Privacy Policy

The protection of your data as well as their security and confidential treatment are of the utmost importance to us. In this Privacy Policy, we explain how we collect and process your personal data when you use our website or our online offerings at www.luebbe.de. Personal data are all data that make you identifiable, e.g. name, address, e-mail address and user behavior.

A. General information

  1. Controller
  2. Data Protection Officer
  3. Data security
  4. Principles relating to the storage and erasure of personal data

B. Visits to our website

  1. Provision of our website
  2. Cookies
  3. Web analysis
  4. Use of plug-ins

C. Use of services

  1. Online shop
  2. Contact options
  3. Newsletter

D. Rights of data subjects

E. Contact

A. General information

1. Controller

The controller within the meaning of Art. 4(7) of the General Data Protection Regulation (GDPR) is

  • as regards the entire online offering at www.luebbe.de (with the exception of the online shop): Bastei Lübbe AG, Schanzenstraße 6 – 20, 51063 Cologne, Germany, Tel.: 0221 - 8200 0, E-mail: datenschutz@luebbe.de
  • as regards the online shop (contracting party in relation to online orders): DigitalStores GmbH, Bernstorffstr. 120, 22767 Hamburg, Germany, E-mail: luebbe@digitalstores.net

Please refer to our Legal Notice at www.luebbe.de for further particulars, contact details and additional legal information.

2. Data Protection Officer

You can contact Bastei Lübbe AG’s Data Protection Officer at:

  • Bastei Lübbe, Data Protection, Schanzenstraße 6 – 20, 51063 Cologne, Tel.: 0221 - 8200 0, E-mail: datenschutz@luebbe.de

You can contact DigitalStores GmbH’s Data Protection Officer at:

  • DigitalStores GmbH, Bernstorffstr. 120, 22767 Hamburg, Tel.: 040 - 431 79 391,

E-mail: luebbe@digitalstores.net

3. Data security

We secure our website and other systems by taking technical and organizational measures against loss, destruction, access, alteration and dissemination of your data by unauthorized parties.

In connection with attacks on our website, data which could be used to identify you (e.g. IP address) are stored on our servers temporarily, but, as a rule, no longer than 30 days, for the purposes of data and system security. The processing of potentially personal data for the purposes of data and system security is carried out on the basis of Art. 6(1)(f) of the GDPR and on the basis of our legitimate interest in safeguarding our systems and preventing abuse.

4. Principles relating to the storage and erasure of personal data

The processing of personal data only takes place during the period required for achieving the respective purpose of the storage or for as long as we are required to do so by laws or regulations, e.g. commercial or tax law which requires the retention of documents. Where the reason for storage ceases to apply (e.g. if you unsubscribe to our newsletter service) or if the period of retention prescribed by law expires, the personal data concerned will as a matter of routine be erased in accordance with the statutory provisions or processing will be restricted, e.g. processing will be limited to what is required by commercial or tax law retention duties.

The processing of personal data in order to comply with a legal obligation, namely the fulfillment of statutory retention duties is based on Art. 6(1)(c) of the GDPR. Where personal data are processed pursuant to Art. 6(1)(f) of the GDPR for the purpose of preserving evidence, this processing purpose will cease to exist when the statutory limitation periods expire; the usual statutory limitation period is three years.

For further details of specific storage and erasure deadlines, please refer to the individual service descriptions or information in this Privacy Policy.

B. Visits to our website

If you visit our website just for informational purposes, but do not register or make a purchase in the online shop or otherwise disclose personal information to us, we will only collect the personal data that your browser sends to our server. We use tracking technologies to the extent described below for the purposes of web analysis and online marketing.

1. Provision of our website

When you visit our website, we collect the data set out below. These data are needed for technical reasons so that we can display our website and safeguard the stability and security of our online offering:

  • Your IP address
  • Date and time of the query
  • Time difference to Greenwich Mean Time (GMT)
  • Content of the query (specific page)
  • Access status/HTTP status code
  • Volume of data transmitted in each case
  • Website from which access is initiated
  • Browser
  • Operating system and its interface
  • Language and version of browser software

Art. 6(1)(f) of the GDPR provides the legal basis for collecting and processing such data. We have a legitimate interest in providing a functional website and in maintaining our system security. Furthermore, we use the above data in anonymous form for statistical purposes and to improve our online offering.

2. Cookies

Our website uses cookies. Cookies are small text files, which your browser receives and saves on your computer.

Many websites and servers use cookies. Cookies often have what is known as a cookie ID. Such an ID is a unique identifier of the cookie and consists of a randomly generated string of characters. It allows the websites and servers to identify the specific Internet browser which received and saved this particular cookie. Such cookies make it possible to distinguish your specific browser from all the other Internet browsers that receive other cookies. The unique cookie ID makes it possible to recognize and identify a specific Internet browser when it returns.

By using cookies, we can offer you user-friendly services that would be either not possible at all or only possible to a limited extent. In other words, cookies enable us to recognize users who return to our website. By recognizing users when they return to our website, we can make our online offerings easier to use. As a simple example of a function requiring the support of a cookie, consider the functionality of a shopping basket in an online shop. The online shop needs to use a cookie to enable it to “note” the items that the user puts in his or her shopping basket during a session. Art. 6(1)(f) of the GDPR provides the legal basis for the use of cookies. Our legitimate interest arises in connection with our provision and optimization of a functional and convenient online offering.

Where we use cookies in connection with web analysis or tracking services, we use a “cookie banner” and so obtain the user’s informed consent (cf. Art. 6(1)(a) of the GDPR).

By changing the settings of your Internet browser, you can, at any time, configure it to always reject cookies. Furthermore, you can use your Internet browser or another program to delete any cookies that have already been saved on your system. Please understand, however, that in the event that you configure your browser to reject cookies, you may not be able to use all of the functionality of our or other online offerings.

Please take particular note of the notices regarding web analysis and the use of third-party cookies, when you consider the use of specific cookies discussed below.

3. Web analysis

We use various web analysis services to improve the user-friendliness of our online offering and to make it more attractive. Where personal data is processed by web analysis services, this is carried out on the basis of Art. 6(1)(f) of the GDPR. In this context, the design of a user-friendly and attractive website offering is a legitimate interest on our part.

eTracker

Our website uses technologies from etracker GmbH (https://www.etracker.com) to collect and store data for marketing and optimization purposes. It enables us to create user profiles using pseudonyms. Cookies may be used for this purpose. Cookies are small text files, which are stored locally in an intermediate memory (cache) of the Internet browser used when you visit a website. The cookies make it possible to recognize your Internet browser. The data collected using etracker technologies are not used to personally identify website visitors without their express consent, nor are they used to associate personal data with the person to whom the pseudonym refers. You may, at any time, revoke your consent to the collection and storage of your data with future effect.

Please exclude me from eTracker’s data collection.

http://www.etracker.de/privacy?et=USEaEg

We use eTracker to analyze the use of our website and so as to be able to make continual improvements to it. The statistics obtained enable us to enhance our offerings and make them more attractive for you as the user. The data collected are permanently stored and analyzed in pseudonymized form. Art. 6(1)(f) of the GDPR provides the legal basis for using eTracker.

Third-party provider’s information: etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg; https://www.etracker.com/en/data-privacy/ Art. 6(1)(f) of the GDPR provides the legal basis for using eTracker.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses cookies, which are text files placed on your computer, to help the website analyze how you use the site. The information generated by the cookie about your use of the website will, as a rule, be transmitted to and stored by Google on servers in the United States. If you activate the IP anonymization feature on the website, Google will however shorten your IP address in the Member States of the European Union and other States that are contracting parties to the Agreement on the European Economic Area before transmitting it to the United States. Your full IP address will only be transmitted to a server belonging to Google in the United States in exceptional cases and then shortened there. At the website operator’s request, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and Internet usage for the website operator. Google will not associate any other data held by Google with the IP address obtained from your browser using Google Analytics.

You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this, you may not be able to use the full functionality of this website. Furthermore, by downloading and installing the following browser plug-in (https://tools.google.com/dlpage/gaoptout?hl=en), you can prevent information generated by cookies about your use of the website (including your IP address) being sent to and processed by Google.

This website uses Google Analytics with the extension “_anonymizeIp()”. As a result, your IP address is shortened before data are sent to Google and your IP address cannot be used to identify you personally. If data that makes you personally identifiable are collected, this personal data will be immediately excluded and deleted.

We use Google Analytics to analyze the use of our website so as to be able to make continual improvements to it. The statistics obtained enable us to enhance our offerings and make them more attractive for you as the user. In those cases where, by way of exception, personal data are transmitted to the USA, Google has committed to comply with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. Art. 6(1)(f) of the GDPR provides the legal basis for using Google Analytics.

Information about the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Terms of Services: https://marketingplatform.google.com/about/analytics/terms/us/

Overview of data: http://www.google.com/intl/de/analytics/learn/privacy.html

Privacy Policy: https://policies.google.com/privacy?hl=en-US

Google AdWords conversion

We use the services of Google AdWords on third-party websites to draw attention to our attractive offerings. We can ascertain, based on data from an advertising campaign, how successful individual advertising activities are. In this way, we pursue our interest in displaying advertising that will interest you, making our website more interesting and achieving an unbiased calculation of advertising costs.

AdWords are delivered by Google’s Ad Server. For this purpose, we use Ad Server cookies, through which success can be measured using certain parameters such as the overlaying of advertisements or the number of clicks by users. If you reach our website via a Google advertisement, Google AdWords will store a cookie on your computer. These cookies normally remain active for 30 days and are not used for personal identification. As a rule, the following are stored with the cookie: the unique user ID, the impression frequency per user, the last impression (relevant for post-view conversions) and opt-out information (notice that the user does not wish to receive further advertising).

These cookies enable Google to recognize your browser when you revisit our website. Where a user visits certain pages on the website of an AdWords customer and if the cookie that is stored on the customer’s computer has not expired, Google and the customer can see that the user clicked on the advertisement and was transferred to such page. A different cookie is assigned to each AdWords customer. Cookies thus cannot be traced back to the user via the websites of AdWords’ customers. We ourselves do not collect and process personal data in AdWords. Google provides us with only the statistical analysis. These analyses indicate to us which advertisements are particularly effective. The use of advertisements does not provide us with any further information, in particular we cannot use this information to identify users.

Your browser connects to Google’s server automatically due to the marketing tools used. We have no control over the scope or further use of data that Google collects using this tool and are thus informing you based on as much as we know: Through the embedding of AdWords conversion, Google is informed that you have accessed the relevant part of our website or that you have clicked on one of our advertisements. If you are registered for a Google service, Google will be able to associate your visit with your account. Even if you are not registered with Google or have not logged into your account, there is a possibility that Google will determine your IP address and store it.

There are different ways that you can prevent tracking: a) by selecting the appropriate settings in your browser software; in particular, by blocking third-party cookies you can ensure that you do not receive any advertisements from third-party providers; b) by deactivating the cookies for conversion tracking by configuring your browser to block cookies from the domain “www.googleadservices.com”, https://www.google.de/settings/ads; however, this setting will be deleted if you delete your cookies; c) by deactivating interest-based advertising from providers who participate in the self-regulatory campaign “About Ads” via the link http://www.aboutads.info/choices; however, this setting will be deleted if you delete your cookies; d) by permanently deactivating tracking in your Firefox, Internet Explorer or Google Chrome browsers using the following link http://www.google.com/settings/ads/plugin. We would like to point out that you may not in this case be able to use all of the functionalities of this website.

For further information about privacy at Google, please visit: https://policies.google.com/privacy?hl=en and https://services.google.com/sitestats/en.html.

Google has committed to comply with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Twiago conversion tracking

We use the services of twiago GmbH, Gustav-Heinemann-Ufer 72b, 50968 Cologne, on third-party websites to draw attention to our offerings. We can ascertain, based on data from an advertising campaign, how successful individual advertising activities are. In this way, we pursue our interest in displaying advertising that will interest you, making our website more interesting and achieving a reasonable assessment of advertising costs. Art. 6(1)(f) of the GDPR provides the legal basis for processing your data in this way.

Advertisements are delivered by what is known as an Ad Server. For this purpose, we use Ad Server cookies, through which success can be measured using certain parameters such as the overlaying of advertisements or the number of clicks by users. If you reach our website via such an advertisement, a cookie will be stored on your computer. These cookies normally remain active for 30 days and are not used for personal identification. As a rule, the following are stored with the cookie: the unique cookie ID, the impression frequency per user, the last impression (relevant for post-view conversions) and opt-out information (notice that the user does not wish to receive further advertising).

We use what are known as conversion pixels (1x1 pixel - a tiny graphic) to measure the number of conversions (effective use of ads). The pixel’s HTML code contains an external link to the pixel or to be more precise the Ad Server. When a user accesses our site, the HTML code of the client – i.e. normally the user’s browser – is processed. The browser follows the link and calls up the (invisible) graphic. This access is registered and recorded by the Ad Server in the log files.

We ourselves do not collect and process personal data in in connection with the advertising measures described. Twiago only provides us with statistical analyses. These analyses indicate to us which advertisements are particularly effective. The use of advertisements does not provide us with any further information, in particular we cannot use this information to identify users.

There are various ways of opting out of this tracking process. Please refer to twiago GmbH’s opt-out information at http://a.twiago.com/privacy.php?lang=1. There you will find additional information about the method used. You can view twiago GmbH’s Privacy Policy at https://www.twiago.com/datenschutz/.

mbr marketing

This website uses cookies of mbr targeting GmbH, Torstraße 49, 10119 Berlin, (“mbr targeting”) for marketing purposes. Cookies are identified by the name “tracking.m6r.eu<http://tracking.m6r.eu>”and are stored on your end device. With the help of these cookies, it is possible to track your activities on our website. This is done to measure and improve the effectiveness of advertisements (conversions). The data collected are immediately anonymized by us, i.e. we only process shortened IP addresses. The cookies placed on your end device are deleted at the latest after 90 days. The legal basis for the related processing, in this case, is Art. 6(1)(f) of the GDPR, i.e. our legitimate interest in offering you as interesting a website as possible, including from an advertising perspective.

For further information, including on how to deactivate the cookies used by mbr marketing, please refer to the Privacy Policy of the provider Ströer on whose behalf mbr marketing acts. Please visit https://www.stroeer.de/digitale-werbung/werbemedien/targeting-data/datenschutz.html and https://privacy.mbr-targeting.com/?optedIn=true.

MediaMath

For marketing purposes, this website uses what are known as conversion and retargeting pixels supplied by MediaMath UK Ltd, 230 Blackfriars Road, London, SE1 8NW, England (“MediaMath”). MediaMath uses cookies, mobile ad IDs, web beacons or pixel tags in order to identify you and collect information from your device about your device’s browser type (e.g. Chrome or Internet Explorer), operating system (e.g. Mac OS or Windows), browser language (e.g. German or English), IP address, Internet service provider (e.g. Comcast or Verizon). Processing this data together with data related to your device, MediaMath prepares a pseudonym (called a “MediaMath ID”), which is then stored on your device in a cookie. This user profile is then used to select and display advertisements reflecting your interests and your activity on the website as well as to measure the effectiveness of the advertisements already displayed. This user profile in the form of a pseudonym is stored by MediaMath after its last usage for a period of between 30 days and 13 months. The legal basis for the related processing, in this case, is Art. 6(1)(f) of the GDPR, i.e. our legitimate interest in offering you as interesting a website as possible, including from an advertising perspective.

You will find further information in Media Math’s Privacy Policy that is available at http://www.mediamath.com/de/datenschutzrichtlinie/. You can deactivate the use of cookies by MediaMath by going to http://www.mediamath.com/ad-choices-opt-out/ or to http://www.youronlinechoices.com/de/praferenzmanagement/.

4. Use of plug-ins

Our website contains AddThis plug-ins. These plug-ins allow you to set bookmarks or share interesting content with other users. We offer you the opportunity to interact with social networks and other users through plug-ins so that we can improve our offerings and make them more attractive for you as the user. Art. 6(1)(f) of the GDPR provides the legal basis for using plug-ins.

Via this plug-in, your Internet browser connects directly to AddThis’s servers and possibly to the selected social network or bookmarking service. The recipient receives the information that you have visited the corresponding page of our website. This information is processed by AddThis’s servers in the USA. If you send content from our website to social networks or bookmarking services, your visit to our website can be linked with your user profile at the relevant network. We have no control over the data collected or the plug-in provider’s data processing activities. Nor are we aware of the extent to which data are collected, the purpose of such collection or how long the data are stored. In addition, we have no information regarding the erasure of data collected by plug-in providers.

Plug-in providers store the data they collect about you to create a user profile, which they then use for advertising, market analysis and/or to tailor their websites to the market. This kind of analysis is carried out, in particular (including in respect of users who are not logged in) for the purposes of presenting advertising tailored to the market and to inform other social network users about your activities on our website. You have the right to object to the creation of this user profile. However, to exercise this right, you need to contact the respective plug-in provider.

If you do not wish to have your data collected and stored in this way, you may at any time opt out of this with effect for the future by going to: http://www.addthis.com/privacy/opt-out. Alternatively, you can configure your browser settings so that it does not allow cookies to be stored.

More information about the purpose and scope of data collection and processing by plug-in providers as well as additional information about your privacy rights and settings to protect your privacy can be found at: AddThis LLC, 1595 Spring Hill Road, Sweet 300, Vienna, VA 22182, USA, www.addthis.com/privacy.

You will find further information about any social networks or bookmarking services which you may have selected via the AddThis-Plug-ins in these providers’ Privacy Policies. These are set out below and also include information about your privacy rights and settings to protect your privacy.

Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php and http://www.facebook.com/about/privacy. Facebook has committed to comply with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://policies.google.com/technologies/partner-sites?hl=en. Google has committed to comply with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter has committed to comply with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

C. Use of services

We collect and process your personal data when you order goods at our online shop, use our newsletter service or participate in competitions.

1. Online shop

Your contractual partner for online orders at our online shop is DigitalStores GmbH, Bernstorffstr. 120, 22767 Hamburg.

Online orders

If you would like to place an order in our online shop, it will be necessary for you to provide us with the personal data needed to conclude a contract with you and to process your order. The information which is mandatory so that we can carry out the contract is designated as such; where you supply other information, you do so on a voluntary basis. We process the data that you have provided so that we can process your order. We may pass on your payment data to our principal bank. Art. 6(1)(b) of the GDPR provides the legal basis for processing data for the purposes of processing and completing your order

Every download and attempted download from the shop is registered and stored. This is done to prevent abuse and so that we can assist you if you have problems with a download. Art. 6(1)(f) of the GDPR provides the legal basis for processing such data.

Transfer to third parties for the purpose of processing orders

We only transfer your data to third parties where this is necessary in order to provide the respective service. For example, your data are forwarded, to the extent necessary to process your order, to the shipping company that we use for shipping or to the financial services provider that we use for processing payment. We may assign invoice receivables to a third party, in particular for refinancing purposes or simpler invoice processing. Please note that we are required by law in cases where we assign receivables to transfer, to a third party, the information needed for the assignment and collection of the receivables. Art. 6(1)(b) and (f) of the GDPR provide the legal basis for processing such data. Data processing is carried out for the purposes of processing and completing your order and to safeguard our legitimate interest in efficiently processing shipment and payment.

Advertising sent to existing customers

Where we have received your e-mail address because you have purchased goods or services in our online shop, we may use your e-mail address to send you direct advertising for similar goods or services that we offer; this includes the conduct of customer surveys or requests for product feedback. Art. 6(1)(f) of the GDPR and § 7(3) of the Act against Unfair Competition (Gesetz gegen den unlauteren Wettbewerb – UWG) provide the legal basis for processing such data. We have a legitimate interest in optimizing our range of products and services and in sending you customized advertising.

You may, of course, object to the use of your data for these purposes at any time without incurring any transfer costs other than the standard transfer rates applicable. To do this, simply contact us at the address provided in this Privacy Policy or in our Legal Notice at www.luebbe.de. You may also simply use the links provided in the relevant e-mails.

Marketing and market research

We also use your address and order information for our own marketing purposes, for example, for personalized direct advertising and market research. This allows us to send you, for example, information about special offers and sales by post. This data processing is carried out pursuant to Art. 6 (1)(f) of the GDPR on the basis our legitimate interest in optimizing our range of products and services and sending customized advertising to you.

If personal data are processed for direct marketing purposes, you may, at any time, object to such processing; the same also applies to any profiling related to such direct marketing activities.

Storage and erasure of data

If you order through our website, we are required by commercial and tax law provisions to store your address, payment and order details for a period of 10 years. Art. 6(1)(c) of the GDPR provides the legal basis for processing such data. Nevertheless, we normally restrict processing after a period of three years, i.e. your data are only used to comply with statutory obligations unless the processing of personal data is necessary for other purposes and based on another legal ground (e.g. for continuing to send a newsletter to which you have subscribed etc.).

2. Contact options

We provide you with various ways of getting in touch and sending us messages on our website. You can use e-mail, phone or the contact form provided to reach out to us. When you contact us, any data provided (your e-mail address or your name and telephone number) are stored by us and processed in order to reply to your enquiry. The legal bases for this are Art. 6(1)(b) and (f) of the GDPR. We have a legitimate interest in collecting and processing customer enquiries efficiently and in an organized way. After storage of your data has become no longer necessary, we erase same or, where we are required by law to retain such data, we restrict their processing.

3. Newsletter

When you visit our website, you will be offered the option of subscribing to our free newsletter. The newsletter provides information about current offers, new products, special promotions and exclusive savings advantages in respect of goods and services from the Bastei Lübbe program. Our data processing for providing and optimizing our newsletter service is based on your consent pursuant to Art. 6(1)(a) of the GDPR.

In order to register for our newsletter, you only need to provide your e-mail address. If you would like to be addressed personally, you may provide us voluntarily with your first name and last name as well as your date of birth.

After sending us the registration form, you will receive a confirmation e-mail from us (double opt-in e-mail). Your registration first becomes valid after you have clicked on the link in the confirmation e-mail. If you do not click on the link in the confirmation e-mail, the registration process will not be completed.

If you do not confirm your registration, the information provided in your registration will be blocked and automatically deleted. We would moreover like to remind you that we store the IP address provided and the time and date of registration and confirmation. The purpose of this process is to enable us to show that you registered and to be able to investigate any abuse of your personal data. Art. 6(1)(f) of the GDPR provides the legal basis for processing such data.

You may withdraw your consent to our newsletter service and unsubscribe to the newsletter at any time with effect for the future. To unsubscribe, you can use the link provided for this purpose at the end of every e-mail or contact us using the e-mail address which you used when you registered for the newsletter. To do this, simply contact us at the address provided in this Privacy Policy or in our Legal Notice at www.luebbe.de. Your e-mail address will then be removed from our newsletter list. Withdrawal of your consent will not affect the lawfulness of our processing based on your consent prior to withdrawal.

4. News feed and messenger

Using messenger services, we offer a news feed with current information about our publishing house. You can subscribe to receive our news feed. In the course of subscribing, you will need to give your consent in the manner set out below:

When the user sends a “start” message to Bastei Lübbe AG (hereinafter the “Sender”), he or she consents, pursuant to Art. 6 (1)(a) of the GDPR, to the Sender using his or her personal data (e.g. last name and first name, phone number, messenger ID, profile photo, messages) for direct communications and to the related data processing necessary using the selected messenger app. To use this service, the user must have an existing messaging account with his or her respective service provider.

The providers of the messenger apps are as follows

  • Whatsapp - WhatsApp, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Its Privacy Policy can be found at https://www.whatsapp.com/legal/#privacy-policy
  • Facebook Messenger - Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. Its Privacy Policy can be found at www.facebook.com/about/privacy
  • Telegram - Telegram Messenger LLP 71-75 Shelton Street, Covent Garden, London, United Kingdom. Its Privacy Policy can be found at https://telegram.org/privacy
  • Insta News - Pylba Inc., 314 27th Avenue, San Mateo, CA, 94403, USA. Its Privacy Policy can be found at apps.pylba.com/privacy

The user is aware that the respective providers receive personal data (in particular the communication metadata), which will be processed in countries outside the EU (e.g. the USA) where an appropriate level of data protection cannot be ensured for their personal data. Whatsapp Inc and Facebook Inc have, however, been certified under the Privacy Shield agreement and have thus committed to comply with European data protection law. For further information, please see the Privacy Policy of the respective messenger at the related link above. The Sender has neither detailed knowledge of the data processing at the individual providers nor influence over same.

The user’s consent to this data processing can be revoked at any time by using the respective messenger app to send a “STOP” message.

If the user wishes to have all of his or her data that is stored at our service provider deleted, he or she can use the relevant messenger app to send a message with the following text “ALLE DATEN LOESCHEN”.

The Sender has contracted with the service provider, MessengerPeople GmbH, Herzog-Heinrich-Str. 9, 80336 Munich, to perform the above services.

Information about the Privacy Policy of MessengerPeople GmbH can be found at: https://www.messengerpeople.com/de/datenschutzerklaerung

D. Rights of data subjects

We are pleased to explain to you your rights as a “data subject” pursuant to the GDPR. According to the Regulation, as a data subject you are entitled to the following rights:

  • Right of access (Art. 15(1) and (2) of the GDPR)
  • Right to rectification (Art. 16 of the GDPR) and erasure (Art. 17 of the GDPR)
  • Right to restrict processing (Art. 18 of the GDPR)
  • Right to data portability (Art. 19 of the GDPR)
  • Right to object to processing (Art. 21 of the GDPR)
  • Rights to withdraw consent (Art. 7(3) of the GDPR)
  • Right to lodge a complaint with a supervisory authority (Art. 77 of the GDPR)

To supplement the above, we summaries the key aspects of data subject rights under the Regulation. However, the description below does not purport to be complete, but simply to address the main elements of data subject rights under the Regulation.

Right of access (including the right to obtain confirmation and to be provided with a copy of data)

The data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed.

The data subject has the right to access his or her personal data and the following information:

  • the purposes of processing;
  • the categories of personal data concerned;
  • the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
  • where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
  • the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
  • the right to lodge complaints with a supervisory authority;
  • where the personal data are not collected from the data subject, any available information as to their source;
  • the existence of automated decision-making, including profiling, referred to in Art. 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject;
  • where personal data are transferred to a third country or to an international organization, the right to be informed of the appropriate safeguards pursuant to Art. 46 relating to the transfer.

The data subject has the right to be provided with a copy of the personal data undergoing processing.

Right to rectification

The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to restrict processing

The data subject has the right to obtain from the controller restriction of processing where one of the following applies:

  • the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
  • the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
  • the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims;
  • the data subject has objected to processing pursuant to Art. 21(1) of the GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.

Right to erasure (“right to be forgotten”)

The data subject has in principle and except where processing is required by law (see the exceptions in Art. 17(3) of the GDPR) the right to obtain from the controller the erasure of personal data concerning him or her without undue delay where one of the following grounds applies:

  • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  • the data subject withdraws consent on which the processing is based according to Article 6(1)(a) of the GDPR, or Article 9(2)(a) of the GDPR, and where there is no other legal ground for the processing;
  • the data subject objects to the processing pursuant to Art. 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21(2) of the GDPR;
  • the personal data have been unlawfully processed;
  • the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
  • the personal data have been collected in relation to the offer of information society services referred to in Art. 8(1) of the GDPR.

Right to data portability

The data subject has the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and has the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where: the basis for processing the personal data is consent or a contract pursuant to Art. 6(1)(b) of the GDPR and the processing is carried out by automated means.

In exercising his or her right to data portability, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible.

Right of withdrawal

The data subject has the right to withdraw his or her consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent prior to withdrawal.

Right to lodge a complaint with a supervisory authority

Every data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes this Regulation.

The competent data protection authority for Bastei Lübbe AG is: State Commissioner for Data Protection and Freedom of Information in North Rhine Westphalia, P.O. Box 200444, 40102 Düsseldorf, Tel: 0211-384240, Fax: 0211-3842410 E-mail: poststelle@ldi.nrw.de, www.ldi.nrw.de

The competent data protection authority for DigitalStores GmbH is: Hamburg Commissioner for Data Protection and Freedom of Information, Klosterwall 6 (Block C), 20095 Hamburg.

######################

Special notice regarding the right to object pursuant to Art. 21(1) and (2) of the GDPR

You have the right to object, on grounds relating to your particular situation, at any time, to processing of personal data concerning you which is based on Art. 6(1)(e) or (f) of the GDPR, including profiling based on those provisions. Where you exercise your right to object, we will then cease to process your personal data unless we can demonstrate compelling legitimate reasons for such processing that outweigh your interests, rights and freedoms, or where such processing serves to establish, exercise or defend legal claims.

If personal data are processed for direct marketing purposes, you may, at any time, object to such processing; the same also applies to any profiling related to such direct marketing activities.

######################

E. Contact

If you wish to exercise your rights as a data subject or generally have any questions about data protection, you may contact us or our Data Protection Officer at any time:

  • The responsible party for the entire online offering at www.luebbe.de (with the exception of the online shop) is: Bastei Lübbe AG, Schanzenstraße 6 – 20, 51063 Cologne, Germany, Tel.: 0221 - 8200 0, E-mail: datenschutz@luebbe.de
  • The responsible party for the online shop (contracting party in relation to online orders) is: DigitalStores GmbH, Bernstorffstr. 120, 22767 Hamburg, Germany, E-mail: luebbe@digitalstores.net
  • You can contact Bastei Lübbe AG’s Data Protection Officer at: Bastei Lübbe, Data Protection, Schanzenstraße 6 – 20, 51063 Cologne, Tel.: 0221 - 8200 0, E-mail: datenschutz@luebbe.de
  • You can contact DigitalStores GmbH’s Data Protection Officer at: DigitalStores GmbH, Bernstorffstr. 120, 22767 Hamburg, Tel.: 040 - 431 79 391, E-mail: luebbe@digitalstores.net

Please refer to our Legal Notice at www.luebbe.de for further particulars, contact details and additional legal information.

All publishers