Privacy Policy PULSE
of Handelsblatt Media Group GmbH & Co. KG (“HMG”)
Toulouser Allee 27, 40211 DĂĽsseldorf,
represented by Handelsblatt Verwaltungs-GmbH, Management: Andrea Wasmuth (Chair), Sebastian Christensen
A. General information on HMG’s handling of personal data and user rights
I. Purpose of the Privacy Policy
When using PULSE Women Economic Network (hereinafter referred to as “PULSE”), personal data is processed almost every time a contact is made with our company. Personal data is information that can be used to identify a person, i.e. information that can be traced back to a person. This typically includes the name, e-mail address or telephone number. In addition, purely technical data that can be assigned to a person is also considered personal data.
The provision of your personal data for PULSE is generally neither legally nor contractually required. You are not obliged to provide personal data on this website unless we indicate this in individual cases in this privacy policy. For example, the provision of all functions of this website, the execution of an order, the registration for a newsletter or for an event require the processing of your personal data. Â
Our Privacy Policy therefore informs you about the nature, scope and purpose of the collection and use of personal data. https://pulse.handelsblattgroup.com/ (hereinafter “website”) by HMG (hereinafter “we” or “us”). We are responsible for the processing of personal data on this website, unless this Privacy Policy contains deviating information.
II. Links to third party sites
You can access websites from our group companies via PULSE. Below you will therefore find the links to the privacy policies of these companies:
Websites:
Privacy Policy for handelsblatt.com
Privacy Policy for wiwo.de
Privacy Policy for iqdigital.de
Privacy policy for management-campus.handelsblatt.com
Privacy policy euroforum.de
Privacy policy for solutions.handelsblattgroup.com
III. Contact Details
The contact details of the data controller are: Handelsblatt Media Group GmbH & Co KG, Toulouser Allee 27, 40211 DĂĽsseldorf, e-mail: datenschutz@handelsblattgroup.com. You can reach our data protection officer at the following contact details: Name: DMC Datenschutz Management & Consulting GmbH & Co. KG, email address: datenschutz@handelsblattgroup.co, postal address: BelvederestraĂźe 65, 50933 Cologne, Germany
IV. Your rights
You have the right to obtain information about the personal data stored about you free of charge upon request (from the second information within 12 months, we may charge a fee). In addition, you have the right to request the correction of incorrect data, the right to request the restriction of processing of data that has been processed too extensively and the right to request the deletion of personal data that has been processed unlawfully or stored for too long (insofar as this does not conflict with any legal obligation to retain data and no other reasons pursuant to Art. 17 (3) GDPR). In addition, you have the right to transfer all data you have provided to us in a common file format (right to data portability). Insofar as you also have a right to object to individual procedures, we will point this out in the context of the description of the individual procedures in section B. Consent given can be revoked at any time with effect for the future. To exercise your rights, simply send an email to datenschutz@handelsblattgroup.com . In addition, you also have the right to lodge a complaint with a data protection supervisory authority.
V. General information on log file data and cookies
1. Log file data
Each time PULSE is accessed, access data is generated that may allow identification. Log file data is stored for security reasons, e.g. to clarify misuse. The log file data are
– file name of the page from which PULSE was called up
– date and time of the call
– transmitted data volume
– access status
– type and operating system of the web browser used
– requesting provider
– referrer URL (the previously visited page)
– terminal used
– name of the accessed website.
This information is processed on the basis of our legitimate interest (Art. 6 para. 1 lit.f GDPR). For more details, see section B.
2. Cookies
This website uses cookies. Cookies are small text files that are stored on your end device by the browser used when you call up our website. Individual services of a website can “recognise” you in this way and “remember” which settings you have made. On the one hand, this serves the user-friendliness of websites and thus the users (e.g. storage of login data). On the other hand, cookies are used to collect statistical data on website use and to use the data thus obtained for analysis and advertising purposes. Some cookies are automatically deleted from your end device as soon as you leave the website again (so-called session cookie). Other cookies are stored for a certain period of time, which does not exceed two years (persistent cookies). In addition, we also use so-called third-party cookies, which are managed by third parties in order to offer certain services. Â
You can influence the use of cookies. Most browsers have an option to restrict or completely prevent the storage of cookies. However, it is pointed out that the use and in particular the user comfort will be restricted without cookies. Technically necessary cookies, which make our site usable in the first place, e.g. by enabling site navigation, are set even if you have objected to the storage of cookies altogether.
For details of the cookies we use, please see section B.
B. Data processing procedures
On this website, personal data is processed as part of the following procedures, some of which, however, are only carried out with your consent:
Creation and use of a personal membership account
Conclusion and execution of a contract
Newsletter subscription
Contact us (contact page)
Server log files
Membership directory and member communication
Use of cookies
Advertising (usage-based online advertising)
1. Creation and use of a personal membership account
1.1 Your data
When setting up your member account, you will be asked to enter a number of personal data for your personal customer profile. Required are first name, last name, email, postal code, company and industry. You can optionally enter further data. We store this data in order to manage your member account and to be able to offer you our PULSE benefits, such as special offers or events. You can always view, change and delete the data under the heading “Profile”.
1.2 Recipients of the data (domestic, European Economic Area)
Your profile data is processed by us for the administration of your membership account. Depending on the individual case, we pass on this data to the following recipients, whereby we will inform you of this in advance, unless this is evident from the circumstances:
- Company of the HANDELSBLATT MEDIA GROUP
- for the purpose of processing an order or providing a service
- to improve the offers and the websites of Handelsblatt GmbH
- To send marketing communications where you have consented to this or where otherwise permitted by law.
The companies of the HANDELSBLATT MEDIA GROUP that receive your data can be found here:Â https://handelsblattgroup.com/portfolio-der-handelsblatt-media-group/.
- Service partners we use to manage your member account, e.g.
- IT service provider (e.g. in interface function)
- Payment service provider, for the processing of a payment transaction (e.g. financial institutions, payment services).
- Sellers or providers of events who offer their services via our websites, insofar as this is necessary for the processing of the contract
- Printing and logistics companies, e.g. telecommunications service providers, delivery services
- Collection service providers or credit agencies, insofar as necessary for the exercise of our rights
- Consulting companies in connection with our offers
- Credit agencies
- Call centres
- Measurement service provider
- Financial service providers (e.g. for the provision of securities account and watchlist functionalities)
We have contractually agreed with these service providers that they may only use your data within the scope of order processing for us and for our services. Any other use – including for your own contacting by one of these service providers – is only permitted with your prior consent.
- Law enforcement agencies
- law enforcement authorities, public bodies (e.g. tax authorities, social insurance institutions) Supervisory authorities or third parties authorised to receive data in the case of requests for information or obligations to provide information
- in the event of judicial measures
- investigations
- as well as to our own tax advisors, auditors and lawyers for the exercise of our rights and our legal obligations
- Change of ownership
- We will share your information with another company in the event of a merger or amalgamation with that company.
1.3 Recipient of the data (third country)
We only transfer data to bodies outside the European Union (third country) without your consent if this is necessary according to the respective contract, to fulfil legal obligations or to protect our legitimate interests. The transfer of data in the third country is also subject to the condition of corresponding adequacy decisions by the EU Commission on the level of data protection or the existence of corresponding suitable and appropriate guarantees or standard contractual clauses. For details, please contact our data protection officer (datenschutz@handelsblattgroup.com).
1.4 Legal basis
Your profile data and the data collected for membership administration and contract processing are processed on the basis of Art. 6 para. 1 lit. a (membership administration) and lit. b (contract processing) GPR. These permissions allow the processing of personal data with your consent or for the purpose of fulfilling a contract.
1.5 Duration of data storage
The personal data stored in your profile will be deleted when you or we delete your member account . Data on previous orders will only be deleted after 10 years due to the retention period under commercial and tax law.
2. Contract processing (order, event)
2.1 Your data
If you order something or book an event via PULSE, we access the data stored in your member account (see point 1 above). In addition, you may be asked to provide us with a delivery address and account details.
2.2 Recipients of the data
If necessary, we will pass on your data to the recipient groups listed in section 1.2 as part of the contract processing.
2.3 Legal basis
The information provided in the context of contract processing is processed on the basis of Art. 6 (1) lit. b GDPR. Art. 6 para. 1 sentence 1 lit. b GDOR permits data processing if this is necessary for the performance of a contract.
2.4 Duration of data storage
The personal data stored within the framework of the execution of the contract will be deleted as follows:
- Orders
- if you have received the goods and the warranty period has elapsed. This period is two years and begins with the delivery of the item.
- Event
- After the event has been held, for a period of 18 months for the settlement of any subsequent claims. Â
We are also legally obliged to retain transaction-related data for ten years for tax purposes.
3. Subscription to a newsletter
3.1 Your data
We use the data you provide from your membership account in accordance with section 1 to send you the newsletters you have selected. This requires your consent, which we ask for again via a confirmation email. You can unsubscribe from a newsletter at any time in your member account.
3.2 Recipients of the data
If necessary, we will pass on your data to the recipient groups listed in section 1.2.
3.3 Legal basis
This data processing is based on your consent, which you have given by registering to receive newsletters. According to Art. 6 para. 1 lit. a GDPR, data processing is permitted if you have given your consent for data processing for one or more specific purposes. In the context of ordering the newsletter, you have given a declaration of consent confirming that you wish to receive the selected newsletter. You can unsubscribe free of charge at any time with effect for the future. To do so, simply use the unsubscribe link in the respective newsletter or send us an email to kundenservice@handelsblattgroup.com.
3.4 Duration of data storage
The personal data stored as part of the newsletter registration will be deleted if you have successfully unsubscribed from the newsletter. If you continue to be a member with us, we will retain your membership data. Unsubscribing from the newsletter does not result in you having any restrictions within the scope of your membership.
4. Contacting
4.1 Your data
When contacting us (for example by email or after using the contact form), the information you provide will be processed for the purpose of processing the inquiry and in the event that follow-up questions arise.
4.2 Recipients of the data
The data from the contact form or your enquiries sent by e-mail will only be processed within of HMG .
4.3 Legal basis
The information provided when contacting us is processed on the basis of Art. 6 Para. 1 lit. a and lit. f GDPR. This authorisation permits the processing of personal data within the scope of your consent, which you have given us with the contact request. Furthermore, there is a “legitimate interest” in the processing, insofar as your fundamental rights, freedoms or interests do not prevail. Our legitimate interest is the processing of the contact request. You can object to this data processing at any time if there are reasons which exist in your particular situation and which speak against the data processing. To do so, simply send an email to the data protection officer (datenschutz@handelsblattgroup.com).
4.4 Duration of data storage
The personal data stored in the context of contacting us will be deleted when the matter relating to the contact has been fully clarified and it is also not to be expected that the specific contact will be relevant again in the future.
5. Server log files
5.1 Your data
We automatically collect a range of technical data, which is personal data, each time you access this website. These are:
– ile name of the page from which PULSE was called up
– date and time of the call
– transmitted data volume
– access status
– type and operating system of the web browser used
– requesting provider
– referrer URL (the previously visited page)
– terminal used
– name of the accessed website.
– IP address of the user
IP addresses are assigned to every device (e.g. smartphone, tablet, PC) that is connected to the internet. Which IP address this is depends on which internet access your end device is currently connected to the internet via. It can be the IP address assigned to you by your Internet provider, for example if you are connected to the Internet at home via your WLAN. It can also be an IP address assigned to you by your mobile phone provider or the IP address of a provider of a public or private WLAN or other Internet access. In its most common form (IPv4), the IP address consists of four blocks of digits. In most cases, you as a private user will not use a constant IP address, as this is only temporarily assigned to you by your provider (so-called “dynamic IP address”). With a permanently assigned IP address (so-called “static IP address”), a clear assignment of user data is in principle easier. Except for the purpose of tracking unauthorised access to our website, we do not use this data in a personalised manner, but only evaluate on an anonymous basis which of our websites are favoured, how many accesses are made daily and the like. Our website already supports the new IPv6 addresses. If you already have an IPv6 address, you should also know the following: The IPv6 address consists of eight blocks of four. The first four blocks, as with the entire IPv4 address, are typically assigned dynamically for private users. However, the last four blocks of an IPv6 address (so-called “interface identifiers”) are determined by the end device you use to browse the website. If this is not set differently in your operating system, the so-called MAC address is used for this purpose. The MAC address is a type of serial number that is assigned once worldwide for each IP-capable device. We therefore do not store the last four blocks of your IPv6 address.
In general, we recommend that you activate the so-called “Privacy Extensions” on your end device in order to better anonymise the last four blocks of your IPv6 address. Most common operating systems have a “Privacy Extensions” function, although in some cases this is not set by default. This data is not combined with other personal data that you actively provide within the framework of the website – e.g. in your profile. We collect server log files for the purpose of administering the website and being able to detect and prevent unauthorised access.
5.2 Recipients of the data
We share server log files with the following recipients:
- HMG companies, in particular Handelsblatt GmbH and Solutions by Handelsblatt Media Group GmbH
- to improve the offers and the websites of Handelsblatt GmbH as well as of our group companies.
- for the playout of usage-based online advertising
- To send marketing communications where you have consented to this or where otherwise permitted by law.
The HMG companies that receive your data can be found here: https://handelsblattgroup.com/portfolio-der-handelsblatt-media-group/
- Service partner of Handelsblatt GmbH
- Service providers who provide applications and services on our websites, e.g. computers or comparison portals
- The Arvato Bertelsmann data centre (Bertelsmann SE & Co. KGaA, Carl-Bertelsmann-StraĂźe 270, 33311 GĂĽtersloh), where our servers are operated.
- The company iApps Technologies GmbH, Tulpenweg 22, 83254 Breitbrunn which acts with its service as a data interface between our apps and the data centre.
We have contractually agreed with these service providers that they may only use your data within the scope of order processing for us and for our services. Any other use – including for your own contacting by one of these service providers – is only permitted with your prior consent.
5.3 Legal basis
The personal data in log files are processed on the basis of Art. 6 para. 1 lit. f GDPR. This authorisation allows the processing of personal data within the scope of the “legitimate interest” of the controller, insofar as your fundamental rights, freedoms or interests do not prevail. Our legitimate interest is the easier administration, the improvement of our offers and the possibility to detect and track hacking. You can object to this data processing at any time if there are reasons that exist in your particular situation and that speak against the data processing. To do so, simply send an email to the data protection officer. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.
5.4 Duration of data storage
The server log files with the above data are automatically deleted after 30 days at the latest. We reserve the right to store the server log files for longer if facts exist that suggest the assumption of unauthorised access (such as an attempt at hacking or a so-called DDOS attack).
6. Membership directory and membership communication
6.1 Your data
If you are a PULSE member and have not previously objected to this, we will record your name, company and industry in a membership directory that we make available to PULSE members. You can also use PULSE to network with other members and exchange information. Depending on the settings, your data can be viewed by all members or only by your communication partner.
6.2 Legal basis
We process your data on the basis of your consent to the publication of your data in a membership directory and in communication with other members. The personal data is processed on the basis of Art. 6 para. 1 lit. a (consent) and lit. f (legitimate interest) GDPR. You can revoke your consent to the publication of your data in a membership directory at any time with effect for the future. The permissible element of “legitimate interest” permits the processing of personal data in the context of communication with other members, insofar as your fundamental rights, freedoms or interests do not prevail. Our legitimate interest is to improve our offers, in particular to enable exchange among members. You can object to this data processing at any time if there are reasons relating to your particular situation which speak against the data processing. To do so, simply send an email to the data protection officer. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
6.3 Duration of data storage
The personal data stored as part of your membership will be deleted after six months if your membership ends and we do not need the data for subsequent processing of your membership.
7. Cookies
7.1 Your data
We use cookies on our websites to improve performance and increase user-friendliness (see section A. “General information on cookies”). Below we provide an overview of the cookies we use. Detailed information, including opt-out options, is available to you at in our CMP. Unless otherwise described below, the data stored by means of the cookies will be deleted after 12 months, but in any case six months after your membership ends or has been resolved.
7.2 Essential cookies
We use certain cookies (“essential cookies”) that are necessary for you to use our website at all. Some of these essential cookies are only requested from you once, e.g. in connection with the data protection setting you have made. We need other cookies in order to be able to provide our services. These are requested regularly, e.g. your user data with which we carry out authentication.
No separate legal basis is required for these essential cookies. In the case of membership, the processing of personal data associated with the essential cookies is based on your consent (Art. 6 para. 1 lit. a GDPR) and the contract entered into with us regarding your membership (Art. 6 para. 1 lit. b GDPR). In the case of a mere page view, the legal basis is Art. 6 para. 1 lit. f GDPR. In the latter case, the processing of the data stored with the help of the essential cookies serves our legitimate interest in enabling you to visit our website.
Essential cookies are:
- WPML, a service of OntheGoSystems Limited ( www.wpmo.org/de ), 22/F 3 Lockhart Road, Wanchai, HongKong (wp-wpml_current_language). WPML enables us to offer our site in multiple languages. A request is made with each session and ends when you close your browser.
- Gauges, a service of Report Garden, Inc, (www.reportgarden.com), 355 Bryant Street, Suite 403 San Francisco, CA 94107, USA (gauges_unique), Gauges allows us to load our cookie banner and CMP.
- Boorlabs, a service of Borlabs GmbH ( www.borlabs.io ), Hamburger Str. 11, 22083 Hamburg (boorlabs-cookie). Boorlabs stores your user settings in our CMP and counts page views. The retrieval takes place with each session and ends after six months if you no longer use our service.
- WordPress, a service of Automattic Inc, (www.wordpress.org), 60 29th Street #343, San Francisco, CA 94110, USA (wordpress_test_cookie). This cookie is used to check whether the use of cookies is technically possible or has been blocked by the user and is therefore retrieved during each session and terminated when the browser is closed.
7.3 Marketing cookies
Marketing cookies are used by us to follow visitors on websites. The intention is to show ads that are relevant and engaging to the individual user and therefore more valuable to publishers and advertising third parties. For these cookies, we ask for your consent beforehand. The legal basis for setting and accessing the data stored in these cookies and the associated processing is therefore your consent pursuant to Art. 6 (1) lit. a GDPR.
Marketing cookies are:
- Google Tag Manager, a service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). The Tag Manager enables various tools to be started and switched off, some of which support marketing tools, which is why we do not use the Tag Manager without your consent. If you wish to object to the use of the Google Tag Manager or switch them off, you can do so via our CMP or via the settings and opt-out options provided by Google:Â https://adssettings.google.com/authenticated.
- Piano, a service of Piano Software Inc, (www.piano.io)Herengracht 433, Amsterdam, 1017 BR, NL (piano-cookie). Piano provides real-time data visualisation that gives us information about user behaviour and content engagement. This allows us to make data-based decisions, such as playing out marketing based on demographics, preferences and behaviour instantly. Aopt-out is possible via our CMP and here https://piano.io/privacy-policy/ .
Data processing may also take place in the USA via Piano Analytics and the Tag Manager and the tools integrated with them. The European Commission adopted an adequacy decision for the data privacy framework EU-US (Adequacy decision for safe EU-US data flows (europa.eu)). The decision concludes that the United States ensures an adequate level of protection – comparable to that of the European Union – for personal data transferred from the EU to US companies under the new framework. On the basis of the new adequacy decision, personal data can flow safely from the EU to US companies participating in the Framework, without having to put in place additional data protection safeguards. There is in addition a data protection agreement with Google and Piano that includes the EU standard contractual clauses.
8. Usage-based online advertising
8.1 Your data
We have entrusted the marketing of the advertising space on our websites to iq digital media markteting gmbh, Toulouser Allee 27, 40211 DĂĽsseldorf (“iq digital”). Please inform yourself about the data processing of iq digital and the partners and tool providers used by iq digital in the data protection declaration of iq digital (https://www.iqdigital.de/Ueber-uns/Datenschutz). In iq digital’s data protection declaration, you will find information about the recipients of data, deletion periods, permissions and detailed information about the precise purposes of data processing by each individual partner and tool provider.
.
If you have any questions, please contact the data protection officer listed in section A. Â