Privacy Policy for Hogrefe Verlag GmbH & Co. KG

In the following, we will inform you about how your personal data are collected when you use our website. Personal data means all data that personally relate to you, e.g., name, address, e-mail address(es), user behavior. We have taken extensive technical and operational precautions to protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security procedures are reviewed regularly and adapted to take technological progress into account.

1 Controller for data processing

The controller pursuant to Article 4 Paragraph 7 of the EU General Data Protection Regulation (GDPR) is

Hogrefe Verlag GmbH & Co. KG
Merkelstraße 3
37085 Göttingen
Germany

Tel. +49 551 999 50 0
Fax +49 551 999 50 111
recruiting(at)hogrefe.com

2 Option to contact the Data Protection Officer

You can contact our Data Protection Officer at privacy@hogrefe.com or via our postal address, adding an FAO for ''The Data Protection Officer''.

3 Your rights

You have the following rights with respect to personal data that relate to you:

3.1 General rights

You have a right to information, rectification, erasure, restriction of processing, objection to processing and data transferability. If processing is based on your consent, you have the right to revoke this consent with future effect.

3.2 Data processing rights based on legitimate interests

Pursuant to Article 21 Paragraph 1 of the GDPR, you have the right to object against the processing of personal data that relate to you that takes place on the basis of Article 6 Paragraph 1 e of the GDPR (data processing in the public interest) or based on Article 6 Paragraph 1 f of the GDPR (data processing for the purposes of legitimate interests); this also applies to profiling supported by this provision. If you object, we will no longer process your personal data unless we can prove compelling grounds for processing that outweigh your interests, rights, and freedoms, or if processing serves to assert, exercise, or defend legal claims.

3.3 Rights for direct advertising

If we process your personal data to directly advertise to you, you have the right to object to the processing of the personal data that relates to you for the purposes of such advertising at any time, pursuant to Article 21 Paragraph 2 of the GDPR; this also applies to profiling if it relates to such direct advertising.

If you object to processing for the purposes of direct advertising, we will no longer use your personal data for these purposes.

3.4 Right to complain to a supervisory authority

You also have the right to complain to a responsible data protection supervisory authority about us processing your personal data.

4 Collecting personal data when you visit our website

When simply using the website for informational purposes, i.e., if you don’t register or send us information in another way, we only collect personal data that your browser sends to our server. If you want to view our website, we collect the following data that are required for technical reasons in order for us to display our website and guarantee its stability and safety. The legal basis for this is Article 6 Paragraph 1 f of the GDPR:

IP  address, date and time of request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, respective volume of data transmitted, website that the request has come from, browser, operating system, and the interface, language, and version of browser software.

These data cannot be used by us to identify the individual user. This information is only evaluated by us in an anonymized way for statistical purposes.

5 Contacting us by e-mail or via the contact form

When you contact us by e-mail or via the contact form, we store data you have shared to respond to your question or issue. If we ask for information via our contact form that is not required in order for you to get in touch, we mark this as optional. This information is used to clearly define your request and to improve how your concern is processed. This information is explicitly provided on a voluntary basis and with your consent; Article 6 Paragraph 1 a of the GDPR. If this information relates to channels of communication (for example, e-mail address, phone number), you are also agreeing that we may contact you via these channels of communication where necessary in order to respond to your concern. You can of course withdraw this consent with future effect at any time.

We delete such data when they no longer need to be saved, or we restrict their processing if legal retention periods apply.

6.1 General information

You can subscribe to our newsletter, through which we send you information about our current offers, by providing your consent in accordance with Article 6 Paragraph 1 a of the GDPR.
We use a "double opt-in process" when you register for our newsletter. This means that once you have registered your e-mail address, we send you a confirmation e-mail to that e-mail address in which we ask you to confirm that you want us to send newsletters. If you do not confirm registration within 24 hours, your information will be locked and automatically deleted after a month .

We also save the IP addresses you use and the time of registration and confirmation. The purpose of this process is to provide evidence of your registration and to be able to clarify any potential misuse of your personal data, where necessary.

We only require an e-mail address to send newsletters. Once you have confirmed your registration, we save your e-mail address for the purpose of sending newsletters. The legal basis for this is Article 6 Paragraph 1 a of the GDPR.

You do of course have the option of unsubscribing from the newsletter at any time, and withdrawing the consent given with future effect. In order to do so, please click on the unsubscribe button in the newsletter received.

6.2 Newsletter Tracking

We wish to point out that we evaluate your user behavior when sending out newsletters. For the purpose of this evaluation, the e-mails sent include "web beacons", also known as "tracking pixels", which are saved on our website. For evaluations, we link the specified data and the web beacons to your e-mail address and an individual ID.

We create a user profile using the data recorded so that we can tailor the newsletter to your individual interests. In doing so, we record when you read our newsletters and which links in them you click on, and from this we draw conclusions about your personal interests. We link this data with actions you carry out on our website.

You can object to this tracking at any time by clicking on the separate link provided in every e-mail. Information is only saved if you have subscribed to newsletters. Once you unsubscribe, we only save data in a purely statistical and anonymous way.

This kind of tracking is also impossible if you have deactivated images in your e-mail program as the default setting. In this case, however, the newsletter will not be fully displayed and you may not be able to use all of the functions. If you activate the images manually, the tracking described above will take place.

7 Digital signature

We use the DocuSign software of DocuSign Inc., 221 Main St., Suite 1000, San Francisco, CA 94105, USA ("DocuSign") for the digital signature of contracts and documents. For this purpose, DocuSign processes the data entered by you when using the service as well as usage data of your terminal device and transaction-related data. DocuSign stores all personal data on servers within the EU. The legal basis is Art. 6 para. 1 p. 1 lit. b) and f) DSGVO. We have concluded an order processing contract with DocuSign. For more information on data processing by DocuSign, please refer to DocuSign's privacy policy. To ensure a high level of data protection and so-called adequate safeguards, DocuSign has given itself binding internal data protection regulations in accordance with Art. 47 DSGVO, which you can view here. We store your personal data as long as it is necessary for the fulfillment of legal and contractual obligations. If storage of the data is no longer necessary for the fulfillment of contractual or legal obligations, the data will be deleted.

8 Applications

You can apply to our company electronically, in particular via web form or e-mail. We will, of course, only use your details to process your application and will not pass them on to third parties. Please note that e-mails sent unencrypted are not protected against access.

If you have applied for a specific position and it has already been filled, or if we consider you equally or even more suitable for another position, we would be happy to forward your application within the company. Please let us know if you do not agree to forwarding.

The legal basis for this is Section 26 (1) in conjunction with Section 26 (8) sentence 2 of the German Data Protection Act (BDSG). Abs. 8 S.2 BDSG. Furthermore, your personal data may be processed insofar as this is necessary for the defense of asserted legal claims against us arising from the application process. The legal basis for this is Art. 6 para. 1 p.1 lit. f DSGVO. The stated purposes also constitute the legitimate interest in the processing.

Insofar as an employment relationship arises between you and us, we may, in accordance with Section 26 (1) BDSG, further process the personal data already received from you for the purposes of the employment relationship if this is necessary for the implementation or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations of the employee representation resulting from a law or a collective agreement, a company or service agreement (collective agreement).

Your application data will not be processed beyond the described use.

Your personal data will be deleted after completion of the application process after 6 months at the latest, provided that no other legitimate interests on our part oppose deletion or you have not given us your consent for longer storage. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

9 Use of social plugins

This website uses social plugins from the providers

Facebook (Operator: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA)
Twitter (Operator: Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA)
Google+ (operator: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)
LinkedIn Operator (LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA)
Xing (operator Xing SE, Dammtorstraße 30, 20354 Hamburg, Germany).

These plugins usually collect data from you by default and transmit it to the servers of the respective provider. To ensure the protection of your privacy, we have taken technical measures to ensure that your data cannot be collected by the providers of the respective plugin without your consent. When you call up a page on which the plugins are integrated, they are initially deactivated. Only by clicking on the respective icon are the plugins activated and you thereby give your consent for your data to be transferred to the respective provider. The legal basis for the use of the plugins is Art. 6 para. 1 a and f DSGVO.

After activation, the plugins also collect personal data such as your IP address and send it to the servers of the respective provider, where it is stored. In addition, activated social plugins set a cookie with a unique identifier when the website in question is called up. This also allows the providers to create profiles about your usage behavior. This happens even if you are not a member of the social network of the respective provider. If you are a member of the provider's social network and are logged into the social network during your visit to this website, your data and information about your visit to this website may be linked to your profile on the social network. We have no influence on the exact scope of the data collected from you by the respective provider. For more information about the scope, nature and purpose of data processing and about rights and settings options for protecting your privacy, please refer to the privacy policy of the respective provider of the social network. These are available at the following addresses:

Facebook: www.facebook.com/policy.php 
Twitter: twitter.com/de/privacy 
Google+: www.google.com/intl/de/privacy/ 
LinkedIn: www.linkedin.com/legal/privacy-policy 
Xing: privacy.xing.com/de/datenschutzerklaerung 

10 Use of cookies

When you use our website, cookies are stored on your computer. Cookies are small text files that are stored on your hard drive associated with the browser you are using and through which certain information flows to the entity that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer. They are used to make the Internet offer as a whole more user-friendly and effective. We also use cookies to identify you for subsequent visits if you have an account with us. Otherwise, you would have to log in again for each visit.

This website uses the following types of cookies, the scope and functionality of which are explained below:

10.1 Transient Cookies

These cookies are automatically deleted when you close your browser. This particularly includes session cookies. These store a "session ID," which is used to assign requests from your browser to the overall session. This means that your machine can be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.

10.2 Persistent cookies

These cookies are automatically deleted after a set period of time that the cookie can distinguish between. You can delete cookies at any time through your browser’s security settings.

10.3 Preventing cookies

You can configure your browser settings based on your requirements and can reject third-party cookies, or all cookies, from being accepted. Please note this may mean you are unable to use all of the functions of this website.

10.4 Legal bases and retention period

The legal bases for any potential processing of personal data and the retention period vary and are outlined in the following sections.

11 Website analysis

For the purpose of analyzing and optimizing our websites, we use Google Analytics, a web analytics service provided by Google Inc. This allows us to analyze, for example, how many users visit our site, what information is most in demand or how users find the offer. Among other things, we collect data on which website a data subject came to a website from (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. This helps us to design and improve our offers in a user-friendly way. The data collected is not used to identify individual users personally. Anonymous or at most pseudonymous data is collected. The legal basis for this is Art. 6 para. 1 f DSGVO.

11.1 Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). The use includes the Universal Analytics mode of operation. This makes it possible to assign data, sessions, and interactions across multiple devices to a pseudonymous user ID and thus analyze a user's activities across devices.

Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. Our legitimate interest in data processing also lies in these purposes. The legal basis for the use of Google Analytics is § 15 para. 3 TMG or Art. 6 para. 1 f DSGVO. The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 38 months. The deletion of data whose retention period has been reached takes place automatically once a month. You can find more information on terms of use and data protection at https://www.google.com/analytics/terms/de.html or under https://policies.google.com/?hl=de.

12 Advertising

In order to draw attention to our current developments, products and offers, we send advertising material by e-mail. The legal basis for this is your consent, pursuant to Art. 6 para. 1 p. 1 lit. a) DSGVO. You can revoke your consent with effect for the future at any time. You can send the revocation at any time to the specified contact details of our data protection officer. The deletion of your personal data will take place after the revocation of your consent.

13 Data transfer

Your data will not be transferred to third parties unless we are legally obliged to do so, if we are required to transfer data to execute the contractual relationship, or if you have previously given your express consent for your data to be transferred.

External service providers and partner companies, such as online payment providers or shipping companies engaged for deliveries, only receive data if this is required in order to process your order. In these cases, the scope of the data transfer is restricted to the required minimum. If our service providers come into contact with your personal data, we ensure that they comply with the provisions of data protection laws to the same extent that we do, as part of contract processing pursuant to Article 28 of the GDPR. Please also take note of the each provider’s privacy policy. The respective service provider is responsible for the content of third-party services, whereby we review the services for compliance with legal requirements, where this is reasonable.