Privacy Statement

Privacy Statement

I. Name and address of the processor 

The processor as per GDPR and other national data protection laws of the member states as well as other data protection regulations is: Arnoldsche Verlagsanstalt GmbH Data Protection Officer Olgastr. 137 70180 Stuttgart Germany Tel.: +49 711 64 56 18 0 E-Mail: art@demo.arnoldsche.eu Website: http://demo.arnoldsche.eu

II. General information on data processing 

1. Scope of processing of personal data We will only process your personal data provided necessary to provide a functional website and for our contents and services. Your personal data is only processed regularly if you have provided consent. An exception shall apply if it is not possible to obtain your consent ahead of time due to practical reasons and legal provisions allow for data processing in this case. 2. Legal basis for processing of personal data Provided we obtain your consent to process your personal data, Art. 6 Sec. 1 a GDPR shall serve as the legal basis. When processing personal data required to fulfil a contract of which you are a contractual party, Art. 6 Sec. 1 b GDPR shall serve as the legal basis. This also applies to processing required to carry out pre-contractual duties. Should processing of personal data be required to fulfil a legal obligation of our company, Art. 6 Sec. 1 c GDPR shall apply as the legal basis. If processing is necessary to protect an entitled business interest of our company or a third-party, and your interests, basic rights, and basic freedoms do not outweigh the former interest, Art. 6 Sec. 1 f GDPR shall apply as the legal basis for processing. 3. Data deletion and storage periods Your personal data is deleted or locked once there is no longer reason to save and collect it, or if you request us to delete or lock it. For more information, refer to the section on the rights of data subjects. Data may also be stored if provided by European or national legislation in harmonised regulations, laws, or other provisions the processor is governed by. Data is also locked or deleted when a retention period set by the named standards expires, unless it should become necessary to retain the data to conclude or fulfil a contract.

III. Provision of the website and creation of log files

1. Processing personal data when visiting our website When using the website for informational purposes only, we only collect the personal data your browser automatically transmits to our server via log files. We collect the following data using the server log files:

  1. Viewed website 
  2. Browser type and version used
  3. Operating system and interface
  4. User internet service provider
  5. User IP address
  6. Date and time of access/request
  7. Website from which the request originates
  8. Website which the user switches to
  9. Amount of data sent in bytes

The data is also stored in our system’s log files. This data will not be stored together with other personal data of the user. Your IP address is also used to perform geolocalisation, i.e. to determine from which region you visit our website. Geolocalization is used solely to display the shop information that is relevant to you. 2. Legal basis for data processing The legal basis for temporary storage of data and log files is Art. 6 Sec. 1 f GDPR. 3. Purpose of data processing Temporary storage of the IP address by the system is necessary in order to provide the website to your computer. The IP address has to remain stored over the duration of the session. It is stored in log files in order to ensure the functionality of the website. In addition, the data helps us optimise the website and ensure the security of our computer systems. In this context, the data is not analysed for marketing purposes. Art. 6 para. 1 letter f of the GDPA forms the legal basis. 4. Retention period These data are deleted once they are no longer required for the purpose for which they were collected. If data are collected to provide the website, this is the case when the session is ended. These data are stored in log files for seven days. Data can also be stored beyond this period. In this case, user IP addresses are deleted or disguised so that it is no longer possible to associate them with the respective client.  5. The right to object and rectification We are required to collect and store specific data in log files in order for the website to work properly. The user does not have the right to object to this. You can disable geolocalization by changing the settings in your Internet browser.

IV. Use of cookies

1. Description and scope of data processing Our website uses cookies. Cookies are small text files that are assigned to the browser you use and stored on your hard disk or device memory. A cookie provides the party that sets the cookie with certain information. As a result, your computer can be recognised when you return to our website. Cookies help us to make the website more user-friendly. Some cookies are essential to navigate around the website and use its features. The following data is collected via cookies:

  1. Language settings
  2. Session-ID
  3. Number of page-hits
  4. Login-Name and password
  5. Cart-Information

2. Legal basis for data processing The legal basis for processing personal data using technically necessary and non-essential cookies is Art. 6 Sec. 1 (f) GDPR.  3. Purpose of data processing The purpose of technically necessary cookies is to simplify website use for users. Some functions on our website cannot be offered without the use of cookies. These require the browser to be recognised even after changing sites. We require cookies for the following applications:

  1. Adjustment of language settings
  2. Operating the web-session
  3. Subscribing and Log-in on our website
  4. Carrying out the selection, ordering, purchase, and payment process in the online shop

Usage data collected via technically necessary cookies is not used to create user profiles. This also forms our interest in processing personal data as per Art. 6 Sec. 1 f GDPR. 4. Retention period, right to object and rectification Cookies are stored on the device you use to visit our website and are transmitted to our site. Therefore, you as a user have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be erased at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.

V. Newsletter

1. Description and scope of data processing On our website you have the option to subscribe to a free newsletter. When subscribing to the newsletter, the data from the input form is sent to us. The only information you have to provide to receive the newsletter is your e-mail address. In addition, we save your IP addresses as well as the time of subscription and confirmation. In order to process the data, we obtain your consent during the subscription process and refer to the Privacy Policy. The newsletter is sent via “MailChimp”, a newsletter distribution platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. We use a third-party tool (MailChimp), which processes and saves this data to send our newsletter. For more information on MailChimp, refer to Datenschutzrichtlinien und Bedingungen Your e-mail addresses and other data collected in the newsletter (e.g. browser and system information, your IP address, time of retrieval) are stored on the servers of MailChimp in the USA. MailChimp uses this information to send and evaluate the newsletter on our behalf. Furthermore, MailChimp can use this data according to its own information to optimize or improve its own services, e.g. to technically optimize the sending and presentation of the newsletter or for economic purposes, in order to determine which countries the recipients are from. However, MailChimp does not use the data of our newsletter recipients to write them down or pass them on to third parties. MailChimp is certified under the US-EU data protection agreement “Privacy Shield” and commits itself to comply with the EU data protection regulations (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). 2. Legal basis for data processing For the newsletter subscription process, we use a double opt-in method. If you do not confirm subscribing within 24 hours, your information is locked and automatically deleted in one month. Within the context of newsletter subscription, the legal basis for processing data is your agreement as per Art. 6 Sec. 1 a GDPR. 3. Purpose of data processing We require your e-mail address to deliver the newsletter. Collection of other personal data as part of the registration process serves to prevent misuse of the services or e-mail address used. 4. Retention period Your e-mail address is saved as long as your subscription to the newsletter is active. All other personal data collected as part of the registration/subscription process is also deleted when unsubscribing. 5. The right to object and rectification You can withdraw your consent to receiving the newsletter (unsubscribe) at any time. You can withdraw your consent by clicking the link provided in every newsletter e-mail, e-mailing art@demo.arnoldsche.eu, or sending a message to the contact data provided in the company information.

VI. Contact via e-mail/the contact forms

1. Description and scope of data processing Our website contains a contact form that can be used to contact us electronically. The following data is collected: a. Contact Form Name (required), e-mail address (required), subject, message (required) b. Press Distribution List Title, first name (required), last name (required), e-mail address (required), company (required), interests c. Review Copy Name (required), e-mail address (required), phone, company (required), street (required), town/city (required), country (required), requested title (required), magazine name, (required), message The following data is also saved when you send your message: your IP address, date and time of registration. In order to process the data, we obtain your consent during the delivery process and refer to the Privacy Policy. Alternatively, contact via the provided e-mail address is also possible. In this case, the personal data transferred with your e-mail address is saved. Your data will not be passed on to any third party in this context. The data is only used to process the conversation. 2. Legal basis for data processing The legal basis for processing data is your agreement as per Art. 6 Sec. 1 a GDPR. The legal basis for processing data collected in the context of e-mail delivery is Art. 6 Sec. 1 f GDPR. If e-mail contact is made with the objective of concluding a contract, the legal basis for processing is Art. 6 Sec. 1 b GDPR. 3. Purpose of data processing We process personal data from the form solely to process your contact with us. In case of e-mail contact, this represents the legitimate interest for processing data. Other data processed during delivery serve to prevent misuse of the contact form and ensure the security of our IT systems. 4. Retention period The data is deleted once it is no longer necessary to achieve the purpose for which it was collected. For personal data from the contact form and the data sent by e-mail, this is the case when the conversation with the user has ended. The conversation is considered ended when it can be assumed from the circumstances that the relevant matter has been resolved fully. The additional personal data collected as part of the delivery process is deleted within seven days. 5. The right to object and rectification If data is required to fulfil a contract or carry out pre-contractual duties, it is only possible to delete data prematurely provided no contractual or legal obligations would disallow deletion. To the extent that your personal data is processed, you are considered the data subject as per GDPR and are entitled to the rights listed below.

VII. Online Shop, processing and shipping orders

1. Description and scope of data processing When ordering on this website, it is mandatory to specify personal data required to process your order. The following personal data is stored and processed:

  1. Date and time of the order
  2. User IP Address
  3. User e-mail address
  4. User phone number, if given
  5. User invoice and delivery address
  6. Payment method and transaction code
  7. Products ordered 

You have the possibility to create a customer account, which saves your data for subsequent purchases. The opening of a customer account is optional. Contractual execution (delivery) of any orders on our website is carried out by Stuttgarter Verlagskontor SVK GmbH (“SVK”), Rotebühlstr. 77, 70178 Stuttgart, Germany and are posted on their behalf. The following data is collected and transferred to SVK:

  1. User e-mail address
  2. User phone number, if given
  3. User invoice and delivery address
  4. Payment Method
  5. Products ordered

2. Legal basis for data processing The legal basis for processing data is to fulfil a contract to which you are a contractual party or to carry out pre-contractual duties. The legal basis for processing data is Art. 6 Sec. 1 b GDPR. The legal basis for processing further voluntary data as part of the registration process is your agreement as per Art. 6 Sec. 1 a GDPR. When the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) sentence 1 c) DS-GVO serves as the underlying legal principle.  Statutory and regulatory provisions require us to take action against money laundering, the financing of terrorism, and other criminal offences that pose a threat to assets. 3. Purpose of data processing We process personal data from the order solely to process your order.  4. Retention period Where necessary, we will process and store your personal data for the duration of our business relationship with you. This includes the contract origination and implementation stages.  If the data is no longer required for the fulfilment of contractual duties, it is periodically deleted unless its continued processing – for a limited time – is necessary for the following purposes:

  1. Fulfilment of duties to preserve records under commercial and tax law: relevant legislation in this respect includes, in particular, the German Commercial Code (HGB), the German Tax Code (AO), the KWG, the GwG and the WpHG. The time periods specified in these laws for the retention of records and/or documentation range from two to ten years.
  2. Preservation of evidence in line with the statutory limitation periods. In accordance with section 195 et seq. of the German Civil Code (BGB), these limitation periods can last up to 30 years although the standard limitation period is three years. 

.  5. The right to object and rectification You can revoke your consent at any time with future effect. If you would like to delete your customer account, you can email shop@demo.arnoldsche.eu. Your customer account will be deleted within 48 hrs.

VIII. Product Ratings and Comments

1. Description and scope of data processing You have the possibility to rate products and comment on articles. The following data will be stored and processed by us for this purpose:

  1. User login name 
  2. User e-mail address
  3. Date and time of the comment or product review
  4. User IP address
  5. The comment and product rating

Login name, date and time of the comment or product review as well as the comment or product rating itself will be published on the website. Comments or product reviews and product ratings require the creation of a customer account. 2. Legal basis for data processing The legal basis for processing data is your agreement as per Art. 6 Sec. 1 f GDPR. 3. Purpose of data processing The purpose of processing personal data is to make it more informative and user-friendly. 4. Retention period Comments and product reviews as well as the corresponding personal data of the user will be stored until revoked. 5. The right to object and rectification The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the revocation. In the event of revocation, we will delete your data as well as your product rating(s) or comments in accordance with the statutory provisions.

IX. Google Analytics

1. Description and scope of data processing This website uses Google Analytics, a web analytics service provided by Google, Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We have accepted Google’s Data Processing Amendment and fully comply with the strict provisions of German data protection authorities for use of Google Analytics. Google is certified under the US-EU data protection agreement “Privacy Shield” and commits itself to comply with the EU data protection regulations (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). Google Analytics uses “cookies,” which are text files placed on your computer to help the website analyse how you use the site. The information generated by the cookie about your use of this website will be transmitted to and stored by Google on servers in the United States. IP anonymization is activated on this website, Google will first shorten the IP address of the users within the member states of the European Union or in other states which are party to the Agreement on the European Economic Area (Section 4). Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. Google shall decide whether an exception applies. Google will use this information to analyse the use of the website by the users, to compile reports on the website activities, and to provide the operator of the website with other services related to the use of the website and the use of the Internet. 2. Legal basis for data processing Data is processed in accordance with Art. 6 Sec. 1 sentence 1 (f) GDPR. Further information about data protection in general at Google: www.google.com/policies/privacy. 3. Purpose of data processing We use Google Analytics to analyse and regularly improve the use of our website and to make our website more interesting to you. 4. Retention period Automatically collected data is erased or anonymised by Google after 14 months, at the latest. 5. The right to object and rectification You can block the storage of cookies by changing the settings in your browser software. Please note that in this case you may not be able to use all functions of this website in full. Cookies already stored can be deleted at any time.  The IP address communicated by your browser within the framework of Google Analytics is not merged with other data of Google. Additionally, you can prevent the recording with Google of the data generated through the cookie and related to your use of the website (including the IP address), as well as the processing of such data by Google, by downloading and installing the browser plugin available under the following link: tools.google.com/dlpage/gaoptout?hl=de.  Further information about data protection at Google can be found here https://adssettings.google.com/authenticated 

X. YouTube

1. Description and scope of data processing Our website uses plugins from YouTube, which is operated by Google. The operator of the pages is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. Here the YouTube server is informed about which of our pages you have visited. If you’re logged in to your YouTube account, YouTube allows you to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account. 2. Legal basis for data processing The legal basis for processing data is your agreement as per Art. 6 Sec. 1 f GDPR. 3. Purpose of data processing The use of YouTube is based on our interest in presenting our online content in an appealing way.  4. Retention period and the right to object and rectification For more information on the handling of user data, please review YouTube’s Data Privacy Declaration under: https://www.google.de/intl/de/policies/privacy.

XI. Google Web Fonts

1. Description and scope of data processing To ensure that fonts used on this website are uniform, this website uses so-called Web Fonts provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When you access a page on our website, your browser will load the required web fonts into your browser cache to correctly display text and fonts. To do this, the browser you use will have to establish a connection with Google’s servers. As a result, Google will learn that your IP address was used to access our website.  Google is certified under the US-EU data protection agreement “Privacy Shield” and commits itself to comply with the EU data protection regulations (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). 2. Legal basis for data processing Data is processed in accordance with Art. 6 Sect. 1 lit. f GDPR. 3. Purpose of data processing The use of Google Web Fonts is based on our interest in presenting our online content in a uniform and appealing way.  4. Retention period Automatically collected data is erased or anonymised by Google after 1 day. 5. The right to object and rectification If your browser does not support web fonts, a default font will be used by your computer. For more information on Google Web Fonts, please follow this link: https://developers.google.com/fonts/faq and consult Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.

XII. Google Maps

1. Description and scope of data processing Via an API, this website uses the services of Google Maps. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To enable the use of the Google Maps features, your IP address must be stored. As a rule, this information is transferred to one of Google’s servers in the United States, where it is archived. The operator of this website has no control over the data transfer. Google is certified under the US-EU data protection agreement “Privacy Shield” and commits itself to comply with the EU data protection regulations (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). 2. Legal basis for data processing Data is processed in accordance with Art. 6 Sect. 1 lit. f GDPR. 3. Purpose of data processing The use of Google Maps is based on our interest in presenting our online content in an appealing manner and to make the locations disclosed on our website easy to find.  4. Retention period and the right to object and rectification The IP address communicated by your browser within the framework of Google Analytics is not merged with other data of Google. For more information on the handling of user data, please review Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.

XIII. Font Awesome

1. Description and scope of data processing This website uses the common representation of fonts and icons called Web Fonts and SVGs provided by Fonticons Inc., 6 Porter Road, Apartment 3R, Cambridge, MA 02140, USA.  When you access a page on our website, your browser will load the required web fonts into your browser cache to correctly display text and fonts. To do this, the browser you use will have to establish a connection with Fonticons’ servers. As a result, Fonticons will learn that your IP address was used to access our website.  2. Legal basis for data processing Data is processed in accordance with Art. 6 Sect. 1 lit. f GDPR. 3. Purpose of data processing The use of Fonticons Web Fonts is based on our interest in presenting our online content in a uniform and appealing way.  4. Retention period Automatically collected data is erased by Fonticons after a few weeks. 5. The right to object and rectification If your browser does not support web fonts, a default font will be used by your computer. For more information about Font Awesome, see https://fontawesome.com/help and in the Privacy Policy of Fonticons, Inc.: https://fontawesome.com/privacy.

XIV. PayPal 

1. Description and scope of data processing This website uses Braintree by PayPal and PayPal PLUS, a service of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. With this service, you are able to pay by credit card, PayPal or SEPA direct debit. Payment details are collected and processed by PayPal only and are not stored by us. The personal data transmitted to PayPal usually includes your first name, last name, address, telephone number, IP address, e-mail address, or other data required to process your order, such as the quantity of articles ordered, the article number, invoice amount, percentage taxes and invoice details, etc. PayPal may also pass on your personal data to subcontractors or other affiliates, to the extent necessary for fulfilling the contractual obligations arising from your order or for processing personal data in your order. Depending on the payment type you pre-select in your PayPal account, which may include payment by invoice or direct debit, PayPal will transfer the personal data transferred to PayPal to credit agencies. The information transferred serves to identify you and to verify your creditworthiness with regard to the order you have placed. Please refer to the PayPal Privacy Policy for more information on the credit agencies PayPal transfers data to and which data is collected, processed, stored and passed on by PayPal: https://www.paypal.com/de/webapps/mpp/ua/privacy-full 2. Legal basis for data processing Data is processed by PayPal in accordance with Art. 6 Sect. 1 lit. b GDPR. 3. Purpose of data processing This information needs to be transferred to process your order using your chosen payment method, mainly in order to confirm your identity and manage your payment and the customer relationship.  4. Retention period PayPal retains personal data in an identifiable format for the least amount of time necessary to fulfill our legal or regulatory obligations and for our business purposes.  PayPal may retain Personal Data for longer periods than required by law if it is in their legitimate business interests and not prohibited by law.  5. The right to object and rectification For more information about PayPal’s Privacy Policy, seehttps://www.paypal.com/uk/webapps/mpp/ua/privacy-full#3

XV. Rights of data subjects 

Provided your personal data is processed, you are considered the data subject as per GDPR and are entitled to the the rights listed below with regard to the processor: Right to be informed You can demand a confirmation of whether personal data related to you is processed. Should this be the case, you can demand the following information: (1) The purposes for which the personal data is processed; (2) The categories of the personal data processed; (3) The recipients/categories of recipients receiving the personal data related to you; (4) The planned storage period for the personal data related to you or, if no concrete information is possible, criteria for determining the storage period; (5) Existence of a right to rectification or erasure of the personal data related to you, a right to restrict processing by the processor, or a right to object to this processing; (6) The existence of a right to appeal to the authorities. (7) All available information on the origin of the data if the personal data is not collected from the associated individual; (8) The existence of an automated decision making solution including profiling, as per Art. 22 Sec. 1 and 4 GDPR and – at least in these cases – meaningful information on the involved logic as well as the reach and target effect of such processing for the concerned individual. You have the right to be informed of whether the personal data related to you is transmitted to a third country or an international organization. In this context, you can request to be informed of appropriate safeguards as per Art. 46 GDPR in conjunction with the transmission of your data. Right to rectification You have the right to rectification and/or completion provided the processed personal data related to you is incorrect or incomplete. The data processor must promptly rectify the issue. Right to restrict processing You can exercise your right to restrict processing of the personal data related to you provided the following conditions are met: (1) If you dispute the accuracy of the personal data related to you for a period that enables the processor to verify the accuracy of the data; (2) Processing is wrongful and you reject the deletion of your personal data, instead exercising your right to restrict the use of your personal data; (3) The processor no longer requires the personal data for processing, but you need it to assert, exercise, or defend legal claims. (4) If you have exercised your right to object to processing as per Art. 21 Sec. 1 GDPR and it has not been determined whether the the legitimate interest of the processor outweigh your interest. If processing of the personal data related to you has been restricted, this data may only be processed (besides storage) with your express consent or to assert, exercise, or defend legal claims, or to protect the rights of other natural or legal persons, or for reasons of an important public interest of the European Union or a member state. If restriction of processing was lifted based on the requirements above, you will be notified by the processor before this restriction is lifted. Right to erasure a) Obligation of erasure You can demand the processor to delete any personal data related to you right away and the processor is required to delete this data provided one of the following reasons applies: (1) The personal data related to you is no longer needed for the purpose for which it was collected or processed in any other way. (2) You withdraw your consent for processing based on Art. 6 Sec. 1 a or Art. 9 Sec. 2 a GDPR and there is no other legal basis for processing. (3) As per Art. 21 Sec. 1 GDPR, you object to processing and there are no superior legitimate reasons for processing; or, you object to processing as per Art. 21 Sec. 2 GDPR. (4) The personal data related to you was processed unlawfully. (5) Deletion of the personal data related to you is required to fulfil a legal obligation in line with EU law or law of member states to which the processor is subject. (6) The personal data related to you was collected as per Art. 8 Sec. 1 GDPR with regard to the services offered by the information society. b) Information to third parties If the processor has published your personal data and is obligated to delete this data as per Art. 17 Sec. 1 GDPR, the processor shall take suitable measures taking into account the available technology and implementation costs, including those of a technical nature, to inform the processor responsible for processing the personal data that you as data subject have requested the deletion of all links to this personal data or of copies or replications of this personal data. c) Exceptions The right to erasure does not apply if processing is required (1) to exercise the right to free expression of opinion and information; (2) to meet a legal obligation requiring processing in accordance with the law of the European Union or a member state to which the processor is subject, or to carry out a duty in the public interest or in exercising official authority assigned to the processor; (3) for reasons of public interest in the area of public health as per Art. 9 Sec. 2 h as well as Art. 9 Sec. 3 GDPR; (4) for archiving purposes in the public interest, economic or historical research purposes, or for statistical purposes as per Art. 89 Sec. 1 GDPR provided that the right named in a) is not expected to render attainment of the objectives of this agreement impossible or have a serious negative effect, or (5) To assert, exercise, or defend legal claims. Right to be informed If you have exercised your right to rectification, erasure, or to restrict processing vis-à-vis the processor, the processor is obligated to notify all recipients to which your personal data was disclosed of rectification or deletion of the data, or restriction to its processing, unless this proves to be impossible or requires a disproportional amount of effort. You have the right to be informed of these recipients by the processor. Right to data portability You have the right to receive the personal data related to you that you have provided to the processor in a structured, commonly used, machine-readable format. In addition, you have the right to pass on this data to another processor without interference of the processor to which you have provided the personal data, provided (1) Processing is based on consent as per Art. 6 Sec. 1 a GDPR or Art. 9 Sec. 2 a GDPR, or on a contract as per Art. 6 Sec. 1 b GDPR and (2) Processing is carried out by automated processes. In exercising this right, you also have the right to demand your personal data be transferred directly from one processor to another processor, provided this is technically feasible. This must not negatively affect the freedoms and rights of other individuals. The right to data portability does not apply to processing of personal data required or to carry out a duty in the public interest or in exercising official authority assigned to the processor. Right to object You have the right to object to the processing of your personal data based on Art. 6 Sec. 1 e or f GDPR for reasons resulting from your particular situation at any time; this also applies to profiling based on these provisions. The processor no longer processes your personal data unless the processor can provide compelling legitimate reasons that outweigh your interests, rights, and freedoms, or processing serves to assert, exercise, or defend legal claims. If the personal data related to you is processed to carry out direct advertising, you have the right to object to the processing of your personal data for the purpose of such advertising at any time; this also applies to profiling provided directly related to such direct advertising. If you object to processing for purposes of direct advertising, your personal data will no longer be processed for this purpose. You have the option to exercise your right to object by means of an automated process which uses technical specifications in connection with the use of services provided by the information society, directive 2002/58/EC notwithstanding. Right to withdraw consent to use of data You have the right to withdraw your consent to the use of your data at any time. Withdrawing your consent does not affect the lawfulness of the processing taking place based on your consent up to withdrawal. Automated decision including profiling in individual cases You have the right to not be subjected to a decision based solely on automated processing, including profiling, that has a legal effect on you or affects you significantly in a similar manner. This does not apply if the decision (1) Is required to conclude or fulfil a contract between you and the processor, (2) Is permissible based on legal provisions of the European Union or a member state to which the processor is subject and these legal provisions contain suitable measures to protect your rights and freedoms as well as your legitimate interests, or (3) Is carried out with your express permission. However, these decisions shall not be based on special categories of personal data as per Art. 9 Sec. 1 GDPR provided Art. 9 Sec. 2 a GDPR applies and suitable measures have been taken to protect your rights and freedoms as well as your legitimate interests. With regard to the cases named in (1) and (3), the processor shall take appropriate measures to ensure your rights and freedoms as well as your legitimate interests, including at least the right to request an individual on the side of the processor to intervene, to present your own position, and to contest the decision. Right to appeal to the authorities Notwithstanding any other administrative or judicial decision, you have the right to appeal to the authorities, especially in the member state where you are located, your workplace, or the location of the alleged violation if you believe that the processing of your personal data is in violation of GDPR. The authority receiving the appeal shall inform the appealing party of the status and result of the appeal, including the option for a legal decision as per Art. 78 GDPR. The data protection authority responsible for us is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Königstr. 10 a 70173 Stuttgart

XVI. Contact 

For questions, requests, or complaints related to data privacy, please contact our Data Protection Officer. Please contact: Arnoldsche Verlagsanstalt GmbH Data Protection Officer Olgastr. 137 70180 Stuttgart Germany Or send an e-mail to art@demo.arnoldsche.eu

Facebook Instagram Linkedin Xing

3

for

2

Get 3 publications for the price of 2

Buy 3 books or more at a time and get the cheapest for free. Only valid in the EU, UK, Switzerland, Norway, USA & Canada. Offer not valid for fixed-price books in Germany and Austria. T&Cs.

Cookies on the website

If you continue without changing your settings, we’ll assume that you are happy to receive all cookies on the website. However, if you would like to, you can change your cookie settings at any time. You can find detailed information about how cookies are used on this website by clicking on ‘Find out more’. 

OK

Find out more