Privacy policy
With this data protection declaration we would like to inform you about the type, scope and purpose of the processing of personal data on our website. Personal data are all data that have a personal reference to you, e.g. name, address, e-mail address or user behaviour.


Who is responsible for data processing in our company
Responsible for the data processing:


Leon Feuerstein
Fritz-Ritter-Straße 40
07747 Jena, Thüringen
Germany
+4915776087437
contact@mybookpassion.com

Imprint
https://www.mybookpassion.com/imprint

Processing of your data within the scope of the core activity of our company
We process your personal data transferred to us within the scope of the contractual and pre-contractual relations existing between us. The scope, type, purpose and necessity of the processing is determined by the underlying contractual relationship. For this purpose we store and process your data in the computer systems we use. The data processed by us includes all those data which have been made available by you for the purpose of using the contractual or pre-contractual services and which are required to process your inquiry or the contract concluded between us.

This may include in particular the following data:

  • Name and address
  • E-mail address and telephone number
  • Contract data
  • Payment details.

The processing is limited to those data which are necessary and expedient to answer inquiries and/or to fulfill a contract concluded between you and us. Personal data will only be passed on to third parties if this is necessary for the purpose of providing the service or within the framework of the organisation of our company for handling financial accounting and compliance with legal obligations. In this case, only those data will be transferred to external service providers that are necessary and expedient for the fulfilment of the contract or for the processing of financial accounting as well as for compliance with legal obligations. The processing by us is carried out according to your instructions or the legal requirements. Legal basis: The processing of your personal data as well as the transfer to third parties is carried out in accordance with Art. 6 para. 1 lit. b) DSGVO and serves to fulfil the contract between you and us. Otherwise, we will only pass on data to third parties if there is a legal obligation to do so, Art. 6 para. 1 lit. c) DSGVO or if there is a legitimate interest in doing so, Art. 6 para. 1 lit. f. DSGVO. This is the case, for example, if this is necessary to pursue our claims. Deletion: Your data will be deleted as soon as the data is no longer required for the fulfilment of contractual or legal duties of care and for dealing with possible warranty and comparable obligations. This does not affect the statutory storage obligations.


Web hosting
We use an internet service provider to maintain our online presence, on whose server the website is stored (hosting) and who makes our site available on the internet. In doing so, the internet service provider processes contact data, content data, contract data, usage data, inventory data, meta and communication data on our behalf. Name and address of the Internet service provider: 1und1 IONOS 1&1 IONOS SE Elgendorfer Str. 57 56410 Montabaur Germany You can view its data protection regulations here: https://www.ionos.de/terms-gtc/terms-privacy/ Legal basis: The Internet service provider processes the above-mentioned data on our behalf, Art. 28 DSGVO. The data processing is based on our legitimate interest in an efficient and secure provision of our Internet offer, Art. 6 para. 1 lit. f) DSGVO.

If you only use our website for information purposes, our Internet service provider only collects the personal data that the browser you use transmits to its server. These are the following data:

  • IP address
  • the date and time of access to our website
  • Time zone difference to Greenwich Mean Time (GMT)
  • Access status (HTTP status)
  • the amount of data transferred
  • the Internet service provider of the accessing system
  • the type of browser you use and its version
  • the operating system you use
  • the website from which you may have accessed our website
  • the pages or sub-pages that you visit on our website.

The aforementioned data is stored as log files on the servers of our Internet service provider. This is necessary in order to be able to display the website on the end device you are using and to ensure stability and security. In the above-mentioned purposes lies our legitimate interest in data processing. Legal basis: The data processing is based on our legitimate interest in an efficient and secure provision of our Internet offer, Art. 6 para. 1 lit. f) DSGVO. Duration: The above data for the provision of our website will be stored for a period of 7 days and then deleted.

Information on the contact options we have available
If you contact us via e-mail, social media, telephone, fax, post, our contact form or in any other way and provide us with personal data such as your name, telephone number or e-mail address or provide further information about your person or your request, this data will be stored and processed by us for the purpose of processing your request. Legal basis: If you have made your request via our contact form, the legal basis for the processing of your data is Art. 6 para. 1 lit. a DSGVO. If you make your inquiry within the framework of contractual or pre-contractual relations with us, the legal basis for the processing of your data is Art. 6 para. 1 lit. b. DSGVO. If your enquiry does not fall into one of the aforementioned categories, our legitimate interest in processing your data is to answer your enquiry properly and in your interest, Art. 6 para. 1 lit. f. DSGVO. Deletion: The personal data collected by us will be deleted if they are no longer required. We review the necessity every 2 years. You can also revoke the data processing at any time.


Newsletter
We send out a newsletter at regular intervals to inform our customers and business partners and interested parties about our offers and related news. You have the possibility to register for our newsletter on our website and to agree to receive the newsletter within the scope of the registration. If you register for our newsletter, it is obligatory to enter your e-mail address. We store the e-mail address in order to send you the newsletter. The provision of further data such as title or name is voluntary and is used to address you personally. As soon as you register for our newsletter, you will receive a confirmation e-mail to the e-mail address you entered during registration using the so-called double opt-in procedure. This e-mail contains a link. If you click on this link, you confirm that you wish to receive the newsletter. This is to ensure that your e-mail address has not been misused by a third party during registration. For the same reason, we save the date and time of registration as well as the IP address assigned to you upon registration. We do not pass on the aforementioned data to third parties. Legal basis: The legal basis for the processing of your data is Art. 6 para. 1 lit. a DSGVO. Deletion: Your e-mail address will be deleted either if you have not clicked on the confirmation link 1 month after sending the confirmation e-mail in the double opt-in procedure or immediately after you have unsubscribed from our newsletter. Revocation: You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. We offer the following options for you to revoke your consent:


  • Click on the link provided in the newsletter


Dispatch by dispatch service provider

We have commissioned the following dispatch service provider to send our newsletter: Click-Tip, , Germany. You can view their data protection regulations here: https://www.klick-tipp.com/datenschutzerkl%C3%A4rung. The shipping service provider may use your data in pseudonymous form, i.e. without allocation to a user, to optimise or improve its own services, e.g. for technical optimisation of the dispatch and presentation of the newsletter or for statistical purposes. However, the dispatch service provider is not entitled to write to you himself or to pass on your data to third parties. Legal basis: The dispatch service provider acts on our behalf on the basis of our legitimate interests in the proper dispatch of the newsletter in accordance with Art. 6 Para. 1 lit. f DSGVO and within the framework of an order processing contract in accordance with Art. 28 Para. 3 S. 1 DSGVO.

Evaluation of the user behaviour

If you have agreed to this, we will evaluate your user behaviour when sending the newsletter. For this purpose our newsletter contains tracking pixels and tracking links. This enables us to recognize if and when you have opened the newsletter and if and which links you have clicked on in the newsletter. Purpose: We evaluate the newsletter as described above to be able to measure a statistical evaluation of the success or failure of our newsletter. Legal basis: The legal basis for the processing of your data is Art. 6 para. 1 lit. a DSGVO. Prevention: You can revoke your consent to receive the newsletter at any time by using the above-mentioned options. Deletion: We delete your data after revocation.

Your rights under the DSGVO
According to the DSGVO, you are entitled to the rights listed below, which you can assert at any time with the person responsible named in section 1 of this data protection declaration:


  • Right to information: In accordance with Art. 15 DSGVO, you can request confirmation as to whether and which of your personal data we process. In addition, you may request from us, free of charge, information on the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of rectification, cancellation, restriction of processing or opposition, the existence of a right of appeal, and the origin of your data, if it has not been collected by us. Furthermore, you have the right of information as to whether your personal data has been transferred to a third country or to an international organisation. If this is the case, you have the right to obtain information about the appropriate guarantees in connection with the transfer.
  • Right of rectification: In accordance with Art. 16 DSGVO, you can request the correction of incorrect or incomplete personal data stored by us and concerning you.
  • Right to deletion: In accordance with Art. 17 DSGVO, you have the right to request the deletion of your personal data stored with us, as long as we do not require their processing for the following purposes:
  • to fulfil a legal obligation,
  • to assert, exercise or defend legal claims,
  • to exercise the right to freedom of expression and information, or
  • for reasons of public interest as referred to in Art. 17 para. 3 lit. c and d DSGVO.
  • Right to limitation: Pursuant to Art. 18 DPA, you have the right to request limitation of the processing of your personal data if
  • the accuracy of the data is contested by you, for a period of time that allows us to verify the accuracy of the personal data,
  • the processing of your data is unlawful, but you refuse to have it deleted and instead demand that the use of the data be restricted,
  • we no longer need the personal data for the purposes of the processing, but you need the data to assert, exercise or defend legal claims
  • you have lodged an objection to the processing of your data in accordance with Art. 21 DSGVO, but it is not yet clear whether the legitimate reasons which, despite your objection, entitle us to further processing outweigh your rights.
  • Right of information: If you have exercised the right to rectify, erase or limit the processing of your personal data, we are obliged to inform all recipients to whom the personal data concerning you have been disclosed of the rectification, erasure or limitation of the processing requested by you, unless this proves impossible or involves a disproportionate effort. You have the right to be informed by us of these recipients.
  • Right to data transferability: In accordance with Art. 20 DSGVO, you may request that we receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format or request that it be transferred to another responsible party.
  • Right of complaint: Under Art. 77 DSGVO you have the right to complain to a supervisory authority. To do so, you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters.

Right of withdrawal
According to Art. 7 para. 3 DSGVO you have the right to revoke your consent to the processing of your data at any time. The revocation declared by you does not change the lawfulness of the processing of your personal data which took place until the revocation.


Right of objection
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data relating to you on the basis of a balancing of interests (Art. 6 para. 1 lit. f DSGVO). This is particularly the case if the data processing is not necessary for the performance of a contract. If you exercise your right of objection, we ask you to explain the reasons. We will then no longer process your personal data unless we can prove to you that compelling reasons for data processing worthy of protection outweigh your interests and rights.


Irrespective of the above, you have the right to object at any time to the processing of your personal data for advertising and data analysis purposes.

Please send your objection to the above mentioned contact address of the responsible person.

Our online presence with social networks
We operate online presences within the social networks listed below. If you visit one of these sites, your usage data is collected and processed by the respective provider. This is usually done by cookies, which are stored on the end device you use. For the term "cookies", see above under the corresponding heading. Cookies are used to store your usage behaviour and interests and to create corresponding usage profiles. In addition, data can be stored in the user profiles regardless of the device you use. This is especially the case if you are a member of the respective platform and logged in to it.


The collected data is generally used by the provider for the purpose of advertising and market research by creating user profiles from your usage behaviour. These, in turn, can be used by the providers to provide you with interest-related advertising. You have a right of withdrawal against the creation of user profiles. To exercise this right, you must contact the respective provider. If you have an account with the provider, your usage data can be linked to it. In order to prevent your data from being linked in this way, you can log out of the provider's service before visiting our site.

For what purpose and to what extent data is collected by the provider, you can see the respective data protection declarations of the providers, which are provided below. We ourselves have no influence on which data is collected and how this data is used by the provider. If you wish to request information or exercise your rights as a data subject, you can do this most effectively with the respective provider, as only the respective providers have access to your data.

We would like to point out that your user data may be transferred and processed outside the area of the European Union. In this case, there is a risk that the enforcement of your data subject rights may be made more difficult. Those US providers who are certified under the Privacy Shield have undertaken to comply with EU data protection standards. You will find information on whether the respective provider has such a certificate in the information on the providers listed below.

Legal basis: If you have been asked by one of the providers listed below to give your consent to data processing, the legal basis for the processing is Article 6(1)(a) DSGVO. Otherwise, the processing of your data is based on our legitimate interests in contacting and communicating with you, Art. 6 para. 1 lit. f. DSGVO.

Prevention: For the respective possibilities of objection (Opt-Out) we refer to the following linked information of the providers.

We maintain online presences on the following social networks:
Facebook
Facebook is a service of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304 - USA.

Headquarters in the EU: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 - Ireland

Google Analytics
We use "Google Analytics" on our website, a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

We use Google Analytics to record and statistically evaluate the streams of visitors to our website. Among other things, Google Analytics collects data on which website you came to our website from (so-called referrers), which sub-pages of the website you accessed or how often and for how long a subpage was viewed and which interactions you made. In order to collect and store this data, Google Analytics places a cookie on the end device you use (see the term above under the heading Cookies). We use the AnonymizeIP function to anonymise your IP address so that it is shortened and can no longer be assigned to your visit to our website. Further transmitted information is not assigned to the anonymised IP address by Google or linked to it. The information thus generated is transferred to Google's servers in the USA and stored there. Google may pass on this personal data collected via the technical process to third parties. We have concluded an order processing contract with Google. According to this agreement, Google is entitled and obliged to evaluate the information obtained for us and to prepare statistical reports for us on the type and extent of website use. These statistics enable us to constantly improve our offer, to carry out a cost-benefit analysis of our internet marketing and to make our internet presence more interesting and user-friendly for you as a user. Legal basis: We use Google Analytics because of our legitimate interest in the analysis, optimisation and economic operation of our online offer, Art. 6 para. 1 lit. f DSGVO. Deletion: The data collected and transferred by us in this way are automatically deleted after 26 months. Prevention: You can prevent the storage of cookies by downloading and installing the browser add-on provided by Google. This is available at https://tools.google.com/dlpage/gaoptout?hl=de. However, you may then no longer be able to use all the functions of our website to their full extent. Alternatively, you can prevent the storage of cookies by setting a so-called opt-out cookie, which will prevent data from being collected from you on our website in the future. Please click on the following <link>. You also have the option of preventing the storage of cookies by setting this in your browser. Cookies that have already been set can be deleted by you at any time. In addition, you have the possibility to object to the use of cookies via our cookie banner, which will be displayed the first time you visit our website.


Information about the third-party provider:

Registered office within the EU: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001

Google Ads
We use "Google Ads" on our website, a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.


Google Ads is a service for displaying Internet advertising in the form of ads. The ads are displayed as search results in search engine results or in the Google advertising network. We use Google Ads to determine certain keywords. Our ads are displayed by Google in search engine results when you use Google's search engine to get a search result that is related to the keyword. In the Display Network, the ad is displayed on related pages. If you click on one of the ads, you will be redirected to the website we advertise. Google Ads sets a cookie for this (see the term above under the heading Cookies). This enables both Google and us to track whether you have reached our site via our ad and whether you have carried out any other actions here, such as buying something, using a contact form or calling us. For this purpose, the cookie that is set collects the pages you visit, including your IP address, and transfers them to Google servers in the USA (conversion tracking). Google evaluates this data to produce a report with statistical statements about the number of visitors generated by the advertising and the success of the advertising measure. Among other things, the reports show the total number of users who were forwarded to our website via our advertisements. In addition, the reports contain information about the end devices and browsers of the users, where the users were located, at what times the advertisement was clicked. However, the reports do not include information that personally identifies you as a user of our site.

Purpose: The advertisements enable us to direct streams of targeted visitors to our sites. The statistical analyses and reports created via Google enable us to optimise our ads.

Legal basis: We use Google Ads because of our legitimate interest in the analysis, optimisation and economic operation of our online offer, Art. 6 para. 1 lit. f DSGVO.

Prevention: You can prevent the setting of cookies by adjusting your browser settings. Cookies already set can be deleted in your browser. In addition, you have the possibility to object to the use of cookies via our cookie banner, which will be displayed the first time you visit our website. You also have the possibility to object to the use of interest-based advertising by clicking on the following link and manually deactivating the corresponding options: https://adssettings.google.com/authenticated?hl=de.

Information about the third-party provider:

Registered office within the EU: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001

Facebook pixel
We use the Facebook Pixel, Custom Audiences and Facebook Conversion feature of Facebook Inc. 1 Hacker Way, Menlo Park, CA 94025, USA on our website.

Facebook Pixel is an analysis tool with which we can evaluate the effectiveness of the advertisements we place on Facebook (so-called "Facebook Ads"). It enables us to address target groups for our advertisements. This enables us to target our Facebook Ads only to those Facebook users who have previously visited one of our websites. In addition, we can use Facebook pixels to track whether you have been redirected to our website after clicking on one of our Facebook ads. This enables us to play out ads that are tailored to your interests. For this purpose, we have implemented a Facebook tracking pixel on our website. This is a small graphic that enables log file recording and log file analysis. When you visit our website, a direct connection to the Facebook servers is established. As far as we know, Facebook receives information about which page of our website you have visited or which of our Facebook ads you have clicked on. If you are logged into Facebook, Facebook can assign your visit to our website or the click on our Facebook ads to your Facebook account. Furthermore, it cannot be ruled out that Facebook will read and store your IP address and other identifying features, even if you are not logged in to Facebook. You can read details about how the Facebook pixel works here:

https://www.facebook.com/business/help/651294705016616. We also use the "extended adjustment" function. In this case, your personal data is transferred to Facebook in encrypted form. We also use the "Custom Audiences from File" procedure. Here, your e-mail address, as the recipient of the newsletter, is uploaded to Facebook in encrypted form. This serves us to determine the recipient of our Facebook advertisements and to ensure that the advertisements are only shown to interested parties. We have no influence on the quantity, quality or storage duration of the transmitted data. Facebook may pass on your data to third parties. Facebook is a participant in the Privacy-Shield Agreement and is certified for data processing according to European standards. Purpose: We use Facebook pixels to show you interesting advertisements and to make our website more attractive. Legal basis: We use Facebook pixels because of our legitimate interest in the analysis, optimization and economic operation of our online offer, Art. 6 para. 1 lit. f DSGVO. Prevention: You can deactivate the Facebook Custom Audiences by logging into your Facebook account and setting this under the following link https://www.facebook.com/settings/?tab=ads#_ In addition, you can deactivate the display of interest-based advertising on the following pages http://www.aboutads.info/choices and http://www.youronlinechoices.com/uk/your-ad-choices/. In addition, you can prevent the use of cookies, which are used to measure reach and advertising purposes, by using the network advertising initiative's offer, which you can access here http://optout.networkadvertising.org/ or here http://www.aboutads.info/choices. Alternatively, you can also declare your objection via this website http://www.youronlinechoices.com/uk/your-ad-choices/.

Information about the third party provider:
Registered office within the EU: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Amazon Affiliate Program
On our website we use the partner program of Amazon Europe S. à. r. l. 5, Rue Plaetis, L-2338 Luxembourg.

With affiliate marketing, interested parties can offer their own advertising on third party websites. In this context, data such as the identification number of the affiliate (the party on whose site advertising is placed), the order number of the visitor to a website and that of the advertising medium clicked on are recorded. Interested parties can thus offer their own advertising on third-party websites. Advertisements and links from www.amazon.de may be placed on our website, which may also lead to advertising cost reimbursements. Amazon sets a cookie for this purpose (see on the term above under the heading Cookies). The cookie that is set determines the pages you visit, including your IP address. We have no influence on the quantity, quality or storage duration of the transferred data. No personal data is stored. Amazon is a participant in the Privacy-Shield Agreement and is certified for data processing according to European standards. Amazon may pass on your data to third parties. This information is collected and assigned to your Amazon account, provided that you are logged in during your visit. Purpose: The purpose of advertising is to show you advertisements that are of interest to you and to make our website more attractive. The named data is stored in order to handle the commission payments between the advertiser and the person who allows the display of this advertisement on his site. Legal basis: We use the Amazon Patner Program because of our legitimate interest in the economic operation of our online offer, Art. 6 para. 1 lit. f DSGVO. Prevention: You can prevent the storage of cookies by switching off the display of interest-related advertising under the following link http://www.amazon.de/gp/dra/info. Furthermore, you have the possibility to deactivate interest-related advertising by setting this under the following link http://www.aboutads.info/choices. You also have the option of preventing the storage of cookies by setting this in your browser. Cookies that have already been set can be deleted by you at any time.


Information about the third-party provider:

PayPal

We offer on our website the processing of payment via the payment service provider PayPal (PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg).

If you have decided to pay via PayPal, the following of your data will be transmitted to PayPal during the order process: First and last name, address, date of birth, email address, telephone number, IP address as well as the data necessary for the processing of the respective order. This data is transmitted so that PayPal can carry out an identity check to process your purchase. Among other things, this makes it possible to detect fraudulent activities and prevent the misuse of data. In addition, the data is transmitted so that PayPal can assess your creditworthiness if necessary or PayPal can pass on the data to credit agencies to assess your creditworthiness in the form of a credit check. PayPal will use the results of the credit assessment in terms of statistical probability of non-payment to decide whether to provide the payment method in question. PayPal may also use the information collected for analysis purposes, including customer analysis, risk analysis, data analysis for purposes of developing and improving the services offered by PayPal. Legal basis: The legal basis for the use of data as described above is Art. 6 para. 1 lit. b DSGVO. Deletion: The data collected and transferred by us in this way will be automatically deleted after 26 months. Revocation: You can revoke your consent to the use of personal data at any time vis-à-vis PayPal. Despite revocation, PayPal may still be entitled to process, use and transmit personal data that is absolutely necessary for the contractual payment processing.

Information about the third-party provider:

Instant bank transfer
We offer on our website the processing of payment via the payment system Sofortüberweisung of the payment service provider SOFORT (SOFORT GmbH, Fußbergstraße 1, 82131 Gauting, Germany).


If you have decided to pay via Sofortüberweisung, the following of your data will be transmitted to Sofortüberweisung within the scope of the order: First and last name, address, date of birth, email address, telephone number, IP address and the data necessary for the processing of the respective order. In addition, you will transmit the TAN number generated for the respective payment transaction and the PIN of your online banking account. The transmission of this data is carried out so that Sofortüberweisung can carry out an identity check to process your purchase. This makes it possible, among other things, to detect fraudulent activities and prevent the misuse of data. In addition, the data is transmitted so that Sofortüberweisung can check your account balance and, if necessary, assess your creditworthiness or Sofortüberweisung can pass on the data to credit agencies to assess your creditworthiness in the form of a credit check. DIRECTebanking uses the result of the credit check in relation to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The collected data may also be used by DIRECTebanking for analysis purposes, in particular for customer analysis, risk analysis, data analysis for the purpose of developing and improving the services offered by DIRECTebanking. Legal basis: The legal basis for the use of data as described above is Art. 6 para. 1 lit. a DSGVO, Art. 6 para. 1 lit. b DSGVO. Deletion: The data collected and transferred by us in this way is automatically deleted after 26 months. You can find more information on the terms of use and data protection of Sofortüberweisung at https://www.sofort.de/datenschutz.html Revocation: You can revoke your consent to the use of your personal data at any time compared to Sofortüberweisung. Despite revocation, Sofortüberweisung may still be entitled to process, use and transmit personal data that is absolutely necessary for the contractual payment processing.

Security measures
Furthermore, we take technical and organisational security measures in accordance with the state of the art in order to comply with the provisions of the data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties.


Actuality and change of this privacy policy
This data protection declaration is currently valid and has the status of April 2020. Due to changed legal or official requirements it may be necessary to adapt this data protection declaration.

This data protection declaration was created with the help of SOS Recht. You can find the data protection declaration generator here. SOS Recht is an offer from Mueller.legal Rechtsanwälte Partnerschaft, based in Berlin.

>