monotivity
Translation Notice: This is a translation of the German original. In case of discrepancies, the German version prevails. View the legally binding German version here: German Privacy Policy

Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data is any data by which you can be personally identified.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Bastian Schröder, Buchenweg 12, 58540 Meinerzhagen, Germany, Tel.: 015257057322, Email: b.schroeder@medienspot.de. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 When using our website purely for information purposes, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to the page server (so-called "server log files"). When you access our website, we collect the following data that is technically necessary for us to display the website to you:

Processing takes place in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or otherwise used. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.

3) Hosting & Content-Delivery-Network

3.1 Render

For hosting our website and displaying the page content, we use the system of the following provider: Render Services Inc., 525 Brannan Street, Suite 300, San Francisco, CA 94107, USA

All data collected on our website is processed on the provider's servers, unless different data recipients are mentioned below for specific data processing.

We have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.

3.2 Cloudflare

We use a Content Delivery Network from the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA

This service enables us to deliver large media files such as graphics, page content, or scripts more quickly via a network of regionally distributed servers. Processing is carried out to protect our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 (1) lit. f GDPR. We have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.

4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device for longer and enable the storage of page settings (so-called "persistent cookies"). In the latter case, you can see the storage duration in the overview of your web browser's cookie settings.

If personal data is also processed by individual cookies we use, processing takes place in accordance with Art. 6 (1) lit. b GDPR either for the performance of the contract, in accordance with Art. 6 (1) lit. a GDPR in the case of consent given, or in accordance with Art. 6 (1) lit. f GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

You can set your browser so that you are informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or generally.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contact

When contacting us (e.g. via contact form or email), personal data is processed - exclusively for the purpose of processing and answering your request and only to the extent necessary for this purpose.

The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 (1) lit. f GDPR. If your contact is aimed at concluding a contract, an additional legal basis for processing is Art. 6 (1) lit. b GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter in question has been finally clarified and provided there are no statutory retention obligations.

6) Data Processing When Opening a Customer Account

In accordance with Art. 6 (1) lit. b GDPR, personal data is further collected and processed to the extent necessary if you provide it to us when opening a customer account. You can see which data is required for opening the account from the input mask of the corresponding form on our website.

Deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the controller. After deletion of your customer account, your data will be deleted, provided that all contracts concluded via it have been fully processed, there are no statutory retention periods, and we have no legitimate interest in further storage.

7) Use of Customer Data for Direct Marketing

7.1 Registration for our email newsletter

If you register for our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. The provision of further data is voluntary and is used to address you personally. For newsletter dispatch we use the so-called double opt-in procedure, which ensures that you only receive newsletters after you have expressly confirmed your consent to receive newsletters by activating a verification link sent to the specified email address.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1) lit. a GDPR. In doing so, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later time. The data collected by us when registering for the newsletter is used strictly for this purpose.

You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the controller mentioned at the beginning. After successful unsubscription, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

7.2 Brevo

Our email newsletters are sent via this provider: Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided when registering for the newsletter to this provider in accordance with Art. 6 (1) lit. f GDPR so that it takes over the newsletter dispatch on our behalf.

Subject to your express consent in accordance with Art. 6 (1) lit. a GDPR, the provider also carries out a statistical success evaluation of newsletter campaigns by means of web beacons or counting pixels in the sent emails, which can measure opening rates and specific interactions with the content of the newsletter. Device information (e.g. time of access, IP address, browser type, and operating system) is also collected and evaluated, but not merged with other data sets.
You can revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider, which protects the data of our site visitors and prohibits disclosure to third parties.

8) Data Processing for Contract Fulfillment

8.1 To process the contract, we work with the following service provider(s) who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

8.2 Use of Payment Service Providers

- Paddle

A checkout system from the following provider is available on this website: Paddle.com Market Ltd., Judd House, 18-29 Mora Street, London, EC1V 8BT, United Kingdom

When initiating the ordering process, you will be redirected to a web interface operated by the provider, on which you can execute and pay for the order by entering your billing and delivery address and your payment data. The provider is itself originally responsible for the collection of this data and processes the payment in its own name.

After placing and paying for the order, the provider transmits the order data and transaction details to us in accordance with Art. 6 (1) lit. b GDPR to the extent necessary for contract processing so that we can execute the order.

We have concluded a data processing agreement with the provider, which protects the data of our site visitors and prohibits disclosure to third parties.

An adequate level of data protection is guaranteed at the provider's location by an adequacy decision of the European Commission.

8.3 Electronic Cancellation Option for Continuous Obligations with Consumers

Consumers who have entered into contracts for paid continuous obligations (such as subscription contracts) on this website have the option to cancel them via an electronic button in accordance with the applicable cancellation periods.

Activation of the button leads to a confirmation page on which the consumer can provide more details about the cancellation, clearly identify themselves, and then electronically declare their cancellation.

The collection of personal data and its transmission to us takes place in accordance with Art. 6 (1) lit. b GDPR and only to the extent necessary for the proper processing of the cancellation. Also on the basis of Art. 6 (1) lit. b GDPR, the personal data provided is used to confirm receipt of the cancellation declaration and the cancellation date electronically in text form. Another legal basis for processing is Art. 6 (1) lit. c GDPR. We are legally obliged to provide an electronic cancellation option for consumer contracts for paid continuous obligations concluded by means of electronic commerce.

9) Tools and Other

- Lexware Office

For accounting purposes, we use the service of the cloud-based accounting software from the following provider: Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg, Germany

The provider processes incoming and outgoing invoices as well as, if applicable, the bank transactions of our company in order to automatically record invoices, match them to transactions, and create the financial accounting in a partially automated process.

If personal data is also processed in this context, processing takes place on the basis of our legitimate interest in efficient organization and documentation of our business processes in accordance with Art. 6 (1) lit. f GDPR.

10) Rights of the Data Subject

10.1 Applicable data protection law grants you the following data subject rights (information and intervention rights) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective exercise requirements:

10.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF A BALANCING OF INTERESTS DUE TO OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL END THE PROCESSING OF THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL END THE PROCESSING OF THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

11) Duration of Storage of Personal Data

The duration of storage of personal data is based on the respective legal basis, the processing purpose, and - if relevant - additionally on the respective statutory retention period (e.g. commercial and tax retention periods).

When processing personal data on the basis of express consent in accordance with Art. 6 (1) lit. a GDPR, the data concerned is stored until you revoke your consent.

If there are statutory retention periods for data that is processed as part of legal or similar legal obligations on the basis of Art. 6 (1) lit. b GDPR, this data is routinely deleted after the retention periods expire, provided it is no longer required for contract fulfillment or contract initiation and/or we have no legitimate interest in further storage.

When processing personal data on the basis of Art. 6 (1) lit. f GDPR, this data is stored until you exercise your right to object in accordance with Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.

When processing personal data for the purpose of direct marketing on the basis of Art. 6 (1) lit. f GDPR, this data is stored until you exercise your right to object in accordance with Art. 21 (2) GDPR.

Unless otherwise stated in the other information in this declaration about specific processing situations, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.