Privacy Policy for Hogrefe Publishing Corp. and Hogrefe Publishing GmbH ("Hogrefe")

In the following, we will inform you about how your personal data are collected when you use our website. Personal data means all data that personally relate to you, e.g., name, address, e-mail address(es), user behavior. We have taken extensive technical and operational precautions to protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security procedures are reviewed regularly and adapted to take technological progress into account.

1 Controller for data processing

The controller pursuant to Article 4 Paragraph 7 of the EU General Data Protection Regulation (GDPR) is

Hogrefe Publishing GmbH
Merkelstraße 3
37085 Göttingen
Germany

Tel. +49 551 999 50 0
Fax +49 551 999 50 111
publishing@hogrefe.com

2 Option to contact the Data Protection Officer

You can contact our Data Protection Officer at privacy@hogrefe.com or via our postal address, adding an FAO for ''The Data Protection Officer''.

3 Your rights

You have the following rights with respect to personal data that relate to you:

3.1 General rights

You have a right to information, rectification, erasure, restriction of processing, objection to processing and data transferability. If processing is based on your consent, you have the right to revoke this consent with future effect.

3.2 Data processing rights based on legitimate interests

Pursuant to Article 21 Paragraph 1 of the GDPR, you have the right to object against the processing of personal data that relate to you that takes place on the basis of Article 6 Paragraph 1 e of the GDPR (data processing in the public interest) or based on Article 6 Paragraph 1 f of the GDPR (data processing for the purposes of legitimate interests); this also applies to profiling supported by this provision. If you object, we will no longer process your personal data unless we can prove compelling grounds for processing that outweigh your interests, rights, and freedoms, or if processing serves to assert, exercise, or defend legal claims.

3.3 Rights for direct advertising

If we process your personal data to directly advertise to you, you have the right to object to the processing of the personal data that relates to you for the purposes of such advertising at any time, pursuant to Article 21 Paragraph 2 of the GDPR; this also applies to profiling if it relates to such direct advertising.

If you object to processing for the purposes of direct advertising, we will no longer use your personal data for these purposes.

3.4 Right to complain to a supervisory authority

You also have the right to complain to a responsible data protection supervisory authority about us processing your personal data.

4 Collecting personal data when you visit our website

When simply using the website for informational purposes, i.e., if you don’t register or send us information in another way, we only collect personal data that your browser sends to our server. If you want to view our website, we collect the following data that are required for technical reasons in order for us to display our website and guarantee its stability and safety. The legal basis for this is Article 6 Paragraph 1 f of the GDPR:

IP  address, date and time of request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, respective volume of data transmitted, website that the request has come from, browser, operating system, and the interface, language, and version of browser software.

These data cannot be used by us to identify the individual user. This information is only evaluated by us in an anonymized way for statistical purposes.

5 Contacting us by e-mail or via the contact form

When you contact us by e-mail or via the contact form, we store data you have shared to respond to your question or issue. If we ask for information via our contact form that is not required in order for you to get in touch, we mark this as optional. This information is used to clearly define your request and to improve how your concern is processed. This information is explicitly provided on a voluntary basis and with your consent; Article 6 Paragraph 1 a of the GDPR. If this information relates to channels of communication (for example, e-mail address, phone number), you are also agreeing that we may contact you via these channels of communication where necessary in order to respond to your concern. You can of course withdraw this consent with future effect at any time.

We delete such data when they no longer need to be saved, or we restrict their processing if legal retention periods apply.

6.1 General information

You can subscribe to our newsletter, through which we send you information about our current offers, by providing your consent in accordance with Article 6 Paragraph 1 a of the GDPR.
We use a "double opt-in process" when you register for our newsletter. This means that once you have registered your e-mail address, we send you a confirmation e-mail to that e-mail address in which we ask you to confirm that you want us to send newsletters. If you do not confirm registration within 24 hours, your information will be locked and automatically deleted after a month .

We also save the IP addresses you use and the time of registration and confirmation. The purpose of this process is to provide evidence of your registration and to be able to clarify any potential misuse of your personal data, where necessary.

We only require an e-mail address to send newsletters. Once you have confirmed your registration, we save your e-mail address for the purpose of sending newsletters. The legal basis for this is Article 6 Paragraph 1 a of the GDPR.

You do of course have the option of unsubscribing from the newsletter at any time, and withdrawing the consent given with future effect. In order to do so, please click on the unsubscribe button in the newsletter received.

6.2 Newsletter tracking

We wish to point out that we evaluate your user behavior when sending out newsletters. For the purpose of this evaluation, the e-mails sent include "web beacons", also known as "tracking pixels", which are saved on our website. For evaluations, we link the specified data and the web beacons to your e-mail address and an individual ID.

We create a user profile using the data recorded so that we can tailor the newsletter to your individual interests. In doing so, we record when you read our newsletters and which links in them you click on, and from this we draw conclusions about your personal interests. We link this data with actions you carry out on our website.

You can object to this tracking at any time by clicking on the separate link provided in every e-mail. Information is only saved if you have subscribed to newsletters. Once you unsubscribe, we only save data in a purely statistical and anonymous way.

This kind of tracking is also impossible if you have deactivated images in your e-mail program as the default setting. In this case, however, the newsletter will not be fully displayed and you may not be able to use all of the functions. If you activate the images manually, the tracking described above will take place.

7 Registration and client account

You have the option of registering with us for a client account. We collect and store the following data about you for registration:

• Prefix/Title
• First name
• Last name
• E-mail (user name)
• Password
• Date of birth
• "Private" or "Company" account type
• Street address
• Zip/postal code, City
• Country
• Telephone

We  use a "double opt-in process" for registration, i.e., your registration is only confirmed if you have first confirmed your registration by clicking on the link in a confirmation e-mail sent to you. If you  do not confirm registration within 24 hours, your registration is automatically deleted from our database. The above-mentioned data is mandatory; however, all other information can be provided on a voluntary basis via our portal.

After successful registration, you are given personal, password-protected login details and you can view and manage the data you have saved. Registration is voluntary, but may be required to use our services.

If you use our portal, we store data about you that are required to fulfil the contract, and information about the payment method, where necessary, until your access expires. We also store data provided by you on a voluntary basis for as long as you use the portal, unless you delete this beforehand. You can manage and change all information in the protected client area. The legal basis for this is Article 6 Paragraph 1 a, b and f of the GDPR.

8 Online orders - Shop

If you place an order with us online through our website, we collect various data required to conclude the contract. The legal basis for this is the conclusion and execution of a contract based on Article 6 Paragraph 1 b of the GDPR. Data are stored for the duration of the contract and in accordance with legal obligations. We use a number of payment service providers to process payments, which are always specified and directly accept your input, and are therefore the recipients of your personal data collected in connection with the payment process. The legal basis for using payment service providers is contract processing pursuant to Article 6 Paragraph 1 b of the GDPR. Data for payment purposes are stored for the duration of payment processing.

9 Download of supplementary materials

For some of our titles, seminars or workshops you have the possibility to download supplementary material from our website. Registration in our online shop is required for this purpose. When you register, we store the following personal data: first and last name, e-mail address, and a password to be assigned. Additional information is voluntary and marked as such.

After registration, you will receive a personal, password-protected access and can view and manage your stored data.  Registration is voluntary, but is a condition for using the download option.

By registering, you will be given an automatically generated and pseudonymous (registration) number. This number appears in the watermark of the requested files.

We store your personal data collected during registration until you permanently delete your account. The legal basis for this data processing is Art. 6 para. 1 lit. a, b and f GDPR.

10 Data collected during the publication process (journals)

10.1 Transformative Open Access Agreement with Institutions and Eligible Authors

In the course of the Open Access Agreement, we collect information from authors and institutions who wish to publish in the Hogrefe PsyJOURNALS portfolio within the framework of the Transformative Agreement. We process only those personal data that are necessary to carry out the publication and declaration of accession in the context of the Transformative Agreement. These personal data are processed exclusively for the purpose of fulfilling the Transformative Agreement. The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. b) of the GDPR.

We store your personal data as long as they required for the fulfilment of legal and contractual obligations. If storage of the data is no longer necessary for the fulfilment of contractual or legal obligations, the data will be deleted.

10.2 Web of Science Reviewer Recognition Service

The Web of Science Reviewer Recognition Service (RRS) of Clarivate Analytics UK Ltd (Friars House 160 Blackfriars Rd, London SE1 8EZ, United Kingdom) enables scientists to present a verified history of their reviewer activity. For some journal titles, we offer reviewers the opportunity to use this service directly in our submission system (Editorial Manager). In this context, personal data are transmitted to Web of Science RRS. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. a) GDPR. You can revoke your consent at any time. We store your personal data as long as it is necessary for the fulfillment of legal and contractual obligations. If storage of the data is no longer necessary for the fulfillment of contractual or legal obligations or you revoke your consent to processing, the data will be deleted. For more information on the terms of use and data protection of Web of Science RRS itself, please visit the website: https://clarivate.com/products/scientific-and-academic-research/research-publishing-solutions/reviewer-recognition-service/.

11 Hogrefe Testsystem (HTS)

You can find more information about data protection within the scope of the Hogrefe Testsystem (HTS) unter Data protection in the Hogrefe Testsystem online portal.

12 Job applications

You can send an a job application to our company electronically, in particular by e-mail. We only use your information to process your application and do not share it with third parties. Please note that unencrypted e-mails are not sent in a way that protects them against access.

You  can also send a job application to our company online, via our application portal. Your online application is sent directly to the HR department using an encrypted connection, and is of course treated confidentially. We only use your information to process your application and do not share it with third parties. You can find more information about data processing as part of the application process in our application portal’s privacy policy.

If you have applied for a specific role that has already been filled, if we are considering you for another role, or if we consider you to be better suited to another role, we would like to pass on your application within the company. Please let us know if you do not consent to your application being passed on.

Your personal data are deleted as soon as the application process comes to an end, or after a maximum of 6 months if you have given your explicit consent for us to store your data for longer, or if it results in a contract being concluded. The legal basis for this is Article 6 Paragraph 1 a, b and f of the GDPR, as well as Section 26 of the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG).

13 Using social plug-ins

This website uses social plug-ins from the providers

• Facebook  (operator: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA)
• Twitter (operator: Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA)
• Google+ (operator: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)
• LinkedIn (operator: LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA)
• Xing (operator: Xing SE, Dammtorstraße 30, 20354 Hamburg, Germany)

These plug-ins normally collect data from you and send then to the respective provider’s servers by default. To ensure your privacy is protected, we have taken technical measures to ensure that your data cannot be collected by plug-in providers without your consent. If you access a page that contains plug-ins, these should first be deactivated. Plug-ins are only activated by clicking on the respective symbol, which means you consent to your data being sent to the respective provider. The legal basis for using plug-ins is Article 6 Paragraph 1 a and f of the GDPR.

Once activated, plug-ins also collect personal data, such as your IP address, and send then to the respective provider’s servers, where they are stored. Activated social plug-ins also store a cookie with a unique ID when the respective website is accessed. Providers can also create a profile that relates to your user behavior. This is created even if you are not a member of the respective provider’s social network. If you are a member of the provider’s social network and are logged into the social network when you visit this website, your data and information about your visit to this website can be associated with your profile on the social network. We have no influence over the exact scope of the data collected by the respective provider. You can find more information about the scope, type and purpose of data processing and about your rights and settings options to protect your privacy in the privacy policies for each social network provider. These are available on the following sites:

Facebook : Facebook
Twitter: Twitter
Google+: Google
LinkedIn: LinkedIn
Xing: Xing

14 Using cookies

Cookies are stored on your machine when you use our website. Cookies are small text files that are stored on your hard drive, assigned to the browser you are using, and used to send specific information to the party that has placed the cookie on your machine. Cookies cannot run any programs or place any viruses on your computer. They are used to make the website more user-friendly and effective overall. We  also use cookies to be able to identify you when you visit us again if you have an account with us. Otherwise, you are required to log in again each time you visit.

This website uses the following types of cookies, the extent and functionality of which are outlined below:

14.1 Transient cookies

These cookies are automatically deleted when you close your browser. This particularly includes session cookies. These store a "session ID," which is used to assign requests from your browser to the overall session. This means that your machine can be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.

14.2 Persistent cookies

These cookies are automatically deleted after a set period of time that the cookie can distinguish between. You can delete cookies at any time through your browser’s security settings.

14.3 Preventing cookies

You can configure your browser settings based on your requirements and can reject third-party cookies, or all cookies, from being accepted. Please note this may mean you are unable to use all of the functions of this website.

14.4 Legal bases and retention period

The legal bases for any potential processing of personal data and the retention period vary and are outlined in the following sections.