Privacy Policy
As a visitor to our website (hereinafter also referred to as "User"), we would like to inform you about the processing of personal data within the framework of using our internet pages. "Personal data" means any information relating to an identified or identifiable natural person (hereinafter also referred to as "Data Subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
I. Name and Address of the Controller
The controller for these internet pages within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:
Narayana Verlag GmbH
Blumenplatz 2
D-79400 Kandern
Germany
Phone: +49 (0) 7626 9749700
Fax: +49 (0) 7626 974970999
Email: info@narayana-verlag.de
We have appointed an external Data Protection Officer. You can reach our Data Protection Officer at the following contact details:
TT Datenschutz GmbH
Karl-May-Straße 12, 01445 Radebeul
Germany
Email: kontakt@tt-datenschutz.de
Mobile: 0049 159 055 055 06
II. General Information on Data Processing
Scope of Processing of Personal Data
We generally process the personal data of our users only insofar as this is necessary to provide a functional website and our content and services. Personal data are primarily those data that allow you to be personally identified.
Legal Basis for the Processing of Personal Data
Art. 6 (1) lit. b GDPR serves as the legal basis for the processing of personal data required for the fulfillment of a contract to which the data subject is a party. This also applies to processing operations required for the performance of pre-contractual measures.
Insofar as processing is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) lit. c GDPR serves as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party, and the interests, fundamental rights, and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) lit. f GDPR serves as the legal basis.
Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) lit. a GDPR serves as the legal basis.
General Data Deletion and Storage Duration
As soon as the purpose of storage ceases to apply, the personal data of the data subject will be deleted or blocked. Furthermore, storage is permissible if provided for by European or national legislators in Union regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned norms expires, unless further storage is necessary for the conclusion or fulfillment of a contract.
If no specific storage duration is specified below, the aforementioned general storage principles apply.
Encryption
This website uses SSL or TLS encryption to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). An encrypted connection can be recognized by the string "https://" and the lock symbol in your browser bar.
III. Provision of the Website and Log Files
Description and Scope of Data Processing
Each time our website is accessed, even if you do not otherwise transmit information, data and information are automatically collected from the computer system of the accessing computer. The following data required for the technical operation of our website are collected:
- The operating system used by the accessing computer/device
- Information about the browser version of the accessing computer/device
- The user's internet service provider
- Amount of data transferred
- Date and time of access
- Websites from which the user reached our website (Referrer URL)
- Websites accessed by the user's system via our website
- The type of device and browser used, e.g., "iPhone 8 & Safari"
- The IP address of the accessing computer/device
The data are stored in our system in log files. These data are not stored together with other personal data of the user.
Legal Basis for Data Processing
The legal basis for the temporary storage of data and log files is Art. 6 (1) lit. f GDPR.
Purpose of Data Processing
The temporary storage of the IP address by the system is necessary to enable the delivery of the website to the user's computer. For this purpose, the IP address must remain stored for the duration of the session.
Storage in log files occurs to ensure the functionality of the website, to optimize the website, and to ensure the security of our information technology systems. No evaluation of data for marketing purposes occurs in this context.
These purposes also constitute our legitimate interest in data processing according to Art. 6 (1) lit. f GDPR.
Duration of Storage
The data are deleted as soon as they are no longer required to achieve the purpose of their collection. In the case of data collection for providing the website, this is the case when the respective session is ended.
In the case of storage in log files, this is the case after seven days at the latest. Further storage is possible, in which case IP addresses are deleted or masked so that an assignment of the calling client is no longer possible.
Right of Objection and Removal
The collection of data for the provision of the website and the storage of data in log files are essential for the operation of the website. Consequently, the user has no possibility to object.
IV. Use of Cookies
Description and Scope of Data Processing
Our website uses cookies. Cookies are small text files that are stored on the user's computer system via the browser. Cookies enable a unique identification of the browser when visiting the website again.
We use session cookies, which are automatically deleted after the end of the visit, and persistent cookies for web analysis, which allow us to recognize your browser on your next visit.
The following data may be stored and transmitted in cookies: location data, login information, IP addresses. Analysis cookies may also transmit search terms entered or frequency of page views.
We also work with advertising partners who help us optimize our offer. For this purpose, third-party cookies from partner companies may also be stored on your hard drive.
Legal Basis
Processing is carried out based on Art. 6 (1) lit. b GDPR for contract fulfillment or Art. 6 (1) lit. f GDPR to safeguard our legitimate interests in the best possible functionality and design of the website.
Objection and Removal
Users have full control over the use of cookies. You can deactivate or restrict the transmission of cookies in your browser settings. Previously stored cookies can be deleted at any time. If cookies are deactivated, you may not be able to use all functions of our website fully.
V. Newsletter
Description and Scope
You can subscribe to a free newsletter on our website using the double opt-in procedure. Only your email address is required. We also store the IP address and the time of registration to prevent misuse.
Data is used exclusively for sending the newsletter and is not passed on to third parties.
Legal Basis
With consent: Art. 6 (1) lit. a GDPR. Based on service usage: Art. 6 (1) lit. f GDPR.
Right to Withdraw
The subscription can be canceled at any time via the link in the newsletter or by notifying the controller. Your email address will then be deleted immediately.
VI. Contacting Us
You can contact us via email, contact form, mail, phone, or fax. The personal data transmitted will be stored exclusively for processing the conversation. The legal basis is Art. 6 (1) lit. f GDPR or Art. 6 (1) lit. b GDPR for contractual matters.
VIII. Use of YouTube Videos
Our website uses YouTube's embedding function (Google Ireland Limited). We use the enhanced data protection mode. YouTube only collects information once the video is played. If you are logged into Google, this data is assigned to your account. To prevent this, log out before playing the video.
IX. Purchase / Registration / Guest Access
During a purchase, we collect: (1) Company, (2) Name, (3) Address, (4) Phone number, (5) Email address. This data is processed for contract fulfillment (Art. 6 (1) lit. b GDPR).
X. Transfer of Data to Shipping Service Providers
We pass your email address to shipping providers (DHL, DPD, Hermes, UPS, Colissimo) only if you have given express consent (Art. 6 (1) lit. a GDPR) for delivery notifications. You can revoke this consent at any time.
XI. Payment Service Providers
We use providers such as PayPal, SOFORT, and Klarna. Depending on the payment method, data may be transmitted for payment processing, credit checks, or fraud prevention (Art. 6 (1) lit. b and f GDPR).
XII. - XV. Google & Microsoft Marketing Tools
We use Google AdWords (Conversion & Remarketing), Google Analytics, Bing Ads, and Hotjar. These tools use cookies to analyze user behavior and optimize advertising. IP addresses are anonymized. You can object to this tracking via browser settings or opt-out plug-ins.
XVI. Google Maps
We use Google Maps (API) to display interactive maps. Google receives information about your visit, including your IP address. Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest).
XVIII. Job Offers / Applicant Data
We process application data to evaluate suitability for a position. Rejected applications are deleted after three months. With consent, data may be stored in an applicant pool for two years.
XIX. Rights of the Data Subject
As a data subject, you have the following rights:
- Right of access: to know what data we process.
- Right to rectification: to correct inaccurate data.
- Right to erasure: to have your data deleted.
- Right to restriction of processing: to limit how we use your data.
- Right to data portability: to receive your data in a structured format.
- Right to object: to object to processing for specific reasons or direct marketing.
- Right to withdraw consent: at any time.
- Right to lodge a complaint: with a supervisory authority.
XX. Credit Checks and Debt Collection
We may perform credit checks via Creditreform or IDG Inkasso based on Art. 6 (1) lit. b and f GDPR to safeguard transactions.
XXII. Google reCAPTCHA
We use Google reCAPTCHA to check whether data entry is performed by a human. This requires your consent according to Art. 6 (1) lit. a GDPR.
XXIII. Social Media
We use the "Shariff" solution for social media buttons. Data is only transferred to providers once you actively click the button. This activation constitutes consent (Art. 6 (1) lit. a GDPR).