1. Data protection
We, Weischer.Media and all our subsidiary companies in Germany and Switzerland want you to feel at ease when
visiting our website. Protecting your personal data is an important matter for us and therefore in the
following we wish to inform you of how we handle your data in compliance with Article 13 of the General Data
Protection Regulation (GDPR).
Responsibility for the data collection and processing described in the following lies with the person whose
details are stated in the Imprint.
Storage of IP addresses
We store the IP address transferred by your web browser only where strictly necessary and for a period of
seven days, for the purpose of detecting, limiting and eliminating attacks on our web pages. After this
period, we delete or anonymise the IP address. The legal basis for this is Article 6(1)(f) GDPR.
It is, in principle, possible to visit our website without disclosing any personal data. For statistical
purposes, temporary usage data is stored as a log in order to improve the quality of our web pages. This
data set consists of:
- the page from which the file was requested,
- the name of the file,
- the date and time of the query,
- the amount of data transferred,
- the access status (file transfer, file not found),
- the description of the type of web browser used,
- the IP address of the requesting computer, which is shortened so that a personal identification can no
longer be established.
Such log data is only saved anonymously
2. Data security
Weischer.Media collects, processes, stores and protects the data of people who access our website. We take
technical and organisational measures to protect your data from unwanted access as comprehensively as
possible. We use an encryption method on our website. Your information is transferred over the Internet from
your computer to our server and vice versa using TLS 1.2. You will recognise this by the fact that the lock
symbol on the status bar of your browser is locked and the address bar starts with https://.
3. Data transfer
Data transfer to third parties
We transfer your data to service providers for contract processing, in accordance with Article 28 GDPR, that
assist us in managing our web pages (e.g. hosting and web analysis) and associated processes. Our service
providers are strictly subject to our instructions and are bound by agreement accordingly.
Website hosting: Ubuntu Linux 14.04 LTS
Digital newsletter and sending of invitations: Episerver / Optivo and Mailjet
Analysis: Google Analytics (see third countries)
In addition, our subsidiary companies: WerbeWeischer GmbH & Co. KG, Jost von Brandis Service-Agentur
GmbH, WerbeWeischer Schweiz GmbH (see third countries); Weischer Online GmbH, elbbergMedia GmbH & Co.
KG, Weischer.Solutions GmbH, Weischer.Regio GmbH & Co. KG and Nqyer Media GmbH can access your data.
Data transfer to third countries
We transfer some of your personal data to third countries outside the EU. In doing so, we have ensured that
there is an appropriate level of data security:
In the case of Google Analytics (USA) and MailChimp (USA), an adequate level of data protection is provided
through corresponding participation in the Privacy Shield agreement (Article 45(1) GDPR).
To design our website according to the user’s needs, we create pseudonym usage profiles using Google
and read out by us. This way, we are able to recognise returning visitors and manage them as such. Data is
processed on the basis of Article 6(1)(f) GDPR and Article 15(3) of the German Telemedia Act (TMG) and in
the interest of finding out how often our web pages were called up by different users.
The information generated by the cookie about the use of this website is usually transferred to a Google
server in the USA where it is stored. As we have activated IP anonymisation on this website, your IP address
is however first shortened by Google within the European Union member states. Only in exceptional cases is
the full IP address transferred to a Google server in the USA where it is then shortened (an adequate level
of data protection is in place according to Article 45(1) GDPR through Google’s participation in the
Privacy Shield). We have also concluded an agreement with Google Inc. (USA) for contract processing in
accordance with Article 28 GDPR. Google may therefore only use all information strictly for the purpose
intended, in order to evaluate the usage of our website for our company and to compile reports on the
You can object to the processing of your data at any time with effect for the future. Please use one of the
following options for this purpose:
You can prevent the storage of cookies by making the corresponding settings in your browser software; we
would like to point out, however, that in this case you will not be able to use the full extent of the
functionality on this website.
You can also prevent Google from collecting the data generated by the cookie and in relation to your use of
the website (incl. your IP address) and also prevent Google from processing this data, by downloading and
installing the browser plugin available under the following link (http://tools.google.com/dlpage/gaoptout?hl=en).
6. Collection, processing, storage and use of personal data
We process the personal data of our customers insofar and as long as this is required for the implementation
of pre-contractual measures or for the performance of an agreement pursuant to Article 6(1)(1)(b) GDPR, or
insofar as this is in our legitimate interest as per Article 6(1)(1)(f) GDPR. A legitimate interest includes
information about events or news from Weischer.Media and its subsidiaries.
Data will only be processed for its intended purpose within the area of application of the GDPR and in
Switzerland and will not be passed on to third parties, unless appropriate data protection agreements are in
place with those cooperation partners. Data will only be deleted if the purpose no longer exists and if this
does not conflict with statutory retention requirements. The rights of the individual concerned remain
6.1. Personal data
Personal data is information about factual or personal circumstances relating to an identified or
identifiable natural person. This includes your name and e-mail address, for example.
6.2. Purpose of processing
We process your personal data for
- voluntary communication with you when you contact us.
- the fulfilment of the contract.
- marketing and promotional purposes.
6.3. Categories of personal data that we process for the purposes specified under point 7
- Your usage data
- Your payment data
- Your voluntary mobile data.
6.4 Erasure and blocking of personal data
Weischer.Media processes and stores personal data for the persons concerned solely for the period for which
it is required to achieve the storage purpose, or if this is stipulated by legal regulations to which the
controller is subjected. If there is no storage purpose or if a legal storage deadline expires, the personal
data is routinely blocked or erased and in accordance with the legal provisions.
7. Legal basis of data processing
No data shall be processed without a legal basis. Such as:
- Conclusion of a contract
- Legal obligations
- The pursuing of a legitimate interest of Weischer.Media and the affiliated subsidiaries in Germany and
8. Rights of the persons concerned
Unless limited by the applicable laws, the individual has the following rights :
8.1 Right to access (Article 15 GDPR):
You have the right to obtain confirmation as to whether or not personal data concerning you is being
processed, and, where that is the case, you have the right to obtain disclosure of the information set out
in Article 15 GDPR relating to such personal data.
8.2. Right to rectification and erasure (articles 16 and 17 GDPR):
You have the right to request, without delay, the rectification of inaccurate personal data and, where
necessary, the right to have incomplete personal data completed.
In addition, you have the right to request the erasure of personal data without undue delay, where one of the
grounds set out in Article 17 GDPR applies, e.g. when the data is no longer required for the designated
purpose. This may take up to four weeks to process.
8.3. Right to restriction of processing (Article 18 GDPR):
You have the right to request restriction of processing where one of the circumstances set out in Article 18
GDPR applies, e.g. if you have contested such processing, for a period enabling verification to be carried
8.4. Right to data portability (Article 20 GDPR):
In certain cases, as detailed in Article 20 GDPR, you have the right to receive the personal data concerning
you, in a structured, commonly used and machine-readable format and/or the right to transmit such data to a
8.5. Right to object (Article 21 GDPR):
If data is collected on the basis of Article 6(1)(f) (data processing for the purposes of pursuing legitimate
interests), you have the right to object, on grounds relating to your particular situation, at any time, to
the processing of such data. We will then no longer process such personal data unless there are evidently
compelling legitimate grounds for such processing that outweigh the interests, rights and freedoms of the
data subject, or the processing is for the purpose of enforcing, pursuing or defending legal claims.
8.6. Right to lodge a complaint with a supervisory authority
Under Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority, if you consider
that the processing of personal data relating to you violates data protection regulations. This right to
lodge a complaint may be exercised with a supervisory authority in the member state of your habitual
residence, place of work or place of the alleged violation.
9. Additional content on the Privacy Statement
Social Media Plugins
For reasons of data protection, we do not integrate any social plugins directly into our website. When you
call up our pages, no data is therefore transferred to social media services such as Facebook, Twitter, XING
and Google+. Profiling by third parties is therefore excluded.
Nevertheless, you have the option to click on the Facebook, Twitter, XING and Google+ buttons to share
selected pages and also to view how many times the pages you call up have been shared in the past. To do
this, we use Shariff
solution, which was developed by c’t magazine in order to offer a data
protection-compliant alternative to the traditional social plugins.
What lies behind this technology? With the Shariff solution, all the data and functions that are required to
display Facebook, Twitter, XING and Google+ buttons are provided by our web server. When you choose to share
a page by clicking on the corresponding button, only then is the data transferred to the operator of the
respective social media service.
Newsletters + event invitations
As part of the contractual agreement, we offer the receipt of newsletters and event invitations etc. In order
to send these digital communications, we apply the double opt-in procedure, i.e. we will only send you a
newsletter or invitation by e-mail after you have expressly confirmed that we can activate these services
for you. This is processed on the basis of Article 6(1)(a) GDPR.
You can revoke your consent at any time without this affecting the lawfulness of any former processing. If
your consent is revoked, we adjust data processing accordingly.
If you wish to revoke your consent, you can do this here: Revoke data usage
10. Contact details of our Data Protection Officer (DPO)
Our company Data Protection Officer is at your disposal for information or suggestions concerning data
Dr Uwe Schläger
datenschutz nord GmbH
Telephone: +49 421 6966320
Version 1.0 from 12 Dezember 2018 (expressly subject to change and modification)