When you visit a website, register for a service, handle contracts, or interact with us in other ways, personal data is processed. This happens both automatically (e.g. your IP address) and when you actively provide data (e.g. when you place an order). The General Data Protection Regulation (GDPR) requires us to inform you about this processing. For example, you should know what purposes we pursue, how long your information is stored, which legal basis the processing is based on, and which recipients of data there may be. This is what this privacy policy is about.
Verantwortlich für die Datenverarbeitung ist grundsätzlich die Studio ZX GmbH, Buceriusstraße, Eingang Speersort 1, 20095 Hamburg. Weitere Angaben zum Unternehmen sowie Kontaktmöglichkeiten finden Sie am Ende der Datenschutzerklärung.
Websites have different functions and ways to interact. Sometimes you can view content or use an online form to contact us. On other pages, you can register. Depending on the website, the scope of data processing varies.
When you visit a website, technical usage data (so-called log data) is processed temporarily. This data is transmitted by your browser and includes, among other things, your computer’s IP address, the client request (file name and URL), the HTTP response code, and the website from which you came to our website.
The data processing described is permitted to protect legitimate interests (Art. 6(1)(f) GDPR). We depend on achieving the greatest possible reach for our companies and content. Operating a website is essential for this. The processing happens automatically and cannot be prevented. It is technically necessary in order to access a website.
The log data is deleted or anonymized as soon as it is no longer needed.
When you access the website, a so-called consent banner appears with information about data processing on your end device. There you will find details about the services we use and the cookies that are set. Cookies are small text files that are stored on your end device when you visit a website. Cookies are used to store information related to a website locally on your computer for a certain period of time and to transmit it back to a server upon request. This can serve different purposes.
Some of the data processing that takes place is legally permitted for providing the website (§ 25(2) TDDDG). This includes setting cookies that are strictly necessary for certain actions to work. Some processing only takes place if you have given your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). In the consent banner, you can agree to or refuse specific types of processing. You are not required to consent to the data processing options offered. However, you cannot prevent the technically necessary processing, as the website’s functionality could otherwise not be ensured.
Detailed information about the services used, the purposes of processing, the storage period, and other conditions can be found in the consent banner and in the following paragraphs.
Um unsere Angebote zu verbessern, analysieren wir die Nutzung unserer Website. Dazu verwenden wir Tools, die jeweils unterschiedliche Daten erheben und für uns auswerten. Dies geschieht teilweise durch auf Ihrem Endgerät abgelegte Cookies und andere Technologien. Anhand der entstehenden Statistiken und Reports können wir sehen, welche Inhalte besonders beliebt sind, welche Unterseiten wann aufgerufen werden und ob es technische Probleme gibt. Welche Tools eingebunden sind, ergibt sich aus dem Consent-Banner.
Die stattfindende Datenverarbeitung ist von Ihrer Einwilligung abhängig (Art. 6 Abs. 1 a) DSGVO). Das gleiche gilt für die Speicherung von Informationen auf Ihrem Endgerät und den Zugriff auf Informationen, die bereits gespeichert sind (§ 25 Abs. 1 TDDDG). Sie können im Consent-Banner auswählen, ob Sie die Verarbeitung für einen bestimmten Zweck insgesamt zulassen oder konkret einzelne Dienste auswählen. Die Bereitstellung Ihrer Daten ist freiwillig und hat keine Auswirkung auf die Nutzung unserer Websites und Produkte.
Informationen zu den einzelnen Tools und der konkreten Verarbeitung (insbesondere Name des Anbieters, Datenkategorien, Zweck, Speicherdauer) finden Sie im Consent-Banner.
We ourselves depend on advertising our services on the internet. We use various forms of personalised advertising to reach you and other potential customers directly. For this purpose, we use different tracking tools to track online activities across different websites and link them together. The processing is carried out using technologies such as cookies, pixels, or scripts and includes information about which pages you visit and for how long, which offers you view, which device and operating system you use, and your approximate geographical location (which can be determined based on the IP address). The data is linked with other information to create a meaningful profile. This helps us better understand who you are and what interests you have. The collected information is used to show you personalised advertising. This means that you may see ads on our websites and on those of other providers that are tailored to your interests, preferences, and previous activities. Personalised advertising increases the likelihood that you click on our ads and use our services. We can also offer our advertising customers better opportunities to present their products or services to a relevant target group.
The processing described only takes place if you have given your consent via the consent banner (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Providing your data for the purpose described is voluntary.
You can find information about the individual tools and the specific processing (in particular the name of the provider, data categories, purpose, storage period) in the consent banner.
Various external media from third-party providers are embedded on our website (e.g. videos, audio recordings, interactive maps, or social media posts). Due to this embedding (e.g. via HTML or JavaScript), your browser is instructed to establish a connection to the server of the respective third-party provider. This results in data being transmitted (at least the IP address, but also the referrer URL) and, where applicable, information being stored on or read from your device. The third-party provider may, under certain circumstances (in particular if you are actively logged in there), link this information with data about you that it has already stored. In this way, it may receive very detailed information about your interests outside its own platform.
If, when accessing the external media and content, the linking described above of personal data takes place, the processing depends on your consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG). You are free to allow this. However, if you do not agree to the processing, you cannot use the corresponding external media and content (and, for example, cannot watch a video embedded on our site). Not all third-party providers link personal data. If, for the embedding, only usage data that is technically necessary is processed, the processing is permitted to safeguard our legitimate business interests (Art. 6(1)(f) GDPR and Section 25(2) TDDDG).
You can find information about the individual tools and the specific processing (in particular the name of the provider, data categories, purpose, storage period) in the consent banner.
To control data processing on the website in compliance with data protection law, we use a consent banner to obtain consent. We store the settings you have chosen by placing cookies.
The data processing that takes place on your device is permitted or necessary to safeguard our legitimate interests and to provide our service (Art. 6(1)(f) GDPR, Section 25(2) No. 2 TDDDG). In order to operate our website in compliance with data protection law, we must electronically document whether consent has been given and whether it has been withdrawn. Otherwise, in case of doubt, we may not be able to prove that you have consented to certain processing operations. In this respect, the data processing is necessary in order to use our website.
The cookies used to store your settings are stored until you withdraw your consent.
We offer various options for contacting us (e.g., online contact form, email address). We process the data you provide in order to respond to your inquiry.
Data processing in a (pre-)contractual context is permitted by law (Article 6(1)(b) GDPR). Providing your personal data is necessary in order to communicate with us.
After the communication has been completed, we store your data for a period of 6 months. If you register with us or if another form of continued contact occurs, your data will continue to be stored and will only be deleted once the applicable statutory retention periods have expired.
We regularly organise events and seminars on various topics. Registration is usually done online and, depending on the event, requires the provision of different data.
If you would like to register for one of our events, you can usually do so online. Depending on the event, different data is requested and passed on to our partners and sponsors (e.g. to create participant lists or name badges, or to enable the transmission of documents). If members of the constitutional bodies of the Federal Republic of Germany (e.g. politicians) are guests at an event or give a presentation, we are obliged to pass data on to the Federal Criminal Police Office (Bundeskriminalamt) and other authorities. This allows potential sources of danger to be identified and, if necessary, appropriate risk-prevention measures to be taken. For some event formats, a list of participants is published in the printed programme at the conference.
The data processing that takes place in the course of running the event is permitted to enable your participation and to safeguard legitimate interests (Art. 6(1)(b) and (f) GDPR). Our partners and sponsors are your subject-matter contacts and need the participants’ data for handling the event. The information marked with an asterisk is required for the organisation of our events and entitles you to attend. Any additional information is voluntary.
We store the data relating to your participation at least for the duration of the applicable statutory retention obligations. As a rule, this is 8 years.
Video and photo recordings are regularly made at our events. We, as well as our partners and sponsors, use them to document the event and present it to the public. The recordings may be published in print or digital form (e.g. on websites or social networks).
The processing of video and photo recordings is permitted to safeguard legitimate interests (Art. 6(1)(f) GDPR). We organise events that attract public attention, featuring personalities from business, politics and culture. There is an increased public interest in receiving information about the content of the event, the people attending, and the general conditions. As a rule, both group and individual recordings are made. As a participant, you can leave the recording area at any time.
Video and photo recordings are generally stored without any time limit. If they are published on the internet, they may also remain accessible there for an unlimited period.
Wir nutzen verschiedene Kommunikationskanäle, um mit Ihnen in Verbindung zu treten, Mitteilungen entgegenzunehmen oder Ihnen interessante Angebote und Informationen zukommen zu lassen. Werbliche Ansprache ist wichtig für unser Unternehmen, um wirtschaftlich erfolgreich zu sein. Sie können der Nutzung Ihrer personenbezogenen Daten zu werblichen Zwecken jederzeit widersprechen und / oder sich von unseren E-Mail-Newslettern über den Abmelde-Link am Ende jedes Newsletters austragen.
We use the email address you provide when you log in, register, place an order, or make a booking to send you advertising for our own similar offers.
The use of email addresses to send our own similar offers is expressly permitted by law and does not depend on consent (Section 7(3) UWG). However, providing your personal data in this context is voluntary, and you can object at any time (either by contacting us or via the link at the end of each advertising email).
If you object to the use for advertising purposes, your data will be deleted or blocked for advertising. Deletion is usually not possible because we must continue to store the data collected during a login, registration, order, or booking in order to comply with statutory retention obligations.
We use the postal addresses stored by us, as well as addresses provided by contractual partners, to send offers and information by post.
The use of data for sending postal advertising is permitted in order to safeguard legitimate interests (Article 6(1)(f) GDPR). From an economic perspective, we rely on offering our services to existing and potential customers. In all areas, it is important to actively approach people and send information.
The retention period for postal addresses depends on whether you are a customer or whether we purchased the address. We must store customer data for up to 8 years to comply with statutory retention obligations. Purchased data is used for advertising mailings and is then deleted.
Wir nutzen Ihre Telefonnummer, um Sie über Angebote und Neuigkeiten zu informieren.
Die Verarbeitung erfolgt auf Basis einer Einwilligung (Art. 6 Abs. 1 a) DSGVO, § 7a Abs. 1 UWG). Wir sind gesetzlich nach § 7a UWG verpflichtet, Ihre Einwilligung in die Telefonwerbung zu dokumentieren und für 5 Jahre ab Erteilung sowie nach jeder Verwendung aufzubewahren. Dies gilt unabhängig davon, ob Sie uns Ihre Einwilligung online, schriftlich, per E-Mail, telefonisch oder auf anderem Wege gegebenen haben. Im Falle der telefonischen Einwilligung fertigen wir mit Ihrer Zustimmung eine Aufnahme von der Erteilung Ihrer Einwilligung an und speichern diese zusammen mit Ihren Kontakt- und Vertragsdaten ab. Die Bereitstellung Ihrer Telefonnummer zum Zweck der Werbung ist freiwillig. Nach Ablauf von 2 Jahren nach dem Ende Ihres letzten aktiven Abonnements erlischt Ihre Einwilligung automatisch.
Die Aufbewahrung endet spätestens 7 Jahre nach Ende Ihres letzten aktiven Abonnements. Anschließend werden die Daten gelöscht.
When handling contracts between companies of the ZEIT Publishing Group and their service providers and customers, personal data of the respective contact persons or self-employed individuals is processed. In order to make arrangements and exchange documents, in particular master data and contact data is processed (name, company affiliation, email address, telephone number, etc.). Contract and payment data are also regularly processed.
The lawfulness of this data processing results from the contractual relationship (Art. 6(1)(b) GDPR) or from our legitimate business interest (Art. 6(1)(f) GDPR). For coordinating orders and providing services, it is necessary for our employees to coordinate with you. When handling business transactions, the processing of personal data is part of this and is a normal process. It is necessary because otherwise it would not be possible to perform a contract between you and/or your employer and the companies of the ZEIT Publishing Group.
The information generated in the context of projects and business communication is stored for at least 8 years, as it also constitutes business data of the ZEIT Publishing Group. This storage also includes personal data, as it cannot be separated from the content (e.g. emails sent by you, invoices created, signed contracts).
We process personal data in various systems and, depending on the processing activity, transfer it to other companies, public authorities or individuals. The location of the processing depends on our registered office as well as the locations of our service providers.
We use various processors, such as software providers, data centre operators, call centres and IT service providers. We have carefully selected these companies and concluded a data processing agreement pursuant to Art. 28 GDPR. If, in addition to the companies listed in the Privacy Center, other processors are involved in the processing of data, they are listed below.
Some activities involve the disclosure of personal data to third parties. These may include providers of website tools, cooperation partners, shipping service providers or suppliers. These companies independently determine the purposes of further processing and must ensure compliance with data protection law. If, in addition to the companies already mentioned elsewhere, other third parties are involved in the processing of data, they are listed below.
As a rule, data processing takes place in the European Union and/or the European Economic Area. However, we also use applications and tools where a transfer of data to third countries cannot be ruled out. In such cases, we ensure that appropriate safeguards are in place to guarantee an adequate level of data protection in these third countries. As a rule, the Standard Contractual Clauses provided by the European Commission have been agreed with the providers, or the provider is certified under the Data Privacy Framework.
Under the GDPR, data subjects generally have a number of rights. You can exercise these at any time. However, we are not always obliged to grant a right. For example, a request for erasure may be refused due to statutory retention obligations. Where processing is carried out under joint controllership, you may exercise your rights against any of the companies involved.
You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR).
We have checked whether we are allowed to process your personal data. This applies in particular to all processing carried out for the purposes of legitimate interests (Art. 6(1)(f) GDPR). If you believe that a specific processing activity is not permissible, you can let us know. If, in your individual case, we come to the conclusion that we are indeed not permitted to process your data, we will stop doing so. If your objection relates to advertising messages, we will of course implement it immediately.
Some processing activities are based on consent you have given. You can withdraw this consent at any time with effect for the future. However, this does not affect the lawfulness of the processing carried out up to that point.
To exercise your data protection rights and for questions and complaints about data protection, please use only the email address datenschutz@studiozx.de or our postal address.
You can contact our external Data Protection Officer by post at Herting Oberbeck Datenschutz GmbH, Hallerstr. 76, 20146 Hamburg, or by email at dsb@zeit.de. You also have the right to lodge a complaint with a data protection supervisory authority at any time.