einer Seite Ihre E-Mail-Adresse hinterlegen, informieren wir Sie zu Neuigkeiten auf dieser Seite. Dies erfolgt mit Ihrer Einwilligung (Art.6 Abs.1 S.1 lit.a) DSGVO). Diese können Sie unter Kerze leserservice@verlagsgruppe-hcs.de widerrufen.
You have the option of recommending content on our websites via the buttons placed on the content; on mobile devices via the native sharing function. We provide the social networks with content - and no personal data - that is used exclusively to display content. If you use the buttons, we merely link to the page of the respective social media provider. We do not process any of your personal data.
Our website uses the multi-stage measurement method “INFOnline Measurement” from INFOnline GmbH (NFOnline GmbH, Brühler Str. 9, D-53119 Bonn) to determine statistical parameters (page impressions, visits, technical clients) relating to the use of our digital offering. The aim of usage measurement is to statistically determine the number of visits to our website, the number of website visitors, and their surfing behavior—based on a uniform standard procedure—and thus obtain market-wide comparable values. The purpose of data processing is therefore to generate digital performance values (page impressions, visits, and technical clients) in order to be able to track and verify the use of our offerings.
As a member of the Informationsgemeinschaft zur Feststellung der Verbreitung von Werbeträgern e.V. (IVW), usage statistics are regularly updated by the IVW with “page impressions” and “visits” in the IVW report.
As a participant in the agof study “daily digital facts,” the usage statistics of our digital offerings are regularly collected by the Arbeitsgemeinschaft Online-Forschung e.V. (Working Group for Online Research) and the Arbeitsgemeinschaft Media-Analyse e.V. (Working Group for Media Analysis) and published with the “unique user” metric.
Due to the nature and volume of the data collected by INFOnline Measurement, it is not possible to clearly assign a user to a specific person. A JavaScript code (known as a “measurement manager”) is used which, when called up via the user's browser or end device (client), automatically integrates and executes the necessary measurement sensors for anonymous and/or pseudonymous data processing to determine the key figures, based on the consent information from our Consent Management Platform (CMP). INFOnline Measurement is designed as an anonymous system (without customer identification) and as a pseudonymous system (with customer identification).
Type of data
Due to the type and volume of data, the data collected with INFOnline Measurement does not allow a user to be clearly assigned to a specific person. A JavaScript code (known as a “measurement manager”) is used which, when called up via the user's browser or end device (client), automatically integrates and executes the necessary measurement sensors for anonymous and/or pseudonymous data processing to determine the key figures based on the consent information from the consent management platform (CMP) used by the provider for the digital offering. INFOnline Measurement is designed as an anonymous system (without customer identification) and as a pseudonymous system (with customer identification).
In the anonymous census procedure (IOMb), no personal data are processed, in particular not the IP address. The IP address is completely removed from communication and processing. For this purpose, a communication interface, the so-called “service platform”, acts as the measurement end point and prevents the user’s IP address from being exchanged with the INFOnline systems in the context of INFOnline measurement. The IP address, as personal data, is discarded on the service platform during the counting process before the measurement request is forwarded to INFOnline. No geolocation takes place via the IP address. The data record generated in the census procedure consists solely of PI data collection.
In the pseudonymised measurement method (IOMp), the following data are collected using the 3rd-party cookie “i00” (ioam.de) and the 1st-party cookie “ioma2018”, which constitutes personal data within the meaning of the GDPR:
IP address
On the internet, every device requires a unique address for the transmission of data, the so-called IP address. The storage of the IP address, at least for a short period of time, is technically necessary due to the way the internet functions. Before any processing takes place, IP addresses are shortened by 1 byte and only further processed in anonymised form. The unshortened IP addresses are not stored or processed.
A randomly generated client identifier
For the purpose of reach measurement, unique identifiers of the end device are used to recognise computer systems, namely a “local storage object” (LSO) or a “fingerprint” created from various pieces of information automatically transmitted by your browser. This identifier is unique for a browser as long as the cookie or local storage object is not deleted. Measuring the data and subsequently assigning it to the respective identifier may also be possible when you access other websites that likewise use INFOnline GmbH’s pseudonymous measurement method.
The following unique identifiers may be transmitted to INFOnline GmbH as a hash:
Personal data within the meaning of the EU GDPR are used for measurement only to the extent that JavaScript is deployed in relation to a user who has been assigned an individual IP address and a randomly generated client identifier for the retrieval of web content.
The anonymous measurement procedure (IOMa) uses a measurement sensor (JavaScript) that calculates the metrics in the user’s browser (LocalStorage (LSO)), encrypts them automatically, and transmits the aggregated usage data to a communication interface, the so-called “service platform”. On the service platform, the identifiers required for internet communication (e.g. the client’s IP address) are removed, and the encrypted, anonymised measurement data are enriched with geolocation information and transmitted to the central server component at INFOnline.
If the collected measurement data are enriched with a geolocation of the browser, an IP address is likewise used only for the purpose of determining the geolocation and enriching the collected measurement data. Any IP address required for this is discarded immediately after the enrichment.
During the implementation phase of IOMa, a 1st-party cookie is used to store the timestamps (Unix epoch timestamp) of the most recent use per service and per page code. These values are added as a benchmark for the creation of time-based metrics, such as the visit when switching the HTTP origin. No further personal data/IDs are stored in the cookie. After the implementation phase, it should then be deleted so that measurement is carried out entirely without cookies.
Personal data within the meaning of the GDPR are used for measurement only to the extent that JavaScript is used in relation to a user who has been assigned an individual IP address for retrieving web content.
Accordingly, by using the anonymous measurement procedure (IOMa) in INFOnline Measurement, we do not permanently process any personal data about you.
Use of data
The measurement procedure used on this website by INFOnline GmbH collects usage data. This is done in order to determine the performance metrics Page Impression, Visit and Client.
Geolocation
In the pseudonymised measurement procedure (IOMp) and in the anonymised measurement procedure (IOMa), the assignment of a website visit to the place of access is based exclusively on the anonymised IP address and only down to the geographical level of federal states/regions. It is in no case possible to infer a user’s exact place of residence from the geographical information obtained in this way.
Cross-service aggregation of usage data
The usage data of a technical client (e.g. a browser on a device) are collected in the pseudonymised measurement procedure (IOMp) and stored in a database.
Duration of data storage
The full IP address is not stored by INFOnline GmbH. The IP address is used only to receive the data packets and is then shortened by 1 byte. In the census procedure (IOMb), the shortened IP address is discarded; in the pseudonymous (IOMp) and anonymous procedures (IOMa), the shortened IP address is stored for a maximum of 60 days. In the pseudonymous (IOMp) and (IOMa) procedures, the usage data are stored in connection with the unique identifier for a maximum of 6 months.
The validity of the “i00” cookie used in the pseudonymous procedure (IOMp) and of the “ioma2018” cookie on the user’s end device is limited to a maximum of 1 year.
We want to continuously develop and improve our products. To do this, we need to analyze usage. This serves to evaluate visitor traffic to our digital offerings and may include behavior, interests, or demographic information about visitors, such as age or gender, as pseudonymous values. With its help, we can see, for example, when our digital offerings are used most frequently or which functions are popular. This enables us to identify areas that need optimization.
In addition to usage analysis, we also use testing procedures to test different versions of our digital offerings or their components, for example, and to increase certain user actions or reactions if necessary.
For these purposes, profiles, i.e., data summarized for a usage process, are created and information is stored in a browser or on a terminal device and read from it. The information collected includes, in particular, websites visited and elements used there, as well as technical information such as the browser used, the computer system used, and information on usage times.
The IP addresses of users are also stored. We use an IP masking procedure (i.e., pseudonymization by shortening the IP address) for your protection. In general, no clear data of users (such as email addresses or names) is stored in the context of web analysis, A/B testing, and optimization, but rather pseudonyms, so that neither we nor the providers of the software used, who act as processors for us, know the actual identity of the users.
Google Analytics
We use Google Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to measure and analyze the use of our online offering on the basis of a pseudonymous user identification number. This identification number does not contain any unique data such as names or email addresses. It serves to assign analytics information to a device in order to determine which content users have accessed within one or more usage processes, which search terms they have used, whether they have accessed this content again, or how they have interacted with our online offering. The time and duration of use are also stored, as well as the sources of users who refer to our online offering and technical aspects of their end devices and browsers. In the process, pseudonymous profiles of users are created with information from the use of different devices, and cookies may be used.
Google Analytics does not log or store individual IP addresses for EU users. However, Analytics provides approximate geographic location data by deriving the following metadata from IP addresses: city (and the derived latitude and longitude of the city), continent, country, region, subcontinent (and ID-based counterparts). For EU traffic, IP address data is used exclusively for this derivation of geolocation data before it is immediately deleted. It is not logged, is not accessible, and is not used for any further purposes. When Google Analytics collects measurement data, all IP queries are carried out on EU-based servers before the traffic is forwarded to Analytics servers for processing. The retention period for the data is 14 months (this concerns data at user and event level). Aggregated data is anonymized and is not deleted.
Google is our processor, with whom we have concluded the agreements required for this purpose. We have also taken measures to ensure appropriate and adequate safeguards for the protection of personal data in the context of transfers to third countries by concluding EU standard contractual clauses and, where necessary, implementing additional measures to protect the rights of data subjects.
The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.
We use the Matomo web analytics platform to analyze visitor data. This serves to optimize our products based on our legitimate interest, Art. 6 (1) (f) GDPR. For this purpose, the following usage information is transmitted to our server and stored for analysis purposes:
When you contact us, we only collect personal data (e.g. name, e-mail address, telephone number) if you provide it to us voluntarily. This information is expressly provided on a voluntary basis. The purpose of processing your data is to process and respond to your enquiry. This is also our legitimate interest in data processing in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR.
In the case of a telephone enquiry, your data will also be processed by telephone applications and in some cases also via a voice dialogue system in order to support us in the distribution and processing of enquiries.
We will delete your data that we have received in the course of contacting you as soon as your request has been fully processed and no further communication with you is required or requested by you.
Verantwortlicher im Sinne der DSGVO ist die
Nordbayerischer Kurier Zeitungsverlag GmbH
An der Feuerwache 5
95445 Bayreuth
atarax group of companies
Luitpold-Maier-Str. 7
D-91074 Herzogenaurach
Germany
Phone: 09132 79800
Email: swmh-datenschutz@atarax.de.
Right to object
If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR or Art. 6 para. 1 sentence 1 lit. e) GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR. In the event of such an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
In the case of direct marketing, you have the right to object at any time to the processing of personal data concerning you. If you object to processing for direct marketing purposes, the personal data will no longer be processed for these purposes.
Right to lodge a complaint with the supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority against the processing of your personal data if you feel that your rights under the GDPR have been violated. As a rule, you can contact the supervisory authority of your usual place of residence, your workplace or our company headquarters.
With this privacy policy, we fulfil the information obligations under the GDPR. Our General Terms and Conditions also contain data protection information. These explain in detail how your personal data, which we require to fulfil contracts and for the purpose of identity and credit checks, is processed.
We link to websites of other providers or have integrated elements from them into our website. This data protection information does not apply to them - we have no influence on these sites and cannot check that others comply with the applicable data protection regulations.
We reserve the right to change or adapt this privacy policy at any time in compliance with the applicable data protection regulations.