Personal data includes any information relating to an identified or identifiable natural person, for instance your name, telephone number, address or e-mail address. Statistical data, which we collect, for example, when you visit our website and cannot be used to establish your identity, do not fall under the notion of personal data. Electronic communications data means electronic communications content and electronic communications metadata.
The controller for the processing of your personal data when you visit this website under the terms of the EU General Data Protection Regulation (GDPR) is
Red Pineapple Media GmbH
Tel.: +49 30 6098 1841
Fax.: +49 30 6098 1864
ACCESS TO OUR WEBSITE
Every time our website is used, we collect the electronic communications data which your browser automatically transmits to make your visit to the website possible. These access data comprise in particular:
- IP address of accessing device,
- Date and time of access,
- Address of the requested website and of the website requesting access,
- Information on the browser and operating system used
The processing of these data is necessary in order to access our website and to ensure the permanent functionality and security of our systems. In addition, the access data are saved for the foregoing purposes in internal logfiles in order to compile statistical information on the use of our website, to develop our website with regard to the usage patterns of our visitors (e.g. if the proportion of mobile devices on which the pages are called up rises) and for general website administration. The legal basis is Article 6(1)(b) of the GDPR.
The information saved in the logfiles allows no direct conclusion to be drawn about you as a person – in particular, we save the IP addresses only in abbreviated, anonymised form. The logfiles are saved for 14 days and archived following subsequent anonymization.
DATA PROCESSING WHEN YOU GET IN CONTACT WITH US
You can contact us, i.e. via e-mail. In this context we process data solely for the purpose of communication with you. The legal basis is Article 6(1)(b) of the GDPR. The data which we process when you contact us are automatically erased after full processing, unless we still need to keep your enquiry for the fulfilment of contractual or legal duties (See Section: “Period of storage”).
REGISTER AS A PUBLISHER
You have the possibility of registering as a publisher with us. For registration we store your email address and encrypted password (to facilitate login).
After registration, you can login to our publisher area where we’ll collect additional information necessary for invoicing. We have highlighted the mandatory fields. Without these data, active participation as a publisher is not possible.
The legal basis for this processing is Article 6(1)(b) of the GDPR.
We use our own cookies in particular
- For log-in identification
In this way we wish to enable you to use our website in a convenient and individual way. These services are based on our foregoing legitimate interest, and the legal base is Article 6(1)(f) of the GDPR
The data collected include in particular
- The shortened IP address of your device,
- The date and time of access,
- The identification number of a cookie,
- The device identification of mobile devices,
- Technical information on the browser and the operating system
The data thus collected are saved only in pseudonymous form, however, so that no direct conclusions can be drawn about you personally.
Google will process the information thus gained in order to evaluate your use of the website, to assemble reports on the website activities for the website operators, and to supply further services connected with website use and internet use.
As set out above, you can configure your browser to reject cookies, or you can prevent the processing of the data generated by cookies and relating to your use of our websites in the cookie settings of Google’s Privacy Statement. Besides, you can also prevent Google from processing these data by downloading and installing the browser add-on provided by Google. Alternatively to the browser add-on or if you access our website from a mobile device, please use this opt-out link. This will prevent Google Analytics from collecting data within this website in the future (the opt-out only works in the browser and only for this domain). If you delete your cookies in this browser, you must click this link again.
You will find more detailed information on this matter in the Privacy Statement of Google Analytics.
We are deleting the analytics personal data every 14 months.
DISCLOSURE OF DATA
Data which we have collected are disclosed to third parties only if:
- You have given an explicit declaration of consent for this, pursuant to Article 6(1)(a) of the GDPR,
- Disclosure is necessary, pursuant to Article 6(1)(a) of the GDPR, for bringing, exercising or defending legal claims, and no reason exists to suppose that you have a predominant and properly protected interest in preventing your data from being disclosed,
- We have a legal duty to disclose your data pursuant to Article 6(1)(c) of the GDPR, or
- This is legally permissible and requisite, pursuant to Article 6(1)(b) of the GDPR, for the performance of contracts with yourself or to take steps at your request prior to entering into a contract.
Disclosure may also be made in connection with requests by government authorities, decisions of the courts and legal proceedings if it is necessary for prosecution or execution at law.
DURATION OF STORAGE
We store personal data only for as long as is necessary to fulfil contractual or statutory duties for which the data were collected. We then erase the data immediately, unless we still need these data until expiry of the statutory period of limitation for purposes of evidence in civil claims or due to statutory duties of storage.
For purposes of evidence we must still store contact data for three years from the end of the year in which business relations with you end. Any claims will expire, under the normal statutory period of limitation, no earlier than at this time.
Thereafter we must also store some of your data for purposes of book-keeping. We have an obligation to do so under statutory duties of documentation which may arise under the German Commercial Code, the German Tax Code, the German Credit and Loans Act, the German Money Laundering Act, and the German Securities Act. The periods stipulated there for storage of documents are two to ten years.
You have the right at any time to require us to provide information about the processing of your personal data. When providing you with this information we shall explain the data processing and supply an overview of the data relating to your person which are stored.
Should data stored with us be erroneous or no longer up-to-date, you hat the right to rectification.
Also, you have the right to erasure (right to be forgotten), i.e. if the data are no longer necessary in relation to the purposes for which they were collected.
You can also have the processing of your data restricted, i.e. if you believe that the data which we have saved are not correct.
Moreover, you have the right of data portability, i.e. that we send you on request a digital copy of the personal data which you have provided.
To exercise your rights as set out here, you can communicate with the foregoing contact details at any time.
Finally you have the right to complain to the supervisory authority to which we are subject. You can exercise this right at a supervisory authority in the member country of your place of residence, of your workplace, or of the place of alleged breach. In Berlin the competent supervisory authority is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Friedrichstrasse 219, 10969 Berlin, Germany.
RIGHT TO WITHDRAW CONSENT AND RIGHT TO OBJECT TO PROCESSING
Under the GDPR you have the right at any time to withdraw any declaration of consent which has once been given. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
You have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(f) of the GDPR.
If you wish to make use of your right to withdraw or object, a notification without set form to the contact details above will be sufficient.
We maintain up-to-date technical measures to ensure data security, particularly for the protection of your personal data against dangers during data transmissions. To secure the personal data which you have stated on our website, we use transport layer security (TLS), which encrypts the information which you have entered.
Berlin, May 2018