Data protection

The BVDM hereby informs you of the nature, scope and purpose of the collection of personal data via the website www.werbeposterhalten.de (hereinafter referred to as the “Website”) and its use.

I. Responsible body

The responsible party in the sense of data protection law is the Bundesverband Druck und Medien e. V.
Markgrafenstraße 15
10969 Berlin
telephone: 030 209139-0
E-mail: info@bvdm-online.de (hereinafter “BVDM”).

II. Contact details of the data protection officer

The data protection officer of the BVDM is AGOR AG, Niddastraße 74, 60329 Frankfurt am Main, Tel: 069 90437965, E-Mail: info@agor-ag.com, Website: www.agor-ag.com.

III. Personal data

According to Art. 4 No. 1 of the General Data Protection Regulation (GDPR), personal data is any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

IV. Data collection and processing

When using the website, personal data is collected in accordance with the following provisions:

1 Visiting the website

1.1 Provision of the website and creation of log files

Each time the website is accessed, the user’s IP address is automatically recorded. The IP address is then stored in the log files of the provider, whereby the last digit of the user’s IP address is overwritten with zeros, so that a provider affiliation can still be traced, but not a personal affiliation. This data is deleted after 50 days at the latest. This data is not stored together with other personal data of the user. The collection and temporary storage of the data and log files is absolutely necessary for accessing and operating the website. The legal basis is Art. 6 para. 1 lit. f of the GDPR.

1.2 Cookies

Cookies are files that are stored by the internet browser on the user’s computer system. When visiting the website, cookies are only stored in accordance with this data protection declaration.

Cookies used on this Website:

Essential

Essential cookies enable basic functions and are necessary for the proper function of the website.

Name	Borlabs Cookie
Provider	Owner of this website, Imprint
Purpose	Saves the visitors preferences selected in the Cookie Box of Borlabs Cookie.
Privacy policy	https://www.werbeposterhalten.de/en/data-protection/
Host(s)	.werbeposterhalten.de
Cookie name	borlabs-cookie
Cookie duration	1 Year

Polylang

Name	Polylang
Provider	Owner of this website,
Purpose	Stores the current language.
Privacy policy	https://www.werbeposterhalten.de/en/data-protection/
Host(s)	.werbeposterhalten.de
Cookie name	pll_language
Cookie duration	1 Jahr

Statistics

Statistics cookies collect information anonymously. This information helps us to understand how our visitors use our website.

Matomo

Name	Matomo
Provider	BVDM – Bundesverband Druck und Medien e. V.
Purpose	Cookie used by Matomo for website analytics. Provides statistical data on how the visitor uses the website.
Privacy policy	https://www.werbeposterhalten.de/en/data-protection/
Host(s)	matomo.vdbm.de
Cookie name	_pk_.
Cookie duration	13 Monate

Marketing

Marketing cookies are used by third-party advertisers or publishers to display personalized ads. They do this by tracking visitors across websites.

External Media

Content from video platforms and social media platforms is blocked by default. If External Media cookies are accepted, access to those contents no longer requires manual consent.

When users place goods in the shopping basket in the BVDM shop, this is stored in a cookie so that the shopping basket remains up-to-date even after a page change. This cookie stores information about the items in the shopping basket. This is a technically necessary cookie that is deleted when the browser is closed.

After logging into the internal area of the website, a cookie is stored. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified. This is a technically necessary cookie that is deleted after logout.

These cookies are used for the purpose of enabling individual functions of the website and simplifying them for users. The legal basis for setting the cookies is Art. 6 para. 1 lit. f of the GDPR. The user data collected through technically necessary cookies are not used to create user profiles.

The transmission of cookies can be deactivated or restricted by changing the settings in the internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for the website, it may no longer be possible to use all functions of the website to their full extent.

Further information on technically unnecessary cookies can be found under IV.6.

2 Matomo

This website uses the web analysis service Matomo to analyse and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. The legal basis for the use of Matomo is Art. 6 para. 1 p. 1 lit. f of the GDPR.

Cookies are stored on your computer for this evaluation. The information collected in this way is stored by the responsible party exclusively on its server in Germany. You can set the evaluation by deleting existing cookies and preventing the storage of cookies. If you prevent the storage of cookies, please note that you may not be able to use this website to its full extent. Preventing the storage of cookies is possible through the setting in your browser. Preventing the use of Matomo is possible by unchecking the following box to activate the opt-out plug-in:

3 Data transfer outside the EU

The GDPR ensures an equally high level of data protection within the European Union. When selecting our service providers, we therefore rely on European partners wherever possible if your personal data is to be processed. Only in exceptional cases will we have data processed outside the European Union in the context of using third-party services. We only allow your data to be processed in a third country if the special requirements of Art. 44 et seq. of the GDPR are fulfilled. This means that the processing of your data may then only take place on the basis of special guarantees, such as the determination of a level of data protection corresponding to the EU officially recognised by the EU Commission or the observance of officially recognised special contractual obligations, the so-called “standard data protection clauses”.

V. Your rights/rights of the data subject

According to the GDPR, you as a data subject have the following rights regarding our use of your information:

1 Right to information

You have the right to obtain information from us as the controller as to whether we are processing personal data relating to you.

In addition, you can request information about the following:

The purpose of the data processing;
The categories of personal data processed;
The recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed; the planned duration of the storage of the personal data relating to you or, if specific information on this is not possible, criteria for determining the storage period;
The existence of a right to obtain the rectification or erasure of personal data concerning you, a right to obtain the restriction of processing by the controller or a right to object to such processing;
The existence of a right of appeal to a supervisory authority;
Any available information about the origin of the data if the personal data is not collected from you;
The existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and—at least in these cases—meaningful information about the logic involved and the scope and intended effects of such processing for you.

Finally, you also have the right to request information about whether your personal data is transferred to a third country or to an international organisation. In this case, you can request information about the appropriate safeguards pursuant to Article 46 of the GDPR in connection with the transfer.

You can assert your right to information at: info@bvdm-online.de.

2 Right of rectification

If the personal data we process and which concerns you is inaccurate or incomplete, you have a right to rectification and/or completion. The correction will be made without delay.

3 Right to restriction

The right to restrict the processing of personal data relating to you may be exercised in the following cases:
The accuracy of the personal data is contested for a period enabling the controller to verify the accuracy of the personal data;
The processing is unlawful and erasure of the personal data is refused, requesting instead the restriction of the use of the personal data;
The controller no longer needs the personal data for the purposes of the processing, but you need it for the establishment, exercise or defence of legal claims; or
If you have objected to the processing pursuant to Article 21(1) of the GDPR and it has not yet been determined whether the controller’s legitimate grounds override your grounds.

If the processing of personal data relating to you has been restricted, such data may—apart from being stored—only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the EU or a Member State. In the event of a restriction of processing in accordance with the principles set out above, you will be informed by us before the restriction is lifted.

4 Right to erasure

Where the grounds set out below apply, you may request that personal data relating to you be erased without delay and the controller is obliged to erase such data without delay. The grounds are:

The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
The processing is based on consent pursuant to Art. 6(1)(a) or Art. 9(2)(a) of the GDPR and you revoke your consent. A further prerequisite is that there is no other legal basis for the processing.
You object to the processing (Art. 21 (1) of the GDPR) and there are no overriding legitimate grounds for the processing. Another possibility is that you lodge an objection to the processing pursuant to Art. 21 (2) of the GDPR.
The processing of the personal data concerning you is unlawful.
The erasure of the personal data concerning you is necessary for compliance with a legal obligation under EU or Member State law to which the controller is subject.
The personal data concerning you has been collected in relation to information society services offered in accordance with Article 8(1) of the GDPR.

If we have made the personal data concerning you public and we are obliged to erase it pursuant to Article 17(1) of the GDPR, we shall take reasonable steps, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers who process the personal data that you, as the data subject, have requested the erasure of all links to, or copies or replications of, such personal data.

We would like to point out that the right to erasure does not apply insofar as the processing is necessary

For the exercise of the right to freedom of expression and information;
For compliance with a legal obligation which requires processing under EU or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
For reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) of the GDPR;
For archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) of the GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing; or
For the assertion, exercise or defence of legal claims.

5 Right to information

If you have exercised the right to rectification, erasure or restriction of processing, we are obliged to inform all recipients to whom the personal data relating to you has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You also have the right to be informed about these recipients.

6 Right to data portability

According to the GDPR, you also have the right to receive the personal data concerning you that has been made available to us in a structured, standard and machine-readable format. Furthermore, you have the right to transfer this data to another controller without hindrance from the controller to whom the personal data was provided, provided that

The processing is based on consent pursuant to Art. 6 (1) a of the GDPR or Art. 9 (2) a of the GDPR or on a contract pursuant to Art. 6 (1) b of the GDPR and
The processing is carried out with the aid of automated procedures.

Finally, in exercising the right to data portability, you have the right to have the personal data concerning you transferred directly from one controller to another controller, insofar as this is technically feasible and does not affect the freedoms and rights of other persons.

7 Right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. We would like to point out that the revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

8 Right of objection

Furthermore, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6(1)(e) or (f) of the GDPR. The right to object also applies to profiling based on these provisions.

The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing. This also applies to profiling, insofar as it is connected with such direct advertising. If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You also have the possibility, in connection with the use of information society services (notwithstanding Directive 2002/58/EC), to exercise your right to object by means of automated procedures using technical specifications.

9 Right to complain to a supervisory authority

Finally, if you consider that the processing of personal data concerning you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement.

VI. Contact data protection officer

You can contact the BVDM’s data protection officer at the contact details given in Section II for all questions relating to the collection, processing or use of your personal data and to exercise your rights under the GDPR.