Privacy notes / Data protection information

In connection with your use of this online shop or online service portal for subscribers or subscriptions, personal data is collected from you and processed by us and our service providers. We do this responsibly and only to the extent permitted by the applicable data protection laws, especially the EU Data Protection Basic Regulation (in short: DSGVO).

In order for you to know which of your data we use and for what purpose, we have compiled all relevant details and also the mandatory information required by the DSGVO for the transparency of data processing for you.

Please note that books, magazines and other products are sometimes also distributed via third-party providers for which we are not responsible. In this respect, this data protection notice only applies if it is referred to this website by us or our service providers.

Responsible for the protection of your personal data and compliance with the DSGVO in connection with the aforementioned online shops or service portals is Ampelpublishing, Guido Lange.

If you have any questions about data protection at Ampelpublishing or would like to exercise your rights in matters of data protection (see "My rights as a data subject"), please contact our customer service department using the following contact details:

Ampelpublishing
Guido Lange
Am Kapellchen 18
56283 Noertershausen
Germany

1. purposes and legal basis of the processing

Personal data are processed mainly for the following purposes or on the basis of the following legitimate interests:

to fulfil the contracts concluded with you, in particular to carry out, deliver and invoice your orders;
to analyse, statistically evaluate and optimise our offers and services, in particular to find out what our users are statistically particularly enthusiastic about and what they are not, how profitable advertising expenditure has been, at which points user groups cancel an order process, or what else can possibly be improved when using our services;
for fraud prevention, delivery address verification and credit checks;
to ensure the operation of the online shops, in particular to recognise and ward off any attack patterns and to detect errors in the system, and also to ensure that any advertising contradictions are effectively taken into account in the corresponding data processing;
to cultivate customer relations and direct marketing on our own behalf by ourselves;
to ensure and document any objections to advertising use of the data;
for the targeted display of advertising banners with offers of our products on websites of third parties who cooperate with the same advertising networks as we do, as well as for the evaluation and billing of corresponding banner placements; 
for the fulfilment of legal requirements, in particular commercial and tax law storage obligations, and possible obligations to provide information to authorities as well as for criminal prosecution, defence or enforcement of claims.
The processing of your personal data is carried out lawfully on the basis of the DSGVO, specifically - depending on the case - on the basis of consent, the conclusion of a contract with you or for the implementation of pre-contractual measures, for the fulfilment of legal or official requirements and/or after weighing up justified interests in individual cases or on the basis of pseudonymous user profiles (see DSGVO Article 6 Paragraph 1 Letters a), b), c) and f) or TMG § 15 Paragraph 3).

Insofar as we process personal data on the basis of consent or on the basis of weighing up legitimate interests, we will only do so as long as you do not object or revoke your consent. You will find more details on this and a reference to corresponding setting options below under the details on individual data processing (see item 6).


2. categories of recipients of personal data

There are things that others can do better than us. That is why we have engaged some service providers. With some of them we are part of a group of companies, with others we are only connected in business. Some service providers will have to have access to personal data, or at least will be able to do so.

This applies, for example, to the collection of outstanding invoices as well as the dispatch of orders, invoices and newsletters and any package announcements.

We commission all of our service providers in writing strictly in accordance with the provisions of the DSGVO and also have technical and organisational measures explained to us, for example, with which the service providers protect the personal data entrusted to them from misuse. Furthermore, we take care to disclose personal data to our service providers only to a limited extent, unless comprehensive data access is required for the specific tasks of the respective service providers.

3. data transfers to third countries outside the EU

We store and process personal data of our customers such as name, contact data as well as order, delivery and payment data exclusively within the EU.

As far as it is not so-called clear data, but data that is only processed under an identification code ('pseudonym') and in this respect has no directly recognisable reference to a specific person, we do, however, partly use the services of providers outside the EU. These providers also regularly store and process this data outside the EU.

Insofar as, in the opinion of the EU Commission, the same level of data protection as in Germany does not exist in the respective affected areas anyway, we always insist on guarantees required by data protection law for a corresponding data transfer to other EU countries. As a rule, this is the conclusion of a data protection agreement specified by the EU Commission (so-called EU standard contract clauses), and especially in the case of transfers to the USA, the participation of the service provider in the so-called EU-US Privacy Shield.

For further information on this, please see section 6 below, where we have listed further details on individual services, providers and data processing.

4. duration for which the personal data is stored

We delete data records if and to the extent that the purposes for which they were collected or processed have ceased to apply and no statutory retention periods apply. The latter can be up to 10 years (see § 147 paragraph 3 of the German Tax Code). Instead of deletion, the data records concerned are restricted or blocked in certain constellations, at least to certain processing purposes.

5 Your rights as a data subject

In accordance with the DSGVO, you have the right to request information on your personal data, as well as to demand correction, deletion or at least restriction of the processing of your personal data. You also have the right to data transferability.

Furthermore, you have the right at any time to revoke any consent granted for the processing of personal data, as well as to object to processing which is based on the weighing of legitimate interests, insofar as there are reasons for this which arise from your particular situation. For further details, please refer to section 6 below:

If automated decisions are taken which have legal effects or are similarly substantial, you have the right to express your own point of view and to challenge the decision and ultimately to obtain human intervention by a natural person from us as controller.

In addition, you have the right of appeal to the competent data protection supervisory authority, namely the Hessian Data Protection Commissioner. Contact details for the Hessian data protection officer can be found at https://datenschutz.hessen.de/.

Individual data processing in detail:

6. details of online analyses and advertising tracking services based on pseudonymous processing 

We use special technologies for internal evaluations and also for the placement of advertising banners in online offers from third parties, in which usage data is processed, evaluated and used for the display of advertising banners on a pseudonymous basis. Usually this happens in the form of cookies and so-called counting pixels.

The associated processing of personal data is carried out - unless anonymous anyway - on the basis of pseudonymous user profiles under consideration of legitimate interests (DSGVO Article 6 para. 1 letter f) or TMG § 15 para. 3), in some cases also on the basis of a corresponding consent (DSGVO Article 6 para. 1 letter a).

Ampelpublishing has a legitimate interest in advertising our products, services and offers by displaying individual and target group-oriented advertising banners. In addition, Ampelpublishing also has a legitimate interest in the fact that - at least to a limited extent in terms of time and subject matter - pseudonymous user profiles can also be created until further notice, which is essential for the individual and target group-oriented display of advertising banners. In this context, it is also decisive that recognition is regularly only possible within the respective device-browser combinations and, moreover, can only be achieved by the parties involved in the advertising play-outs. Furthermore, the decision made on the basis of the profile is directed towards the selection of a specific advertising banner and is neither legally nor otherwise significant. In addition, the tracking system used and corresponding opt-out options are prominently displayed. Profiles with a focus on children are not created.

You can fundamentally object to this usage evaluation for most of the online analyses and advertising tracking services used by us by selecting a corresponding setting in your browser which does not store third party cookies but automatically rejects them. You will find instructions on how to do this in an Internet search with the keyword "cookie settings" in conjunction with the name of your browser (e.g. Safari, Google Chrome, Mozilla Firefox or Microsoft Internet Explorer).

In addition, we have also provided an individual opt-out option for each service below. This is technically usually realized by setting a so-called opt-out cookie. Such cookies generally have an unlimited lifetime (so-called permanent cookies). Please note, however, that an opt-out must be performed again if you have deleted these or all cookies from your browser. It is also technically impossible for us to transfer such an opt-out to other browsers or devices that you use, so that the opt-out must also be exercised there individually.

More details on the individual services or providers used by us and the corresponding opt-out options are given below:

6.1 Usage evaluation with the help of Google Analytics

[Who] We use Google Analytics, web analytics service provided by Google Inc. Mountain View, CA 94043, USA ("Google").

[What/How] A cookie is set for this. The information generated by this cookie about your use of this website (including your IP address) is transferred to a Google server in the USA and stored there. We use Google Analytics exclusively with the extension of IP anonymisation ('anonymize_IP'). This means that IP addresses are only processed in abbreviated form in order to exclude the possibility of direct personal reference. Through the IP-anonymisation on this website your IP-address will be shortened by Google within member states of the EU or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.

[Why] Google will - at least according to its own information - under no circumstances connect your IP address with other Google data. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for us and providing other services relating to website activity and internet usage.

Where and to whom] Google may transfer the collected information to third parties if this is legally required or if third parties process this data on behalf of Google.

Further information] You can find out more about the security and data protection principles of Google Analytics at http://www.google.com/intl/de/analytics/learn/privacy.html .

[Opt-Out/Consent possibility] 
To object to the data collection and storage by Google Analytics, this browser plugin published by Google can be installed: http://tools.google.com/dlpage/gaoptout?hl=de.


6.2 Use of remarketing technologies

Why] We use so-called remarketing technologies of several services or providers. This technology allows users who have visited IP's shops or offer pages and are interested in the offer to be addressed again by targeted advertising on the websites of our advertising partners through the insertion of advertisements.

What/how] The insertion of advertising is achieved through the use of cookies, which can be used to analyse user behaviour when visiting the website and then used for targeted product recommendations and interest-based advertising.

Who] We currently work with the following services and providers:

Doubleclick by Google and Google Remarketing from Google Inc, Mountain View, CA 94043, USA. You can find further information and settings options at https://adssettings.google.de.

[Opt-Out/Confirmation] 
Active - click here to disable Google ad tracking on this site.

Facebook Custom Audience from Facebook Inc, Palo Alto, CA 94304, USA. For more information and settings options, please visit https://www.facebook.com/about/privacy/update.

[Opt-Out/Consistent] 
Active - click here to disable Facebook tracking on this website.

6.3 Use of Conversion Tracking

[Why] Traffic light publishing places paid advertisements on several platforms. In order to determine how many people click on these paid ads and then buy something, we and our advertising partners use so-called conversion tracking.

[What/how] Conversion tracking is technically realized via so-called cookies. The cookies for conversion tracking are only stored on your end device when you click on an ad placed by the respective advertising partner. These cookies are deleted after a maximum of 90 days and do not contain any information by which you can be personally identified. The cookies are only used to recognize that the ad has been clicked on and redirected to this page.

Who] We work together with the following services or providers:

Conversion tracking from Microsoft Corporation, Redmond, WA 98052, USA. For more information, please visit: https://privacy.microsoft.com/de-de/privacystatement.
[Opt-Out/Resistance]: 
https://advertise.bingads.microsoft.com/de-de/ressourcen/richtlinien/optout-optimization.

Seat of Ampelpublishing

The registered office of Ampelpublishing is Am Kapellchen 18, 56283 Nörtershausen, Germany.

Status and updates

This information was last updated on 23 January 2020. We may update it from time to time for operational, economic or legal reasons. We will inform you in an appropriate form about all significant changes made by us to this data protection notice.