In the Service of University Libraries
Privacy Policy
Home

Privacy policy

Controller

IATUL OFFICE
Zum Ehrenhain 34
22885 Barsbüttel
Germany

+49 40 670 882 80

iatul@cpo-hanser.de

 

If you subscribe to the email newsletter of CPO HANSER SERVICE GmbH, they are the controller for this purpose. Please also note the following information regarding newsletters.

CPO HANSER SERVICE GmbH
Paulsborner Straße 44
14193 Berlin, Germany
Tel.: +49 30 3006690

Email: berlin@cpo-hanser.de

 

Collection of General Data and Information

When accessing our website, we collect certain general data and information. This includes: (1) browser types and versions used, (2) operating system used by the accessing system, (3) website from which an accessing system reaches our website (known as referrer), (4) sub-websites accessed through an accessing system on our website, (5) date and time of access to the website, (6) Internet Protocol address (IP address), (7) Internet service provider of the accessing system, (8) approximate location of access, and (9) other data automatically transmitted by the end device.

When processing this data and information, we do not draw conclusions about the specific person concerned. Rather, this information is processed to (1) deliver website content correctly, (2) optimize website content and advertising non-individually, (3) ensure long-term functionality of our information technology systems and website technology, and (4) detect, prevent and legally pursue potential cyber attacks.

We process the collected data and information to enhance data protection and data security in our company and for website visitors. This constitutes a legitimate interest pursuant to Art. 6(1)(f) GDPR. This data and information is processed separately from other personal data and deleted 14 days after accessing our website. In case of a cyber attack, data will be deleted once it is no longer needed for detection, prevention, or legal pursuit of the attack.

 

Contact Options via Website

When you use any of our contact options, we process your provided data to handle your inquiry. The legal basis for this is our legitimate interest in processing your request pursuant to Art. 6(1)(f) GDPR. If your inquiry serves to conclude a contract with us, the additional legal basis for processing is Art. 6(1)(b) GDPR.

Your data will be deleted after completing your inquiry unless we are legally obligated to store it longer. In this case, deletion occurs after expiry of the corresponding obligation.

 

Newsletter Subscription

When you subscribe to our email newsletters, which you can revoke at any time, the respective controller initially processes your provided email address. This is used for creating and sending the newsletter. The legal basis for processing is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with future effect. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

To confirm your newsletter registration, you must click the confirmation link in the verification email sent after your registration. When clicking the link in the verification message, we process the date and time of the click, the content of the message sent to you, and the email address used. This is done to prove that you subscribed to the newsletter and confirmed your consent. The legal basis for this processing is Art. 6(1)(c) GDPR, as controllers are legally obligated to prove your consent.

The respective controller deletes your personal data related to the newsletter subscription upon unsubscription. Data that the controller needs as proof of your newsletter registration will be deleted once no longer needed to demonstrate the existence or non-existence of legal claims.

 

Newsletter Analysis

If you have consented, newsletters contain counting pixels. A counting pixel is a miniature graphic embedded in HTML-format emails to enable log file recording and analysis. This allows statistical evaluation of online marketing campaigns' success or failure. Using embedded counting pixels, the respective controller can determine if, when, and with which device (e.g., PC, mobile phone, or tablet) an email was opened and which links in the email were accessed.

You may withdraw your consent at any time with future effect. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Such personal data collected through newsletter counting pixels is stored and analyzed by the respective controller to optimize newsletter delivery and better adapt future newsletter content to recipients' interests. This personal data is not shared with third parties, except for newsletter delivery processors.

Consent to newsletter tracking is voluntary and can be withdrawn at any time.

 

Routine Deletion and Blocking of Personal Data

We process and store your personal data only for the period necessary to achieve the storage purpose or as provided for by European directive and regulation makers or other legislators in laws or regulations to which we are subject.

If the storage purpose ceases to apply or a storage period prescribed by European directive and regulation makers or another competent legislator expires, the personal data is routinely blocked or deleted in accordance with statutory provisions.

 

Rights of the Data Subject

Regarding your personal data, you have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), and data portability (Art. 20 GDPR). You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). For details, please refer to the relevant legal provisions.

 

Right to Object

Pursuant to Art. 21 GDPR, you have the right to object to the processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing.

If you wish to exercise any of your rights, please contact us as the controller using the contact details provided above or use any other means we offer to submit such communication. If you have questions, please contact us.

 

Use of Google Analytics (with Anonymization Function)

With your revocable consent, we use Google Analytics (with anonymization function) on our website. Google Analytics is a web analytics service. Web analytics is the collection, gathering, and analysis of data about website visitor behavior.

The provider of Google Analytics is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google's published privacy policy, which also applies to Google Analytics, can be found at https://policies.google.com/privacy.

IP anonymization occurs within the European Economic Area according to Google. According to Google, the full IP address is transferred to and shortened at Google Group servers in the USA only in exceptional cases. However, according to our contract with Google, this may only occur if applicable legal regulations are observed. According to Google, your transmitted IP address is not combined with other Google data.

Google Analytics processes the following data about our website usage:

  • Approximate location at regional level
  • Anonymized IP address
  • Technical information about browser and device (e.g., language settings, screen resolution)
  • User's Internet provider
  • Through which website/advertising medium users reached this website
  • Pages accessed by users
  • Whether users perform certain actions on our website (conversions, such as product purchases, newsletter registrations, downloads, purchases)
  • User behavior (e.g., which links are clicked, how long users stay on a page, from which page our offer is left)

We obtain user consent for Google Analytics use upon first website access. You may withdraw your consent at any time with future effect. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Google Analytics evaluations enable us to understand website usage and advertising measure effectiveness. This allows us to optimize our website (particularly structure, content, functions), advertising measures, and thus our business success. The legal basis for processing is your consent pursuant to Art. 6(1)(a) GDPR.

In Google Analytics, we have set a 14-month storage period for affected personal data. Data whose retention period has expired is automatically deleted once per month.

Google offers a browser plugin as a cross-website opt-out function for Google Analytics. Information about this can be found at https://tools.google.com/dlpage/gaoptout. You can additionally withdraw any given consent to Google Analytics use on our website here [Link to Consent Layer].

 

Use of YouTube (Enhanced Privacy Mode)

We have integrated YouTube components on this website. YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

YouTube videos are embedded on our website exclusively using YouTube's "Enhanced Privacy Mode". According to YouTube's own statements, it only stores information about website visitors when they play the video. Further information can be found at https://support.google.com/youtube/answer/171780?hl=en in the section "Enable Enhanced Privacy Mode".

On each page where a YouTube component (YouTube video) is integrated, the internet browser on the data subject's information technology system is automatically prompted by the respective YouTube component to download a display of the corresponding YouTube component from YouTube. Further information about YouTube can be found at https://www.youtube.com/yt/about/. Through this technical process, YouTube and Google gain knowledge of which specific subpage of our website is visited by the data subject.

The embedding of YouTube videos serves to provide informative, supplementary, or scientific content on this website that authors have made available to a broad audience on a public platform (YouTube) and represents a legitimate interest pursuant to Art. 6(1)(f) GDPR.

If the data subject is simultaneously logged into YouTube, YouTube recognizes which specific subpage of our website the data subject visits when playing the YouTube video. This information is collected by YouTube and Google and associated with the respective YouTube account.

YouTube and Google receive information via the YouTube component that the data subject has visited our website whenever the data subject is logged into YouTube while playing YouTube videos on our website. If such transmission of information to YouTube and Google is not desired, the data subject can prevent this by logging out of their YouTube account before accessing our website.

YouTube's published privacy policy, available at https://www.google.com/intl/en/policies/privacy/, provides information about the collection, processing, and use of personal data by YouTube and Google.

 

Automated Decision-Making and Profiling

We handle your data responsibly and do not engage in automated decision-making or profiling.