We take the protection of your personal data very seriously. We want you to know when we gather data and how we use it. We process your data only according to statutory regulations (GDPR/ General Data Protection Regulation/ Privacy Policy Amendment Act TKG 2003). This privacy statement explains the most important aspects of data processing.

The further development of our website and the implementation of new technologies also brought about changes in our privacy policy. Thus, we recommend you re-read this privacy policy from time to time.

Name and Address of the data controller

The data controllers within the meaning of the General Data Protection Regulation and the Member States of the European Union as well as other data protection provisions are:

ILVBooks
Verlags- und Medienhaus WSB GmbH
Radlkoferstraße 2
81373 Munich
Tel.: 089 820 875 39
E-Mail: office@ilvbooks.com
Website: www.ilvbooks.com

Cookies

SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as a site operator, this site uses an SSL or TLS encryption. You can check if you have a secure and encrypted connection with SSL by looking for the padlock symbol in the status bar on your browser, the URL address will also change from http:// to https:// if SSL or TLS encryption is enabled.

If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.

Contact via the website

Personal data you transmit electronically on this website, such as your name, email address, address and other personal information will only be used for the specified purpose, stored securely and not shared with third parties. Information such as the browser used, operating system, referring webpage, IP address, time of access etc. is collected and stored on the web server automatically by the provider. This data cannot be attributed to specific people without inspection of additional data sources and we will not carry out further evaluation of this data unless there is evidence of illegal use of our website.

We have taken numerous technical and organisational measures to ensures the best possible protection of personal data that are processed via this website. Despite this, however, security loopholes are always possible during internet-based transfers of data, so that an absolute level of protection cannot be guaranteed. You are therefore free to send us your personal data using alternative methods, for example by telephone.

Form data and comments

If visitors to our website leave comments or entries on a form, the entered data and your IP addresses will be stored. This is done for security reasons, in the event someone writes illegal contents (insults, extreme left- or right-wing propaganda, hate posts etc.). In this case we are interested in the author’s identity.

Use of Google Fonts

We use Google Fonts from Google Inc. (16oo Amphitheatre Parkway Mountain View, CA 94043, USA) on our website. Google Fonts are used without authentication and no cookies are sent to the Google Fonts SPI. If you have an account with Google, none of your Google Account Information will be transmitted to Google while using Google Fonts.  Google only captures information on the use of CSS and the fonts used and stores this information securely.

For more information, please see:
https://developers.google.com/fonts/faq.

You can find out which data is collected by Google and what this data is used for at https://www.google.com/intl/de/policies/privacy/.

Google Analytics

This website uses Google Analytics, a web analytics service by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and allow an analysis of your use of the website. The information created via the cookie concerning your use of this website is generally transmitted to a Google server in the USA and stored there. In the event of the activation of the IP anonymisation on this website your IP address is shortened by Google within the member states of the European Union or in other contracting states of the agreement concerning the European Economic Area. Your IP address will be transmitted to a Google server in the USA in full and shortened there in exceptional cases only. 

Acting under the authority of the operator of this website, Google will use this information to evaluate your use of the website to create reports about the website activities and to provide further services in connection with the use of the website and the use of the internet for the operator of the website. The IP address transmitted from your browser via Google Analytics in this framework is not combined with other Google data. You can prevent the storage of cookies via respective settings in your browser software; however, we would like to point out that in this case you may not be able to use all functions of this website in full.

You can also prevent the collection of data concerning your use of the website (incl. your IP address) created by the cookie to Google as well as processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout

For further information on Google’s data protection provisions see: https://www.google.com/intl/de/policies/privacy/ and http://www.google.com/analytics/terms/de.html 

Google Analytics is explained further in the following link
https://www.google.com/intl/de_de/analytics/

Google Adwords Conversion Tracking

This website uses Google Conversion Tracking.  Google Adwords sets a cookie on your computer, if you have accessed our website via a Google Ad. These cookies are only valid for 30 days and cannot be used to identify individuals. If the user visits certain pages of the Adwords customer’s website and the cookie has not yet expired, Google and the customer can recognize that the user has clicked on the ad and has been redirected to this page. Each Adwords customer receives a different cookie. Therefore, cookies cannot be traced via the websites of Adwords customers. The information collected using the conversion cookie is used to generate conversion statistics for Adwords customers, who have opted for conversion tracking. Adwords customers see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, you do not receive information that personally identifies users.

If you do not wish to participate in the tracking process, you can also refuse the setting of a required cookie, e.g. via a browser-setting that generally deactivates the automatic setting of cookies. You can also disable cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com”. Google’s Privacy Policy for conversion tracking can be found here (https://services.google.com/sitestats/de.html).

Facebook Links

Our website contains links to the external social network Facebook. This website is operated exclusively by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (Facebook). The reference link is clearly indicated by the Facebook logo. 

If you click on this link, Facebook plugins will be activated and your browser will connect you directly to the Facebook server. If you continue using the Facebook link while visiting our website and have logged in to Facebook via your personal user account, the information that you have visited on our website will be forwarded to Facebook. Facebook will be able to allocate the visiting of the website to your account.

This information is sent to Facebook and stored by them. In order to avoid this, you must log out of your Facebook account before clicking on the link. The functions assigned to the Facebook links, in particular the transmission of information and user data, are not activated solely by virtue of having visited our website; they are only activated after you click on one of the Facebook links.

To learn more about the data Facebook collects and its purpose, how it processes and uses your data, and your rights and configuration options for protecting your privacy, please read Facebook’s data policy at https://de-de.facebook.com/privacy/explanation

Facebook Remarketing/Retargeting/Pixel

Our pages include remarketing tags from the Facebook social network, 1601 South California Avenue, Palo Alto, CA 94304, USA. When you visit our site, the Remarketing tags create a direct link between your browser and the Facebook server. Facebook Facebook will be informed that you have visited our website with your IP address.  We can use this information to display Facebook Ads. We would like to point out that as a provider of these pages we are not aware of the content of the data transmitted or of its use through Facebook.

Further information on the privacy policy of Facebook can be found here: https://www.facebook.com/about/privacy/

If you do not wish Custom Audience to collect data, you can disable it here .

Newsletter

You can subscribe to our newsletter via this website. For this, we’ll need your e-mail address and your declaration that you agree with the subscription to the newsletter.

As soon as you have subscribed to the newsletter, we will send you a confirmation e-mail with a link to confirm the registration. The personal data collected during the newsletter registration will be used exclusively to send out our newsletter. Newsletter subscribers may also be notified by e-mail if this is necessary for the operation of the newsletter service or registration, as might be the case in the event of changes in the newsletter or any technical changes. The personal data collected as part of the newsletter service will not be passed to a third party.

You can unsubscribe from our newsletter at any time. You may revoke your consent to allow your data and email address to be saved and used for the purpose of sending the newsletter at any time, by clicking the link in the newsletter.

Newsletter-Tracking

This website uses the eyepin service for the dispatch of newsletters. The newsletter contains so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in emails sent in the HTML format, to enable a log file record and a log file analysis. As a result, a statistical evaluation of the success or failure of online marketing campaigns is carried out. With the aid of the embedded tracking pixel, the eyepin GmbH can detect if and when an email was opened by a person concerned. Furthermore, via the Newsletter-Tracking, it is ascertained which links in the email were accessed by persons concerned. 

Personal data collected by the tracking pixel contained in the Newsletter and the Newsletter tracking is stored and evaluated by the person responsible for processing to optimise the Newsletter delivery and to better adapt the content of future Newsletters to the interests of persons concerned. This personal data will not be passed onto third parties. Persons concerned are entitled, at any time, to revoke the, in this regard, separate declaration of consent to unsubscribe from receipt of the Newsletter through the Double-Opt-In procedure. Following a revocation, no further data will be collected at all and the address will be placed on a block list to document the notice of departure and to prevent further mailings. 

Find out more about eyepin at https://support.eyepin.com/hc/de

The use of YouTube

This website includes YouTube references. YouTube is an internet video portal, which allows video publishers to post video clips free of charge and allows other users to view, rate and comment on them. YouTube allows the publication of all types of videos, including entire films and TV programmes, but also music videos, trailers or videos made by users themselves.

The site is operated by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Each time you visit one of the individual pages of this website on which a YouTube component (YouTube video) has been integrated, your Internet browser will automatically be prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. More information about YouTube can be found at https://www.youtube.com/yt/about/en/. 
As part of this technical process, YouTube and Google will be able to detect the specific subpage of our website visited by the data subject. 

If the data subject is logged in on YouTube, YouTube recognizes with each call-up to a sub-page that contains a YouTube video, which specific sub-page of our Internet site was visited by the data subject. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.

YouTube and Google will receive information through the YouTube component that the data subject has visited our website, if the data subject at the time of the call to our website is logged in on YouTube; this occurs regardless of whether the person clicks on a YouTube video or not. If such a transmission of this information to YouTube and Google is not desirable for the data subject, the delivery may be prevented if the data subject logs off from their own YouTube account before a call-up to our website is made.

YouTube’s data protection provisions, available at https://www.google.com/intl/en/policies/privacy/, provide information about the collection, processing and use of personal data by YouTube and Google.

Order Procedure through the online shop

All data entered by the customer when placing an order will be stored. This includes:

• Last name, First name
• Address
• Telephone number (optional)
• Email address

All data necessary for the processing the order or delivery will be passed on to third party service providers. Once this data is no longer required or legally allowed, it will be deleted.

Payment by PayPal in the online shop

 This website includes PayPal references. PayPal is an online payment service provider. Payments are processed via PayPal accounts, which represent virtual private or business accounts. PayPal also offers the option of processing virtual payments via credit card if a user does not have a PayPal account. A PayPal account is managed via an email address, which is why there is no account number. PayPal allows you to initiate online payments to third parties or to receive payments. PayPal also acts as a trustee and offers buyer protection services.

PayPal is operated in Europe by PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxemburg. If a customer selects PayPal as the payment option during the ordering process in our online shop, their data will be automatically transmitted to PayPal. By selecting this payment option, the subject consents to the transmission of personal data required for payment processing.

The following personal data is usually transmitted to PayPal: First name, last name, address, email address, IP address, telephone number, mobile phone number or other data necessary for payment processing. In order to process the purchase, it is also necessary to collect personal data related to the order.

The purpose of the transmission of data is to process payments and prevent fraud. The party responsible for processing the payment will transfer personal data to PayPal, particularly if there is a legitimate interest in the transfer. The personal data exchanged between PayPal and the person responsible for processing may be transmitted by PayPal to credit reporting agencies. The purpose of this is to verify creditworthiness.

PayPal may pass on personal data affiliated companies, service providers or subcontractors if it is necessary in order to fulfil contractual obligations or if the data is required to process the order. The subject can withdraw their consent for PayPal to handle their personal data at any time. This will not affect personal data that must be processed, used or transmitted for processing the payment.

PayPal’s current data protection regulations can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full 

Legal basis of processing

Art. 6(1) lit. a GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. 

If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service, the processing is based on Article 6(1) lit. b GDPR. The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example in the case of inquiries concerning our products or services.

If our company is subject to a legal obligation by which processing of personal data is required, such as for the fulfillment of tax obligations, the processing is based on Art. 6(1) lit. c GDPR. 

In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were injured in our company and his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6(1) lit. d GDPR. 

Finally, processing operations could be based on Article 6(1) lit. f GDPR. This legal basis is used for processing operations which are not covered by any of the abovementioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. Such processing operations are particularly permissible because they have been specifically mentioned by the European legislator. He considered that a legitimate interest could be assumed if the data subject is a client of the controller (Recital 47 Sentence 2 GDPR).

The legitimate interests pursued by the controller or by a third party

Where the processing of personal data is based on Article 6(1) lit. f GDPR our legitimate interest is to carry out our business in favor of the well-being of all our employees and the shareholders.

Period for which the personal data will be stored

The criteria used to determine the period of storage of personal data is the respective statutory retention period. After expiration of that period, the corresponding data is routinely deleted, as long as it is no longer necessary for the fulfillment of the contract or the initiation of a contract.

Provision of personal data as statutory or contractual requirement; Requirement necessary to enter into a contract; Obligation of the data subject to provide the personal data; possible consequences of failure to provide such data

We clarify that the provision of personal data is partly required by law (e.g. tax regulations) or can also result from contractual provisions (e.g. information on the contractual partner). Sometimes it may be necessary to conclude a contract that the data subject provides us with personal data, which must subsequently be processed by us. The data subject is, for example, obliged to provide us with personal data when our company signs a contract with him or her. The non-provision of the personal data would have the consequence that the contract with the data subject could not be concluded. 

Before personal data is provided by the data subject, the data subject must contact any employee. The employee clarifies to the data subject whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and the consequences of non-provision of the personal data.

Existence of automated decision-making

As a responsible company, we do not use automatic decision-making or profiling.

Your Rights (Rights of the data subject)

a) The right to obtain information
Each data subject has the right, as granted by the European Directive and Regulatory Authority, to require the controller to confirm whether his personal data is being processed. If the data subject wishes to make use of this right of confirmation, they can contact an employee of the data controller any time.

b) The right of information
Any data subject involved in the processing of personal data shall have the right, granted by the European Directive and Regulatory Authority, to obtain information from the data controller free of charge on the personal data stored about him and a copy of that information any time. In addition, data subjects are also provided with the following information by the European Directive and Regulatory Authority:

• The purposes of the processing
  
• The categories of the personal data concerned
  
• The recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations
  
• Where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
  
• The existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing
  
• The right to lodge a complaint with a supervisory authority
  
• Where the personal data are not collected from the data subject, any available information as to their sources
  
• The existence of automated decision-making, including profiling, referred to in Article 22 (1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
  
• The data subject also has the right to information as to whether personal data is transferred to a third country or to an international organization. Furthermore, if this is the case, the data subject also has the right to receive information about the appropriate guarantees in connection with the transfer.

If the data subject wishes to exercise this right to information, they can contact an employee of the data controller any time. 

c) Right to rectification
Any data subject involved in the processing of personal data has the right, granted by the European Directive and Regulatory Authority, to demand the immediate correction of inaccurate personal data concerning him. Furthermore, the data subject has the right to request the completion of incomplete personal data (accompanied by an explanatory statement), taking into account the purposes of the processing. If the data subject wishes to exercise this right, the person may contact an employee of the data controller any time.

d) Right to erasure (right to be forgotten)
Any data subject involved in the processing of personal data shall have the right, granted by the European Directive and Regulatory Authority, to demand the controller to delete the personal data concerning him immediately, provided that one of the following reasons exist and the processing is not required:

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
• the data subject withdraws consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2), and where there is no other legal ground for the processing; 
• the data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2); 
• the personal data have been unlawfully processed
• the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
• the personal data have been collected in relation to the offer of information society services referred to in Article 8(1).
• If one of the above-mentioned reasons applies and a data subject wishes to have personal data stored by Verlags-und Medienhaus WSB GmbH deleted, they can contact an employee of the company responsible at any time. The employee of Verlags-und Medienhaus WSB GmbH will arrange for the request for deletion to be carried out immediately.

If the personal data have been made public by Verlags- und Medienhaus WSB GmbH and if our company is responsible for deleting personal data as per Art. 17 para. 1 GDPR, Verlags- und Medienhaus WSB GmbH takes appropriate measures, taking into account the available technology and the implementation costs also. Verlags- und Medienhaus WSB GmbH will also inform other data controllers processing the personal data that the data subject has asked for the erasure of all links to his personal data and this personal information or copies or replications need to be deleted unless required for the processing. The employee of Verlags- und Medienhaus WSB GmbH will arrange the necessary steps in individual cases.

e) Right to restrict processing
Any data subject involved in the processing of personal data has the right, granted by the European Directive and Regulatory Authority, to demand the data controller to restrict the processing of personal data if one of the following conditions applies:

• The accuracy of the personal data is contested by the data subject for a certain period of time that enables the data controller to verify the accuracy of the personal data.
• The processing is unlawful; the data subject refuses to erase the personal data and instead requests the restriction of the use of personal data.
• The data controller no longer needs the personal data for the purposes of processing, but the data subject requires them to assert, exercise or defend legal claims.
• The data subject objects to the processing as per Art. 21 para. 1 GDPR and is not yet clear whether the legitimate reasons of the data controller outweigh those of the data subject.
• If one of the above-mentioned conditions exists and the data subject requests the restriction of personal data stored at Verlags-und Medienhaus WSB GmbH, he may contact an employee of the data controller any time. The employee of Verlags-und Medienhaus WSB GmbH will arrange the restriction of processing.

f) Right to data portability
Any data subject involved in the processing of personal data shall have the right, granted by the European Directive and Regulatory Authority, to obtain his personal data in a structured, common and machine-readable format. The data subject also has the right to transfer this data to another data controller without hindrance by the controller to whom the personal data was originally provided, given that the processing is based on the consent as per Article 6 (1) (a) of the GDPR or Article 9 (1) (b) 2 (a) of the GDPR or on a contract as per Article 6 (1) (b) of the GDPR and the processing is an automated process, unless the processing is necessary for the performance of a task of public interest or in the exercise of public authority, which has been assigned to the data controller.

Furthermore, the data subject has the right to data portability as per Article 20 (1) of the GDPR. The data subject also has the right to obtain the personal data that are transmitted directly from one controller to another, as long as this is technically feasible and if this does not affect the rights and freedoms of others.

To assert the right of data portability, the data subject may contact an employee of Verlags- und Medienhaus WSB GmbH any time.

g) Right to objection
Any data subject involved in the processing of personal data shall have the right, granted by the European Directive and Regulatory Authority, to object to the processing of personal data as per Article 6 (1) (e) or f GDPR. This also applies to profiling

Verlags- und Medienhaus WSB GmbH will no longer process the personal data of a data subject in the event of an objection, unless Verlags- und Medienhaus WSB GmbH can prove that there are compelling legitimate reasons for the processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves the purpose of asserting, exercising or defense of legal claims.

If Verlags- und Medienhaus WSB GmbH publishing processes personal data in order to operate direct advertising, the data subject has the right to object to the processing of personal data for the purpose of such advertising any time. This also applies to the profiling, as long as it is associated with such direct advertising. If the data subject objects to the processing of his personal data by Verlags- und Medienhaus WSB GmbH publishing for direct marketing purposes, Verlags- und Medienhaus WSB GmbH will no longer process the personal data for these purposes.

In addition, the data subject has the right, for reasons arising from his or her particular situation, to object to the processing of personal data for scientific or historical research purposes or for statistical purposes as per Art. 89 para.1 GDPR, unless such processing is necessary to fulfill a public interest task.

In order to exercise the right to object, the data subject can directly contact an employee of Verlags- und Medienhaus WSB GmbH. The data subject is also free, in the context of the use of information society services, notwithstanding Directive 2002/58 / EC, to exercise his right to object by means of automated procedures using technical specifications.

h) Automated decisions in individual cases including profiling
Any data subject involved in the processing of personal data shall have the right, as granted by the European Directive and Regulatory Authority, not to be subject to a decision based solely on automated processing, including profiling, which has a legal effect, or in a similar manner, significantly affects him; unless the decision (1) is necessary for the conclusion or performance of a contract between the data subject and the data controller, or (2) is permitted by Union law or national law to which the controller is subject, and that legislation provides for appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject; or (3) with the express consent of the data subject.

If the decision (1) is required for the conclusion or the fulfillment of a contract between the data subject and the data controller or (2) it takes place with the express consent of the data subject, Verlags- und Medienhaus WSB GmbH takes appropriate measures to safeguard the rights, freedoms and the legitimate interests of the data subject, including at least the right to obtain the intervention of a person by the controller, to express his / her own position and to object to the decision.

If the data subject wishes to claim automated decision-making rights, he can contact an employee of the controller any time.

i) The right to revoke data protection consent
Any data subject involved in the processing of personal data has the right, granted by the European Directive and Regulatory Authority, to revoke consent to the processing of personal data any time. 

If the data subject wishes to assert his right to withdraw consent, he may contact an employee of the data controller any time. 

You can reach us at:
ILVBooks
Verlags- und Medienhaus WSB GmbH
Radlkoferstraße 2
81373 Munich
Tel.: 089 820 875 39
E-Mail: office@ilvbooks.com
Website: www.ilvbooks.com

If you believe that the processing of your data violates data protection law or if your data protection claims have otherwise been violated in any way, you can contact the supervisory authority.

Germany:
Die Bundesbeauftragte für den Datenschutz und die Informationsfreiheit
Husarenstr. 30
53117 Bonn
Tel.: +49 (0)228-997799-0
E-Mail: poststelle@bfdi.bund.de
Homepage: https://www.bfdi.bund.de/

Austria:
Österreichische Datenschutzbehörde
Wickenburggasse 8-10
1080 Wien
Tel: +43 1 531 15-202525
E-Mail: dsb@dsb.gv.at
Homepage: https://www.dsb.gv.at/