PRIVACY POLICY

The website www.plazamedia.com (hereinafter "website") is operated by PLAZAMEDIA GmbH (hereinafter "PLAZAMEDIA", “controller” or "we"). The protection of your personal data is of central importance to us. Within the framework of this data protection declaration, we inform you about the type, scope and purpose of the collection, processing and use of your personal data.

Content:

1. Principles
2. Scope of data collection, processing and use
3. Data processing processes and tools

1. technically necessary processing of data by PLAZAMEDIA GmbH and our service providers for the operation of the website    
2. Processing of data by PLAZAMEDIA GmbH and our service providers for website analysis and statistical processing of user behaviour
3. Processing of data by PLAZAMEDIA GmbH and our service providers to optimise our website
4. Processing of data by PLAZAMEDIA GmbH and our service providers for communication with our website visitors

1. Duration of storage
2. External links
3. Right of information, objection and revocation
4. Security
5. Controller and contact details

I. Principles

• We collect, process and use your personal data exclusively in compliance with the principles described below as well as the provisions of the EU General Data Protection Regulation (hereinafter "GDPR") and the Federal Data Protection Act applicable to PLAZAMEDIA (hereinafter together with GDPR "applicable data protection provisions").
• Personal data is any information relating to an identified or identifiable natural person (hereinafter "data subject"). This includes, for example, inventory data such as your name, postal address, e-mail address and telephone number, but also usage data, such as information about the time of your visit to our pages, the browser you used and other data generated when visiting our pages.

II. scope of data collection, processing and use

• We collect, process and use your personal data (hereinafter also "data") from data subjects exclusively for the exercise of our own business purposes, for the purposes of providing the website with information on our portfolio and the presentation of our offers and services.
• Your personal data is processed on the basis of the applicable data protection provisions, specifically - depending on the case - on the basis of your consent, a legal obligation, the conclusion of a contract with you or after weighing up the legitimate interests in the individual case.
• If we process personal data on the basis of consent, we will only do so as long as you do not object or revoke your consent.
• For a large part of the visit to the website, it is not necessary for you to provide us with personal data. For individual services, it is necessary to provide personal data (e.g. contact form).
• The personal data of the visitor to the website as a data subject will be deleted or blocked as soon as the purpose of the storage ceases to apply. However, storage may take place beyond this if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period defined by the aforementioned regulations expires, unless in individual cases there is a need to continue storing the data for the conclusion or fulfilment of a contract.
• We would like to tell you exactly what data we collect and process about you in the following data protection information. If you have any questions about data protection, please contact datenschutz@plazamedia.com. You will find the full contact details at the end of this data protection notice.

III. Data processing processes and tools

(1) technically necessary processing of data by PLAZAMEDIA GmbH and our service providers for the operation of the website     

Cookies

We use cookies to make your visit to our website more attractive. Cookies are small text files that are stored on your terminal device and enable us to recognise your browser, among other things. Cookies enable us to improve the comfort and quality of the services provided on the website.

Cookies are also used to analyse the use of the website, in particular online advertising, in anonymised form, to store general preferences of a user in the cookie placed on the end device and to provide the respective user with special, interesting offers and services on the website based on their preferences.

Some of the cookies we use are deleted again after the end of your browser session, i.e. after you close your browser (so-called "session cookies"). Other cookies remain on your terminal device during their respective validity period (see below) and enable us to recognise your browser on your next visit.

When calling up our website, we inform users by means of an information banner about the use of cookies (technically necessary / essential cookies and tracking cookies) and have technically set up the consent required under data protection law for the setting of cookies for which consent is necessary. With the exception of technically necessary or essential cookies, consent must always be given in advance for cookies to be set on your end device. The user is also referred to this data protection declaration via the information banner.

In the following, we provide you with an overview of the cookies used, their validity period and the respective opt-out options. In addition, we would like to point out that you can adjust your cookie settings at any time and revoke your consent for the future at any time.

Technically necessary / essential cookies:

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

In the following technically necessary cookies, the closing of the cookie banner is stored:

• Cookieconsent_status: Stores the interaction with our cookie banner (validity: 1 year).

These cookies are transmitted to us each time a page is accessed, do not contain any personal data and are therefore not used for personal identification.

Analysis - Cookies:

We use cookies on our website that allow us to analyse the surfing behaviour of our users. In this way, search terms entered, the frequency of page views or the use of website functions can be analysed. The user data collected in this way is made anonymous by a technical precaution. Therefore, it is no longer possible to allocate the data to the user calling up the website. This anonymised data is not stored together with the users' personal data.

The following analysis cookies are set on your terminal device:

• _pk_id: Differentiation user and sessions (validity: 13 months),
• _pk_ref: Detection Traffic Source (validity: 6 months),
• _pk_ses: Visitor identification (validity: 30 minutes).

Analysis cookies are used to improve the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimise our offer to the respective user. For a description of the cookies, how they work, their purpose and the options for objecting to them, please refer to the information provided under "Matomo (Piwik)".

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1)(f) GDPR. The legal basis for the processing of personal data using cookies for statistical or marketing purposes (tracking cookies) on the basis of your consent is Art. 6 (1)(a) GDPR.

You can restrict or deactivate the use of cookies in your browser settings at any time. Furthermore, at the end of this data protection declaration, we offer you the option to change the settings made via our cookie banner at any time or to revoke your given consent for the future. It is also possible to use our offers without cookies. However, this may lead to certain restrictions in the functions and user-friendliness of our offers on the website.

Server protocols

During the mere informative use of the website, we only collect the personal data that your browser automatically transmits to our server on which our web pages are located (hereinafter referred to as "web server") and that are technically necessary for the purpose of displaying our website to you and ensuring its stability and security.

We have commissioned the company Hetzner Online GmbH (Industriestrasse 25, 91710 Gunzenhausen, hereinafter "Hetzner") for the hosting and technical provision of our website. We have concluded the required data protection agreement with Hetzner for commissioned processing in accordance with Art. 28 GDPR. According to this agreement, Hetzner undertakes to ensure the necessary protection of your data and to process it exclusively on our behalf in accordance with the applicable data protection regulations. You can find more information about Hetzner on the website: https://hetzner.com/.  

The web server automatically recognises certain data such as

• Proxy IP address (client IP address of the gateway)
• Date and time of access
• The operating system used
• Browser type and version
• Use protocols
• URL of the document page the user came from
• Choice of language
• http status (return code) and
• Amount of data in bytes

The data is stored on Hetzner servers hosted and certified in Germany. Hetzner uses this information for the specified purpose on our behalf as well as its own for service optimisation. Hetzner does not use the data independently or pass it on to third parties. This data is not stored together with other personal data of the user.

There is a legitimate interest on our part for the temporary storage of the data and the server logs. The legal basis for the data processing is therefore Art. 6 (1)(f) GDPR.

The temporary storage of the IP address by the system is necessary to enable the delivery of the website to the respective end device used by the user. For this purpose, the user's IP address must remain stored for the duration of the session.

The storage of all the information listed above in log files (server logs) is additionally carried out to ensure the functionality of the website. In addition, we use the data to optimise the website and to ensure the necessary security of our information technology systems. We regularly evaluate the server logs, which are made available to us by Hetzner in anonymised form, for statistical purposes. The data has no personal reference. An evaluation of the data for marketing purposes does not take place in this context.

These purposes also constitute our legitimate interest in data processing pursuant to Art. 6 (1)(f) GDPR.

The server logs are deleted again no later than 52 days after they have been collected by Hetzner, unless there is a suspicion of misuse or external attack or other system security error.

The collection of data for the provision of the website and the storage of the data in server logs is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.

(2) Processing of data by PLAZAMEDIA GmbH and our service providers for website analysis and statistical processing of user behaviour

Matomo (Piwik)

We use the software "Matomo" (www.matomo.org) on our website, a service of the provider InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand (hereinafter "Matomo") to analyse the surfing behaviour of our users. The software sets cookies on your computer, which can be used to recognise your browser. When sub-websites of our website are accessed, the following data is stored in cookies set by Matomo (see section Cookies):

• the anonymised proxy IP address (client IP address of the gateway, shortened by the last byte,
• the sub-website accessed and the time of access,
• the page from which the user accessed our Interview Suite (referrer),
• which browser with which plugins, which operating system and which screen resolution is used,
• the length of time spent on our website,
• the pages that are accessed from the sub-website called up.

The software is set in such a way that the IP addresses are not stored completely, but 2 bytes of the IP address are masked (e.g.: 192.168.xxx.xxx). In this way, it is no longer possible to assign the shortened IP address to the calling computer. By anonymising the IP address, we take into account the interest of users in the protection of personal data. This data is never used to personally identify the user of our website and is not merged with other data. The data collected with Matomo is stored on our servers hosted and certified in Germany at Hetzner. It is not passed on to third parties.

The data is deleted when it is no longer needed for our purposes. In our case, this is after 180 days.

For more information on the privacy settings of the PIWIK software, please see the following link: matomo.org/docs/privacy/.   

We use the analysis and tracking technologies or third-party technologies of Matomo (Piwik) on the basis of your consent via our cookie banner (Art. 6 (1)(a) GDPR):

• For the purpose of monitoring the correct functioning of our website or our offer.
• For the purpose of conducting data analysis.
• For the purpose of KPI reporting within our annual reports and to our partners.
• For the purpose of statistically recording usage and conducting data analyses in order to optimise the usability, performance and content of our website.

For the purpose of debugging technical errors. You can revoke your consent to data processing via our cookie banner at any time for the future. By changing the settings at the end of this privacy policy, you prevent technical measures from being carried out and cookies from being set.

You can also restrict or deactivate the use of cookies in your browser settings at any time. It is also possible to use our offers without cookies. However, this may lead to certain restrictions in the functions and user-friendliness of our offers on the website.

(3) Processing of data by PLAZAMEDIA GmbH and our service providers to optimise our website

Integration of maps using OpenStreetMap

Our website uses the functions of the Openstreetmap Foundation, 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom Great Britain (hereinafter "OpenStreetMaps"), in order to provide geographical information about our location for visitors to this website.

Through the use of OpenStreetMaps and your visit to our website, on which the interactive online map is used, data is generally collected, processed and stored. By calling up the OpenStreetMaps component on our website, OpenStreetMap must process your IP address and our website, as the starting point of your OpenStreetMap request, in order to be able to show you the online map. For more information on the processing of data by OpenStreetMap, please refer to OpenStreetMap's privacy policy at: https://wiki.osmfoundation.org/wiki/Privacy_Policy.   

The legal basis for the processing of personal data is Art. 6 (1)(f) GDPR - the stated processing purposes are in our legitimate interest. It is important for the controller to make the website attractive and to increase the interaction with visitors and customers with the help of the integration of the online map. The use of OpenStreetMap improves the functionality of the website.

According to European and German law, you have the right to object to the creation of user profiles or the allocation, whereby you must contact the provider or OpenStreetMap directly to exercise this right.

(4) Processing of data by PLAZAMEDIA GmbH and our service providers for communication with our website visitors

Contact form/ Email

On our website, it is possible to contact us via the e-mail address provided or the contact form. In both cases, the personal data transmitted by the user will be stored. In this context, the data is not passed on to third parties. The data is used exclusively for processing the conversation.

If you send us an enquiry via our contact form, your name and e-mail address will only be used for the respective correspondence and reply with you. This also applies to an enquiry by e-mail.

The data is deleted immediately as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is deemed to have ended when it is clear from the circumstances that the matter in question has been conclusively clarified. Enquiries received via the contact form are sent via the form to the e-mail address info@plazamedia.com. They are not stored within our CMS or on our web server.

The legal basis for the processing of data transmitted in the course of sending an e-mail or via the contact form is Art. 6 (1)( a) and (f) GDPR. If the contact is aimed at concluding a contract, an additional legal basis for the processing is Art. 6 (1) (b) GDPR.

The processing of your personal data voluntarily provided to PLAZAMEDIA by e-mail is solely for the purpose of processing the contact. This also constitutes the necessary legitimate interest in processing the data.

The user has the option to revoke his consent and the processing of personal data at any time. If the user contacts us by e-mail or via the form, he or she can object to the storage of his or her personal data at any time. In such a case, the conversation cannot be continued.

The revocation can be made at any time via the contact details in the imprint of the online presence, as well as at the following e-mail address datenschutz@plazamedia.com. All personal data stored in the course of contacting us will be deleted in this case.

Please note that when communicating via contact form, PLAZAMEDIA cannot guarantee data security on the Internet and recommends sending confidential information by post to prevent the loss of this confidential information.

IV. Duration of storage

We store your personal data as long as this is necessary to achieve the respective storage purpose or your consent to storage has been given. Afterwards, your data will be deleted by us, unless we are obliged to store it for a longer period of time according to Art. 6 (1)(c) GDPR due to tax, commercial or other legal storage or documentation obligations or you have agreed to a storage beyond this according to Art. 6 (1)(a) GDPR in the event that the storage purpose is no longer applicable.

V. External links

You may find links on our pages that refer to the pages of third parties. PLAZAMEDIA has no influence on whether the operators of these sites comply with data protection regulations.

VI. Right of information, objection and revocation

According to the General Data Protection Regulation, you have the right to free information about the data stored about you. In addition, you can object to the creation of user profiles for the purposes of advertising, market research or the optimisation of our website. You can revoke your consent to the collection, processing or use of your personal data at any time with effect for the future.

You have the right,

• information as well as information about the data stored about you - also insofar as it relates to the origin or recipient of this data - and the purpose of the storage of this data. To do so, please send a written request to the address of our data protection officer given below. In your letter, please describe as precisely as possible the type of personal data about which you would like to be informed;
• have your data corrected if it is incorrect. To do this, please send a written request to the address of our data protection officer given below. Please be as specific as possible in your letter about the type of personal data you wish to have corrected;
• Have your data deleted or blocked if the data storage was inadmissible or is no longer required for the further fulfilment of our tasks. To do so, please send a written request to our data protection officer at the address below. Please be as specific as possible in your letter about the type of personal data you would like to have deleted or blocked;
• to have your data transferred. To do so, please send a written request to our data protection officer at the address below. Please be as specific as possible in your letter about the type of personal data you would like to have transferred;
• to object to the use of your data, e.g. for newsletters or advertising and market research purposes, or to revoke any consent you have given. To do so, please use the opt-out links mentioned above, the unsubscribe link in the newsletter or contact our data protection officer. Please note that for organisational reasons there may be an overlap between your revocation and the use of your data in the context of an already running campaign;
• complain to a supervisory authority if you believe that the processing of your personal data is unlawful. To do so, please contact the data protection authority responsible for your place of residence or your federal state or the data protection authority responsible for us. This is:

BayLDA Bavarian State Office for Data Protection Supervision

Promenade 18

91522 Ansbach

Phone: +49 (0) 981 180093-0

This data protection notice can be accessed and printed out at any time under the link [Data protection - Plazamedia GmbH] . Since changes in the law or changes in our internal company processes may make it necessary to adapt this data protection information, which we reserve the right to do accordingly, we ask you to call up this data protection information regularly.

In the event of any discrepancy between the English translation and the original German text, the original German text shall prevail.

VII. Security

We take the necessary security measures to protect your personal data against unlawful or accidental access, deletion, alteration or loss and against unauthorised disclosure. We encrypt your data during transmission via our website, app and to third-party providers and use so-called SSL connections (Secure Socket Layer). We secure our website and our other systems and personal data through appropriate technical and organisational measures, in particular against loss, destruction, unauthorised access, modification or disclosure to third parties.

VIII.     Controller and contact details

We will be happy to answer any further questions you may have on the subject of data protection and the processing of your data.

You can obtain information about the data we have stored about you at any time. In these cases, please contact the office responsible for the website:

PLAZAMEDIA GmbH

Data protection

Münchener Str. 101 g

85737 Ismaning

Tel.: +49 (0) 89 996 33 0

Data Protection Officer:

BAY GmbH Wirtschaftsprüfungsgesellschaft Rechtsanwaltsgesellschaft, Attorney Dirk Seeburg

Hultschiner Straße 8, 81677 Munich

Email: datenschutz@plazamedia.com

Status: March 2021