Information on data protection
Valid from: 01.02.2023
PONS Langenscheidt GmbH (referred to below as: "PONS LS") takes the protection of personal data of its users and its customers very seriously. It is important to us that you can trust the protection of your personal data at PONS LS at all times and that you know how PONS LS uses your data while ensuring data protection.
2. Data controller
PONS Langenscheidt GmbH
70190 Stuttgart / Germany
Tel.: #49 (0) 711 / 89462111
3. Contact detail of the data of the data protection officer
Michael Mayer, firstname.lastname@example.org
4. Processing of personal data
The use of your data is governed by the applicable legal provisions, in particular the General Data Protection Regulation (referred to below as: GDPR).
4.1 Orders, purchase, registration
4.1.1. Orders in our PONS LS online stores
a) Why and on what legal basis data is processed?
When you place an order in one of our online stores (accessible via www.pons.com, www.langenscheidt.com, www.klett-lerntraining.de), the data required to establish a contract and process your order is recorded. The data includes first and last name, billing and, if applicable, delivery address, as well as your email address, and, if available, the relevant educational institution. In the case of an educational institution, the status of the teacher and the subjects taught are also requested as part of the verification of the school stamp. The data will be processed for the purpose of assigning the order to you as well as for the delivery of the goods and, if necessary, sending an invoice, together with the processing of payment and clarification of possible legal claims. If you have ordered media at preferential conditions, we also process your data for the purpose of checking whether you meet the requirements for this.
The legal basis is Art. 6 section 1 b) GDPR. Optionally, you can create a customer account by registering, which can be used for future orders in our online stores as well as for logging into other services on our websites and in the apps of PONS LS. Registration also requires the setting of an individual password. The combination of email address and password enable the login after registration (referred to below as: login data). We may process the data provided by you upon registration in accordance with Art. 6 (1) b) GDPR, insofar as this is necessary for the establishment or fulfillment of a contract. Furthermore, we may process the data in accordance with Art. 6 (1) f) GDPR, as we would like to simplify possible future orders in our online stores for you.
In addition, we may process data that you have voluntarily provided to us when placing an order or registering, in accordance with Art. 6 (1) a) and, if applicable, also f) GDPR, subject to the condition that you have consented to this processing. This is, for example, your company/school or similar. The processing of this voluntary information takes place in order to be able to contact you more quickly in the event of delivery difficulties. The legal basis for this is Art. 6 (1) a) and possibly f) GDPR.
b) Will data be passed on?
For the following purposes, we also transfer the data, at least in part, to the following processors and other recipients:
The data is only passed on for the collection of receivables from customers who do not pay their purchase price.
Billing and customer management
A transfer is made to take over the billing and fulfillment of tax retention obligations for digital subscriptions on our behalf.
Payment service providers such as credit card companies
|Your name and payment details will be passed on for the purpose of processing payments for subscription orders if you have selected the payment method "credit card" or direct debit.|
Technical service providers
Data is passed on to order processors for the purposes of hosting and maintaining our website, quality assurance or in the context of any mailing services.
for further recipients see 4.6. below
We are jointly responsible for the processing of your data when you place an order in our web stores together with Stuttgarter Verlagskontor GmbH, Rotebühlstr. 77, 70178 Stuttgart (referred to below as: "SVK"). SVK takes care of the order acceptance, the maintenance of the customer database, the shipping, the invoicing and the collection in its own name and for its own account ("real factoring"). Therefore, the transfer of your order data to SVK is necessary.
The legal basis for a transfer of data to SVK is Art. 6 section 1 f) GDPR. PONS LS and SVK are group companies of the Klett Group, Ernst Klett Aktiengesellschaft. We therefore have a legitimate interest in transferring data to SVK for internal administrative purposes. This is the only way SVK can collect the assigned purchase price claims against our customers.
PONS LS and SVK have concluded an agreement regulating data protection responsibilities, the main content of which we will provide to you by email upon request. We pass on orders from Switzerland to our partner there:
Balmer Bücherdienst AG, Kobiboden, CH-8840 Einsiedeln.
Ernst Klett AG, Rotebühlstr. 77, D-70178 Stuttgart provides uniform legal advice for the purpose of cooperation within the Klett Group based on the division of labor. The legal basis for this is Art. 6 section 1 f) GDPR. In an agreement on joint responsibility pursuant to Art. 26 GDPR, we have defined with Ernst Klett AG who fulfills which obligations under data protection law. We will provide you with the main content of this agreement upon request.
c) Do I have to provide my data?
There is no legal or contractual requirement for you to provide your data. However, for the purpose of establishing a purchase contract with us your name, address and email address are required as a minimum. Otherwise we will not be able to send the order to your address, or provide you with confirmation of your order by email. With all forms of payment except for purchases made on account the entry of payment data is necessary, because otherwise we will not be able to debit your account or credit card with the agreed price. In order to conclude a contract with us, no further details or registration are necessary.
4.1.4. Deletion of data
We have the right to save data until the final fulfilment of the individual contract. In the case of purchase contracts, we are permitted to save data until the receipt of payment and for a period of up to 2 years after the goods have been delivered. If the saving of data is necessary for the purpose of compliance with our legal obligations in accordance with Art. 6 Section 1 c GDPR, in conjunction with Germany's Commercial Code or tax regulations, we have the right to save such data until the expiry of the retention periods which the applicable laws and regulations stipulate. This can lead to a retention period of up to 7 years. Unless we have the right or obligation to retain the data for a longer period of time for the reasons which are outlined above, the data you enter when you register an account with us will either be deleted as soon as possible at your request, or at the latest 4 years after you place your last order.
In rare cases, we also use your data to send advertising by post or email for our products, provided you have been our customer for three years, you have given us your postal address or email address and have not refused your consent to such advertising (for your right to object, see 5.4). The processing of the data is based on Art. 6 section 1 f) GDPR. We have a legitimate business interest in sending our existing customers advertising by post or email.
Any data you enter on our contact form or communicate to us by email or otherwise will be processed so that we can deal with and reply to your enquiry. If desired, it will also be processed for the purpose of sending a copy of your enquiry to your own email address.
We may process data that you enter in our contact form in accordance with Art. 6 (1) a) GDPR, provided that you have consented to this processing by clicking on the "Send message" button. If you enter sensitive information in the "Message" field that contains special categories of data (e.g. origin, political opinions, religion, health data), you also consent to the processing of this data. If you send us data by email or otherwise, the legal basis is Art. 6 (1) f) and, if applicable, b) GDPR.
This data will be deleted at the latest after 24 months after receipt of your request, unless we are entitled or obliged to store it longer due to legal regulations in connection with Art. 6 section 1 c) GDPR. This may result in a maximum storage of 7 years.
We transmit your contact request to the order processors named under 4.1 and 4.6.1 and, in addition, if necessary. also to the recipients named below:
Prospero GmbH Müllerstrasse 27, 80469 Munich / Germany
Amevida Freiburg GmbH Zinkmattenstraße 6a, 79108 Freiburg / Germany
4.4 Applying for jobs at PONS LS
If you apply to PONS LS in response to a job advertisement or on your own initiative, your data will be processed for the purpose of deciding on the establishment of an employment relationship on the basis of Art. 88 GDPR in conjunction with § 26 Section (1) or (2) BDSG. For the purpose of dealing with the application, the data will be stored by us for a period of six months from the conclusion of the application process, after which it will be deleted. If you take up employment with us on the conclusion of the application process, the processing of your data beyond this time is permitted in accordance with the above legal basis for the purpose of establishing and implementing an employment relationship.
You are not required to provide your personal data either contractually or in legal terms. However, an online application is not possible without the provision and saving of data. If you voluntarily provide us with special categories of data, including details of your origins, political, religious or ideological convictions, membership of a trade union, medical condition or sexual orientation, you also provide your consent to the processing of this data. Such processing will only take place to the extent that is absolutely necessary for the above-mentioned purposes. You are expressly requested not to communicate such data to us.
4.5 Newsletter from PONS LS
If you have subscribed to a PONS LS newsletter via one of our websites, we process your email address for the purpose of sending you our newsletter on a regular basis. After ordering the newsletter, you will receive an email from us with a link to verify your email address.
The legal basis for the dispatch is your consent, which you gave us when ordering the newsletter (Art. 6 section 1 a) GDPR). The provision of your data is not mandatory. However, the provision of your email address is required for a newsletter dispatch. The provision of your name, title and place of residence are voluntary and serve the purpose that we can address you personally and inform you about events in the vicinity of your place of residence. Your data, which you have provided in the context of ordering the newsletter, will be deleted as soon as you have unsubscribed from the newsletter. You can unsubscribe from the newsletter at any time, e.g. by clicking on the corresponding unsubscribe link at the end of a newsletter (to withdraw your consent, see 5.5). Unsubscribing from the newsletter also means that you will no longer receive promotional emails according to 4.2.
Sendinblue GmbH is used as our newsletter software. In this process, your data is transmitted to Sendinblue GmbH. Sendinblue GmbH is prohibited from selling your data and using it for purposes other than sending newsletters. We also use the services of Emarsys Interactive Services GmbH in Berlin. Our newsletter is implemented on the basis of Art. 28 GDPR.
4.6 Trackin, analysis and advertising on PONS LS websites and in PONS LS apps
4.6.1 Creation log files
(1) the IP address and, if applicable, MAC address of your computer or mobile device,
(2) the date and time of your punctual access,
(3) the names of the files you accessed and the amount of data transferred,
(4) the type of operating system and web browser used, including language settings; and
(5) the website from which you reach one of our PONS LS websites (referrer URL),
(6) the web pages that are accessed by the user's system via our PONS LS web pages.
The storage of a large amount of this data is necessary for technical reasons to display the website on your device and to ensure system security. This data is also analyzed anonymously for statistical purposes and to improve our websites, services and apps. We do not link this data with your other personal data.
In part the data is made available to external contract processors for the respective purposes which process the data on our behalf in accordance with Art. 28 GDPR.
In order to make visiting our websites more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies to recognize your browser on your next visit (so-called persistent cookies).
Cookies cannot be used to access other files on your computer or to determine your email address.
c) Legitimation of the storage of cookies
The storage of the following cookies is based on our respective legitimate interests (Art. 6 section 1 f) GDPR):
Absolutely necessary cookies
These cookies are necessary for a website to function and cannot be disabled in your systems. Usually, these cookies are set only in response to actions you take that correspond to a service request, such as setting your privacy preferences, logging in, or filling out forms. You can set your browser to block these cookies or to notify you about these cookies. However, some areas of the website will not work then. These cookies do not store any personal data.
These cookies collect information about usage patterns of a website, such as which pages a visitor visits most often and whether error messages are received from a page. We collect this information out of our legitimate interest in being able to maintain optimally usable and marketable websites at all times. These cookies do not store any information that allows identification of the user. The information collected is aggregated and thus evaluated anonymously. These cookies are used to record usage in order to improve the performance of websites and thus the user experience.
These cookies allow us to count visits and traffic sources so that we can measure and improve the performance of our websites. They help us answer questions about which pages are most popular, which are the least used and how visitors move around the sites. All information collected by these cookies is aggregated and is therefore anonymous. If you do not allow these cookies we will not be able to know when you visited our websites.
With these cookies the websites are able to provide enhanced functionality and personalization. They may be set by us or by third parties whose services we use on our websites. If you do not allow these cookies, some or all of these services may not function properly.
Cookies for marketing purposes
These cookies may be set by our advertising partners via our PONS LS websites. They can be used by these companies to create a profile of your interests and show you relevant advertising on other websites. They do not store any direct personal information, but are based on the unique identification of your browser and Internet access device. If you do not allow these cookies, you will receive less targeted advertising.
Store and/or retrieve information on a device
- Cookies, device identifiers or other information may be stored or accessed on your device for the processing purposes shown to you.
Personalized ads and content, ad and content measurement, audience insights and product development.
- Selection of simple ads: Ads can be displayed based on the content you are viewing, the application you are using and your approximate location or device type.
- Create a personalized ad profile: A profile about you and your interests can be created in order to show you personalized ads that are relevant to you.
- Select personalized ads: Personalized ads can be shown to you based on your personal profile.
- Use accurate location data: Your exact location data may be used for one or more processing purposes. This means that your location can be precisely determined to within a few meters.
- Actively query device properties for identification: Your device can be identified by a query of its specific characteristics.
- Ensure security, prevent fraud, and troubleshoot: Your data may be used to identify and prevent fraudulent activities and to ensure that systems and processes are functioning properly and securely.
- Technical provision of ads or content: Your device may receive and send information necessary for you to view and use content and ads.
- Select personalized content - Merge with offline data sources: Data from offline data sources may be merged with data from your online activities in order to use them for one or more processing purposes or specific processing purposes. Data from your online activities may be merged with offline data in order to use them for one or more processing purposes or specific processing purposes.
- Connect different devices: To use for one or more processing purposes, it is possible to determine whether different devices belong to you or your household.
- Receive and use automatically sent device properties for identification: Your device can be distinguished from other devices based on information it sends automatically, such as IP address or browser type.
d) Disabling and deleting cookies
Most browsers are set to accept cookies automatically. If the default settings for cookies are stored in your browser, all processes run in the background unnoticed by you. However, these settings can be changed by you.
You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general.
4.6.3 Cookie Consent with OneTrust (CMP)
Our websites use the cookie consent technology of OneTrust within a Consent Management Platform (CMP) to obtain your consent to the storage of certain cookies on your end device and to document this in a data protection compliant manner.
4.6.4 Analysis of data with Google Analytics
We use "Google Analytics" on our websites and "Google Analytics for Firebase" in our apps. These are analytics services provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (Google).
Google Analytics for Firebase enables the analysis of anonymized, aggregated, non-personal usage data of the PONS LS apps, such as calls, usage time or purchases in the app.
Google will process this data on our behalf in order to evaluate the use of our websites and apps and to compile reports on the activities on our websites and in our apps. Google uses the data contained in the log files, for example, to create statistics about the frequency of access to our websites and our apps. In this process pseudonymised user profiles of visitors can be created on the basis of the processed data.
We only apply Google Analytics with activated IP anonymisation. This means that within the member states of the European Union or in the European Economic Area your IP address is truncated by Google. Only in exceptional cases the full IP address will be transmitted to Google in the USA and then truncated there.
You can prevent the storage of cookies by setting your browser as described above. You can also prevent the processing of data generated by the cookie by downloading and installing the plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
With effect for our website an opt-out cookie is set in the browser which you are currently using. If you delete the cookies in this browser, you will need to click on this link again. If you use several devices or browsers, you must click on this link for each individual device in each individual browser.
In the PONS LS apps, you can deactivate the analysis of your anonymized usage data in the "PONS Vocabulary Trainer" app under “settings/use of your data” or in the "PONS Translator" app under “privacy settings”,
The data is processed on the basis of your consent (Art. 6 Section 1 a) GDPR). For further information about Google Analytics please see the following Google website: https://support.google.com/analytics/answer/6004245?hl=en.
4.6.5 Analysis with Hotjar
We use "Hotjar", a web analytics service provided by Hotjar Ltd, Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta (referred to below as "Hotjar") on our websites.
- IP address of your terminal device (collected and stored in an anonymised format)
- email address including your first and last name, if you have provided it to us through our website
- screen size of your terminal device
- device type and browser information
- geographical data (country only)
- language used to display our website
- user interactions
- mouse commands (movement, position and clicks)
Log data that is automatically used by our server when using Hotjar:
- referring domain
- visited websites
- geographical data (country only)
- language used to display our website
- date and time of access
Hotjar uses this information to evaluate your use of our websites, to create reports on the use of our websites and to provide other services in connection with the evaluation of our websites. Hotjar also uses the services of third parties (e.g. Google Analytics and Optimizely). These third parties may store or otherwise process information that your browser transmits during your visit to our websites (possibly including the IP address).
We use Hotjar for the purpose of analyzing the use of our websites and to be able to continuously improve individual functions and offers as well as the user experience. Through the statistical evaluation of user behaviour we can improve our offerand make them more interesting for you as a user. The legal basis your consent to the processing of data (Art. 6 Section 1 a) GDPR.
You can prevent the saving of your user profile and information about your visit to our website by Hotjar, together with the setting of Hotjar tracking cookies on other websites, by clicking on this Opt-Out-Link.
4.6.6. Analysis with INFOnline
Our websites use the measurement procedure ("SZMnG") of INFOnline GmbH (https://www.INFOnline.de) to determine statistical parameters about the use of our offers. The aim of usage measurement is to statistically determine the number of visits to our websites, the number of website visitors and their surfing behavior - on the basis of a uniform standard procedure - and thus to obtain values that are comparable across the market.
For all digital services that are members of “Informationsgemeinschaft zur Feststellung der Verbreitung von Werbeträgern e.V.” (IVW - http://www.ivw.eu), usage statistics are regularly provided by IVW with the performance values "Page Impression" and "Visits". These reach and statistics can be viewed on the respective websites.
a) Legal basis for processing
Measurement by means of the SZMnG measurement method by INFOnline GmbH is carried out within the scope of usage measurement and participation in IVW e.V. with a legitimate interest pursuant to Art. 6 (1) lit. f) GDPR.
The purpose of the processing of personal data is the creation of statistics. The statistics are used to be able to track and document the use of our offers. Usage measurement, which ensures comparability with other market participants, is essential for marketing the PONS LS websites. Our legitimate interest results from the economic usability of the findings from the statistics and the market value of our websites - also in direct comparison with websites of third parties - which can be determined on the basis of the statistics.
In addition, we have a legitimate interest in making the pseudonymized data available to INFOnline and IVW for statistical purposes (INFOnline, IVW). Furthermore, we have a legitimate interest in making the pseudonymized data available to INFOnline for the further development and provision of interest-based advertising media.
b) Type of data
INFOnline GmbH collects the following data, which is personal data according to the EU-GDPR:
• IP address: In the Internet every device needs a unique address, the so-called IP address. The storage of the IP address at least for a short period of time, is technically necessary due to the way the Internet works. The IP addresses are shortened by 1 byte before any processing and are only processed anonymously. The unabridged IP addresses are not stored or further processed.
• A randomly generated client identifier: The range processing uses alternatively either a third party cookie, a first-party cookie, a "local storage object" or a signature that is composed of various automatically transmitted information from your browser for the recognition of computer systems. This identifier is unique for a browser as long as the cookie or local storage object is not deleted. A measurement of the data and subsequent assignment to the respective client identifier is therefore also possible if you call up other websites that also use the measurement procedure ("SZMnG") of INFOnline GmbH.
The validity of the cookie is limited to a maximum of 1 year.
c) Use of the data
The INFOnline GmbH measurement procedure that is used on our websites collects usage data. This is done in order to collect the performance values page impressions, visits and clients. In addition, the measured data is used as follows:
• A so-called geolocation, i.e. the assignment of a website visit to the location of the visit is carried out exclusively on the basis of the anonymised IP address and only up to the geographical level of the federal states/regions. From the geographical information obtained in this way no conclusions about the user's actual location can be drawn.
• The usage data of a technical client (e.g. of a browser on a device) is aggregated across all web pages and stored in a database.
d) Data storage period
• The full IP address is not stored by INFOnline GmbH. The shortened IP address is stored for a maximum of 60 days. The usage data in connection with the unique identifier will be stored for a maximum of 6 months.
e) Passing on the data
The IP address as well as the shortened IP address are not passed on.
f) Right to object to analysis by INFOnline
• If you do not wish to participate in the measurement, you can object at the following link: https://optout.ioam.de
• To guarantee exclusion from measurement, it is technically necessary to set a cookie. If you delete the cookies in your browser, it is necessary to repeat the opt-out process using the link above.
In addition, all rights of data subjects within the meaning of the GDPR are regulated in Section 5 of this document.
The data subject has the right to lodge a complaint with a data protection authority.
Further information on data protection in the measurement process can be found on the INFOnline GmbH website (https://www.infonline.de) and the IVW data protection website (http://www.ivw.eu).
4.6.7 Analysis with Matomo
We use the analysis service Matomo on our websites, an open source project represented within the EU by ePrivacy Holding GmbH, Große Bleichen 21 in 20354 Hamburg.
4.6.8 Analysis with amplitude
We use the analytics tool Amplitude on our websites and in our apps. Amplitude is a cloud-based product analytics platform operated by Amplitude Inc, 201 3rd Street, Suite 200San Francisco CA 94103, United States.
As part of commissioned data processing, anonymized event-based data on usage-specific behavior in PONS LS services such as the PONS translation service and in PONS LS apps is stored via the Amplitude platform. Amplitude retains the data processed on behalf of PONS LS only for as long as PONS LS uses the Amplitude Platform or as necessary to comply with legal obligations, resolve disputes and fulfill an agreement.
It is not possible for us to draw any conclusions about your person.
4.6.9 Analysis with Facebook Custom Audience technology
4.6.10 Advertising via Google DoubleClick
We use DoubleClick, an online marketing tool from Google, on our websites.
If you do not want Doubleclick to continue collecting anonymized data, please click on the following opt-out link https://adssettings.google.com/authenticated?hl=en. This opt-out cookie deletes the previously stored information and prevents further collection of information.
4.6.11 Advertisements via Google Adwords
We use Google Adwords, an online marketing tool from Google, to display advertisements (e.g. product recommendations) on our websites and on third-party websites to previous visitors to our websites.
The ads are displayed based on information stored by Google in cookies on your access device. Cookies contain information about the visit of a website and which specific subpages were visited. The assignment in the case of a repeated visit, e.g. the interest in a certain product, is anonymized via a so-called pseudonym, without the assignment or use of personal data.
We or Google will not merge this information with your personal data and will not pass it on to third parties. The processing of the data is based on your consent pursuant to Art. 6 section 1 a) GDPR.
You can prevent the storage and use of information in a cookie set by Google by clicking on the following link https://myadcenter.google.com/?hl=en and making your settings there.
4.6.12 Receiving push notifications in apps
You can sign up to receive so-called push messages in some of our apps. For this purpose, we use the push service "Firebase Cloud Messaging" (FCM) from "Google" (Google LLC, Google Ireland Limited, Google Asia Pacific Pte. Ltd) and, under iOS, additionally the service "Apple Push Notification Services" from Apple Inc.
To sign up for the push notifications, you must confirm the request of your mobile device to receive the push notifications. This process is documented and stored by FCM. For this purpose, the time of registration and a device ID are stored. This data is used on the one hand to be able to send you the push messages and on the other hand as proof of your registration.
We evaluate push messages statistically and can thus recognize whether and when push messages were displayed and clicked on. This allows us to determine which push messages are of particular interest and help us to tailor future messages to the presumed interests of all.
The legal basis for these processing operations is your consent and thus Art. 6 (1) lit. a GDPR.
You can give your consent to the storage and use of your personal data to receive our push messages at any time in the privacy settings in the app as well as in the app settings of your mobile device.
a) Disable push messages on iOS:
• Open the "Settings" app.
• Scroll down the list of apps until you see the name of the app for which you want to disable push messages.
• Tap the name of the app and then tap "Notifications".
• Here you can disable individual notification variants or push messages completely.
b) Disable push messages on Android:
• Open the notification center at the top of the screen.
• Tap and hold your finger on a notification of the app for which you want to deactivate push messages until a menu opens.
• Tap on "App Info."
• Now uncheck "Receive notifications".
Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Accordingly, your data will be stored at least as long as the subscription for push messages is active.
4.7 Other third party services used
4.7.1 Youtube videos
We embed videos from "Youtube", a social media platform from Google, on our websites.
When you call up a website in which a video from YouTube is embedded, data is transmitted to a Google server and stored there. If you have a user account with Google and are registered, Google can thereby assign the visit to your user account. Google stores this data as usage profiles and uses it for the purposes of advertising, market research and/or demand-oriented design of its websites. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on our PONS LS websites. You have the right to object to the creation of these user profiles. Please contact Google directly for this purpose.
We integrate videos from Youtube on our websites in order to make this content available to you directly, without detour via the Youtube platform. Our legitimate interest in the processing of the above data by the third-party provider is based on improving the user experience and enriching the content of our offer on the PONS LS websites, pursuant to Art. 6 (1) sentence 1 lit. f) GDPR.
If you want to prevent data transfer, you cannot use the functions of Youtube. Regardless of this, we recommend that you regularly log out of your user account there after using a social network, but especially before activating embedded content, as this allows you to avoid an assignment to your profile with the respective provider.
Further information on data protection and data use by Google can be found on the following Google website: https://policies.google.com/privacy?hl=en.
We use a so-called Content Delivery Network ("CDN") of the technology service provider Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA (referred to below as Cloudflare) on our websites.
A content delivery network is an online service that is used to deliver large media files in particular (such as graphics, page content or scripts) through a network of regionally distributed servers connected via the Internet. The use of Cloudflare's Content Delivery Network helps us optimize the loading speed of our websites.
The processing is carried out pursuant to Art. 6 section 1 lit. f) GDPR on the basis of our legitimate interest in a secure and efficient provision and improvement of the stability and functionality of our websites.
4.7.3 Logging in with your Facebook access
If you are a member of Facebook Inc, 4 Grand Canal Square, Dublin 2, Ireland, you can log in to our websites by clicking the button "Log in with your Facebook account". To log in, you will be redirected to Facebook, where you can log in with your Facebook usage data. When you log in in this way, we receive the following data from your Facebook profile from Facebook Inc.: user name, last name, first name. We use this data exclusively for the purpose of registration or login as a customer. For the purpose of the processing of the data by Facebook and your rights in this regard, please refer to the privacy notices of Facebook: https://www.facebook.com/policy.php. We have no influence on the processing by Facebook. If you do not agree with such data transfer between Facebook and us, we ask you not to log in to us with your Facebook access. Conversely, data may also be transferred from our website to Facebook Inc. The legal basis for the transfer of or to Facebook is your consent (Art. 6 section 1 a GDPR). A provision of this data is voluntary. A registration with Facebook is not required for a conclusion of a contract with us. The data we have received from Facebook will be deleted immediately after registration.
4.7.4 Survey Monkey
You can prevent the installation of cookies by deleting existing cookies and deactivating the storage of cookies in the settings of your web browser. We would like to point out that in this case you may not be able to use all functions of our websites to their full extent.
We use SurveyMonkey to provide you with surveys. This purpose is also our legitimate interest in processing the above mentioned data, which is based on Art. 6 section 1 lit. f) GDPR.
SurveyMonkey Europe UC is a subsidiary of SurveyMonkey Inc. based in the USA. It is not excluded that your data collected by SurveyMonkey will also be transferred to the USA. SurveyMonkey is therefore committed to complying with the standards and regulations of European data protection law.
5. Rights of data subjects
If your data is processed by us, you are a data subject within the meaning of the GDPR and you have the following rights against the controller. You can assert all of these rights via an email to email@example.com or to the addresses mentioned in Sections 2 and 3.
5.1 The right to information and data transferability
In accordance with Art. 15 GDPR you have the right to require us to provide you with information:
- about whether we have saved your data and, if so, what data and for what purpose,
- about the source of the data
- and to what recipients or categories of recipients your data may be passed on.
In accordance with Art. 21 GDPR you have the right to receive the data you have transmitted to us on the basis of your consent or a contract, provided that the processing of the data was automated. If you wish and if it is technically possible, we will also transmit this data to a third party at your request.
5.2 The right to correction
If the data relating to you is incorrect or incomplete, you have the right to demand that your data should be corrected and if relevant completed by the data controller (Art. 16 GDPR).
5.3 The right to the deletion or blocking of data
You have the right that we delete your data under the conditions of Art. 17 GDPR or block it according to Art. 18 GDPR. If you delete your customer account with PONS LS, we will delete your data insofar as storage is not necessary for the fulfillment of contracts that have not yet been completed, for the assertion of legal claims or for the fulfillment of legal obligations.
5.4 The right of objection
To the extent that we process data exclusively for the purpose of safeguarding our interests on the basis of Art. 6 Section 1 f GDPR you have the right to object to the processing of your data for reasons arising from your individual situation. If you make such an objection, we will no longer process the relevant data, unless we can prove that such processing is essential for the protection of those of our interests which take precedence over your interests, rights and freedoms, or if the processing is for the purpose of asserting legal claims.
In addition, you can at any time object to the processing of your data for advertising purposes without incurring any other charges than the transmission cost at basic rates. You can at any time and free of charge object to being sent advertising emails, for example by clicking on the relevant unsubscribe link at the foot of an advertising email. Such an objection will also mean that you will no longer receive newsletters in accordance with Section 4.5.
5.5 The right to withdraw consent
If you have given your consent to the processing/use of your data, you can withdraw this consent at any time by sending an email to firstname.lastname@example.org. Such withdrawal will not affect the legality of the processing of your data prior to the withdrawal of your consent. We will then delete your data, unless we have the statutory right or obligation to retain and process it.
5.6 The right to complain to a subervisory authority
You have the right to register a complaint with the regulatory authorities, in particular with the State Office for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart
Insofar as we refer to external websites not operated by us by means of links on our websites, we are not responsible for compliance with data protection provisions there.
7. Data transfer to third countries
As part of our data processing operations described above, we may transfer your personal data to other countries (including countries outside the EEA) where data protection standards may differ from those of your place of residence. Please note that data processed in third countries may be subject to local laws and may be accessible to foreign governments, courts, law enforcement and supervisory authorities.
However, when transferring your personal data to such countries, we will take reasonable steps to maintain an adequate level of data protection.
In the case of a transfer to a state outside the EEA, this transfer is either authorised by your consent in accordance with Art. 49 Section 1a GDPR or it is protected by concluding the EU Standard Contractual Clauses in accordance with Art. 46 GDPR. For specific information on the individual protection measures, you can also contact our data protection officer by e-mail at email@example.com.
Personal data which is exchanged between you and PONS LS via our websites is in principle transmitted in encrypted form. In addition, we take technical and organizational security precautions to protect the data which you have entrusted to us against manipulation, loss, destruction or access by unauthorised persons. Please note, however, that in the case of email communications we are unable to guarantee full data security, which means that it is advisable to send confidential information by mail.
Valid from: 01.02.2023