Privacy
Privacy Policy Information
With these data protection notices, we inform you about how we handle your personal data. Regarding the terminology used, such as »processing« or »controller«, we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR). Our websites are not directed at children and adolescents under 16 years of age.
Who is responsible for processing your data?
The data controller responsible for processing on this website is:
Backhaus Finanzverlag GmbH
Zum Flugplatz 44
27356 Rotenburg (Wümme)
Germany
Phone: +49 (0) 42 68 9 53 04 -91
E-Mail: verwaltung@backhausverlag.de
How we use your data?
Below you will find information about when and which data is collected, how it is used (type, scope and purpose of processing personal data), as well as the legal basis and storage duration.
Web server operation, Website content delivery
When you visit our websites, we automatically process the following data to provide our websites and related services:
- Date and time of your access
- Your IP address
- The URL of the website that referred you to us
- The pages you visit on our site
- Information about your internet browser (type and version)
- The operating system of the device you use to access our websites and services
- Internet service provider
We store this information in log files for security reasons, and it is automatically deleted after 7 days. The data contained in the log files is stored separately from any other personal data we may hold about you.
Data will only be retained longer in justified individual cases (e.g., in cases of suspected misuse, fraud, or attacks on our web server). In such cases, the relevant log files will be stored until the matter has been clarified and any resulting measures have been completed.
To provide our websites and related services, we use a service provider (web hosting company) that processes your data on our behalf and strictly according to our instructions.
Kaufmann Digital GmbH
Steinstr. 13
32369 Rahden
Germany
The legal basis for processing your data is Article Art. 6 / 1 lit. f of the GDPR. We have a legitimate interest in processing your data to provide you with our websites and related services in a technically flawless, secure manner optimized for your needs. Furthermore, we have an additional legitimate interest in detecting and preventing fraud attempts or attacks on our websites.
Storage and retrieval of data on your end device
To provide the functionalities you request, including website delivery, we store and retrieve data in your browser in compliance with Section 25 of the German Telecommunications and Telemedia Data Protection Act (TDDDG). For this purpose, we use cookies as well as the browser's session storage and local storage.
The legal basis for storing data in and retrieving data from your browser is either your consent (Section 25(1) TDDDG) or the technical necessity to provide a service requested by website visitors (Section 25(2) No. 2 TDDDG).
Where personal data is involved, the legal basis for its processing is specified in the privacy notice of the respective service.
Audience and performance measurement using Matomo Analytics
We use the open-source web analytics platform Matomo to collect and analyze information about the use of our website. Matomo is installed on our own servers and operated entirely under our control. This means that all data collected remains on our infrastructure and is not shared with any third party.
Purpose of Processing
The purpose of using Matomo is to better understand how visitors interact with our website, so that we can improve its structure, content, and user experience.
Data Collected
When you visit our website, Matomo may record the following information:
The pages you view and the time you spend on them
The website from which you arrived (referrer)
Your browser type and version, as well as your operating system
Your screen resolution
Your IP address (which can be anonymized)
We do not use the data collected to identify individual users, and we do not combine it with other datasets.
IP Address Anonymization
Your IP address is anonymized before it is stored, so that it can no longer be used to identify you.
Cookies
Matomo may use cookies to store certain settings and to recognize returning visitors. You can prevent the storage of cookies by adjusting your browser settings accordingly. This may, however, limit some functionalities of our website.
Legal Basis for Processing
The processing of data through Matomo is based on our legitimate interest in analyzing the use of our website and optimizing it accordingly (Article 6(1)(f) GDPR).
Data Retention
We retain the collected data only for as long as necessary for the purposes described above. After this period, the data is automatically deleted or anonymized.
Integration of external videos
YouTube Video
Our website embeds videos from YouTube, a component of the video platform operated by YouTube, LLC, where users can upload, share, and view content with detailed statistics. YouTube's integration allows us to easily incorporate platform content into our website.
When you access pages with embedded YouTube videos, your browser connects to servers of YouTube, LLC (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), transmitting your IP address and potentially browser data (e.g., user agent). YouTube uses cookies and similar technologies to analyze user behavior, recognize returning visitors, and create user profiles. This data helps analyze viewed content and generate reports. If you're logged into a YouTube/Google account, watched videos may be associated with your profile.
The use of YouTube videos - and the consequent transfer of personal data to Google, including cookie/local storage operations - requires your explicit consent under Art. 6(1)(a) GDPR. By consenting, you also agree to Google's profile creation and potential linking to your account (if applicable).
Google Ireland belongs to the U.S.-based Alphabet conglomerate. We have no visibility into whether Google transfers GDPR-covered data to its U.S. parent company. Any such transfers would be solely managed by Google Ireland Limited. Note that IP address transfers to the U.S. are currently permitted under the EU-U.S. Data Privacy Framework (Art. 45(1) GDPR), to which Alphabet companies are self-certified.
We do not store any YouTube-related usage data. For information on Google's data retention practices, please consult Google/YouTube's policies directly.
Vimeo
Our website embeds content from the Vimeo platform (Vimeo LLC, 555 West 18th Street, New York 10011, USA). When you access these elements, certain data is transmitted to Vimeo.
This includes standard transmission data such as your IP address, browser type, and operating system. Vimeo also collects analytics about your interaction with the embedded content, including session duration, bounce rates, and clicked elements.
The legal basis for embedding Vimeo and processing your usage data is your consent under Art. 6(1)(a) GDPR.
We do not control Vimeo's data retention periods. For details on how Vimeo handles user data, please see their privacy policy at: https://vimeo.com/privacy/.
Integration of Social Media Widgets
When loading a page containing social media widgets, no connection is established with the respective platform operators. Only when you actively click on a widget will you be redirected to the platform. No data processing or storage occurs on our part – this is purely an external link.
For details about data protection on these social media platforms, please consult their respective privacy policies. We use widgets from the following platforms:
- X (formerly Twitter)
Automated decision-making
Unless otherwise stated for specific processing activities above, we do not use any form of automated decision-making.
Transfer of personal data to non-EU countries, Server location
Unless otherwise specified for individual processing activities, we do not transfer any personal data outside Europe via our website. The servers we use are located in Germany.
Please note that for some of the services we use, data transfers to the USA by the service providers cannot be ruled out. Relevant information can be found in the respective service descriptions.
Obligation to provide data
You are neither legally nor contractually obligated to provide us with personal data when using our website. However, our pages cannot be accessed without processing your IP address. Similarly, subscribing to our newsletter requires your email address. Certain personal data may be mandatory when concluding a contract.
Your rights
Every data subject has the following rights under the General Data Protection Regulation (GDPR):
Right of access (Article 15)
Right to rectification and completion of data (Article 16)
Right to erasure ("right to be forgotten", Article 17)
Right to restriction of processing (Article 18)
Right to data portability (Article 20)
The rights of access and erasure are subject to the limitations specified in Sections 34 and 35 of the German Federal Data Protection Act (BDSG). Furthermore, you have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR in conjunction with Section 19 BDSG).
We are also obligated to notify all recipients to whom we have disclosed your data about any rectification, erasure, or restriction of processing carried out under Articles 16, 17(1), or 18 GDPR. This obligation does not apply if such notification proves impossible or would involve disproportionate effort. Nevertheless, you have the right to request information about these recipients.
To exercise any of these rights, please contact us as the data controller using the contact details provided above, or through any of the other communication methods we offer.
Right to withdraw consent
Under Article 7 of the GDPR, you have the right to withdraw your given consent at any time without stating a reason. Please note that the withdrawal only applies to future processing and does not affect the lawfulness of past data processing.
Right to object
Right to Object Under Article 21 GDPR
You have the right to object, on grounds relating to your particular situation, to the processing of your personal data which is based on Article 6(1)(e) or (f) GDPR, including profiling based on those provisions.
Where we process your personal data for direct marketing purposes, you may object at any time to such processing, including profiling to the extent that it is related to such direct marketing.
Right to lodge a complaint
Right to Lodge a Complaint (Article 77 GDPR)
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority. This right particularly applies in the EU member state of:
- Your habitual residence,
- Your place of work, or
- The place of the alleged infringement,
- if you believe that the processing of your personal data violates the GDPR.
Right to modify
We reserve the right to modify our security and data protection measures at any time. Please refer to the current version of these data protection notices.