This Privacy Policy informs you about the nature, scope, and purpose of the processing of personal data (hereinafter briefly referred to as “data”) within our online offering and the associated websites, functions, and content as well as external online presences, such as our social media profiles (hereinafter collectively referred to as “online offering”). Regarding the terminology used, such as “processing” or “controller,” we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).
Controller
REGIME Media GmbH
Frankfurter Allee 13-15
10247 Berlin
Tel.: +49 30 695 972 0
E-Mail: hello@serieslyberlin.com
Data Protection Officer
For questions about data protection and this Privacy Policy, you can also contact the Data Protection Officer of Styleheads:
REGIME Media GmbH
Data Protection Officer
Frankfurter Allee 13-15
10247 Berlin
E-Mail: datenschutz@serieslyberlin.com
Types of Processed Data:
Purpose of Processing
Terminology Used
“Personal data” refers to any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g., cookie), or to one or more specific features that are the expression of the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
“Processing” is any operation or set of operations performed on personal data, whether or not by automated means. The term is broad and encompasses practically any handling of data.
The “controller” is the natural or legal person, authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data.
Applicable Legal Bases
In accordance with Art. 13 GDPR, we inform you of the legal bases for our data processing. If the legal basis is not mentioned in this Privacy Policy, the following applies: The legal basis for obtaining consents is Art. 6 (1) (a) and Art. 7 GDPR, the legal basis for processing to fulfill our services and perform contractual measures as well as responding to inquiries is Art. 6 (1) (b) GDPR, the legal basis for processing to fulfill our legal obligations is Art. 6 (1) (c) GDPR, and the legal basis for processing to safeguard our legitimate interests is Art. 6 (1) (f) GDPR. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) (d) GDPR serves as the legal basis.
Security Measures
We request that you regularly inform yourself about the content of our Privacy Policy. We will adjust the Privacy Policy as soon as the changes in the data processing we perform make it necessary. We will inform you as soon as changes require an action on your part (e.g., consent) or another individual notification.
Collaboration with Processors and Third Parties
If we disclose data to other persons and companies (processors or third parties) within the scope of our processing, transfer it to them, or otherwise grant them access to the data, this will only be done on the basis of a legal permission (e.g., if the transfer of data to third parties, such as payment service providers, is necessary for the performance of a contract in accordance with Art. 6 (1) (b) GDPR), you have consented, there is a legal obligation, or based on our legitimate interests (e.g., the use of agents, web hosts, etc.).
If we commission third parties with the processing of data based on a so-called “Data Processing Agreement,” this is done on the basis of Art. 28 GDPR.
Transfers to Third Countries
If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)) or this occurs within the scope of using services from third parties or disclosing or transmitting data to third parties, this will only be done if it is necessary to fulfill our (pre)contractual obligations, based on your consent, due to a legal obligation, or based on our legitimate interests. Subject to legal or contractual permissions, we process or have data processed in a third country only if the specific conditions of Art. 44 et seq. GDPR are met. This means that the processing takes place, for example, based on special guarantees, such as the officially recognized determination of an adequate level of data protection comparable to the EU (e.g., for the USA through the “Privacy Shield”) or compliance with officially recognized special contractual obligations (so-called “Standard Contractual Clauses”).
Rights of the Data Subjects
You have the right to request confirmation as to whether relevant data is being processed and to obtain information about this data and further information and a copy of the data in accordance with Art. 15 GDPR.
You have the right to request the completion of your data or the correction of inaccurate data concerning you in accordance with Art. 16 GDPR.
You have the right to request the immediate deletion of relevant data or, alternatively, to request the restriction of processing of the data in accordance with Art. 17 and Art. 18 GDPR.
You have the right to receive the data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format and to request its transmission to other controllers in accordance with Art. 20 GDPR.
Furthermore, you have the right to lodge a complaint with the competent supervisory authority in accordance with Art. 77 GDPR.
Right of Withdrawal
You have the right to withdraw consents given in accordance with Art. 7 (3) GDPR with effect for the future.
Right to Object
You may object to the future processing of your data in accordance with Art. 21 GDPR at any time. The objection can particularly be made against processing for the purposes of direct advertising.
Cookies and Right to Object to Direct Advertising
“Cookies” are small files that are stored on the user’s device. Within cookies, various information can be stored. A cookie primarily serves to store the information related to a user (or the device on which the cookie is stored) during or after their visit to an online offering. Temporary cookies, also known as “session cookies” or “transient cookies,” are cookies that are deleted after a user leaves an online offering and closes their browser. Such cookies can, for example, store the contents of a shopping cart in an online shop or a login status. “Permanent” or “persistent” cookies are cookies that remain stored even after the browser is closed. For example, the login status can be stored when users visit the site after several days. Such cookies can also store users’ interests, which can be used for reach measurement or marketing purposes. “Third-party cookies” are cookies that are offered by providers other than the controller operating the online offering (otherwise, if they are only their cookies, they are referred to as “first-party cookies”).
We may use temporary and permanent cookies and provide information about them in our Privacy Policy.
If users do not want cookies to be stored on their device, they are requested to disable the corresponding option in their browser settings. Stored cookies can be deleted in the browser settings. The exclusion of cookies may lead to limitations in the functionality of this online offering.
A general objection to the use of cookies for online marketing purposes can be made to a variety of services, particularly in the case of tracking, via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be prevented by adjusting the settings in the browser. Please note that not all functions of this online offering may be available in that case.
Deletion of Data
The data we process is deleted or restricted in its processing in accordance with Art. 17 and 18 GDPR. Unless expressly stated otherwise in this Privacy Policy, the data stored with us will be deleted as soon as it is no longer needed for its purpose and there are no legal retention obligations preventing its deletion. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax reasons.
In Germany, retention occurs in particular for 10 years in accordance with §§ 147 (1) AO, 257 (1) Nos. 1 and 4, (4) HGB (books, records, management reports, booking documents, commercial books, taxation-related documents, etc.) and 6 years in accordance with § 257 (1) Nos. 2 and 3, (4) HGB (commercial correspondence).
In Austria, retention occurs in particular for 7 years in accordance with § 132 (1) BAO (accounting documents, receipts/invoices, accounts, vouchers, business papers, income and expenditure statements, etc.), for 22 years in connection with real estate, and for 10 years for documents related to electronically provided services, telecommunications, broadcasting, and television services provided to non-entrepreneurs in EU member states, and for which the Mini-One-Stop-Shop (MOSS) is used.
Collection of Access Data and Log Files
We, or our hosting provider, collect data on every access to the server on which this service is located (so-called server log files) based on our legitimate interests in the sense of Art. 6 (1) (f) GDPR. The access data includes the name of the retrieved website, file, date and time of the retrieval, amount of data transferred, message about successful retrieval, browser type and version, the operating system of the users, referrer URL (the previously visited page), IP address, and the requesting provider.
Logfile information is stored for security reasons (e.g., for the investigation of misuse or fraud) for a maximum of 7 days and then deleted. Data that needs to be retained for evidentiary purposes is exempt from deletion until the respective incident is fully resolved.
Registration Function, Participation in Contests, Reservation of Participation Slots
Definition “Registration”: Users can optionally create a user account, participate in contests, sign up to receive further information, or reserve slots for participation in events (“Registration”). During the registration process, users are provided with the required mandatory information. The data entered during registration is used for the purpose of utilizing the offering. Users may be informed about offering-related or registration-related information, such as changes to the offering scope or technical circumstances, by email. If users have terminated their user account, their data related to the user account will be deleted, subject to retention for commercial or tax reasons as necessary under Art. 6 (1) (c) GDPR. It is the users’ responsibility to secure their data before the end of the contract. We are entitled to irrevocably delete all data stored during the contract period.
In the context of using our registration and sign-up functions as well as the use of the user account, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as those of the users, to protect against misuse and other unauthorized use. Disclosure of this data to third parties generally does not occur, unless necessary for the assertion of our claims or there is a legal obligation under Art. 6 (1) (c) GDPR. IP addresses are anonymized or deleted at the latest after 7 days.
Contact
When contacting us (e.g., via contact form, email, phone, or social media), the information provided by users is processed for the purpose of handling the contact request and its processing in accordance with Art. 6 (1) (b) GDPR. The information provided by users may be stored in a Customer Relationship Management System (“CRM System”) or comparable inquiry organization.
We delete inquiries once they are no longer needed. We review the necessity every two years; legal archiving obligations also apply.
Press Information and News Transmission to Business Operators and Interested Parties
With the following information, we inform you about the contents of our press information and news transmission to business operators and interested parties, as well as the registration, dispatch, and statistical evaluation procedures and your rights to object. We send press information to companies, editorial offices, and service providers based on our legitimate interests under Art. 6 (1) (f) GDPR. Recipients are informed about the possibility of objecting to such contact in every general contact.
Contents of press information and news to business operators and interested parties: We send press information and news to business operators and interested parties, emails, and other electronic notifications with information only to recipients who, in turn, work economically with such information, editorially process it, or have previously requested the transmission of the information. The press information and news to business operators and interested parties contain only information from or about our business customers, their services, our own services, or us
Newsletter
With the following information, we provide details about the content of our newsletter, as well as the registration, dispatch, and statistical evaluation procedures and your rights to object. By subscribing to our newsletter, you agree to receive it and to the described procedures.
Content of the Newsletter: We send newsletters, emails, and other electronic notifications containing promotional information (hereinafter referred to as “Newsletters”) only with the consent of the recipients or based on legal permission. If the content of the newsletter is specifically described during the registration process, this description is binding for the user’s consent. Otherwise, our newsletters contain information about our services and us.
Double Opt-In and Logging: Subscription to our newsletter is carried out using a so-called double opt-in procedure. This means that after registration, you will receive an email asking you to confirm your subscription. This confirmation is necessary to prevent unauthorized registrations using someone else’s email address. Registrations for the newsletter are logged to demonstrate compliance with legal requirements for the registration process. This includes storing the registration and confirmation times, as well as the IP address. Changes to your data stored with the dispatch service provider are also logged.
Registration Data: To register for the newsletter, you only need to provide your email address. Optionally, we ask you to provide a name for personalized addressing in the newsletter.
Germany: The dispatch of the newsletter and the associated success measurement is based on the consent of the recipients in accordance with Art. 6 (1) (a), Art. 7 GDPR in conjunction with § 7 (2) No. 3 UWG or based on legal permission under § 7 (3) UWG. The logging of the registration procedure is based on our legitimate interests in accordance with Art. 6 (1) (f) GDPR. Our interest is in using a user-friendly and secure newsletter system that serves both our business interests and the expectations of users and allows us to prove consent.
Cancellation/Withdrawal: You can cancel the receipt of our newsletter at any time, i.e., withdraw your consent. A link to cancel the newsletter is provided at the end of each newsletter. We may store the unsubscribed email addresses for up to three years based on our legitimate interests before deleting them, to prove a previously given consent. The processing of this data is limited to the purpose of potentially defending against claims. An individual deletion request is possible at any time, provided that the former existence of consent is confirmed.
Dispatch Service Provider for Press Information and News to Business Operators and Interested Parties, as well as for Newsletters:
The dispatch of press information and news to business operators and interested parties, as well as newsletters, is carried out either by personal email message or using the dispatch service provider “MailChimp,” a newsletter dispatch platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the privacy policy of the dispatch service provider here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield framework, providing a guarantee to comply with European data protection standards (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The dispatch service provider is used based on our legitimate interests in accordance with Art. 6 (1) (f) GDPR and a data processing agreement in accordance with Art. 28 (3) Sentence 1 GDPR.
The dispatch service provider may use the recipient data in pseudonymous form, i.e., without assigning it to a user, to optimize or improve its own services, e.g., to technically optimize the dispatch and presentation of newsletters or for statistical purposes. However, the dispatch service provider does not use the data of our newsletter recipients to contact them directly or to pass the data on to third parties.
Success Measurement for Press Information and News to Business Operators and Interested Parties, as well as for Newsletters:
The press information and news to business operators and interested parties, as well as newsletters, contain a so-called “web beacon,” i.e., a pixel-sized file that is retrieved from our server or, if we use dispatch service providers, from their servers when the newsletter is opened. During this retrieval, technical information such as browser information and your system, as well as your IP address and the time of retrieval, are collected.
This information is used to technically improve the services based on technical data or to understand the audience and their reading behavior based on the locations of retrieval (which can be determined using the IP address) or access times. Statistical surveys also include determining whether the press information and news to business operators and interested parties, as well as newsletters, are opened, when they are opened, and which links are clicked. Although this information can technically be assigned to individual recipients, neither we nor, if used, the dispatch service provider aims to observe individual users. The evaluations are intended to recognize the reading habits of our users and adjust our content accordingly or send different content based on the interests of our users.
Google Analytics:
Based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online services within the meaning of Art. 6 (1) (f) GDPR), we use Google Analytics, a web analysis service provided by Google LLC (“Google”). Google uses cookies. The information generated by the cookie about the use of the online services by users is usually transmitted to and stored on a Google server in the USA.
Google is certified under the Privacy Shield framework, providing a guarantee to comply with European data protection standards (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google will use this information on our behalf to evaluate the use of our online services by users, to compile reports on activities within this online service, and to provide other services related to the use of this online service and internet usage. Pseudonymous user profiles may be created from the processed data.
We use Google Analytics only with IP anonymization enabled. This means that Google will shorten the IP address of users within European Union member states or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there.
The IP address transmitted by users’ browsers will not be merged with other data from Google. Users can prevent the storage of cookies by adjusting their browser software accordingly; users can also prevent the collection of data generated by the cookie and related to their use of the online service, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
For more information on data usage by Google, settings and opt-out options, please refer to Google’s privacy policy (https://policies.google.com/technologies/ads) and the settings for the display of Google ads (https://adssettings.google.com/authenticated).
User data is deleted or anonymized after 14 months.
Facebook Pixel, Custom Audiences, and Facebook Conversion:
Within our online services, we use the Facebook Pixel from the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”), based on our legitimate interests in analyzing, optimizing, and economically operating our online services.
Facebook is certified under the Privacy Shield framework, providing a guarantee to comply with European data protection standards (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
With the help of the Facebook Pixel, Facebook can identify visitors to our online services as a target group for displaying ads (so-called “Facebook Ads”). Accordingly, we use the Facebook Pixel to ensure that our Facebook Ads are only shown to Facebook users who have also shown interest in our online services or who have certain characteristics (e.g., interests in specific topics or products determined based on visited websites) that we transmit to Facebook (so-called “Custom Audiences”). We also use the Facebook Pixel to ensure that our Facebook Ads match the potential interest of users and are not annoying. Additionally, we can track the effectiveness of Facebook ads for statistical and market research purposes by seeing if users were redirected to our website after clicking on a Facebook ad (so-called “Conversion”).
The processing of data by Facebook is carried out in accordance with Facebook’s data use policy. General information about Facebook Ads can be found in Facebook’s data use policy: https://www.facebook.com/about/privacy/. Specific information and details about the Facebook Pixel and its functionality can be found in Facebook’s help section.
You can object to the collection by the Facebook Pixel and the use of your data for displaying Facebook Ads. To configure the types of ads you see on Facebook, visit the Facebook settings page and follow the instructions for managing ad-based advertising: https://www.facebook.com/settings?tab=ads. Settings are device-independent, meaning they apply to all devices such as desktop computers or mobile devices.
You can also object to the use of cookies for measuring reach and advertising purposes through the Network Advertising Initiative’s opt-out page (http://optout.networkadvertising.org/) and additionally through the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).
Online Presences in Social Media:
We maintain online presences within social networks and platforms to communicate with customers, interested parties, and users active there and to inform them about our services. When accessing these networks and platforms, the terms of service and the data processing policies of their respective operators apply.
Unless otherwise stated in our privacy policy, we process user data if users communicate with us within social networks and platforms, e.g., by writing posts on our online presences or sending us messages.