1. Data controller
2. Call of a website
When you use our offer, we automatically collect and process various data, such as
• Information about the accessing end device and the software used
• Date and time of the access
• Cookies and pseudonymised ID’s (like user ID, ad ID)
• Websites from which the users access our website or that the users access from our website
• IP address
The at least temporary storage of the IP address is technically necessary to enable the website to be delivered to the user's computer. Our servers also store your IP address for up to 14 days for our own security purposes (Art. 6 para. 1 point f GDPR).
For certain content or services to be provided on our website, users must sign in with a user account. Registration is required in order to obtain a user account. The processing of the data collected during registration is carried out for the purpose of implementing the user contract between us and you. The Legal basis for the data processing is Art. 6 para. 1 point b GDPR.
4. Mailings and newsletter
Your email address, which is collected during registration or during the performance of the contract, is also used by us to inform you about similar products or services that we offer, about existing subscriptions, and in general about Corona Ventures, if we have pointed this out to you when collecting the e-mail address and you have not objected to this. In this case, your email address will be processed on the basis of our legitimate interest in marketing our goods and services (Art.6 para. 1 point f GDPR). You have the possibility to object to the sending of this information about further product offers at any time, e. g. by clicking on the unsubscribe link provided for this purpose in each e-mail
If you have ordered one of our mailings or newsletters, we also use your e-mail address to send you the newsletter you ordered. The legal basis for data processing is Art. 6 para. 1 point b GDPR or Art. 6 para. 1 point a GDPR. You can revoke your consent at any time with effect for the future or unsubscribe from the newsletter you have ordered, e. g. by clicking on the unsubscribe link provided in each newsletter.
So-called tracking pixels are integrated into the e-mails for the purpose and in our interest of being able to optimise our newsletter. This provides us with information on which browser and operating system is used, which IP address is currently accessing and at the same time who the provider is. It also recognizes whether the e-mail has been read and whether the link integrated in the e-mail has been clicked on and the respective website has been visited via this IP address. In addition, the number of hits on the website is counted and the corresponding time of day is recorded when the e-mail was retrieved, and the access was made. The approximate location of the user is also transmitted. If you do not wish to receive the newsletter, you can unsubscribe at any time as described above. The legal basis for the data processing is Art. 6 para. 1 point f GDPR or Art. 15 para. 3 sentence 1 Telemedia Act (TMG).
For the purpose of and in the interest of showing you contents with regional reference to your place of residence, we process your IP address shortened to the geographical level of the federal states / regions. The geographical information acquired in this manner cannot under any circumstances be used to establish a user’s specific location. The legal basis for data processing is Art. 6 para. 1 point f GDPR.
6. Comment function
On our website and on individual blogs we offer the possibility to give comments and feedback for which personal data that you enter voluntarily is stored. If you have provided consent for this purpose, you will be able to submit and subscribe to comments on our website in some cases. The same applies to surveys that you participate in. If you wish to publish a comment, you will need to complete the fields for this purpose. You can also post under a pseudonym. If you do not complete the fields, you cannot publish a comment. We collect and process the data provided by you in order to be able to publish your comment as requested and to check for possible violations of our netiquette rules (Art. 6 para. 1 point c GDPR). In particular, we require your email address so that we can contact you about any objections to your comment and allow you make a statement in this connection (Art. 6 para. 1 point c GDPR).
7. If you contact us
When you contact us via one of our contact forms or by e-mail, the data you provide (your e-mail address, your name and telephone number if applicable) will be processed by us in order to process your request. We delete the data collected in this context when it is no longer required for the above-mentioned purpose, provided that there are no legal obligations to retain it. The legal basis for data processing is Art. 6 para. 1 sentence 1 point f GDPR. If you provide us with personal data of another person, you must obtain that person's express prior consent and inform him or her how we process personal data in accordance with our data protection declaration.
8. Place of processing
We also process data in countries outside of the European Union (EU) and the European Economic Area (EEA). To ensure the protection of your personal rights, including in connection with such data transmissions, we use the standard contractual clauses of the European Commission in accordance with Art. 46 para. 2 point c GDPR when establishing contracts with recipients in Third Countries. These are available on demand at http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2010:039:0005:0018:EN:PDF, and these documents can also be requested from us by contacting us using one of the methods specified below.
With individual recipients in the USA, an adequate level of data protection is also ensured by certifying these data recipients according to the EU-U.S. Privacy Shield (adequacy decision, Art. 45 GDPR). Further information - including on the certification of the service providers that we employ - can be obtained at https://www.privacyshield.gov.
9. Transmission of data
We will only transmit your personal data to third parties if transmission is required to comply with our contractual obligations to you if this evidently needs to be done through or jointly with another provider (e. g. partnerships), if we are permitted or required by law to transmit the data in any other fashion, or if you have provided us with the corresponding consent.
To provide our service, selected personal data may be transmitted to certain departments within our company, including employees of the Accounting, Product Management, Marketing and IT departments.
In certain cases we also employ external service providers or affiliates commissioned by us to process data on our behalf on the basis of instructions. We ensure that such service providers are contractually bound by the strict terms of the GDPR as data processors and that they are prohibited from using your data for any other purposes. Data processors employed by us provide the following services in particular: subscriber management, content recommendation, sending newsletters, survey/comment services and web/app analytics tools.
10. Cookies and similar technologies
Cookies are small files that your browser places in a folder designated for this purpose on your device. This makes it possible, for instance, to determine whether you have visited a website before. With your consent, cookies can also be used to store login details for an online service, meaning that you do not need to enter these login details every time you open the website. Many cookies contain what is known as a ‘cookie ID’. A cookie ID is a unique cookie identifier. It consists of a string of characters which websites and servers can associate with the specific web browser where the cookie has been stored. This enables visited websites and servers to differentiate between the specific browser of the data subject and other web browsers containing different cookies. A specific web browser can be recognised and identified using the unique cookie ID. Without additional information, cookies cannot be used to identify you personally.
Unless indicated otherwise, the legal basis is Art. 6 para. 1 point f GDPR and Section 15 para. 3 Telemedia Act (TMG). Where consent is given within the meaning of Art. 6 para. 1 point a GDPR, you have the right to withdraw this at any time, without this having any effect on the lawfulness of processing previously undertaken on the basis of consent before it was withdrawn. In the event of legitimate interest within the meaning of Art. 6 para. 1 point f GDPR, our legitimate interest lies in particular in the purposes mentioned above, and in the fundamental purposes of our business operations.
11. Web analytics tools
We use the Facebook pixel from Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). By accessing this pixel from your browser, Facebook can subsequently determine whether an ad displayed in Facebook was successful, e.g. led to an online sale. In this respect, we only receive statistical data from Facebook, which cannot be attributed to a particular person. This enables us to determine the effectiveness of Facebook ads for statistical and market research purposes. In addition, the data recorded by the pixel is used in certain situations to display audience-specific advertising. Particularly if you are signed in to Facebook, we would refer you to their privacy information https://www.facebook.com/about/privacy/. If you wish to prevent pixel data from being used for audience-specific advertising, you can do this by configuring the settings accordingly through the following link: https://www.facebook.com/ads/settings. Alternatively, you can disable the Facebook pixel through the Digital Advertising Alliance website using the following link:http://www.aboutads.info/choices/.
Facebook "Custom audiences from your website"
Facebook "Custom audiences from your mobile app"
We have integrated Google Ads into this website. Google Ads is an online advertising tool that allows advertisers to place ads in Google search engine results and in the Google advertising network. Google Ads enables advertisers to predefine certain key words, on the basis of which an ad is displayed in Google search engine results, only if the user accesses a search result through the search engine that is relevant to the key word. In the Google advertising network, an automatic algorithm distributes the ads across websites covering relevant topics, taking into account the predefined key words. The Google Ads tools are operated by Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland. The purpose of Google Ads is to advertise our website by displaying interest-based ads on third-party websites and in Google search engine results, and to display third-party advertising on our website. If a data subject comes to our website through a Google ad, Google places a "conversion cookie" on the data subject's IT system. An explanation of what cookies are is provided above. Conversion cookies expire after thirty days and are not used to identify the data subject. Until the conversion cookie expires, it tracks whether certain subpages, for example the shopping basket in an online store, is accessed on our website. The conversion cookie enables both us and Google to track whether a data subject who came to our site via a Google Ads ad generated a sale, in other words whether they completed a purchase or not.
The data and information collected using the conversion cookie is used by Google to create visit statistics for our website. In turn, these visit statistics are used by us to determine the total number of users that came to us via Google Ads ads, in other words to determine the success or failure of the ad in question, and to optimise our ads for the future. Neither we nor other advertising customers of Google Ads receive information from Google that could be used to identify data subjects.
Personal information, such as the websites visited by the data subject, is stored by the conversion cookie. Each time our website is visited, personal data, including the IP address of the Internet connection used by the data subject, is transferred to Google. This personal data is stored by Google. In some cases, Google may share the personal data collected through this technical process with third parties.
The data subject can prevent cookies from being set by our website at any time, as explained above, by configuring the web browser they use to block cookies. Configuring the web browser in this way will also prevent Google from setting a conversion cookie on the data subject's IT system. A cookie already set by Google Ads can also be deleted at any time using a web browser or another software solution.
The data subject also has the option of blocking interest-based advertising by Google. To do so, the data subject must access the link https://adssettings.google.com/ from each browser they use and configure the necessary settings.
We have integrated Google Analytics (with anonymisation function). Google Analytics is a web analytics tool from Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland. Web analytics is the collection and analysis of data about the behaviour of website visitors. A web analytics tool collects, among other things, data about the website from which a data subject arrived at particular website (known as the referrer), the subpages of the website that were accessed and how often and for how long a subpage was looked at. Web analytics is primarily used to optimise a website and for cost-benefit analysis of online advertising.
For web analytics via Google Analytics we use the suffix "_gat._anonymizeIp". This means that the IP address of the data subject's Internet connection is truncated and anonymised by Google if our websites are accessed from a Member State of the European Union or from a contracting state of the Agreement on the European Economic Area.
The purpose of the Google Analytics component is to analyse visitor flows on our website. Among other things, Google uses the data and information obtained to analyse the use of our website, to compile online reports for us detailing activities on our websites, and to provide other services connected with the use of our website.
Google Analytics sets a cookie on the data subject's IT system. An explanation of what cookies are is provided above. Setting the cookie enables Google to analyse the use of our website. Each time one of the individual pages of this website is accessed, which is operated by us and incorporates a Google Analytics component, the web browser on the data subject's IT system is automatically prompted by the respective Google Analytics component to transmit data to Google for the purposes of online analysis. As part of this technical process, Google gains knowledge of personal data, such as the IP address of the data subject, which Google uses, among other things, to track the origin of visitors and clicks, and to subsequently enable commission to be calculated.
Using the cookie, personal information is stored, such as time and location of access and the frequency of visits to our website by the data subject. Each time our website is visited, this personal data, including the IP address of the Internet connection used by the data subject, is transferred to Google. This personal data is stored by Google. In some cases, Google may share the personal data collected through this technical process with third parties.
The data subject can prevent cookies from being set by our website at any time, as explained above, by configuring the web browser they use to block cookies. Configuring the web browser in this way will also prevent Google from setting a cookie on the data subject's IT system. A cookie already set by Google Analytics can also be deleted at any time using a web browser or another software solution.
Our website also uses Google Optimize. Google Optimize analyses the use of different versions of our website and helps us to improve the site's user-friendliness in keeping with user behaviour. Google Optimize is a tool integrated in Google Analytics.
This website uses Hotjar (Hotjar Ltd, Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta), an all-in-one analysis and feedback tool that reveals the online behaviour and feedback of website visitors. We use this tool to evaluate and analyse user feedback (such as clicks, mouse movements, scroll heights, etc.) so that we can improve the functionality and user-friendliness of our website, making it more effective and easier to use. Via the tracking code and cookie, information about your visit to our website is transmitted to Hotjar and stored.
The following information about the device and browser can be collected by the tracking code:
• IP address of the device (collected and stored in anonymised form)
• Size of the device screen
• Device type (individual device identification features) and browser information
• Geographical location (country only)
• Preferred language for website display.
The following log data can be recorded by the tracking code:
• Referring domain
• Pages visited
• Geographical location (country only)
• Preferred language for website display
• Date and time the pages of the website were accessed
If you have reached our website via an advertising banner from an external website, we receive information from the operator of the external website ("affiliate") that a user has reached our offer via the external site. This is the product ID assigned to the advertised offer as well as the identification number of the affiliate (affiliate ID) and a user ID created from any number sequence. This information is stored by us in a cookie on your end device. If you order the offer on our website within 30 days, this information is automatically transmitted to the affiliate in encrypted form when the order process is completed. The cookie is automatically deleted upon completion of the order process, but after 30 days at the latest. The Affiliate can only recognize from this information that a user has reached our website from an external website via the advertising banner and has ordered the advertised product there. A processing of personal data does not take place hereby. Information on the processing of personal data by the Affiliate can be found in the Affiliate's data protection information on its website.
13. Facebook Fanpages
At the following links we use Facebook Fanpages, for which we are joint controllers with Facebook Ireland Limited: https://www.facebook.com/CoronaVentures2020.
As joint controllers with Facebook, we analyse how you use our Fanpage (Page Insights). The information required under the GDPR regarding data processing in relation to Page Insights can be obtained from Facebook; it is currently available in Facebook privacy policies at https://www.facebook.com/privacy/explanation.
Facebook also provides the relevant content of the contract concluded between Facebook and us on processing under joint controllership pursuant to Art. 26 GDPR; this is currently available at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
In relation to Page Insights, we only receive anonymised statistics. We have no access to personal data processed by Facebook. Anonymised data is processed by us on the basis of statutory provisions that allow us to process personal data because we have an overriding legitimate interest in obtaining a better understanding of the interests of visitors to our Fanpages (Art. 6 para. 1 point f GDPR).
On the Fanpages, Facebook offers various community functions which enable you to interact with other users, for example by making posts, leaving comments or liking or sharing posts. We would point out that these areas are publicly accessible and any personal information that you post or provide during sign-in can be seen by others. We have no control over how other Fanpage users use this information. In particular, we cannot stop unwanted messages being sent to you.
14. Social Plugins
There are no social media plugins integrated on this website that directly load data from the servers of the respective social media providers. The integrated "plugins" are rather simple links to the respective third party sites, which we illustrate with appropriate graphics. A transmission of personal data to the operator of the social media service by the known plugins therefore does not take place.
15. Integration of third-party providers
• Getty Images (Getty Images International, 1st Floor, The Herbert Building, The Park, Carrickmines, Dublin 18, Ireland)
• Giphy (Giphy, Inc., 416 W 13th Street Suite 207, New York, NY 10014, USA)
• Google Maps (Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland)
• Twitter.com (FENIAN STREET D02 F663 Dublin IRELAND)
16. Storage duration
We process personal data only as long as this is necessary for the respective purpose mentioned above. The personal data is then deleted, provided that there are no legal retention periods to prevent data deletion.
17. Contact details and your rights as a data subject
Should you have any queries or comments on data protection and privacy or wish to exercise your rights as a data subject, please contact our data protection officer at any time:
Axel Springer hy GmbH
Where data processing in relation to Page Insights for our Facebook Fanpages is concerned (https://www.facebook.com/CoronaVentures2020), Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland acts as joint contact point and handles all requests regarding the assertion of stated rights.
▫ Information and rectification
You can receive information at any time and at no charge about whether we are processing personal data related to you and also about which information we are specifically storing about you. You are also entitled to receive a copy of the stored information. You can also have errors in your data corrected and missing information completed.
▫ Erasure, restriction of processing and “right to be forgotten”
You can request that your data be erased and its processing restricted. Please note that statutory retention obligations are in effect for contracts relating to paid services (such as the purchase of a subscription to Corona Ventures) and that we will therefore not always be able to fully erase your data completely in all cases. In this case, your data will be labelled to the effect that future processing should be restricted.
▫ Data portability
Where applicable, you also have the right to have your personal data transmitted to you or to another data controller in a structured, standardised and machine-readable format, as long as processing is performed on the basis of consent or contract using automated procedures. This does not apply, however, where the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. You also have the right to have the personal data transmitted directly from one data controller to another, provided that it is technically feasible to do so and does not infringe upon the rights and freedoms of other persons.
▫ Withdrawal of consent, objecting to processing
You can withdraw your previously-given consent at any time with effect for the future by contacting the aforementioned address.
Moreover, you have the right to object to the processing of your personal data at any time (where such processing is based on a legitimate interest) for reasons arising from your particular circumstances. This also applies to profiling activities based on these provisions. If such an objection is received, we will cease to process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, of if the processing is for the establishment, exercise or defense of legal claims.
If we are processing personal data for the purpose of direct marketing, you have the right to object to the processing of your personal data at any time for the purpose of such marketing by contacting the aforementioned address. This also applies to profiling insofar as it is connected with such direct marketing. You also have the right to file an objection for reasons arising from your particular circumstances against processing of your personal data that we are engaged in for scientific, historical research or statistical purposes, unless such processing is required to perform a task that is in the public interest.
▫ Right of complaint
You also have the right to submit a complaint to the competent supervisory authority and to seek legal remedies. The supervisory authority to whom the complaint was submitted will notify the complainant about the status and result of their complaint, including the option of seeking a legal remedy through a court of law.
Last revised: April 3, 2020