The provisions of the EU General Data Protection Regulation (hereinafter GDPR) apply throughout Europe. We would like to inform you about the way in which our company processes your personal data as per this Regulation (cf. Articles 13 and 14 GDPR). If you have any queries or comments about this Privacy Policy, you can send them to the e-mail address specified in points 2 or 3 at any time. 

 

 

Contents:

I.    Overview

  1.     Scope
  2.     Controller
  3.     Data protection Officer
  4.     Data security

II.    Types of data processing

  1.     General information on data processing
  2.     Accessing the website/application
  3.     Newsletter
  4.     Applications
  5.     Customer support
  6.     Tracking

III.    Rights of data subjects

  1.     Right of object
  2.     Right of access
  3.     Right to rectification
  4.     Right to erasure („right to be forgotten“)
  5.     Right to restriction of processing
  6.     Right to data portability
  7.     Right to withdraw your consent
  8.     Right to complain

 

I.    Overview

This section of our Privacy Policy contains information on the scope of application, the controller responsible for processing your data, the controller’s data protection officer, and data security. 

1.   Scope 

The data processing activities of Lagardère PLUS Germany GmbH can largely be divided into two categories:  

  • All data required for the implementation of a contract with Lagardère PLUS Germany GmbH is processed for the purpose of executing the contract. If external providers, e.g. payment service providers, are also involved in the execution of the contract, your data is forwarded to them to the extent required in each case.
     
  • When you access the Lagardère PLUS Germany GmbH website or application, various types of data are exchanged between your terminal device and our server. This data may also be personal. The information collected in this way is used for example to optimise our website or display advertising in the browser on your terminal device. 

This Privacy Policy applies to the following services:

  • our online services, which can be accessed at www.plus-germany.de
     
  • whenever this Privacy Policy is referred to by any of our other services (e.g. websites, subdomains, mobile applications, web services, or em-bedding in external websites), irrespective of how these are accessed or used.

All these are also referred to collectively as “Services”. 

 

2.    Controller

The controller responsible for processing data in connection with these services – i.e. the person who decides on the purpose of the data processing and the means used to accomplish it – is 

Lagardère PLUS Germany GmbH
Geneststr. 5
10829 Berlin
Tel.: +49 (0) 30 81 45 41 - 100
Fax: +49 (0) 30 81 45 41 - 199
E-Mail: de.empfang@lagardere-se.com

VAT no. DE201592150
Headquarters and register court: Berlin-Charlottenburg district court, HRB: 172122
Managing Director: Olaf Bauer

 

3.    Data protection officer

You can contact our data protection officer here:

Contact form: https://www.dsextern.de/anfragen

DS EXTERN GmbH
Dipl.-Kfm. Marc Althaus 
Frapanweg 22
D-22589 Hamburg

 

4.    Data security

We have established an information security management system in our company in order to implement the measures specified in Art. 32 GDPR and to achieve a risk-appropriate level of data security.

 

II.    Types of data processing

In this section of our Privacy Policy, we provide detailed information about how personal data is processed in the context of our services. For bet-ter clarity, we have structured this information according to various service functions. When using our services in normal circumstances, various functions and consequently various forms of processing may apply, either consecutively or simultaneously.

 

1.    General information on data processing

Unless otherwise specified, the following applies to all forms of processing described below:

a.    No obligation to provide data
There is no legal or contractual obligation to provide personal data. This means you are not obliged to make your personal data available to us.

b.    Consequences of non-provision
If essential data (i.e. data marked as mandatory in the input field) is not provided, it will not be possible to render the respective service. If other data is withheld, it may not be possible to provide the same form and quality of service.

c.    Consent
In various cases, you have the opportunity to give us your consent to further processing (of just some of your data if applicable) in connection with the forms of data processing described below. In this situation, we furnish you with separate information concerning all the modalities, the scope of your consent and the purposes for which we process your data when you submit the respective declaration of consent.

d.    Transfer of personal data to third countries
Insofar as we transfer data to third countries, i.e. countries outside the European Union, any such transfer is effected solely in compliance with the permissibility requirements regulated by law.
These permissibility requirements are regulated in Art. 44 - 49 GDPR.

e.    Hosting by external service providers 
Our data processing activities are largely carried out in cooperation with socalled hosting providers, who provide us with storage and processing capacities at their computer centres and also process personal data on our behalf and in accordance with our instructions. These service providers either process data solely in the EU, or we guarantee appropriate levels of data protection by means of the EU standard contractual clauses for the transfer of personal data.

f.    Transfer to government authorities
We transfer personal data to government authorities (including law enforcement authorities) insofar as this is necessary to fulfil a legal obligation to which we are subject (legal basis: Art. 6 par. 1 c) GDPR) or to establish, exercise or defend legal claims (legal basis Art. 6 par. 1 f) GDPR).

g.    Storage duration
We store your data no longer than is necessary to fulfil the purpose for which it is being processed. Data no longer required for the fulfilment of con-tractual or statutory obligations is regularly erased unless it must be retained for a specific period. Grounds for the retention of data may include:

  • Compliance with retention obligations specified in commercial and fiscal law
     
  • The provision of evidence in the event of legal disputes in the context of regulations on limitation


We may also continue storing your data if you have expressly consented to us doing so.

h.    Data categories

  • Account data: Log-in/user name and password
     
  • Personal master data: Title, appellation/gender, first name, surname, date of birth
     
  • Address data: Street, house number, supplementary address information if applicable, postcode, town/city, country
     
  • Contact data: Telephone number(s), fax number(s), e-mail address(es)
     
  • Registration data: Information about the service through which you registered; times and technical information relating to registration, con-firmation and cancellation; data you provided on registration
     
  • Order data: Products ordered, prices, payment and delivery information
     
  • Payment data: Account data, credit card data, data for other payment services such as PayPal
     
  • Access data: Date and time at which you visited our service; the web page from which your system accessed our web page; when using the pages accessed; data for session identification (session ID); the following information from the accessing computer system: internet protocol address (IP address) used, browser type and version, device type, operating system and similar technical information.
     
  • Application data: CV, references, proofs, work samples, certificates, images
     
  • Data pursuant to Art. 9 GDPR: Data revealing racial and ethnic origin, political opinions, religious or philosophical beliefs, or trade union mem-bership; genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.

 

2.    Accessing the website/application

Here we describe how your personal data is processed when you access our services. Please note that the transfer of access data to external con-tent providers (see b below) is unavoidable due to the technicalities of transferring information through the internet.

a.    Information about processing

b.    Recipients of personal data

 

 

3.    Newsletter

Here we describe what happens to your personal data when you subscribe to our newsletter:

a.    Information about processing

b.    Recipients of personal data

 

4.    Applications

During the application process, we process your personal data as follows:

a.    Information about processing

5.    Customer support

Find out here how we process your personal data when you contact our customer service:

a.    Information about processing

6.    Tracking

In the following we describe how tracking technologies are used to process your personal data for marketing purposes and to analyse and optimise our services. The description of the tracking procedure also includes information about how you can prevent or object to the processing of your data. Please note that an “opt out”, that is, a refusal for your data to be processed, is generally saved through cookies. If you access our services on a new device or in a new browser, or if you have deleted the cookies in your browser, you will have to opt out again.

The tracking procedures outlined only process personal data in an anonymised way. The data is not connected with a specific, identifiable real person, i.e. the data is not linked with information about the anonymised person.


a.    Tracking for the analysis and improvement of our services and their use, as well as for measuring the success of advertising campaigns and optimising advertising

(1)    Purposes of processingUsing tracking tools to analyse user behaviour helps us review the effectiveness of our services, optimise them, adapt them to the users’ needs, and correct faults. Tracking also serves to generate key statistical data about the use of our services (scope, intensity of use, user browsing behaviour) on the basis of standardised procedures, and thus to obtain figures comparable across the market.
Tracking for the purpose of measuring the success of advertising campaigns helps us optimise our advertising in the future and also enables marketers and advertisers to optimise their advertising accordingly. Tracking for the purpose of optimising the display of adverts is intended to ensure that users get to see adverts that are customised according to their interests, thus increasing both the success of the advertising and the advertising revenue generated.

(2)    Legal basis for processing
Informed consent within the meaning of GDPR is required in the case of services that facilitate tracking of the data subject’s online behaviour and when creating user profiles.

(3)    Details of the tracking procedures used

If you decide that you no longer want to receive interest based advertising, you can also visit the website http://www.youronlinechoices.com/uk/, click on “Your Ad Choices”, and follow the instructions to prevent the use of your data for interest based advertising by some or all of the service providers listed there. You will still receive adverts, but they will not be tailored to your interests.

 

III.    Rights of data subjects


1.    Right to object
If we process your personal data for direct marketing purposes, you have the right to object to the processing of your personal data at any time with future effect insofar as it serves these marketing purposes; the same applies to profiling insofar as it is related to such direct marketing.

Moreover, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data on the basis of Art. 6 par. 1 lit. e) or f) GDPR; the same applies to profiling based on these provisions. You can exercise your right to object free of charge.  You can reach us using the contact data specified in I.2. 

2.    Right of access 
You have to right to obtain information from us as to whether we are processing your personal data, which of your personal data is being processed, if any, and other information as specified in Art. 15 GDPR.

3.    Right to rectification
You have the right to obtain from us the immediate rectification of any of your personal data which is incorrect (Art. 16 GDPR). Taking the purposes of the processing into account, you also have the right to request the completion of incomplete data – also by means of a supplementary statement.

4.    Right to erasure (“right to be forgotten”)
You have the right to obtain from us the erasure of your personal data without undue delay insofar as any of the grounds specified in Art. 17 par. 1 GDPR apply and the data does not have to be processed for any of the purposes specified in Art. 17 par. 3 GDPR.

5.    Right to restriction of processing
You have the right to obtain from us a restriction of the processing of your personal data insofar as any of the conditions in Art. 18 par. 1 lit. a) to d) GDPR are met.

6.    Right to data portability
You have the right to receive the personal data you supply to us in a structured, commonly used and machine-readable format. Moreover, you have the right to transmit this data to another controller with no hindrance on our part, or to have us transmit the data directly insofar as this is technically feasible. This shall invariably apply if the processing of your data is based on your consent or a contract, and the data is processed automatically. Therefore it does not apply to data which is only stored in paper format.

7.    Right to withdraw your consent
If the processing of your data is based on your consent, you have the right to revoke your consent at any time. This shall not affect the lawfulness of the data processing that took place on the basis of your consent before this was withdrawn.

8.    Right to complain
You have the right to complain to a supervisory authority.