Privacy statement

Thank you for visiting our website. Protecting your privacy is very important to us. Below you will find information on how we process personal data on our website. You can visit our website and look through what we have to offer, without providing any personal information.

1. General information

Data controller: Bookwire GmbH, Voltastr. 1, 60486 Frankfurt am Main, tel. + 49 (0) 69-9072006-0, fax: + 49 (0) 69-9072006-97, email: info@bookwire.de

Data Protection Officer: Nicolas Bräuer, Bookwire GmbH, Voltastr. 1, 60486 Frankfurt am Main, tel. + 49 (0) 69-9072006-0, fax: + 49 (0) 69-9072006-97, email: info@bookwire.de

 

2. Visiting our website

You can visit our website without providing any personal information to us.

 

2.1. Cookies

We use cookies on our website. Cookies are short text files that are stored by the browser. Some cookies are valid until the end of the browser session and are then automatically deleted (session cookies), others are valid beyond that (persistent cookies). Cookies are used either to provide necessary functions of the website or functions of the website requested by the user (necessary and functional cookies) or to create usage profiles.

The data stored in the cookie will not be combined with other data and does not enable us to identify a specific person.

You prevent the use of cookies by adjusting the relevant setting in your browser, and you may delete cookies at any time. This may, however have the result that you cannot use all of the functions of our website.

We use necessary and functional cookies to pursue legitimate interests, i.e. to make the website user-friendly. In this context no usage profiles are created. The legal basis for processing is Article 6(1)(f) GDPR.

 

We use necessary and functional cookies for the following purposes:

  • to store whether or not you have given consent for cookies used to create usage profiles (this cookie is valid for 12 months if you have given consent, or 6 months if you have not given consent);
  • to store whether or not you have turned off the contact information bar so that it will not be displayed again (this cookie is valid for 30 days);
  • to store whether you want embedded third-party content to be displayed immediately; otherwise you must first activate such content to be displayed (this cookie is valid for 30 days).

For cookies used by Google Analytics and Matomo to create usage profiles, which we only use if you have given your consent, see 2.3. and 2.4 below.

 

2.2. Log files

We collect data relating to you as a visitor of our website. This data includes your IP address, the internet browser that you use, the website from which you came to our website, the information that you viewed on our website and the date and duration of your visit.

Log file data associated with complete IP addresses, which make it possible to identify internet users, will be stored for one week at most.

We use log files to pursue legitimate interests, i.e. to analyse use of our website and to make the website user-friendly as well as to guarantee system security and to be able to trace misuse. The legal basis for processing is Article 6(1)(f) GDPR.

 

2.3. Google Analytics

On the Bookwire OS platform use Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Analytics uses persistent cookies to create usage profiles.

Those cookies will be stored only if you have given your prior consent (see 2.1 above).

The information generated by the cookies about your use of Bookwire OS platform will in general be transferred to a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, where it is stored. We have activated IP so that Google will first truncate your IP address in the area of the member states of the European Union or in other member states of the European Economic Area (“IP masking”). Only in exceptional cases the full IP address will be transferred to a Google server in the USA and will be truncated there.

Google will use this information on our behalf to evaluate your use of the Bookwire OS platform, to compile reports about such use. Google will not associate the IP address that sent by your browser in the context of Google Analytics with other data that Google holds. You can prevent cookies from being stored by adjusting the relevant setting in your browser software (see 2.1 above). You can also prevent Google from processing your data by downloading and installing the browser plugin available at Google Analytics Opt-out Browser Add-on.

When personal data is transferred to Google LLC in the USA, personal data is transferred to a third country outside the scope of application of the GDPR. Since no adequate level of data protection has been established for the USA pursuant to Article 45 GDPR, we use the Standard Contractual Clauses as an appropriate safeguard pursuant to Article 46 DSGVO. The Standard Contractual Clauses are agreed between us and Google LLC as part of the data processor terms. The Standard Contractual Clauses are available at Standard Contractual Clauses. You can find more detailed information about conditions of use and privacy at Google Analytics Terms of Service or Privacy & Terms. At How Google uses cookies you can find out the lifetime of the cookies.

We use cookies for Google Analytics only with your prior consent. The legal basis of the processing is Article 6(1)(a) GDPR/Section 25(1) of the German Telecommunications and Online Services Data Protection Act (Telekommunikations-Telemedien-Datenschutz-Gesetz).

You may withdraw your consent at any time by accessing the cookie options again and changing your selection. If you delete all cookies, you will be asked for your consent again the next time you visit our website.

 

2.4 Matomo

This website uses Matomo (formerly: Piwik), an open source software for the statistical analysis of visits to our website. Matomo uses cookies to create usage profiles.

These cookies will be stored only if you have given your prior consent (see 2.1 above).

Matomo stores two cookies:

  • A so-called seesion cookie is used to collect your page visits during a browser session. This cookie has a lifetime of 30 minutes.
  • The second cookie has a lifetime of 13 months. It is use to recognise a user who revisits our website. The IP address will be anonymised immediately after processing and before it is stored.

The cookies are stored with a randomly generated identifier and do not allow any direct identification of a person. The information obtained with the help of Matomo will not be associated with personal data relating to visitors ofthe website. We use this information for statistical purposes only, i.e. to evaluate your use of the website and to create reports about the use of the website.

We run Matomo on our own web server. The information collected in a cookie is therefore processed exclusively on our web server in Germany and is not transmitted to other entities.

We use cookies for Matomo only with your prior consent. The legal basis of the processing is Article 6(1)(a) GDPR/Section 25(1) of the German Telecommunications and Online Services Data Protection Act (Telekommunikations-Telemedien-Datenschutz-Gesetz).

You may withdraw your consent at any time by accessing the cookie options again and changing your selection. If you delete all cookies, you will be asked for your consent again the next time you visit our website.

 

2.5 Google Tag Manager

This website uses the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

The Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store cookies, and does not carry out any independent analyses. It only manages and runs the tools integrated via it. However, the Google Tag Manager does collect your IP address, which may also be transferred to Google’s parent company in the United States.

The Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and administration of various tools on his website. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TDDDG. This consent can be revoked at any time.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/5780.

 

2.6 Google Ads

The website operator uses Google Ads. Google Ads is an online promotional program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to display ads in the Google search engine or on third-party websites, if the user enters certain search terms into Google (keyword targeting). It is also possible to place targeted ads based on the user data Google has in its possession (e.g., location data and interests; target group targeting). As the website operator, we can analyze these data quantitatively, for instance by analyzing which search terms resulted in the display of our ads and how many ads led to respective clicks.

The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your consent at any time.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: policies.google.com/privacy/frameworks and business.safety.google/controllerterms/.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: www.dataprivacyframework.gov/participant/5780.

 

2.7 Google Ads Remarketing

This website uses the functions of Google Ads Remarketing. The provider of these solutions is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

With Google Ads Remarketing, we can assign people who interact with our online offering to specific target groups in order to subsequently display interest-based advertising to them in the Google advertising network (remarketing or retargeting).

Moreover, it is possible to link the advertising target groups generated with Google Ads Remarketing to device encompassing functions of Google. This makes it possible to display interest-based customized advertising messages, depending on your prior usage and browsing patterns on a device (e.g., cell phone) in a manner tailored to you as well as on any of your devices (e.g., tablet or PC).

If you have a Google account, you have the option to object to personalized advertising under the following link: adssettings.google.com/anonymous.

The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your consent at any time.

For further information and the pertinent data protection regulations, please consult the Data Privacy Policies of Google at: policies.google.com/technologies/ads.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: www.dataprivacyframework.gov/participant/5780.

 

3. Processing of personal data that you provide to us

We process personal data when

  • we set up a customer account for you (business customers);
  • when you send us a message;
  • when you apply for a job;
  • when you redeem a code for downloading an e-book or audiobook on our website;
  • when you sign up for a newsletter;
  • when you attend an event.

 

3.1. Customer account (business customers)

When we set up a customer account for using the Bookwire OS platform, we collect your name and contact details. We process this data in order to communicate with you. The legal basis is Article 6(1)(b) GDPR (performance of a contract).

 

3.2. Contact

Unless the subject-matter of your message is a job application (for which see 3.3 below), the following applies:

When you contact us by email or using the contact form, we process the data you provide in order to deal with your enquiry. The legal basis is Article 6(1)(b) GDPR (pre-contractual measures – if your enquiry is related to the possible conclusion of a contract) or Article 6(1)(f) GDPR (pursuit of legitimate interests; our legitimate interest is customer communication).

 

3.3 Job applications

When you apply to us for a job in response to a job advertisement or on your own initiative, we process the data you provide to us with in order to review your application and carry out the selection process. This includes in particular the following data: salutation, name, contact details such as address, telephone number, fax number, email address; documents submitted with the application or subsequently on request, such as curriculum vitae and certificates; where applicable, payment data for the reimbursement of travel expenses.

The legal basis for the processing is the first sentence of Section 26(1) of the German Federal Data Protection Act (Bundesdatenschutzgesetz) (processing for the purposes of the employment relationship if this is necessary for hiring decisions).

 

3.4 Redeeming a code for downloading an e-Book or audiobook

With your consent, we process the data that you have been asked to provide (email address, download code and, if applicable, choice of file format) and the time of redeeming the download code, as well as further – voluntary – information about you, if applicable.

We process the email address in order to send the email containing the personal download link. The legal basis is Article 6(1)(a) GDPR (consent).

If you have redeemed the code, the legal basis for the processing is also Article 6(1)(b) GDPR (performance of the licence agreement that you conclude when redeeming the code).

If the licence agreement stipulates that a digital watermark is implemented in the e-book, we will use your email address for this purpose. Otherwise, we will not mark the e-book with personal data.

We collect data for statistical purposes during the download (see 2 above). This data is collected in an anonymous form and does not relate to you.

 

3.5 Redeeming a voucher for the download of an e-book or audiobook (author’s copies and reading copies)

On behalf of a client of ours which provides you with an author’s copy or a reading copy, we will process your email address. We process your email address in order to send the email that contains the personal download link and – in the case of an e-book – in order to mark that e-book with a digital watermark. On behalf of our client we will also collect the date and time when you redeem the download code.

The processor with regard to such processing is our client, which has concluded with us an agreement on the commissioned processing of personal data pursuant to Article 28 GDPR.

We collect data for statistical purposes during the download (see 2 above). This data is collected in an anonymous form and does not relate to you.

 

3.6. Email newsletters

When you sign up for an email newsletter, you give us your consent to use your data for sending the respective newsletter. You may withdraw this consent at any time by unsubscribing. The legal basis of the processing is Article 6(1)(a) GDPR (consent of the data subject).

 

3.7. Attending an event

3.7.1 General information

When you sign up for an event (physical, online or hybrid), we will process the data that you provide to us in order to enable you to attend such event. This data includes, depending on the nature of the event, your email address and, if applicable, further data such as your name and contact details.

The legal basis of the processing is Article 6(1)(b) GDPR (performance of a contract).

We hold online events on the platform Zoom. Which data is processed in this context depends on the nature of the event.

 

3.7.2 Online conferences

Attendees sign up themselves on https://www.zoom.com/ and will receive from us a link via email which enables them to attend the conference via Zoom.

The legal basis of the processing is Article 6(1)(b) GDPR (performance of a contract).

 

3.7.3 Webinars (“Bookwire Sparks”)

We invite corporate customers to our webinars. Such customers will notify us of their selected employees whom they designate as attendees of the relevant webinar.

We collect the surnames, first names and the employing corporate customers of the registered attendees as well as the date and title of the booked webinar.

We will use this data only for the following purposes:

  • login of the attendee on Zoom;
  • displaying their name in the chat section of the webinar;
  • answering on an individual basis any questions that an attendee may have after the webinar where it was not possible to answer them as part of the webinar.

The list of attendees and the chat are “private”, i.e. the attendees’ names as well as any messages in the chat will not be visible for other attendees. The speaker and the moderator will not pick up a message naming the attendee who sent that message. The recordings of all “Bookwire Sparks” events will be uploaded to Bookwire OS afterwards and will be permanently available there. If the webinar is recorded, only the speaker and moderator will be recorded with audio and video. The list of attendees will be deleted in a timely manner after the end of the webinar, and messages in the chat will be anonymised, i.e. it will no longer be possible to identify specific attendees.

The legal basis of processing is Article 6(1)(f) GDPR (pursuit of legitimate interests). Our legitimate interest is providing webinars for our customers.

We will use the customer’s data (not the attendees’ data) for marketing purposes (see 3.8 below).

 

3.8 Pursuit of legitimate interests

We process personal data according to of the regulatory provisions for the pursuit of legitimate interests. This includes customer care and direct marketing as well as asserting or defending legal claims. The legal basis is Article 6(1)(f) GDPR.

 

3.9 Retention period

We will delete your data if it is no longer necessary once your enquiry has been dealt with or a contract has ended. This does not include data which

  • we are not yet permitted to delete due to a statutory obligation (e.g. documents that must be kept pursuant to tax law or commercial law); in this case legal basis of processing is Article 6(1)(c) GDPR;
  •  data which we need in order to pursue legitimate interests, in particular to assert claims or for direct marketing.

 

4. Recipients of personal data

4.1. Service providers (processors)

In addition to Google (see 2.3), we also use the following service providers which have access to personal data as part of their activities. These service providers are commissioned by us in the form of data processing according to Article 28 GDPR and do not process personal data for their own purposes.

  • We employ domainfactory GmbH, Oskar-Messter-Str. 33, 85737 Ismaning, Germany and Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp, Germany, as hosting providers.
  • We use the Salesforce CRM system provided by salesforce.com, inc., One Market Street, San Francisco, CA 94105, USA, for the administration of address data. Since no adequate level of data protection has been established for the USA pursuant to Article 45 GDPR, we use the Standard Contractual Clauses as an appropriate safeguard pursuant to Article 46 GDPR. The standard contractual clauses form part of our data processing agreement with Salesforce. For more information on the protection of personal data of European data subjects, please see Salesforce’s Data Transfer Mechanism FAQs.
  • We use the system “Mailchimp” provided by The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA, for sending newsletters. Since no adequate level of data protection has been established for the USA pursuant to Article 45 GDPR, we use the standard contractual clauses as an appropriate safeguard pursuant to Article 46 DSGVO. The standard contractual clauses form part of our data processing agreement with The Rocket Science Group. For more information on the protection of personal data of European data subjects, please see Mailchimp and European data transfers.
  • For the signing up for certain events, we may use the online platform provided by Wix.com Ltd., Nemal St. 40, 6350671 Tel Aviv, Israel. The EU Commission has established by a decision that Israel provides an adequate level of protection for personal data.
  • We employ Kenjo GmbH, Urbanstraße 71, 10967 Berlin, Germany, for the processing of job applications made online.

 

4.2 Google „reCAPTCHA“. 

Our website uses the “reCAPTCHA” functionality provided Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). The challenge to select the images depicting a certain kind of object serves to ensure that input is made by a human user in order to prevent the misuse of a feature (e.g. a contact form) through automated use. The IP address of the user and his or her selection are transmitted to Google. This may result in the transfer of personal data to the USA (see section 2.3 on Google Analytics).

For more information on the terms of use and data protection, please visit Google Analytics Terms of Service or Privacy & Terms.

We use “reCAPTCHA” to pursue legitimate interests, i.e. to prevent spam and other misuse of our website. The legal basis for the processing is Article 6(1)(f) GDPR.

 

4.3 Vimeo player

We have embedded videos in our website which are hosted on the service operated by Vimeo.com, Inc., 555 West 18th Street, New York, New York 10011, USA, and which users can access and play within our website.

We have embedded the videos in such a way that the active Vimeo player is not yet loaded when a page is loaded. This is done only when you activate the player. This setting is stored in a cookie (see 2.1 above). When you play a video, a connection is established to a Vimeo server. This discloses to Vimeo your IP address and the fact that you have visited our website. For more information on data processing and privacy notices, please see https://vimeo.com/privacy.

Embedding the videos serves the pursuit of legitimate interests, i.e. to provide a user-friendly website. The legal basis for the processing is Article 6(1)(f) GDPR.

 

4.4 Acast Player

We have embedded audio samples into our website which are hosted by the service Acast provided by Acast AB, Kungsgatan 28, Stockholm 111 35, Sweden and which can be accessed and played within our website.

We have embedded those audio samples in such a way that the active Acast player is not yet loaded when a page is loaded. This is done only when you activate the player. This setting is stored in a cookie (see 2.1 above). When you play an audio sample, a connection is established to an Acast server. This discloses to Acast your IP address and the fact that you have visited our website.

For more information on data processing and privacy notices, please see Privacy Policy. Embedding the videos serves the pursuit of legitimate interests, i.e. to provide a user-friendly website. The legal basis for the processing is Article 6(1)(f) GDPR.

 

4.5 Castbox-Player

On https://www.hoerbuchwelten.de/ we have embedded audio samples which are hosted by the service Castbox provided by Zoho Corporation GmbH, Trinkausstr. 7, 40213 Düsseldorf, Germany (“Zoho”) and which can be accessed and played within our website.

We have embedded those audio samples in such a way that the active Castbox player is not yet loaded when a page is loaded. This is done only when you activate the player. This setting is stored in a cookie (see 2.1 above). When you play an audio sample, a connection is established to a Zoho server. This discloses to Acast your IP address and the fact that you have visited our website.

For more information on data processing and privacy notices, please see Datenschutzrichtlinie (in German only). Embedding the videos serves the pursuit of legitimate interests, i.e. to provide a user-friendly website. The legal basis for the processing is Article 6(1)(f) GDPR.

 

4.6 Social network

We have not integrated any plug-ins of social networks (such as Facebook, Twitter, Instagram) into our website. If you click on a social network icon, you will be directed to its website via a link. For the processing of personal data that takes place there, please refer to the privacy policy of the respective provider.

 

4.7 Disclosure to third parties

Apart from the cases described in 4.2 through 4.5 above, we will only disclose your data to third parties without your consent in the following cases:

  • If it is necessary for performing our contractual obligations, in particular disclosure to the bank employed for invoicing. The legal basis in this case is Article 6(1)(b) GDPR.
  • If it is necessary for pursuing legitimate interests. Our legitimate interests include, in particular, assertion of claims. The legal basis in this case is Article 6(1)(f) GDPR.
  • To comply with a statutory obligation, e.g. in respect of the tax authorities. The legal basis in this case is Article 6(1)(c) GDPR.

 

5. Your rights

If the relevant statutory conditions exist, you have the following rights:

  • You have the right to receive information about the personal data stored about you (Article 15 GDPR).
  • You have the right to request correction of incorrect data (Article 16 GDPR).
  • You have the right to request deletion (Article 17) or restricted processing (Article 18 GDPR) of data that is no longer required. If statutory retention obligations exist, e.g. for business correspondence pursuant to commercial and tax law, or if another statutory exemption exists, data will not be deleted, but its processing will be restricted.
  • You have the right to data portability (Article 20 GDPR), i.e. the right to request the data that you have made available to us, in a structured, common and machine-readable format, and to transmit this data to another data controller without obstruction by us. If applicable, you also have the right to request that we transmit data straight to another data controller, providing that this is technically feasible.
  • You can object at any time to the processing of your data for direct advertising; you can also object, on grounds relating to your particular situation to other processing of your data which is based on the pursuit legitimate interests (Article 21 GDPR).

To exercise your rights, please contact the address given under point 1.

If you consider that the processing of your data breaches data protection laws, you have the right to lodge a complaint with a supervisory authority (Article 77 GDPR). The supervisory authority with jurisdiction for our location is: Der Hessische Datenschutzbeauftragte, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, tel.: + 49 (0) 611-1408 0, email: poststelle@datenschutz.hessen.de.

 

 

Bookwire GmbH
Voltastr. 1
60486 Frankfurt am Main

T: +49 69 9072006-0
F: +49 69 9072006-97
E: info@bookwire.de

Company location: Frankfurt am Main
Managing Directors: Jens Klingelhöfer, Christian Lindemann, John Ruhrmann
VAT ID: DE270346499
Registration: HRB 92054 — Amtsgericht Frankfurt am Main