We will only use the personal data gathered over this website as set out in this policy. Below you will find information on how we use your personal data, for which purposes your personal data is used, with whom it is shared and what control and information rights you may have.
I. Summary of our processing activities
The following summary provides you with a quick overview of the processing activities that are undertaken on our website. You will find more detailed information under the indicated sections below.
- When you visit our website for informational reasons without setting up an account, only limited personal data will be processed to provide you with the website itself (see section III).
- In case you register for one our services (e.g. discussion forum, blog or web shop) or subscribe to our newsletter, further personal data will be processed in the scope of such services (see sections IV, V and VI).
- Furthermore, your personal data will be used to provide you with interesting advertising for our services and products (see section VIII) and for statistical analysis that helps us to improve our website (see section IX). Additionally, we improve your website experience with third party content (see section X).
- Your personal data may be disclosed to third parties (see section XI) that might be located outside your country of residence; potentially, different data protection standards may apply (see section XII).
- We have implemented appropriate safeguards to secure your personal data (see section XIII) and retain your personal data only as long as necessary (see section XIV).
- Under the legislation applicable to you, you may be entitled to exercise certain rights with regard to the processing of your personal data (see section XV).
- Personal data: means any information relating to a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, or an online identifier.
- Processing: means any operation which is performed on personal data, such as collection, recording, organisation, structuring, storage, adaptation or any kind of disclosure or other use.
III. Informational use of the website
When you visit our website for informational reasons, i.e. without registering for any of our provided services listed under IV and without providing us with personal data in any other form, we may automatically collect additional information about you which will contain personal data only in limited cases and which is automatically recognised by our server, such as:
- your device type, screen resolution and browser version
- information on your operating system, including language settings
- the date and time of your requests
- information on the offers you have visited on our website
We use such information only to assist us in providing an effective service (e.g. to adapt our website to the needs of your device or to allow you to log in to our website), and to collect broad demographic information for anonymised, aggregated use.
The personal data automatically collected is necessary for us to provide the website, Article 6 sec. 1 sent. 1 lit. b GDPR, and for our legitimate interest to guarantee the website’s stability and security, Article 6 sec. 1 sent. 1 lit. f GDPR.
Personal data that is collected automatically is retained for 1 month and properly erased afterwards.
IV. Registration for our services
Our website offers free of charge newsletters, access to and download of content (e.g. book chapters, journal articles, eLearning) and the administration of your personal knowledge archive (e.g. dashboard, bookmarks, areas of interest). In order to use the aforementioned services you have to set up an account (“registration”).
When logging in on springerprofessional.de through the authentication service with your login data after registration we send the data you enter into the login form (usually your email address and a password) to the server of the authentication service together with a service URL. Based on these data the service validates your access requests. If access is granted the authentication service transfers the unique user ID generated for your user account. With these data we can provide you with the personalized settings you may already have selected on springerprofessional.de. In addition we can request relevant data required for providing services from the authentication service via a webservice e.g. to enable access to your subscriptions or other services you have booked.
For registration we process at least:
- Information (such as your name and email address) that is provided by registration
- Information in connection with an account sign-in facility (e.g. log-in and password details)
Whenever you complete transactions using our website, further mandatory information may be required, e.g. a birth date, area of interest or address to participate in online training (eLearning), of which you will of course be separately informed.
Data required for providing a service are marked as mandatory, provision of additional information is optional.
We will process the personal data you provide to:
- Identify you at sign-in
- Provide you with the services and information offered through the website or which you request
- Administer your account
- Communicate with you
- (behavioural) Advertising and profiling
For this, the legal basis is Article 6 sec. 1 sent. 1 lit. b GDPR.
The use of your personal data for behavioural advertising and profiling is done for the legitimate interest to improve your experience while using the website, Article 6 sec. 1 sent. 1 lit. f GDPR.]
We use the personal data and contact data you provide by registration to inform you directly about our additional products and services. The use of your personal data for directly advertising related products and services is a legitimate interest for us as a provider of this website, Article 6 sec. 1 sent. 1 lit. f GDPR.
You can object to the use of your personal data for direct marketing at any time. We will then refrain from any processing to the extent it is related to such purposes. You can inform us about your objection by contacting us at: firstname.lastname@example.org.
Your personal data is, in the absence of exceptions within the specific services mentioned below, retained for as long as your user account is used. After deletion of your account, your personal data will be erased with the next regular database cleaning. Statutory storage obligations or the need for legal actions that may arise from misconduct within the services or payment problems can lead to a longer retention of your personal data. In this case, we will inform you accordingly.
V. Information about the specific uses that require registration
For the use of the following services you have to set up an account as described under IV. Your customer account retains your personal data for future purchases and other activity. You can delete the personal data in your account’s settings. This processing is based on Article 6 sec. 1 sent. 1 lit. b.]
1. Remember Me
If you activated the “remember me” functionality when logging in through the authentication service we place a cookie on your device that provides us with your login data (see section IV) and enables us to automatically log you in on your next visit.
In addition we place temporary cookies to identify the sites (URL) you have visited on springerprofessional.de. We do not collect any personal data or IP addresses of our users in these cookies. They are used exclusively to ensure the correct display of the site based on your preferences and are deleted as soon as you log out or close the browser window.
2. Test subscriptions and paid contracts
As a registered user, you are able to enter into a subscription for access to certain areas and/or periodicals and/or purchase individual issues of periodicals or individual articles. In addition, in some circumstances you may be granted access to content free of charge for a limited period. Orders are placed directly online. Our order form requests the following data in order to allow us to process the form and carry out order (including in the case of the free trial access):
- Your forename(s) and surname, gender, title,
- Your postal address including telephone number as well as a separate delivery address if your selected subscription includes printed materials,
- Your area of specialisation and focus of your role.
- If ordering as for a business, the company name, type, sector and EU VAT number.
If you are a customer with a print subscription and access online content provided through your print subscription, we also collect and process the following data:
- Licence code of your business subscription or
- Customer number of your print subscription.
3. Registration from IP range
If you register as part of an enterprise cooperation agreement, during the registration process we use all but the final part of the IP address of the device used to register to verify whether your device’s IP address is in the range specified by your company/organisation and we place a cookie on your device for the duration of the agreement. To do this we collect the IP address of the device from which you access springermedizin.de when you log in, and check whether this is within an IP range that is permitted to access the content. We do not store the full IP address, we remove the final part. This is a necessary step to provide you with access to the specific offering and information under your cooperation agreement.
4. Web shop
In order to carry out purchases from our shop, your personal data is transferred to our web shop operator (Springer Customer Service Center GmbH); see XI on the Transfer of personal data to third parties. The lawful basis for this processing is Article 6 (1) (1) (b) GDPR (General Data Protection Regulation) and our legitimate interest in operating a central purchasing process for the Springer Nature Publishing Group pursuant to Article 6 (1) (1) (f) GDPR.
By statutory law we are required to retain the provided financial data in relation to transactions (including address, payment and order information) for ten years. However, after 2 years we will restrict the processing of your personal data to comply with the statutory requirements and will not process the personal data any further. Regarding this, the retention of your personal data is based on Article 6 sec. 1 sent. 1 lit. c GDPR.
After login you can subscribe to various editorial newsletters and the newsletter informing you about our newest products and services. If you consent to receiving a newsletter it will be sent to the email address you entered during registration. The legal basis for this processing is Article 6 sec. 1 sent. 1 lit. a GDPR. Your email address will be retained as long as you subscribe to our newsletter.
You can unsubscribe from this service by opting out via the link provided in each newsletter or by changing your preferences in „My profile“ and „My newsletter“ [link: https://www.springerprofessional.de/en/mynewsletters] or by sending an email with your request to email@example.com.
VII. Automated decision making
We do not use your personal data for automated decision making which produces legal effects concerning you or similarly significantly affects you.
VIII. Online advertising
This website uses online advertising services to present you with ads that meet your interests. Respective advertisement is labelled with the name of the provider, e.g. “Google-Ad”. Additionally, this service helps us to improve our website and to make your visit more interesting. In order to do so, we collect statistical information about you that will be processed by the provider. This processing is based on Article 6 sec. 1 sent. 1 lit. f GDPR and represents our legitimate interest to improve your website experience and to promote our products and services.
1. Cookies, Web-beacons
Providers will be automatically informed about your visit on our website. For such purpose, a web beacon is used to place a cookie on your computer.
Please note that we neither have the control of the extent of personal data that is collected by the respective plug-in provider nor do we know the processing’s purpose or the period your personal data will be retained. Depending on the provider your personal data may be transferred to and processed in third countries, e.g. the United States. For further information about the potential risks of a cross border data transfer please refer to section XII.
It is possible that a provider discloses your personal data to its business partners, third parties or authorities.
You can prevent the installation of such a cookie:
- (i) by a respective setting of your browser that blocks the installation of third party cookies,
- (ii) by deactivating the provider’s interest-related advertising under the link mentioned in the provider details below,
- (iii) or generally blocking cookies under e.g http://www.google.com/settings/ads/plugin].
2. Online Behavioural Advertising (OBA)
On our website, we use businessAD, a service provided by the advertising sales company businessAD to serve OBA. The following businesses are used by businessAD and/or Ströer Digital Group to collect data for the purpose of serving OBA: ADTECH, AppNexus, The ADEX, Emetriq GmbH, nugg.ad GmbH, Ströer SSP (together “businessAD”).
businessAD places a cookie on your device in which your interests (e.g. advertising banners clicked on, sub-pages visited, etc.) are saved. No personal data such as name, address, email address or IP address is saved in these cookies. If you wish to opt out of OBA from businessAD, you can click on the links below to disable this data collection:
- ADTECH: http://www.youronlinechoices.com/opt-out-interface
- AppNexus: https://www.appnexus.com/en/company/platform-privacy-policy-de#choices
- TheADEX: http://de.theadex.com/company/consumer-opt-out/
- Emetriq GmbH: https://www.emetriq.com/en/opt-out-eng/
- nugg.ad GmbH: https://www.nugg.ad/de/datenschutz/allgemeine-informationen.html
- Ströer SSP: http://ih.adscale.de/adscale-ih/oo
contain further information about cookies that are used for analytics and advertising and the individual providers that serve them. You can also register your objection to OBA from some or all of the companies mentioned on these websites.
(a) Data collected by other providers of web advertising based on behavioural targeting
Technologies from other providers may be used to collect usage data associated with advertising served in various combinations on websites in the portfolio. You may object to the placement of cookies and collection of data by third parties working on behalf of businessAD by clicking on the links in the section entitled “Specifically disabling the collection of usage data” (Spezifische Deaktivierung der Erhebung von Nutzungsdaten) on the page at http://www.businessad.de/datenschutz.
(b) Ad Viewability metrics with meetrics
3. Microsoft Bing Ads
We use Bing Ads to advertise on our site and third party websites to previous visitors of our site. Bing Ads is provided by Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052, USA. Phone: (+1) 425-882-8080 (“Microsoft”).
The advertisements are displayed on the basis of information that is stored in cookies which Microsoft places on your computer. The text files include information, on your visit of our website, in particular product views that is read-out in the course of subsequent visits of this or third party websites for specific product recommendations. The cookie includes a random alias. In case you visit our website within a certain period of time and view our products, Microsoft is able to recognize you by means of the alias. However, the information cannot be attributed to you personally. We or Microsoft will not merge this information with your personal data and will not disclose any of your personal data to any third party.
You can prevent being tracked by choosing the appropriate preference in the privacy options of your browser or disable cookies. For more information about Bing Ads security see https://secure.bingads.microsoft.com/. For more information about Microsoft privacy policies see https://privacy.microsoft.com/en-us/privacystatement or contact the data controller office Microsoft Ireland Operations, Ltd., Attn: Data Protection, Carmenhall Road, Sandyford, Dublin 18, Irland.
4. Google AdWords
We use Google Adwords to advertise on our site and third party websites to previous visitors of our site. Google Adwords is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
The advertisements are displayed on the basis of information that is stored in cookies which Google places on your computer. The text files include information, on your visit of our website, in particular product views that is read-out in the course of subsequent visits of this or third party websites for specific product recommendations. The cookie includes a random alias. In case you visit our website within a certain period of time and view our products, Google is able to recognize you by means of the alias. However, the information cannot be attributed to you personally. We or Google will not merge this information with your personal data and will not disclose any of your personal data to any third party.
You can prevent the storing and using of information in a cookie placed by Google by clicking on the following link http://www.google.de/ads/preferences and configuring your preferences there.
For more information about Google privacy policies see https://privacy.google.com/intl/en/ and https://www.google.com/policies/privacy/?hl=en.
You can prevent being tracked by choosing the appropriate preference in the privacy options of your browser or disable cookies or delete the cookie.
Alternatively you can deactivate cookies from third parties by opening the website of the network advertising initiative http://www.networkadvertising.org/choices/.
1. General tracking information
For statistical analyses we use web analytics services to collect information about the use of this site. The tools collect information such as
- Device and browser information (operating system information, Mobile device identifier, mobile operating system, etc.)
- IP address
- Page accessed, URL click stream (the chronological order of our internet sites you visited)
- Geographic location
- Time of visit
- Referring site, application, or service
We use the information we get from the providers only to determine the most useful information you are looking for, and to improve and optimise this website. We do not combine the information collected through the use of the tools with personal data.
Depending on the provider the information generated about your use of the website may be transferred to and processed in third countries, e.g. the United States. For further information about the potential risks of a cross border data transfer please refer to section XII. The tools collect only the IP address assigned to you on the date you visit this site, rather than your name or any other identifying information. The provider will use this information in order to evaluate your use of the website, to compile reports on website activities and to provide other services relating to website and internet use to us.
The legal basis for this processing is Art. 6 sec. 1 sent. 1 lit. f GDPR and represents our legitimate interest to analyse our website’s traffic to improve the user’s experience and to optimise the website in general.
2. Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). On our behalf Google will use the information generated by a cookie for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet activity in connection with the use of the website.
We have activated the IP-anonymisation within the Google Analytics service, and your IP address will be truncated within the area of member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases the whole IP address will be first transferred to a Google server in the USA and truncated there. The IP-address your browser conveys within the scope of Google Analytics will not be associated with any other data held by Google.
We use Webtrekk, a web analytics service provided by Webtrekk GmbH, Robert-Koch-Platz 4, D-10115 Berlin (“Webtrekk”). We use Webtrekk services to collect and use statistical data on the use of our website to optimise our offering. In addition to cookies, Webtrekk also uses pixels (small gif files incorporated into the website).
Webtrekk places the following types of cookies on your computer:
- last click (used for session timeout; lasts one session)
- “session cookie” (used for session identification; lasts one session)
The following information is collected through the use of pixels:
- request (file name of the requested file)
- browser type/version (e.g. Internet Explorer 9.0)
- browser language (e.g. German)
- the operating system used (e.g. Windows 7)
- Java on/off
- cookies on/off
- the referrer URL
- IP address (will be anonymised immediately and deleted after processing)
- the time you access the site
- product parameters (e.g. the ID of the product/subscription authorising you to access the site)
This allows us to organise content into categories like “most read”, thereby making the website more comfortable to use. Moreover, the statistical information obtained about browser types and operating systems allows us to optimise our web design.
Webtrekk stores IP addresses only anonymously (in shortened form) and uses them only for session identification and geo-localisation. After that, IP addresses are immediately deleted. The information collected through Webtrekk will not be used to identify you personally unless you have specifically given us your consent.
You may object at any time to the collection of the data referred to above, and opt out of any future processing of such data by Webtrekk, by placing the opt-out cookie available at the following link on your computer:
You will then continue to be excluded from web tracking until the cookie is deleted. The cookie is set for the named domain, per browser and computer. Therefore, if you visit our website, for instance, from home and from work or using different browsers, you have to place the cookie for each computer and browser separately.
For more information about privacy policies and Webtrekk, please refer to the Webtrekk website: https://www.webtrekk.com/en/why-webtrekk/data-protection/
In particular, the following information will be stored:
- the total number and percentage of users who opened a website variation
- the number of clicks on links
- your browser type and version
- campaign IDs through which the website was reached.
You can disable Optimizely tracking (and thus prevent the data generated by cookies and pixel, and relating to your use of the website, from being collected to and processed by Optimizely) at any time by following the instructions at http://www.optimizely.com/opt_out
For more information about privacy policies and Optimizely, please refer to the Optimizely website: https://www.optimizely.com/privacy/
In particular, the following information will be stored:
- Anonymized IP address
- pages viewed or visited, including the movement pattern of such visits
- amount and position of clicks on links
- browser type and version
- screen size of the device used
Hotjar does not store any personal data or track movement on profile pages containing personal data. According to the information provided by Hotjar IP addresses are stored in an anonymized format only. For more information about privacy policies of Hotjar, please refer to the website https://www.hotjar.com/privacy.
You may object at any time to the collection of the data referred to above, and opt out of any future processing of such data by Hotjar, by using the “Do Not Track” functionality of your browser. For information on how to activate this please refer to: https://www.hotjar.com/opt-out
6. Analytics, INFOnline
Our website uses the “Skalierbare Zentrale Messverfahren” (Scalable Central Measurement; SZMnG) product from INFOnline GmbH, Forum Bonn Nord - Brühler Straße 9, 53119 Bonn (“INFOnline”, https://www.infonline.de) to gather statistical information on the use of our offering. Anonymous information is gathered in this process.
The objective of our use of analytics is to apply a standardised procedure in order to determine how intensively our website is used and by how many users and in order to calculate usage patterns, thereby obtaining data that allows market-wide comparisons to be made. In the case of content provided by members of the German Audit Bureau of Circulation IVW (Informationsgemeinschaft zur Feststellung der Verbreitung von Werbeträgern e.V. – http://www.ivw.eu) or participants in the studies carried out by the Working Group for Online Media Research AGOF (Arbeitsgemeinschaft Online-Forschung e.V. - http://www.agof.de), usage statistics are regularly analysed by the AGOF and the Working Group for Media Analysis agma (Arbeitsgemeinschaft Media-Analyse e.V. - http://www.agma-mmc.de) to publish information about unique users along the page impressions and visits information calculated by the IVW. This analytic information and statistics can be viewed on the organisations’ respective websites.
(a) Lawful basis for processing
The processing of data using the SZMnG product by INFOnline GmbH is based on legitimate interest pursuant to Article 6 (1) (f) GDPR.
The purpose for which personal data is processed is to prepare statistics and categorize users. These statistics are used to allow us to monitor and document the usage of our content. The user categories form the basis of our targeting of advertising media or measures according to specific interests. Usage analysis permitting comparison with other providers in the market is a vital element in our marketing of the website. Our legitimate interest is based on the economic value of findings produced by the statistics and user categories, and on the market value of our website, including in direct comparison with third-party websites, which can be calculated on the basis of the statistics.
Moreover, we have a legitimate interest in providing pseudonymous data to INFOnline, the AGOF and the IVW for the purposes of market research (AGOF, agma) and for statistical purposes (INFOnline, IVW). We also have a legitimate interest in providing INFOnline with pseudonymous data for the purpose of developing and serving interest-based advertising.
(b) Types of data
INFOnline GmbH collects the following personal data as defined by the EU GDPR:
- IP address: Each device connected to the Internet must have a unique address to which data can be transferred – its IP address. IP addresses must be stored, at least on a short-term basis, in order for the Internet to function correctly. Before processing, the final byte of the IP address is removed and the data is processed in an anonymous format. The unabbreviated IP addresses are not stored or processed further.
- Random-generated client ID: In order to recognize returning computer systems, the analytics processing either users a cookie called “ioam.de”, a local storage object or signature comprising various elements of information about the web browser that are automatically transferred. This code can be used to uniquely identify a browser as long as the cookie or local storage object is not deleted. Therefore, analysis of the data and subsequent allocation to the corresponding client identifier is also possible if you access other websites that also use the SZMnG product from INFOnline GmbH.
The cookie is set to expire after a period of no more than one year.
(c) Usage of the data
The INFOnline GmbH analytics process used on this website calculates usage data. This is done for the purpose of calculating page impressions, number of visits and clients and further composite indicators (e.g. qualified clients). The statistical data is also used as follows:
- Geolocation, or the assignment of a specific website access to the location from which it was accessed, is done exclusively on the basis of the anonymised IP addresses and only to the level of Federal State or region. The geographical information acquired in this way cannot in any circumstances be used to determine a user’s actual physical location.
- The usage data of a client system (e.g. a web browser installed on a device) is collected across all websites and stored in a database. This information is used by an algorithm to estimate sociodemographic information (age and gender) and transferred to the service providers of the AGOF for further analysis. As part of the AGOF study, a random sample of information is used to automatically estimate sociodemographic data in the following categories: age, gender, nationality, occupation, marital status, general household information, household income, place of residence, Internet usage, online interests, place of use, user type.
(d) Retention period
INFOnline GmbH does not store the full IP address. Abbreviated IP addresses are stored for no longer than 60 days. Usage data associated with the unique identifier is stored for no longer than 6 months.
(e) Transfer of data
IP addresses and abbreviated IP addresses are not shared. Data with client identifiers is passed to the following service providers of the AGOF for the purpose of the AGOF study:
- Kantar Deutschland GmbH (https://www.tns-infratest.com/)
- Ankordata GmbH & Co. KG (http://www.ankordata.de/homepage/)
- Interrogare GmbH (https://www.interrogare.de/)
(f) Right to object
If you do not wish to participate in the analysis, you may object here:
In order to exclude users from the analytics process it is necessary to place a cookie on their device. If you delete the cookies in your web browser, you will need to revisit the above link in order to repeat the opt-out procedure.
Further information on data protection in relation to the analytics process can be found on the website of the analytics service provider INFOnline GmbH (https://www.infonline.de), the AGOF data protection page (http://www.agof.de/datenschutz-allgemein/?lang=en) and the IVW data protection page (http://www.ivw.eu/englische-version).
X. Third party content and social media plug-ins
1. Social media plug-ins
We use the following social media plug-ins: AddThis, Facebook, Google+, Xing, LinkedIn, Twitter. This allows you to communicate with such services and like or comment from our website. Social media plug-ins enable a direct communication between your device and the servers of the social media provider, allowing the social media provider to communicate with you and collect information about you browsing our website. This processing is based on Article 6 sec. 1 sent. 1 lit. f GDPR and represents our legitimate interest to improve your website experience and to optimise our services.
Transfer of personal data takes places whether you have an account with the provider or not.
Please note that we neither have the control of the extent of personal data that is collected by the respective plug-in provider nor do we know the processing’s purpose or the period your personal data will be retained.
(a) AddThis service
Our website uses the “AddThis” service operated by AddThis LLC, Inc. 8000 Westpark Drive, Suite 625, McLean, VA 2210, USA (“AddThis”).
When you access a web page on our website on which the AddThis service is enabled, your browser establishes a direct connection to the servers operated by AddThis. AddThis receives notification that your browser has accessed the corresponding website and stores a cookie on your device for the purpose of identifying your browser. It also serves social media buttons for GooglePlus (cf. 2.1), Facebook (cf. 3.1), XING (cf. 4.1), LinkedIn (cf. 5.1) and Twitter (cf. 6), for which AddThis tracks usage. The data collected by this service is transferred to AddThis in the USA, where it is processed.
We have no influence on how AddThis processes this data. Further information on the data that is collected and how it is processed can be obtained from AddThis LLC at www.addthis.com/privacy
If you object to future data processing by AddThis you can select to place an opt-out cookie that can be downloaded from the following link: http://www.addthis.com/privacy/opt-out
(b) Google’s +1-button
We use the “+1”-button of the social network Google Plus provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”). The button is market using the sign “+1” on a white or colored background.
If a user visits one of the websites using such a button, the user’s browser directly connects to Google’s servers. The “+1”-button and its content are loaded directly from Google’s servers and included in the website by the user’s browser. According to Google’s statements, personal data is only collected, if a user that is a Google Plus member and logged in on the network at the time of clicking on the “+1”-button.
The reason for and scope of the data acquisition and information about the way in which the data is processed and used by Google, as well as the user’s rights in this respect and settings options for protecting the users privacy can be found in Google’s privacy statement relating to the “+1”-button:
(c) Facebook Social Plugins
We use so-called social plugins („plugins“) of the social networking site facebook.com provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). The plugins can be identified by one of Facebook’s logos (white “f” on blue tile or a “thumps-up”-sign) or by the additional text “Facebook Social Plugin”. The list of Facebook Social Plugins and their appearance can be accessed via: http://developers.facebook.com/plugins.
If a user visits one of the websites using such a plugin, the user’s browser directly connects to Facebook’s servers. The plugin and its content are made available directly on Facebook’s servers and included in the website by the user’s browser.
Due to the integration of the plugin Facebook collects the information that a user is visiting the corresponding website. If the user is logged in on Facebook at the moment he or she visits the website, Facebook may be able to connect the visit on the website to the user’s Facebook account. If the user interacts with the plugin – for example if he or she presses the like button or comments on something – the user’s browser transmits this information to Facebook. Facebook stores this information. If a user is not a member of Facebook, Facebook may collect and store the user’s IP-address. Facebook states that it only collects anonymized IP-addresses in Germany.
The reason for and scope of the data acquisition and information about the way in which the data is processed and used by Facebook, as well as the user’s rights in this respect and settings options for protecting the users privacy can be found under: http://www.facebook.com/policy.php.
If the user is a member of Facebook and does not wish Facebook to collect personal data via this homepage and to link this with his data stored on Facebook, the user needs to log off from Facebook before going to this homepage.
The user may also block Facebook’s plugins using add-ons for the user’s browser, for example the „Facebook Blocker“.
Our website uses the “Share” button provided by the social network XING, operated by XING AG, Dammtorstraße 29-32, 20354 Hamburg (“XING”). Clicking on the “Share” button allows you to share content on our website with your contacts on XING.
When you access a web page on our website on which the XING button is enabled, your browser does not immediately establish a direct connection to the servers operated by XING. The content of the “Share” button and additional information on the website being visited are only transferred to XING when you actively press the “Share” button. We have no influence over the scope of data that XING collects via the button.
Further information about data protection and the XING “Share” button can be found here: https://dev.xing.com/plugins/share_button/docs
Our website uses the “Share” button of the social network LinkedIn, operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (“LinkedIn”). When you visit our website, the “Share” button creates a direct connection between your web browser and the LinkedIn server. This provides LinkedIn with the information that you have visited our website from your IP address. If you click on the “Share” button while you a logged in to your LinkedIn account, you are able to share the content on our website on your LinkedIn profile. This allows LinkedIn to assign your visit to our website with your user account.
We use the twitter-button. The button is provided by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. (“Twitter”) The buttons are marked using the text “Twitter” or “Follow” and a stylized blue bird. The button enables the user to share an article or a website of this homepage on Twitter or to follow the provider on Twitter.
If a user visits one of the websites using such a button, the user’s browser directly connects to Twitter’s servers. The Twitter-button and its content are loaded directly from Twitter’s servers and included in the website by the user’s browser. According to the provider’s knowledge, Twitter collects the user IP-address and the website’s URL when the button is loaded from Twitter’s servers.
However, this data is only be used for loading and displaying the Twitter-button.
Further information can be found in Twitter’s privacy statement under:
2. External providers
We user the “VideoManager” service operated by MovingIMAGE24 GmbH, Stralauer Allee 7, 10245 Berlin (“Movingimage”) in order to ensure that video content can be viewed correctly on our website and played back by you. The lawful basis of this processing is in Article 6 (1) (1) (f) GDPR. This provides us with the legitimate interest to improve your user experience and to optimise our services.
This contains information on your rights and data protection options.
We use the “YouTube” service operated by Google LLC (“Google”), Amphitheatre Parkway, Mountain View, CA 94043, USA to ensure that video content can be viewed correctly on our website and played back by you. The lawful basis of this processing is in Article 6 (1) (1) (f) GDPR. This provides us with the legitimate interest to improve your user experience and to optimise our services.
This contains information on your rights and data protection options.
On our website we offer a feedback function operated by UserVoice Inc., 121 2nd St. Floor 4, San Francisco, CA 94105, USA. The information collected via this service is processed on servers located in the USA. UserVoice Inc. is registered with the “Privacy Shield” program of the US Department of Trade and complies with the data protection provisions of this program.
Further information on UserVoice’s self-certification and your rights under the Privacy Shield program can be found here: https://www.uservoice.com/privacy-shield/.
When you click on the UserVoice button, your browser connects directly to the UserVoice servers where the data you enter is stored. We receive notification of receipt of your contact from UserVoice and respond to this through the UserVoice IT infrastructure.
You will find details about UserVoice’s use of your personal data at http://uservoice.com/privacy.
You can decide for yourself the extent to which you share personal data with us via the Feedback function, if at all. We will only use personal data received as part of your feedback for the purpose of communicating with you and dealing with your concern.
3. Links to third party websites
XI. Information sharing
Your personal data will be disclosed to the following third parties for the purposes mentioned above:
- Springer Customer Service Center GmbH, Tiergartenstrasse 15-17, D-69121 Heidelberg
- Webtrekk GmbH, Robert-Koch-Platz 4, D-10115 Berlin.
Legal basis for the transfer of your personal data is Article 6 sec. 1 sent. 1 lit. b and f GDPR and represents our legitimate interest to improve your user experience and optimize the quality of our services.
Some of the recipients mentioned above reside outside the EEA. For further information about cross border transfer in general and transfers outside of the EEA see 5.
We may disclose anonymous aggregate statistics about users of the website in order to describe our services to prospective partners, advertisers and other reputable third parties and for other lawful purposes, but these statistics will include no personal data.
We may disclose your personal data to following contractors who assist us in providing the services we offer through the website:
- Mapp Digital Germany GmbH, Nymphenburger Höfe NY2, 80335 München, provider for sending out newsletters;
- 2bMore B.V., Floridalaan 6, NL-3404 WV IJsselstein
- Springer Customer Service Center GmbH, Tiergartenstrasse 15-17, 69121 Heidelberg, Germany (for Europe, Middle East, Africa, Asia, Oceania) or Springer Customer Service Center LLC, 233 Spring St, New York, NY, 10013 United States (for North America, Central America, South America) provider of the online shop for processing orders.
In the event that we undergo re-organisation or are sold to a third party, any personal data we hold about you may be transferred to that re-organised entity or third party in compliance with applicable law.
We may disclose your personal data if legally entitled or required to do so (for example if required by law or by a court order).
XII. Cross border data transfers
Within the scope of our information sharing activities set out above, your personal data may be transferred to other countries (including countries outside the EEA) which may have different data protection standards from your country of residence. Please note that data processed in a foreign country may be subject to foreign laws and accessible to foreign governments, courts, law enforcement, and regulatory agencies. However, we will endeavour to take reasonable measures to maintain an adequate level of data protection when sharing your personal data with such countries.
In the case of a transfer outside of the EEA, this transfer is safeguarded by international agreements such as the Privacy Shield and EU Model Clauses. You can find further information about the aforementioned safeguards by contacting the Group Data Protection Officer via firstname.lastname@example.org.
We have reasonable state of the art security measures in place to protect against the loss, misuse and alteration of personal data under our control. For example, our security and privacy policies are periodically reviewed and enhanced as necessary and only authorised personnel have access to personal data. Whilst we cannot ensure or guarantee that loss, misuse or alteration of information will never occur, we use all reasonable efforts to prevent it.
You should bear in mind that submission of information over the internet is never entirely secure. We cannot guarantee the security of information you submit via our website whilst it is in transit over the internet and any such submission is at your own risk.
XIV. Data retention
We strive to keep our processing activities with respect to your personal data as limited as possible. In the absence of specific retention periods set out in this policy, your personal data will be retained only for as long as we need it to fulfil the purpose for which we have collected it and, if applicable, as long as required by statutory retention requirements.
XV. Your rights
Under the legislation applicable to you, you may be entitled to exercise some or all of the following rights:
- require (i) information as to whether your personal data is retained and (ii) access to and/or duplicates of your personal data retained, including the purposes of the processing, the categories of personal data concerned, and the data recipients as well as potential retention periods;
- request rectification, removal or restriction of your personal data, e.g. because (i) it is incomplete or inaccurate, (ii) it is no longer needed for the purposes for which it was collected, or (iii) the consent on which the processing was based has been withdrawn;
- refuse to provide and – without impact to data processing activities that have taken place before such withdrawal – withdraw your consent to processing of your personal data at any time;
- object, on grounds relating to your particular situation, that your personal data shall be subject to a processing. In this case, please provide us with information about your particular situation. After the assessment of the facts presented by you we will either stop processing your personal data or present you our compelling legitimate grounds for an ongoing processing;
- take legal actions in relation to any potential breach of your rights regarding the processing of your personal data, as well as to lodge complaints before the competent data protection regulators;
- require (i) to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and (ii) to transmit those data to another controller without hindrance from our side; where technically feasible you shall have the right to have the personal data transmitted directly from us to another controller; and/or
- not to be subject to any automated decision making, including profiling (automatic decisions based on data processing by automatic means, for the purpose of assessing several personal aspects) which produce legal effects on you or affects you with similar significance.
You may (i) exercise the rights referred to above or (ii) pose any questions or (iii) make any complaints regarding our data processing by contacting us using the contact details set out below.
XVI. Contacting us
The information you provide when contacting us (Springer Customer Service Center GmbH, Tiergartenstrasse 15-17, 69121 Heidelberg, email: email@example.com) will be processed to handle your request and will be erased when your request is completed. Alternatively, we will restrict the processing of the respective information in accordance with statutory retention requirements.
XVII. Amendments to this policy
This policy was last updated on May 17th 2018.