Thank you for visiting our website www.united-kiosk.de (hereinafter referred to as "Website") and using our apps (hereinafter referred to as "Apps"). The protection of your personal data is of particular concern to us. We only collect and use your personal data if we are entitled to do so on the basis of a statutory provision or on the basis of consent granted by you. In this data protection declaration, we provide you with information on the processing of personal data when visiting and using our website and our apps.
Name and contact details of the person responsible under data protection law and the data protection officer Responsible under data protection law within the meaning of the DS-GVO is:
United Kiosk AG CAS-Weg 1-5 76131 Karlsruhe Germany
If you visit our website only to find out about its content, we collect and temporarily store the following, possibly personal information that your browser transmits to our server:
- IP address - Date and time of the request - Execution time of the request - Time zone difference to Greenwich Mean Time (GMT) - Content of the request (specific page) - Access status/HTTP status code - Respective amount of data transferred - Website from which the request came - Browser - Operating system and its interface - Language and version of the browser software.
This data is technically necessary to display the website to you and to ensure stability and security, in particular to be able to detect and prevent attacks or abusive viewings. We delete the log files containing this data after seven days, unless otherwise stated in this privacy policy.
Use of cookies and analysis tools
Legal basis
The legal basis for the use of cookies and comparable technologies, which are necessary for the operation of the website or the apps and do not enable tracking of user behaviour across pages and devices, is Art. 6 para. 1 lit. b DS-GVO (implementation of pre-contractual measures and fulfilment of contract). The legal basis for the use of cookies and comparable technologies for website analysis is Art. 6 para. 1 sentence 1 lit. f DS-GVO (safeguarding legitimate interests, unless interests of the data subject prevail). The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 para. 1 lit. a DSGVO if the user has consented to this.
Data transfer to third countries
As the use of some cookies involves the transfer of personal data to the USA, further safeguards are required to ensure the level of data protection of the GDPR. To ensure this, we have agreed standard contractual clauses (SCC) with the provider in accordance to Article 46 DSGVO. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be guaranteed even through this contract extension, we strive to obtain additional regulations and assurances from the recipient in the USA.
Orders and registration; customer enquiries
Ordering from us
If you order products from us via the online shop of our website or via our apps, we will store and use the information you have requested as mandatory in the respective order mask for the processing of your order and the conclusion as well as the fulfilment of the contract and the settlement of any contractual claims or obligations. Furthermore, we also use the order data to inform you of interesting offers if you log in as a registered customer when visiting our website or visit your "library" (cf. para. (4) below). In addition to the e-mail address required to order digital content (e.g. ePaper or eSubscriptions), you can also voluntarily enter your name and title, which will then only be used for a personalised address. Please also note the information below in paragraphs (4) to (6) of this section 3 when ordering digital content.
If, as part of your order in our online shop or via our app, you order a free Plus product from a third-party provider in addition to the product ordered from us, information about the product ordered from us, namely the item number and product name, will also be transmitted to this third-party provider. You will be expressly informed of this in the respective order process. You will be informed of the contact details of this third-party provider as part of the specific order process. The legal basis is the legitimate advertising interest of the third-party provider with regard to products from its own range, in accordance with Art. 6 Para. 1 lit. f) DSGVO.
For fiscally correct invoicing, we also collect and use information on whether you are ordering as a consumer or as an entrepreneur and where your place of residence or habitual residence is located; relevant information in this respect includes, for example, your VAT identification number and your IP address.
Depending on the payment method you have chosen, you may be directed to a separate website of the corresponding provider of the selected payment system when ordering a product. There, this provider collects the necessary payment data for the purposes of payment.
Orders with third parties
Insofar as contracts concluded via our online shop or via our apps are not concluded with us, but with third parties in accordance with the declarations made in the ordering process and our GTCs as well as any GTCs of third parties that may be included (e.g. directly with publishers in the case of certain magazine subscriptions or other offers), we will forward the personal data provided by you in the order and necessary for the conclusion and performance of the contract to the respective third party specified in the ordering process for this purpose. If the specified third party (e.g. the publisher in the case of certain ordered magazine subscriptions or other offers) has commissioned a service provider to conclude the contracts on its behalf and/or to process a subscription order, we will inform you of this in the order process and also forward your specified data to this service provider for this purpose. In the event that a contract is concluded with a third party via our online shop or via our apps, please also note the information in section 5 paragraph (5) on any e-mail advertising that may be carried out by the third party.
A list of the publishers to whom your data is forwarded in the event of an order for a product from this publisher can be found here.
Ordering a free ePaper
When you order a free ePaper in our shop, we pass on your e-mail address to the publisher of the ePaper. They can inform you about their editorial offers and send you offers to your e-mail address. You will be informed of the details about the respective publisher in the specific order process. You will also find these in the data protection declaration of the respective publisher, the address of which will be communicated to you in the specific order process as well as in every e-mail sent by this publisher. The legal basis for this is your consent to the forwarding of the e-mail address and to the advertising in accordance with Art. 6 Para. 1 lit. a) DSGVO and § 7 Para. 2 No. 3 UWG. You can revoke your consent at any time. This can be done either by clicking on this unsubscribe link or by clicking on the unsubscribe link at the end of each advertising email.
Orders for delivery to third parties (e.g. gift subscriptions)
If you request us to deliver an ordered product to a third party named by you or to make it available for download to a third party named by you (such as in the case of gift subscriptions), we will also use the personal data of the named third party provided by you for the above-mentioned purposes. Please ensure that in such a case you do not provide the third party's data contrary to their will and that the provision of such data does not conflict with any overriding interests of the third party.
Refer a friend
If you have referred a new customer and this new customer has provided us with your name, address and e-mail address, we will use this address data or, if applicable, the e-mail address exclusively to send you the bonus for your friendship referral. Whether the reward is sent by post or by e-mail depends on whether it is a physical, non-monetary reward or a digital reward. The dispatch of non-monetary rewards may be handled by a cooperation partner. We will provide them with the data required for dispatch. We will inform you of the details in the context of the voucher dispatch. The legal basis for the processing is Art. 6 Para. 1 lit. b) DS-GVO. Further information on data processing by our cooperation partners can also be found in their privacy policy. The address data and the e-mail address will only be stored until the reward has been sent. Your name will not be stored longer than mentioned in point 10 of this privacy policy.
Mere provision of products by us that you have purchased from third parties
If, on the basis of a separate agreement with a third party, e.g. with a publisher, or on the basis of a voucher issued by a third party, a digital content is provided to you via our online shop merely on behalf of the third party, we will process the e-mail address you have provided. This is necessary to make the provision technically possible. The legal basis for this processing is Art. 6 para. 1 lit. b) DSGVO.
Setting up a user account when ordering digital content; library feature
When you order digital content (e.g. ePaper or eSubscription) for the first time, we will send you an activation link to the e-mail address you provided when placing your order and set up a personal user account for you. You must log in there to download the digital content by entering a personal password. This also provides you with a library function (hereinafter referred to as "library") in accordance with our General Terms and Conditions, which you can use to read the digital content online even after downloading it, view your order history and manage any existing subscriptions. In addition, notifications of interesting offers may be displayed there.
When you log in to your user account, you can voluntarily provide further personal information in addition to the information you already provided when placing your order, e.g. your name and title so that we can address you personally, or your reading interests so that we can take these into account when informing you about interesting offers. If you order further products while you are registered via the user account, our system recognises you as an already registered customer and allows access to already stored order data. You can update stored data in your user account, manage advertising settings and change or reset named reading interests in your profile.
We use your personal data in the manner described here within the framework of the user account and the library feature as long as the registration exists. You can terminate an existing registration at any time by making a corresponding declaration, e.g. by sending an e-mail to our e-mail address stated in point 2 above.
Use of the user account for the "Zeitschriften in die Schulen" programme
If you make use of our offer within the framework of the " Zeitschriften in die Schulen " programme, the explanations given under (7) "Setting up a user account when ordering digital content; library feature" apply with the proviso that we create a user account for you which bears a pseudonymous user name and send you a password for using this account. In this case, neither your name nor your contact details will be processed in order to open and provide the user account. The legal basis for the data processing is Art. 6 para. 1 lit. b) DS-GVO.
Notification of new issues within the framework of existing eSubscriptions
Within the framework of existing subscription contracts for the purchase of digital press products, we will inform you, if necessary, by e-mail to the e-mail address given when the order was placed, about the availability of new digital issues of the press product to which you have subscribed.
Use of flat-rate subscription offers
Insofar as we offer digital newspaper or magazine issues for online reading or downloading as part of a flat subscription offer in return for a flat fee, we collect and use information on the extent of the use of this service, in particular the number of digital newspaper or magazine issues or the pages of such issues read online and/or downloaded during certain periods. This information is used for the purpose of settling the pro rata remuneration agreed with the publishers for this use and is communicated to the publishers in anonymised form in sales reports for billing purposes. Furthermore, we use this information to inform you of interesting offers if you log in as a registered customer when visiting our website or visit their library (cf. para. (4) above).
In the context of the use of a flat subscription offer, we also contact you via e-mail to provide you with information about the booked flat subscription, e.g. information about changes to the content of the subscription such as new magazines and issues or improved functions of the user account or its legal framework. The selection and sending of subscription benefits in this context is carried out for the interest-oriented implementation of the subscription contract. The legal basis for data processing in this respect is Art. 6 (1) lit. f DSGVO. Our legitimate interest consists in a customer-friendly design of our flat subscription offer. The sending of contractual communication in this context is carried out in execution of the subscription contract on the basis of Art. 6 para. 1 lit. b DSGVO.
Processing of personal data when selecting the payment method "PayPal" or "processed by PayPal".
If you decide to use the payment services of PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg), you will be redirected directly to the Internet pages of PayPal. Independently of this, we transfer the following data to PayPal - E-mail-address, surname and first name of the orderer (if available) - The delivery address with surname and first name (in the case of a different delivery address also names of third parties, if applicable) - Products in the shopping basket and their prices - subscription number / order number.
After a risk check by PayPal, we only receive information from PayPal for further order processing as to whether the order is accepted or rejected (possibly after manual checking by PayPal). Please note the privacy policy of PayPal, which you can find here.
To enable payment via PayPal, we use technically necessary cookies during the checkout process, an overview including the duration of storage can be found here. The legal basis is Art. 6 para. 1 lit. f DSGVO.
PayPal transmits your first and last name as well as your address to us during the payment process, as you have provided them to PayPal. We use this data to invoice you. The legal basis for this use of data is Art. 6 Para. 1 lit. b) DSGVO. In this respect, please also note the data protection information of PayPal.
Storage of contract text and order confirmation
In accordance with legal requirements, we store the text of the contract and send you the data by e-mail. For security reasons, your order data is not accessible to you as the orderer via the Internet.
Integration of the Trusted Shops Trustbadge
We integrate the Trusted Shops Trustbadge in order to display our Trusted Shops seal of approval and any ratings collected, as well as to offer Trusted Shops products to buyers after they have placed an order.
This serves to protect our legitimate interests in optimal marketing by enabling secure shopping in accordance with Art. 6 Para. 1 S. 1 lit. f DSGVO, which prevail in the context of a balancing of interests. The trust badge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. The Trustbadge is provided by a CDN provider (Content Delivery Network) within the framework of order processing. Trusted Shops GmbH also uses service providers from the USA. An appropriate level of data protection is ensured. Further information on the data protection of Trusted Shops GmbH can be found in their data protection declaration.When the Trustbadge is called up, the web server automatically saves a so-called server log file, which also contains your IP address, the date and time of the call-up, the amount of data transferred and the requesting provider (access data) and documents the call-up. Individual access data are stored in a security database for the analysis of security anomalies. The log files are automatically deleted 90 days after creation at the latest.
Further personal data are transferred to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or if you have already registered to use them. The contractual agreement between you and Trusted Shops applies. For this purpose, personal data is automatically collected from the order data. Whether you as a buyer are already registered for product use is automatically checked using a neutral parameter, the email address hashed by cryptological one-way function. The e-mail address is converted into this hash value, which cannot be decrypted by Trusted Shops, before it is transmitted. After checking for a match, the parameter is automatically deleted.
This is necessary for the fulfilment of our and Trusted Shops' overriding legitimate interests in the provision of the buyer protection linked to the specific order in each case and the transactional evaluation services in accordance with Art. 6 para. 1 p. 1 lit. f DSGVO. Further details, including the objection, can be found in the Trusted Shops privacy policy linked above and in the Trustbadge.
Customer enquiries
If you simply contact us with questions and provide us with personal data, we will only use this data to answer the question.
hCaptcha
We use hCaptcha on our website, a bot recognition software from the provider Intuition Machines, Inc, 2211 Selig Drive, Los Angeles, CA 90026, USA.
With the help of hCaptcha, we can check whether the data entry in the contact form on our website is made by an automated software programme or a real person. This enables us to protect our website from abusive automated spying and SPAM. For this purpose, cookies and other tracking technologies are used on the website visitor's end device to analyse the website visitor's behaviour based on various characteristics as soon as the website visitor enters the website with hCaptcha activated. To recognise this, hCaptcha collects the IP address and device information of the website user, such as the time spent on the website or mouse movements made.
The data collected is forwarded to the provider Intuition Machines, Inc for analysis. It cannot be ruled out that the provider may also use the data in de-identified form for its own purposes for the further development of the services, identification of security risks and fraud prevention. The transfer of data to the provider is based on standard contractual clauses in accordance with Art. 46 DSGVO. The data collected for bot detection is deleted after one year. Statutory cookies remain stored for up to 30 days.
The data is collected, stored and analysed on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, as the consent includes the storage of cookies or access to information in the user's end device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time. If you withdraw your consent, your data will be deleted immediately. Further information on hCaptcha can be found in the privacy policy and terms of use at the following links: https://www.hcaptcha.com/privacy and https://hcaptcha.com/terms.
Legal basis
The legal basis for the processing referred to in paragraphs (1) to (9) above is Art. 6 para. 1 sentence 1 lit. b DS-GVO (performance of contract). Insofar as personal data are subsequently also used for the communication of interesting offers in the library or for personalised advertising when visiting the website as a registered customer, as well as for the processing mentioned in paragraphs (10) and (11), the legal basis is Art. 6 para. 1 sentence 1 lit. f DS-GVO (protection of legitimate interests, insofar as the interests of the data subject do not prevail). The legal basis for sending push messages (12) and our live chat (13) is the existence of your consent in this regard, Art. 6 para. 1 lit. a DSGVO.
Sending our newsletter by e-mail
We will send you our newsletter by e-mail if you give us your consent via the input mask provided. In the newsletter you will receive interesting information about the products and services we offer.
We use the so-called double-opt-in procedure for consenting to the sending of newsletters. This means that after your registration, we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you have consented to the sending of the newsletter. If you do not confirm your registration within 24 hours, we will delete the information you provided when ordering the newsletter, unless you have already provided us with this information by other means for other purposes (e.g. for contacting you to answer questions or in the context of contracts to be fulfilled) and we are still allowed to use the information for these other purposes. In addition, we store your IP addresses used and the times of registration and confirmation so that we can prove your registration and, if necessary, clarify a possible misuse of your personal data.
The only mandatory information for sending the newsletter is your e-mail address. The separately marked indication of your name is voluntary and serves only the personal address in the newsletter.
After your confirmation, we store your e-mail address for the purpose of sending you the newsletter.
You can revoke your consent to the sending of the newsletter at any time with effect for the future and unsubscribe from the newsletter, e.g. by clicking on the link provided for this purpose in the newsletter, by sending an e-mail to our e-mail address given above under point 2 or by sending a message to the contact details given in our imprint.
The legal basis for the aforementioned processing is Art. 6 para. 1 p. 1 lit. a DS-GVO (consent).
Other advertising by e-mail to existing customers
Pursuant to Section 7 (3) of the German Unfair Competition Act (UWG), advertising by e-mail is permissible by way of exception even without prior consent. This applies if you are already a customer of ours, e.g. if you have purchased one of our products or taken out a subscription with us. In this case, we may send advertising and interesting news to the e-mail address that you provided when purchasing one of our products, if the advertising relates to our own similar products and if you have not objected to this. We will also inform you about this, and in particular about the possibility to object at any time, directly when you enter your e-mail address.
We reserve the right to make use of this possibility. We may therefore send you advertisements about interesting similar offers of our own to the e-mail address you have given us when ordering a product.
You can object to this at any time. You will not incur any costs for an objection other than the transmission costs according to the basic rates.
The legal basis for e-mail advertising in accordance with this clause 5 is Section 7 (3) UWG and Art. 6 (1) p. 1 lit. f DS-GVO.
If a contract is not concluded with us via our online shop or our apps, but with a third party (cf. section 3 para. (2)), this third party may also send you advertising for its own similar offers to the e-mail address provided to it when you placed your order, in accordance with section 7 para. 3 of the German Unfair Competition Act (UWG) and Art. 6 para. 1 sentence 1 lit. f of the German Data Protection Regulation (DS-GVO). You can also object to this at any time. You will not incur any costs for such an objection other than the transmission costs according to the basic rates.
Information about your favourites
If you have given your consent, we will use your e-mail address and your first name and surname to send you information via e-mail about journals marked as your "Favourites" as well as other journals comparable to your favourites. You can cancel your consent at any time in your customer account under "Advertising settings" by deleting the magazine from your favourites. Alternatively, you can easily revoke your consent by sending an e-mail to info@united-kiosk.de. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. a) DSGVO.
Purchase and use of our apps
When you download an app from the App Store, personal data is regularly collected and used by the operator of the App Store. The operator is responsible for this under data protection law. You should therefore observe the data protection information in the App Store.
When you launch one of our apps, we load some device-dependent information to enable you to use the app, including an ID to make your in-app purchases available to you in the app's library, the type/name of your mobile device for device management, and the device token, in particular to be able to send push notifications to the device if necessary. You can give your consent to receive push notifications when you first start the app and activate or deactivate it at any time at the Android or iOS system level.
In addition, you have the option of registering in the app with your email in order to synchronise your purchases of digital content across devices as a registered user and to read such digital content across devices as well as to make use of the Trusted Shops buyer protection. If you already have an account with United Kiosk, you can log in with your personal password for this purpose.
If you have activated the iCloud service in your settings on your Apple end device, our apps check at start-up whether the feature has been activated and store your email address as an app-related setting in your iCloud account, provided you have previously stored this under "My Account" in the app menu. Your library is then loaded and output via this mail address. With this function, if you use the same Apple ID on several devices, you can immediately use the app with the same settings without having to enter them again. This synchronisation takes place due to a service from Apple within the iCloud service; you can prevent the synchronisation in your iOS settings at app level at any time.
In all other respects, the provisions of this privacy policy also apply to the use of our apps, unless otherwise stated.
Disclosure of data to third parties
We may disclose personal data to third parties, e.g. publishers, distributors, payment service providers or providers of seals of approval and related services such as Trusted Shops, for the purposes stated in this privacy policy. In addition, in some cases we commission processors to process the personal data on our behalf and according to our instructions, e.g. within the scope of technical services. These have been carefully selected by us in accordance with data protection requirements and are bound by our instructions on the basis of contractual agreements.
We only disclose personal data to third parties if we are entitled or obliged to do so due to legal provisions and/or official or court orders or if you have previously consented to a disclosure.
Voucher and advertising system of VCHFY GmbH
On the basis of Art. 6 (1) lit. b DSGVO, we use the voucher and advertising system of the company VCHFY GmbH, Tornquiststraße 51, 20259 Hamburg, Germany, to fulfil a contract or to carry out pre-contractual measures for the sale of our products. When this programme is called up, personal data (IP address, order number and article and order values) are forwarded to VCHFY for order processing. The voucher and advertising system uses cookies for this purpose. These are necessary for the fulfilment of the contract or for pre-contractual measures and are also based on Art. 6 para. 1 lit. b DSGVO.
We maintain a publicly accessible channel on the We.Network social network platform. Your visit to this channel triggers a variety of data processing operations. Below we give you an overview of which of your personal data is collected, used and stored by us when you visit our channel on We.Network.
You are not obliged to provide us with your personal data. However, this may be necessary for individual functionalities of our channel on We.Network. These functionalities will not be available to you, or only to a limited extent, if you do not provide us with your personal data.
When you visit our channel, your personal data is not only collected, used and stored by us, but also by the platform operator of We.Network. This happens even if you do not have a profile on We.Network. For details on the collection and storage of your personal data and the type, scope and purpose of its use by the platform operator of We.Network, please refer to the platform operator's privacy policy under Privacy Policy | We.Network.
As the owner of a channel, we can only view the information stored in your public profile, and only if you have such a profile and are logged into it when you access our channel.
If you use our channel on We.Network to contact us (e.g. by creating your own posts, responding to one of our posts or sending us private messages), the data you provide us with will only be processed by us for the purpose of contacting you. If you contact us by private message with correspondence regarding existing contractual relationships, e.g. cancellations or changes of address, or to conclude a contract, we will ask you to contact us by e-mail regarding your request in order to clearly identify you as a customer. Only correspondence about general matters will be conducted directly via private messages to our channel on We.Network.
The legal basis for data collection is therefore Art. 6 para. 1 lit. a) and b) GDPR.
We delete stored data of your private messages to the channel 30 days after the end of the conversation as soon as their storage is no longer necessary or you request us to delete them; in the case of legal retention obligations, we restrict the processing of the stored data accordingly. Your public contributions and comments are generally stored until you request us to delete them or until there is a legal obligation to delete them.
We do not transfer your personal data to the platform operator of We.Network or to other third parties.
Revocation of consent given and objection to data processing
If the processing of personal data is based on your consent, you may revoke your consent in accordance with Art. 7 (3) DS-GVO at any time with effect for the future. If you have permitted the use of data by third parties in the revoked consent, we will inform the respective third party of the revocation in the event of revocation.
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) sentence 1 lit. f DS-GVO, you may object to this at any time with effect for the future, provided that there are grounds for doing so that arise from your particular situation. You can send an objection to our contact details given above under point 2. Please specify what the objection is directed against.
Duration of processing
We delete the data, unless otherwise stated in this data protection declaration, after storage is no longer required for the processing purpose stated in each case. Should a deletion conflict with legal retention obligations or should we require the data for the pursuit or defence of legal claims or for the fulfilment of legal obligations, we restrict the use accordingly.
Your rights as a data subject
According to the relevant provisions of the data protection laws, you have the right, under the respective legal conditions, with regard to the personal data concerning you,
- To request information about your personal data processed by us in accordance with Art. 15 DSGVO,
- In accordance with Art. 16 DSGVO, to demand the correction of inaccurate or incomplete personal data stored by us without delay,
- In accordance with Article 17 DSGVO, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims,
- In accordance with Art. 18 DSGVO, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims, or you have objected to the processing in accordance with Art. 21 DSGVO, and
- Pursuant to Art. 20 DSGVO, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller, provided that the processing is carried out with the aid of automated procedures and is based on consent pursuant to Art. 6(1)(a) or Art. 9(2)(a) DS-GVO or on a contract pursuant to Art. 6(1)(b) DS-GVO.
You will not incur any costs for the fulfilment of these rights.
You also have the right to complain to a data protection supervisory authority. Generallly, you can contact the supervisory authority of your usual place of residence or our company headquarters for this purpose. Of course, you can also contact us directly with questions, criticism or complaints.