Thank you for visiting our website. Protecting your privacy is very important to us. You will find information below about how we process your personal data on our website. You can visit our website and look through what we have to offer, without providing any personal information.
1. General information
Data controller: Bookwire Gesellschaft zum Vertrieb digitaler Medien mbH, Voltastr. 1, 60486 Frankfurt am Main, tel. + 49 (0) 69-9072006-0, fax: + 49 (0) 69-9072006-97, email: firstname.lastname@example.org
Data Protection Officer: Richard Haupt, Bookwire Gesellschaft zum Vertrieb digitaler Medien mbH, Voltastr. 1, 60486 Frankfurt am Main, tel. + 49 (0) 69-9072006-0, fax: + 49 (0) 69-9072006-97, email: email@example.com
2. Visiting our website
You can visit our website without providing any personal information.
The data stored in the cookie will not be combined with other data and does not enable us to identify a specific person.
We use necessary and functional cookies to pursue legitimate interests to make the website user-friendly. In this context no usage profiles are created. The legal basis for processing is Art. 6(1)(f) GDPR.
We use necessary and functional cookies for the following purposes:
- to store whether or not you have given consent for cookies used to create usage profiles (this cookie is valid for 12 months if you have given consent, or 6 months if you have not given consent);
- to store whether or not you have turned off the contact information bar so that it will not be displayed again (this cookie is valid for 30 days);
- to store whether you want embedded third-party content to be displayed immediately; otherwise you must first activate such content to be displayed (this cookie is valid for 30 days).
For cookies used by Google Analytics and Matomo to create usage profiles, see 2.3. and 2.4 below.
2.2. Log files
We collect and store data anonymously for marketing and optimisation purposes, as well as to guarantee system security and to prevent misuse. This data includes, for example, your IP address, the internet browser used, the website from which you reached our site, the offers you have looked at on our website and the date and duration of your visit. A usage profile is created from this data, under a pseudonym. The data is not allocated to a specific person. Cookies can be used for this (see above). The usage profile is not associated with personal data. It is only used for statistical evaluations to optimise what we offer.
We use log files to safeguard legitimate interests, to analyse use of our website and to make the website user-friendly, as well as to guarantee system security and to be able to trace misuse. Data in log files is stored for a maximum of one week, together with full IP addresses that allow specific internet users to be identified. The legal basis for processing is Art. 6(1)(f) GDPR.
2.3. Google Analytics
Parts of our website use Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google”). Google Analytics uses permanent cookies to create usage profiles. Those cookies will be stored only if you have given your prior consent (see 2.1 above).
The information generated by the cookies about your use of this website is normally transferred to a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, where it is stored. We have activated IP anonymisation for this website so that Google will first abbreviate your IP address in the Member States of the European Union or in other EEA states („IP masking”). Only in exceptional cases is the full IP address transferred to a Google server in the USA and abbreviated there.
Google will use this information on our behalf to evaluate your use of the website, to compile reports about website activities and to provide the website operator with additional services associated with website and internet use. Google does not associate with other data the IP address sent by your browser as part of Google Analytics. You can prevent cookies from being stored by making the relevant setting in your browser software. However, we would like to point out that you might then not be able to use all of the functions of this website. You can also prevent data generated by the cookie that relates to your use of the website (incl. your IP address) from being sent to Google and from being processed by Google, by downloading and installing the browser plugin available at Google Analytics Opt-Out. You can also prevent being tracked by Google Analytics by clicking the following link: disable Google Analytics. This will create an opt-out cookie which will prevent your data from being recorded when you visit this website in future.
These cookies enable us to analyse and track how website users navigate. The cookies are stored with a randomly generated identifier and do not allow any direct identification of a person. The information obtained with the help of Matomo will not be combined with personal data about a visitor to the website. Matomo stores two cookies: A so-called session cookie is used to record your page views during a browser session. This cookie has a validity period of 30 minutes. The second cookie has a validity period of 13 months and is used to recognise a user who revisits our website. The IP address is anonymised immediately after processing and before it is stored. We use this information for statistical purposes only, to evaluate your use of the website and to create reports about the use of the website.
We run Matomo on our own web server. The information collected in a cookie is therefore processed exclusively on our web server in Germany and is not transmitted to other entities.
3. Processing of personal data that you make available to us
We process personal data when Bookwire sets up a customer account for you (business customers), when you send us a message, when you apply for a job, or when you redeem a code for downloading an eBook via our website.
3.1. Customer account (business customers)
If you set up a customer account for using the Bookwire OS-platform, your name and contact details will be collected. We process this data in order to communicate with you. The legal basis is Art. 6(1)(b) GDPR.
Unless the subject-matter of your message is a job application (for which see 3.3 below), the following applies: When you contact us by email or using the contact form, we process the data you provide, in order to deal with your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures).
3.3 Job applications
When you apply to us for a job in response to a job advertisement or on your own initiative, we process the data you provide us with in order to review your application and carry out the selection process. This includes in particular the following data: salutation, name, address, and data such as telephone numbers, fax number, email address; documents submitted with the application or subsequently on request, such as curriculum vitae and certificates; where applicable, payment data for the reimbursement of travel expenses.
The legal basis for the processing is the first sentence of Section 26(1) of the German Federal Data Protection Act (processing for the purposes of the employment relationship if this is necessary for hiring decisions).
3.4 Redeeming a code for downloading an eBook or audiobook
With your consent, we process the data that you have been asked to provide (email address, download code and, if applicable, choice of file format) and the time of redeeming the download code, as well as more voluntary information about you, if applicable.
We process the email address in order to send the email containing the personal download link. In doing so we pursue or legitimate interests, i.e. to preclude the use of another person’s email address. The legal basis is Art. 6(1)(f) GDPR.
We collect data for statistical purposes during the download (see 2 above). This data is recorded anonymously and does not relate to you.
3.5 E-mail newsletter
When you register for an email newsletter, you give us your consent to use your data for sending the respective newsletter. You may withdraw this consent at any time by unsubscribing. The legal basis of the processing is Art. 6(1)(a) GDPR (consent of the data subject).
3.6. Pursuit of legitimate interests
We process personal data in the context of the regulatory provisions for the pursuit of legitimate interests. This includes customer care and direct marketing as well as asserting or defending legal claims. The legal basis is Art. 6(1)(f) GDPR.
3.7. Retention period
We delete your data if it is no longer necessary once your enquiry has been dealt with or the contract has ended. This does not include data that we are not yet permitted to delete because of a statutory obligation (e.g. documents that must be kept pursuant to tax and commercial law), and data that we need in order to safeguard legitimate interests, in particular to assert claims or for direct marketing.
4. Processing of data by third parties
4.1. Service providers (processors)
In addition to Google Analytics (see 2.3), we also use the following service providers that are given access to personal data as part of their activity. These service providers work for in the form of data processing according to Art 28 GDPR and do not process personal data for their own purposes.
We use the CRM system from „Salesforce” for administration of address data. It is provided by salesforce.com, inc., One Market Street, San Francisco, CA 94105, USA. Since no adequate level of data protection has been established for the USA pursuant to Art. 45 GDPR, we use the standard contractual clauses as an appropriate safeguard pursuant to Art. 46 DSGVO. The standard contractual clauses form part of our data processing agreement with Salesforce. For more information on the protection of personal data of European data subjects, please see Salesforce’s Data Transfer Mechanism FAQs.
We use the system Mailchimp provided by The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA, for sending newsletters. Since no adequate level of data protection has been established for the USA pursuant to Art. 45 GDPR, we use the standard contractual clauses as an appropriate safeguard pursuant to Art. 46 DSGVO. The standard contractual clauses are part of our data processing agreement with The Rocket Science Group. For more information on the protection of personal data of European data subjects, please see Mailchimp and European data transfers.
We employ domainfactory GmbH, Oskar-Messter-Str. 33, 85737 Ismaning, Germany and Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp, Germany, as hosting providers.
4.2 Google „reCAPTCHA“.
Our website uses the „reCAPTCHA“ functionality provided Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“). The challenge to select the images depicting a certain kind of object serves to ensure that input is made by a human user in order to prevent the misuse of a feature (e.g. a contact form) through automated use. The IP address of the user and his or her selection are transmitted to Google. This may result in the transfer of personal data to the USA (see section 2.3 on Google Analytics).
We use „reCAPTCHA“ to pursue legitimate interests, i.e. to prevent spam and other misuse of the website. The legal basis for the processing is Art. 6(1)(f) GDPR.
4.3 YouTube player
We have embedded videos in our website which are stored in the YouTube service operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, and which users can access and play within our website.
We have embedded the videos in such a way that the active YouTube player is not yet loaded when a page is loaded. This is done only when you activate the player. This setting is stored in a cookie (see 2.1 above). When you play a video, a connection is established to a Google server. This discloses to Google your IP address and the fact that you have visited our website.
If you are logged in to Google, Google can also associate this information with your user account, as well as the playing of the video. You can prevent this by logging out of Google prior to this. For more information on data processing and privacy notices, please see Google Terms of Service.
Embedding the videos serves to pursue legitimate interests, i.e. to provide a user-friendly website. The legal basis for the processing is Art. 6(1)(f) GDPR.
4.4 Other social networks
4.5 Disclosure to third parties
Apart from the cases described in 2.3, 4.1, 4.2 and 4.3 above, we will only disclose your data to third parties without your consent in the following cases:
- If it is necessary for performing our contractual obligations, in particular disclosure to the bank employed for invoicing. The legal basis in this case is Art. 6(1)(b) GDPR.
- If it is necessary for pursuing legitimate interests. Our legitimate interests include, in particular, assertion of claims. The legal basis in this case is Art. 6(1)(f) GDPR.
- To comply with a statutory obligation, e.g. in respect of the tax authorities. The legal basis in this case is Art. 6(1)(c) GDPR.
5. Your rights
If the relevant statutory conditions exist, you have the following rights:
- You have the right to receive information about the personal data stored about you (Art. 15 GDPR).
- You have the right to request correction of incorrect data (Art. 16 GDPR).
- You have the right to request deletion (Art. 17) or restricted processing (Art. 18 GDPR) of data that is no longer required. If statutory retention obligations exist, e.g. for business correspondence pursuant to commercial and tax law, or if another statutory exemption exists, data will not be deleted, but its processing will be restricted.
- You have the right to data portability (Art. 20 GDPR), i.e. the right to request the data that you have made available to us, in a structured, common and machine-readable format, and to transmit this data to another data controller without obstruction by us. If applicable, you also have the right to request that we transmit data straight to another data controller, providing that this is technically feasible.
- You can object at any time to processing of your data for direct advertising. You can also object to other processing of your data for specific reasons (Art. 21 GDPR).
To exercise your rights, please contact the address given under point 1.
If you consider that the processing of your data breaches data protection laws, you can appeal to a regulatory body (Art. 77 GDPR). The regulatory body responsible for our area is: Der Hessische Datenschutzbeauftragte, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Tel.: + 49 (0) 611-1408 0, Fax: + 49 (0) 611-1408 611, email: firstname.lastname@example.org.
60486 Frankfurt am Main
T: +49 69 9072006-0
F: +49 69 9072006-97
Company location: Frankfurt am Main
Managing Directors: Jens Klingelhöfer, John Ruhrmann
VAT ID: DE270346499
Registration: HRB 92054 — Amtsgericht Frankfurt am Main