Data Protection | Media Impact

Privacy policy of mediaimpact.de

We are very pleased about your interest in mediaimpact.de. With this Privacy Policy, we aim to inform you about how, why and to what extent we process personal data, and what your rights are as a Data Subject.

1. Data Controller

Unless otherwise stated in this Privacy Policy, the Data Controller in accordance with Art. 4 no. 7 GDPR is Media Impact GmbH & Co. KG, Zimmerstraße 50, 10888 Berlin, Germany, Phone: +49 30 2591 0, E-Mail: kontakt@media-impact.de (hereinafter also “we” or “us”).

2. Accessing the website

When you use our service, we will automatically collect and process various data items. These include for example:

Information about the end device accessing the site and the software used
Date and time of the access
Cookies and pseudonym IDs (Funktionale Verwendungszwecke)
Websites from which the user has accessed our website or which the user accesses through our website
IP address

This IP address must be stored for technical reasons, even if only temporarily, in order to enable the website to be downloaded to the user’s end device. The legal basis for data processing is provided by Art. 6 para. 1 point b GDPR. Our servers also store your IP address for up to 14 days for internal security purposes (Art. 6 para. 1 point f GDPR).

3. Newsletter

If you have subscribed to one of our notification services or newsletters, we will use your e-mail address to send you the newsletter that you have subscribed to. The legal basis for data processing is provided by Art. 6 para. 1 point a GDPR. You can withdraw your consent at any time with future effect or unsubscribe from the subscribed newsletter, for example by clicking on the unsubscribe link provided for this purpose in each newsletter.

4. Contact initiated by you

When you contact us, for example using the phone or e-mail addresses, the data that you provide (your e-mail address, possibly your name and your telephone number) will be processed by us for the purpose of responding to your enquiry. We will delete data collected in this connection once it is no longer required for the aforementioned purpose, unless the deletion of this data would contravene statutory retention obligations. The legal basis for data processing is provided by Art. 6 para. 1 sentence 1 point f GDPR.

5. Place of Processing

We also process data in countries outside of the European Economic Area (“EEA”), for example in the USA. To ensure that a suitable level of data protection is observed, we make use of the EU Standard Contractual Clauses for the preparation of the contracts with services employed in Third Countries as per Art. 46 para. 2 point c GDPR, unless there is an adequacy decision issued by the European Commission for that Third Country:

Standard Contractual Clauses

6. Transmission of Data

Unless otherwise stated in this Privacy Policy, we will only transmit your personal data to third parties if transmission is required to comply with our contractual obligations to you and this evidently needs to be done through or jointly with another provider, if we are permitted or required by law to transmit the data on other grounds, or if you have provided us with the relevant consent.

7. Cookies and similar Technologies

In order to provide our service, ensure security, the use of cookies and similar technologies is necessary (Funktionale Verwendungszwecke).Your Privacy Settings and your cookie settings (regarding permitted/blocked cookies) are also stored on your end device. The use of cookies is required for us to provide you with the service requested by you. Please refer to the Privacy Settings for further information on these special categories of cookies.

Cookies are small files that your browser places in a folder designated for this purpose on your device. This makes it possible, for instance, to determine whether you have visited a website before. Many cookies contain what is known as a “cookie ID”. A cookie ID is a unique cookie identifier. It consists of a string of characters which websites and servers can associate with the specific web browser where the cookie has been stored. This enables visited websites and servers to differentiate between the specific browser of the Data Subject and other web browsers containing different cookies. A specific web browser can be recognised and identified using the unique cookie ID. Without additional information, cookies cannot be used to identify you personally.

Unless otherwise agreed, we and our partners will only employ other cookies and similar technologies with your consent expressed through corresponding Privacy Settings. These cookies are used by ourselves and our partners to store and process data on your end device for the purposes listed below in this Privacy Policy. If consent is not granted for the setting of cookies, it may not be possible to fully use all functions of our website.

More information on the cookies used and equivalent technologies and our partners is provided in the relevant parts of this Privacy Policy and your Privacy Settings, where you can withdrawal your consent with future effect at any time. Previously created cookies can also be deleted by you at any time using your web browser or another software solution. This is possible in all standard web browsers. Please note that this will also delete any settings you have made in your Privacy Settings, such that these will need to be reconfigured when you visit our website again. The duration of the cookies is limited to a maximum of one year unless otherwise stated.

8. Personalised Content

For the purpose of and in service of our interest in designing our service to be of more interest to you, we process information on your user behaviour or other historical user data, including previous activities, interests, visits to websites, the use of applications, locations or demographic information, in order to be able to provide you with selected content based on this information. The legal basis for data processing is provided by Art. 6 para. 1 point f GDPR. You have the ability to object to data processing for these purposes under the Privacy Settings.

With your consent, we also make use of the services of the third-party providers listed below, who serve pursuant to Art. 4 no. 7 GDPR as the Data Controllers for the data processing performed via their respective services. The legal basis for data processing in such cases is provided by Art. 6 para. 1 point a GDPR. You have the ability to withdraw any consent you have issued at any time under the Privacy Settings. Please refer to the Privacy Policies of the third-party providers linked below for more information on how they process data and on your rights as a Data Subject:

Youtube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland), https://support.google.com/youtube/answer/7671399?p=privacy_guidelines&hl=de&visit_id=0-636644030056539000-341535836&rd=1

9. Measurement of Advertisement Performance

With your consent, we use services for the purpose of measuring advertisement performance. The metrics provided by these services include whether and how advertisements are displayed to a user, how this user interacted with them, whether an advertisement is displayed in an unsuitable editorial context (“brand unsafe”), and allow us to determine which percentage might have noticed the advertisement, including duration (advertisement perception likelihood). They also prepare reports on advertisements, including their effectiveness and performance, about how users interact with advertisements; this is achieved using data that is collected over the course of the interaction of the user with this advertisement. The legal basis for data processing is provided by Art. 6 para. 1 point a GDPR. You have the ability to withdraw any consent you have issued at any time under the Privacy Settings. We also make use of the services of the third-party providers listed below, who serve pursuant to Art. 4 no. 7 GDPR as the Data Controllers for the data processing performed via their respective services. Please refer to the Privacy Policies of the third-party providers linked below for more information on how they process data and on your rights as a Data Subject:

Adobe Systems Software Ireland Limited (Adobe Ireland, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland), https://www.adobe.com/de/privacy/policy.html

10. Content Performance Measurement

With your consent, we use services for the purpose of measuring the performance of content on our service. These services collect metrics and provide reports on the deployment of content to users and how these users interact with this content. The legal basis for data processing is provided by Art. 6 para. 1 point a GDPR. You have the ability to withdraw any consent you have issued at any time under the Privacy Settings. We also make use of the services of the third-party providers listed below, who serve pursuant to Art. 4 no. 7 GDPR as the Data Controllers for the data processing performed via their respective services. Please refer to the Privacy Policies of the third-party providers linked below for more information on how they process data and on your rights as a Data Subject:

Adobe Systems Software Ireland Limited (Adobe Ireland, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland), https://www.adobe.com/de/privacy/policy.html

11. Market Research (insights about target groups)

With your consent, we use services for the purpose of gaining information about target groups for advertising and content. For this purpose, summary reports are prepared for advertisers or their representatives about the target groups reached by their advertisements, and the target groups identified based on survey panels or similar methods. Moreover, summary reports are prepared for service providers about the targets reached by the content and/or advertisements or interacting with this content/these advertisements, and about targets identified by means of survey panels or similar methods. The reports do not enable a certain person to be identified or provide information on a certain identifiable person. However, in the preparation of these reports, information about their user behaviour is processed. Moreover, offline data is associated with an online user for market research purposes in order to obtain insights about target groups, if providers have declared that they compare and merge offline data sources. The legal basis for data processing is provided by Art. 6 para. 1 point a GDPR. You have the ability to withdraw any consent you have issued at any time under the Privacy Settings. We also make use of the services of the third-party providers listed below, who serve pursuant to Art. 4 no. 7 GDPR as the Data Controllers for the data processing performed via their respective services. Please refer to the Privacy Policies of the third-party providers linked below for more information on how they process data and on your rights as a Data Subject:

Adobe Systems Software Ireland Limited (Adobe Ireland, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland), https://www.adobe.com/de/privacy/policy.html

12. Product Development and Improvement

With your consent, we make use of services for the purpose of developing and improving products, for example to add new functions. To this end, information about your user behaviour is processed. The legal basis for data processing is provided by Art. 6 para. 1 point a GDPR. You have the ability to withdraw any consent you have issued at any time under the Privacy Settings. We also make use of the services of the third-party providers listed below, who serve pursuant to Art. 4 no. 7 GDPR as the Data Controllers for the data processing performed via their respective services. Please refer to the Privacy Policies of the third-party providers linked below for more information on how they process data and on your rights as a Data Subject:

Adobe Systems Software Ireland Limited (Adobe Ireland, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland), https://www.adobe.com/de/privacy/policy.html

13. Integration of third-party Providers (social networks)

For the purpose of enhancing the user experience in our service, we also embed services of the third-party providers listed below, each of which serves as the respective Data Controller in accordance with Art. 4 no. 7 GDPR. With your consent declared in the Privacy Settings, your browser will establish a direct connection with the server of the relevant third-party provider. In this case, the third-party provider will always process your IP address, which is necessary to establish a connection to the server of the third-party provider and to deliver the content. The legal basis for the integration of these services is provided by Art. 6 para. 1 point a GDPR. You may withdraw consent that you have previously issued at any time with future effect in your Privacy Settings. Information on how each third-party provider processes data can be found in the respective third-party provider’s Privacy Policy.

14. Facebook Fan Pages

At the following links we use Facebook Fanpages, for which we are joint controllers with Meta Platforms Ireland Limited: www.facebook.com/mediaimpactde/.

As joint controllers with Facebook, we analyse how you use our Fanpage (Page Insights). The information required under the GDPR regarding data processing in relation to Page Insights is obtained from Facebook; it is currently available in Facebook’s Data Policy at https://www.facebook.com/legal/terms/information_about_page_insights_data.

Facebook also provides the relevant content of the contract concluded between Facebook and us on processing under joint controllership pursuant to Art. 26 GDPR; this is currently available at the following link: https://www.facebook.com/legal/terms/page_controller_addendum. You may exercise your right of complaint to any Supervisory Authority that is competent to rule for you and seek legal remedy through them.

Under the GDPR, you are entitled to object to the processing of your data. The Facebook Privacy Policies linked above provide more information on these and other rights of Data Subjects.

For Page Insights on our Facebook Fanpages, Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland serves as the joint point of contact and will handle all requests for the exercise of Data Subject rights.

In relation to Page Insights, we only receive anonymised statistics. We have no access to personal data processed by Facebook. Anonymised data is processed by us on the basis of statutory provisions that allow us to process personal data because we have an overriding legitimate interest in obtaining a better understanding of the interests of visitors to our Fanpages (Art. 6 para. 1 point f GDPR).

On the Fanpages, Facebook offers various community functions which enable you to interact with other users, for example by making posts, leaving comments or liking or sharing posts. Please note that these areas are publicly accessible and any personal information that you post or provide while logged in can be seen by others. We have no control over how other Fanpage users use this information. In particular, we cannot stop unwanted messages being sent to you.

15. Storage Duration

We will only process personal data as long as it is necessary for the relevant purpose stated above. Personal data will then be deleted unless data erasure is prohibited by a statutory retention period.

16. Contact Details and your Rights as a Data Subject

Should you have any queries or comments on data protection and privacy or wish to exercise your rights as a Data Subject, please contact our Data Protection Officer at any time:

Media Impact GmbH & Co. KG

Data Privacy

Zimmerstraße 50

10888 Berlin

Germany

datenschutz@axelspringer.de

Where data is processed in relation to Page Insights on our Facebook Fanpages (www.facebook.com/mediaimpactde/), Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland serves as the joint point of contact and will handle all requests for the exercise of the specified rights.

Information and Rectification

You can receive information at any time and at no charge about whether we are processing personal data related to you and also about which information we are specifically storing about you. You are also entitled to receive a copy of the stored information. You can also have errors in your data corrected and missing information completed.

To enable us to provide you with information, please let us know via a brief e-mail to datenschutz.kundenservice@axelspringer.de. This enables us to easily ensure that personal data is only issued to you as an authorised person.

Erasure, Restriction of processing and “Right to be forgotten”

You can request that your data be erased and its processing restricted. Where erasure of your personal data is prohibited by statutory retention obligations, your data will be marked with the aim of restricting its future processing.

If you would like your data to be erased, please let us know in a brief e-mail to datenschutz.kundenservice@axelspringer.de or call us at +49 (0) 30 5858 5379. We can then work together to find another way of establishing your identity.

Data Portability

Where applicable, you also have the right to have your personal data transmitted to you or to another Data Controller in a structured, standardised and machine-readable format, as long as processing is performed on the basis of consent or contract using automated procedures. This does not apply, however, where the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. You also have the right to have the personal data transmitted directly from one Data Controller to another, provided that it is technically feasible to do so and does not infringe upon the rights and freedoms of other persons.

Withdrawal of Consent, Objecting to processing

You can withdraw your previously-given consent at any time with future effect by contacting the aforementioned address.

Moreover, you have the right to object to the processing of your personal data at any time (where such processing is based on a legitimate interest) for reasons arising from your particular circumstances. This also applies to profiling activities based on these provisions. If such an objection is received, we will cease to process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the Data Subject, of if the processing is for the establishment, exercise or defence of legal claims.

If we are processing personal data for the purpose of direct marketing, you have the right to object to the processing of your personal data at any time for the purpose of such marketing by contacting the aforementioned address. This also applies to profiling insofar as it is connected with such direct marketing. You also have the right to file an objection for reasons arising from your particular circumstances against processing of your personal data that we are engaged in for scientific, historical research or statistical purposes, unless such processing is required to perform a task that is in the public interest.

Right of Complaint

You also have the right to submit a complaint to the competent supervisory authority and to seek legal remedies. The supervisory authority with whom the complaint was lodged will notify the complainant about the status and result of their complaint, including the option of seeking a judicial remedy.

Last revised: May 26, 2023