Privacy

We operate the website www.duncker-humblot.de and collect certain data from our customers and visitors where necessary. In the following data privacy statement you will be informed on what we do with your data, the so-called personal data, and why we do this. We will also inform you on how we protect your data, when this data is deleted and what rights you have due to data protection. First of all: We adhere to the data protection laws and protect your privacy.

But we want to be frank: The Internet lives from data exchange and still has many security gaps. Even if your data is encrypted when you visit our website, there is always a residual risk at the latest when exchanging data with other websites. If you visit other websites – for example via a link on our website – please note that this data protection declaration does not apply to the external website.

What is personal data?

Personal data in this sense means all individual details about personal or factual circumstances of a specific or identifiable natural person, such as name, address or email address but also IP addresses.

Who can I contact?

Duncker & Humblot is responsible for their services and for the protection of your data. You can reach us at:

Duncker & Humblot GmbH
Carl-Heinrich-Becker-Weg 9
12165 Berlin

Telefon: +49 30 790006-0
Fax: +49 30 79000-31

E-Mail: verlagduncker-humblot.de

Data Protection Officer

If you have specific questions about your personal data, deletion of your personal data or similar issues, you can contact our Data Privacy Officer via email at datenschutzduncker-humblot.de.

What are my rights?

You can contact us at any time if you have any questions about your rights regarding data protection or if you wish to exercise any of the following rights:

• Right to withdraw your consent in accordance with Art. 7 para. 3 GDPR (e.g. you can contact us if you wish to cancel your previously given consent to a newsletter)

• Right to access your data in accordance with Art. 15 GDPR (e.g. you can contact us if you would like to know what data we have stored of you)

• Right to correct your data in accordance with Art. 16 GDPR (e.g. you can contact us if your email address has changed and we should replace your old email address)

• Right to have your data deleted in accordance with Art. 17 GDPR (e.g. you can contact us if you want us to delete certain sets of data that we have stored about you)

• Right to limit data collection in accordance with Art. 18 GDPR (e.g. you can contact us if you do not want us to use your email address for newsletters, but only to send absolutely necessary emails)

• Right to take transfer your data in accordance with Art. 20 GDPR (e.g. you can contact us to receive your data in a zipped format, if you want to upload it to another website)

• Right to object to how your data is handled in accordance with Art. 21 GDPR (e.g. you can contact us if you do not agree with any user analytics procedures as described within this privacy policy)

• Right to send complaints to the supervisory authority in accordance with Art. 57 para. 1 f GDPR (e.g. you can contact the data protection supervisory authority directly)

Deletion of data and storage periods

Unless otherwise stated, we will delete or anonymise your data as soon as it is no longer needed (e.g. your email address after you have unsubscribed from our newsletter). Your data will also be deleted or anonymised automatically if the mandatory storage period expires (e.g. ones required by law for payment transactions). Such data may be needed for longer periods of time for legal reasons. You can request information about all personal data we have stored about you.

Visiting our website

If you merely wish to browse our website, we do not collect any personal data, with the exception of the data that your browser sends to us, e.g.:

• IP address (e.g. 96.92.316.example or 2a02:7122:8337:1112:bdb2:651f:example)

• Approximate location based on IP range (e.g. “Berlin & surrounding area”)

• Internet provider (e.g. „Unity Media“ or „Deutsche Telekom”)

• Internet connection speed (e.g. 120 Mbit)

• Date and time of visit (e.g. 11:45 on 25.05.2018)

• Website that was visited last (e.g. google.com)

• Browser and version (e.g. Chrome v65 or Safari 11.1)

• Operating system (e.g. Mac OS)

• Hardware (e.g. Intel processor)

The most interesting piece of information you as a visitor provide our website is probably your IP address, since it can theoretically be traced back to you as a person.

As a safeguard to protect your privacy, we delete or anonymise your IP address after your visit. Therefore, all other data that may possibly be attached to it can no longer be traced back to you. It will only serve anonymous and statistical purposes to optimise our website.

The purpose of temporarily storing such data is to establish a connection as well as to ensure that the website is displayed normally. Such data is therefore required to display the website on your screen, to avoid display problems and other technical error messages. The legal basis is the legitimate interest in accordance with the European data protection requirements under Art. 6 para. 1 lit. f GDPR. In addition, we apply the aforementioned safeguards to protect your data.

Contact forms

When you contact us directly via email we only store your email address and the corresponding content for the purpose of your request and delete it afterwards:

• Customer number

• Salutation

• First name/last name (obligatory)

• Company

• Postcode/Street/House number

• Place/Country

• Phone/Fax

• Email address(required)

• Subject/Subject area

• Message or booking request

As a safeguard to protect your privacy, contact is established via an encrypted connection – just like when visiting the rest of the website. In addition, we apply the principle of data minimization and collect only the data actually required in the contact form. After successfully establishing contact and finally omitting the contact reason your data is deleted.

The purpose of the data requested is to contact you, which is why the data is only used for this purpose. The legal basis is your consent in accordance with the European data protection requirements under Art. 6 para. 1 lit. a GDPR.

Applicants' Data

We collect and process the personal data of applicants for the purpose of processing the application procedure. Processing may also be carried out electronically. This is particularly the case if an applicant sends corresponding application documents to us by electronic means, for example by email or via a web form on the website. If we conclude an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If we do not conclude an employment contract with the applicant, the application documents shall be deleted 3 months after notification of the decision of refusal, provided that no other legitimate interests of us stand in the way of deletion. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the German General Equal Treatment Act (AGG).

Newsletter

We use the so-called double opt-in procedure for the provision of our newsletter. We will therefore only send you a newsletter by email if you confirm in our notification email that you would like to receive our newsletter by clicking on a link. If you confirm your wish to receive the newsletter, we will save your email address for the purpose of sending the newsletter.

Of course you can unsubscribe from our newsletter at any time – you will find a link in every newsletter. If you click on the link you will be redirected and will be able to confirm your cancellation in an email. This way we can ensure that the logoff is implemented in all processes. Alternatively, you can contact us using the contact details above.

Cookies

We use cookies on our website. Cookies are small text files that are usually stored in a folder from your browser. Cookies contain information about the current or last visit to our website:

• Name of the website

• Expiration date of the cookie

• Arbitrary value

If cookies do not contain an exact expiration date, they are stored only temporarily and are automatically deleted as soon as you close your browser or restart your device. Cookies with an expiration date will still be stored even when you close your browser or restart your device. Such cookies will not be deleted until the specified date or if you delete them manually.

We use the following types of cookies on our website:

• required cookies (cookies that are required, e.g. to display the website correctly for you and to store certain settings temporarily)

• functional and performance-related cookies (cookies that help us improve our website, e.g. to evaluate technical data of your visit and avoid error messages)

The specification of third-party cookies we use on our website is as follows:

You can configure, block and delete cookies in your browser settings. If you delete all cookies from our website, some functions of the website may not be displayed correctly. Further information on cookies and how to configure them can be found here in German https://www.bsi-fuer-buerger.de/BSIFB/DE/Empfehlungen/EinrichtungSoftware/EinrichtungBrowser/Sicherheitsmassnahmen/Cookies/cookies_node.html or here in English https://ico.org.uk/for-the-public/online/cookies/

Web Analytics with Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google Inc. (www.google.com). Google (Universal) Analytics uses methods that allow you to analyze the use of the website, such as so-called "cookies", text files that are stored on your computer. The latest information about your use of this website is transmitted from and stored by a Google server in the United States. By activating IP anonymization, this IP address will be truncated before being transmitted within the European Union or in other Contracting States to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. The anonymized IP address provided by Google Analytics within the framework of Google Analytics will not be merged with other data provided by Google.

You may choose to collect the data through the cookie and prevent your use of the Website (including your IP address) and the processing of this data by Google: https://tools.google.com/dlpage/gaoptout?hl=en

As a safeguard to protect your privacy, we use an anonymisation procedure, whereby a subsequent evaluation of the data is not based on your person, but only on a statistical basis. You also have the option of completely stopping the analysis using the link above.

Its purpose is the anonymous analysis of your usage behaviour on our websites. The knowledge gained from this helps us to improve our offers. The legal basis is the so-called legitimate interest, which has been examined in order to pursue the purpose and within the framework of the aforementioned protective measures and in accordance with the European data protection requirements under Art. 6 para. 1 lit. f DSGVO.

Twitter

We use Twitter of Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103 U.S.A. linked to our site. Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland is responsible for the processing of data of persons living outside of the United States. We would like to point out that you use the Twitter short message service offered here and its functions on your own responsibility if you click on the embedded link. Information on what data is processed by Twitter for what purposes can be found in the Twitter data protection declaration: https://twitter.com/de/privacy

Twitter Inc. is committed to the principles of the EU-US Privacy Shield. More information can be found at: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active

By using Twitter, your personal information is collected, transmitted, stored, disclosed and used by Twitter Inc. and is transferred to, stored and used in the United States, Ireland and any other country in which Twitter Inc. does business, regardless of where you live.

Twitter processes the data you enter voluntarily such as name and user name, e-mail address, telephone number or the contacts in your address book when you upload or synchronize it. Twitter Inc. may use analysis tools such as Twitter or Google Analytics for analysis. We have no influence on the use of such tools by Twitter Inc. and have not been informed of such potential use.

Date of the privacy policy: December 2018