of Grimmer DisplayGround GmbH
Version: 23 May 2018

The following information describes how Grimmer DisplayGround GmbH processes your personal data.

Controller responsible for processing your personal data pursuant to data protection law:

Grimmer DisplayGround GmbH Eichstrasse 22
67098 Bad Dürkheim
Germany

Directors
Heiko Grimmer and Dieter Henze
Tel: +49 6322 958 193 0
Fax: +49 6322 958 193 29
E-mail: kontakt@display-ground.de

Corporate Data Protection Officer: Heiko Grimmer

Grimmer DisplayGround GmbH knows how to protect the information and data entrusted to it. Thus, we place great emphasis on data protection principles such as data economy, transparency and security.

We maintain various automated systems for the management, storage and processing of data of our members for various purposes (e.g. transmission of a newsletter).

We will erase or block your personal data as soon as the storage and processing purpose no longer applies, unless an extended legal retention obligation exists or legal claims exist that could be asserted against us and that necessitate the retention.

For one thing, we collect the data you share with us, e.g. when you register in our online shop. For another, data are automatically collected and stored in log files during visits to our website. This mainly comprises technical information, e.g. concerning the web browser, operating system, IP address or time of the page impression). The legal basis for processing your IP address is point (f) of Art. 6 (1) GDPR. These data are collected automatically as soon

as you access our website. Generally, we store your IP address in anonymised form. The IP address is only stored in its entirety in order to track technical errors and hacker attacks as well as to log consent granted, e.g. in the context of newsletter subscriptions.

For smartphones, tablets and other mobile devices, these data are not stored on a personal basis. Moreover, these data are not consolidated with other data sources.

Some of the data are collected in order to ensure smooth operation of the website. Other data may be used for the analysis of your usage behaviour. The legal basis for this a legitimate interest pursuant to point (f) of Art. 6 (1) GDPR.

You may at any time assert your rights as a data subject towards us. Provided that the respective statutory conditions are on hand, this includes the following rights:

• Right of access pursuant to Art. 15 GDPR
• Right to rectification of inaccurate data and right to completion pursuant to Art. 16 GDPR

• Right to erasure pursuant to Art. 17 GDPR
• Right to restriction of processing pursuant to Art. 18 GDPR
• Right to data portability pursuant to Art. 20 GDPR
• Right to object/withdraw consent pursuant to Art. 21 GDPR
• Right to lodge a complaint with the supervisory authority (address see below) pursuant to point (d) of Art. 13 (2) GDPR

You always have the right to obtain from us information about your personal data that are processed by us. In particular, you can request information about the purposes of the processing, the category of the personal data concerned, the categories of recipients to whom your data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing, the right to lodge a complaint, any available information as to the source of the personal data not collected by us, the existence of automated decision-making, including profiling, and meaningful information about the details involved.

Furthermore, you always have the right to receive the data that you have provided to us or to have them transmitted to a third party.

To request information about your data which are stored by us or to request the transmission of your data, please send an e-mail to kontakt@display-ground.de.
Please note that we can only transmit data that are based on consent or on a contract.

At your request, we will rectify, block or erase the data stored about you, unless this would conflict with other statutory regulations (e.g. retention obligations pursuant to the German Commercial Code (HGB)) or the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligations, for reasons of public interest or for the establishment, exercise or defence of legal claims.

Furthermore, you can obtain from us restriction of processing where the accuracy of the data is contested by you, the processing is unlawful and you oppose their erasure, and we no longer need the personal data, but you require them for the establishment, exercise or defence of legal claims or you have objected to processing pursuant to Art. 21 GDPR.

Please feel free to contact us concerning this, if possible by e-mail to kontakt@display-ground.de.

If you have given us your consent to the processing of your personal information, you can withdraw your consent by means of a brief written notice at any time. As a result, we will no longer be permitted to perform the data processing on the basis of this consent.

Please feel free to contact us concerning this, if possible by e-mail to kontakt@display-ground.de.

You can object to the use of your data for advertising purposes or withdraw your consent by means of a brief notice to kontakt@display-ground.de. This does not involve any expenses except for the transmission costs according to the applicable rates.

An unsubscribe link is provided at the end of the newsletter.

Contact details in case you want to contact the responsible supervisory authority directly:

Rhineland-Palatinate State Commissioner for Data Protection and Freedom of Information Prof. Dr. Dieter Kugelmann

Address: Hintere Bleiche 34, 55116 Mainz, Germany 
E-mail address: poststelle@datenschutz.rlp.de. 
Telephone: +49 6131 208 2449
Fax: +49 6131 208 2497

Art. 20 GDPR institutes a new right to data portability, which, though closely associated with the right of access, is different from this right in many aspects. Thus, data subjects have the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller. The objective of this new right is to furnish data subjects with the respective authority, giving them more control over the personal data concerning them.

On our website, you can subscribe to a free newsletter. When you subscribe, we ask you for your name and e-mail address. The user’s e-mail address is required for the delivery of the newsletter. Your name is asked for during the subscription process in order to prevent abuse of the services or of the specified e-mail address.

In connection with the data processing for the transmission of newsletters, data are forwarded to third parties. The data are used exclusively for the purpose of sending the newsletter.

To make sure that no errors occurred when entering the e-mail address, we use the so-called double opt-in procedure: After you enter your e-mail address in the registration field, we send you a confirmation link. Your e-mail address will only be included in our distribution list after you click this confirmation link. You can withdraw the consent you gave at any time with effect for the future pursuant to point (a) of Art. 6 (1) GDPR.

Additionally, an unsubscribe link is provided at the end of the newsletter.

Your e-mail address will be processed until you withdraw your consent.

Description and Scope of the Data Processing

Our e-mail address is provided on our website. If you send us an e-mail, the personal data of the user that are provided in the e-mail and the data associated with the transmission will be stored.

In this connection, the data are not forwarded to any third parties. The data are used exclusively for processing the conversation.

Legal Basis for the Data Processing

The legal basis for processing the data with the user’s consent is point (a) of Art. 6 (1) GDPR.

The legal basis for processing the data that are transmitted in the course of an e-mail transmission is point (f) of Art. 6 (1) GDPR. If the e-mail contact aims at the conclusion of a contract, point (b) of Art. 6 (1) GDPR is an additional legal basis for the processing.

Purpose of the Data Processing

The personal data entered in the input screen are processed solely for the purpose of processing the contact. In the event of a contact by e-mail, this also represents the required legitimate interest in processing the data.
The other personal data processed during the transmission procedure serve the prevention of abuse of the contact form and the assurance of the security of our IT systems.

Duration of the Storage

The data will be erased as soon as they are no longer needed for the purpose for which they were collected. For the personal data from the input screen of the contact form and those sent by e-mail, this is the case as soon as the respective conversion with the user ends. The conversation will be deemed ended as soon as the circumstances show that the respective matter has been dealt with conclusively.

The personal data collected additionally during the transmission procedure are deleted after a period of seven days, at the latest.

Right to Object and Removal

The user may withdraw his consent to the processing of personal data at any time. He may object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.

Description and Scope of the Data Processing

On our website, we enable users to register by entering their personal data. The data you enter in the input screen will be transmitted to us and stored via a processor. The following data are collected in the registration process:
(1) First name and surname

(2) Title, salutation
(3) Institution
(4) Address (street, number, postcode, city, country)
(5) Telephone number
(6) E-mail address
(7) Other details that might be required for the respective purpose

Within the scope of the registration process, consent is obtained from the user to process these data.

Legal Basis for the Data Processing

The legal basis for processing the data with the user’s consent is point (a) of Art. 6 (1) GDPR.

If the registration serves the performance of a contract to which the user is a party or of precontractual measures, point (b) of Art. 6 (1) GDPR is an additional legal basis.

Purpose of the Data Processing

The registration of the user is required for the provision of certain contents and services on our website and for the performance of contractual obligations or precontractual measures.

Duration of the Storage

The data will be erased as soon as they are no longer needed for the purpose for which they were collected.

For the data collected during the registration process for the performance of a contract or precontractual measures, this is the case as soon as the data are not longer needed for the performance of the contract. Even after the conclusion of the contract, it might be necessary to store personal data of the contracting partner in order to comply with contractual or statutory obligations.

Objection and Removal Option

As a user, you can cancel the registration at any time. You can request the data stored about you to be modified at any time.
If the data are required for the performance of a contract or precontractual measures, premature erasure of the data is possible only if this does not conflict with any contractual or statutory obligations.

All information that you send us is stored on servers in the European Union. Unfortunately, we are unable to guarantee the security of the data sent to our website via the Internet, as the transmission of information via the Internet is not fully secure. However, we take technical and organisational measures to protect our website and other systems against loss, destruction, access, modification or distribution of your data by unauthorised persons. In particular, we transmit your personal data using SSL (Secure Socket Layer) encryption.

The website of Grimmer DisplayGround GmbH uses cookies. Cookies are little text files that are stored on your device (e.g. PC, smartphone or tablet) when you visit our website. In this way, the website can remember certain entries and settings (e.g. language, font size) for a certain time period so that you do not need to configure these anew every time you visit the website. By using cookies, we are able to count the visits to our website and see which pages are accessed.

On our website, you can generally accept the use of cookies and thus use all functions of the website without any limitations.

You can prevent the logging of your usage behaviour by cookies. Most browsers automatically accept cookies, but offer a possibility to reject cookies or display a warning prior to the storage. The help function in the menu bars of most web browsers explains how you can prevent your browser from accepting new cookies, how to let your browser alert you when you receive a new cookie or how to deactivate all cookies received.

However, in order to be able to use all functions of our website, we recommend leaving the cookie functions fully activated.

Our cookies do not store any sensitive data, such as passwords, credit card details, etc. They do not cause any damage on your device and do not contain any viruses.

Which Cookies Are Used?

Grimmer DisplayGround GmbH uses first-party cookies (especially all cookies that are absolutely necessary) and third-party cookies (especially analysis cookies).
Some of the cookies used do not contain any personal data, i.e. they do not contain any information related to an identified or identifiable person, such as the name, IP address, addresses or location details. Other cookies or other website technologies (e.g. plugins), however, process personal data. In this case, you can object to the processing by means of an individual opt-out process (see below). Moreover, you can block individual cookies by means of certain settings of the provider (e.g. Google) (see below).

The following section describes the categories of cookies used in connection with the website www.display-ground.de, which are so-called first-party cookies that are sent and read out exclusively by the domain of Grimmer DisplayGround GmbH:

Strictly necessary cookies:

Grimmer DisplayGround GmbH uses cookies that are necessary for the operation of the website www.display-ground.de. This includes technologies that enable you to access the website, services, applications and functions that are necessary to check the functionality of the page, to prevent fraud and to improve the security. These cookies are indispensable for the use of the services of the website. Without these cookies, the services would not work correctly. Usually, these cookies do not contain any personal data, i.e. no personal information about you, so that personal identification is not possible on the basis of the information gained from the cookies. These cookies are only stored for as long as absolutely necessary for the services, i.e. usually until the end of the Internet session and until you shut down your browser (session cookies).

Performance cookies:

Grimmer DisplayGround GmbH uses analytical cookies in order to analyse how the website is used and in order to monitor the performance of the website. For example, these analysis methods help us to determine which parts of our website are used most frequently or which contents are accessed how often on a particular day. When you use our website, your usage data are included in the statistical analyses without allowing any conclusions to be drawn concerning your identity and you as a person, i.e. these cookies do not identify you.

Below, we describe third-party cookies that are sent and read out by domains of other service providers:

Web analysis cookies:

Google Analytics

Grimmer DisplayGround GmbH uses Google Analytics, a web analysis service of Google Inc.

(„Google“). Google Analytics also uses cookies to enable the analysis of your use of the website. The information about your use of this website, which is generated by the cookies, is sent to a Google server in the USA and stored there. Please note that on this website, the „gat._anonymizeIp();“ code has been added to Google Analytics in order to guarantee this anonymised logging of IP addresses. On www.display-ground.de, the user’s IP address is therefore truncated (so-called IP masking) before it is stored on the Google servers. The full IP address is thus not sent to a Google server in the USA. The full IP address will only be transmitted to and truncated on a Google server in the USA in exceptional cases.

By order of Grimmer DisplayGround GmbH, Google will use this information to analyse your use of the website, to compile reports about the website activities for the website operator, and to perform other services related to the use of the website and of the Internet in general.

You can prevent the storage of cookies by configuring your browser software accordingly (so- called „browser add-on“); in this case, however, you might not be able to use all functions of this website.

Moreover, you can prevent the collection of data concerning your use of the website (including your IP address), which are generated by cookies, and the processing of these data by Google by downloading and installing the browser plug-in that is available at http://tools.google.com/dlpage/gaoptout?hl=en.

Detailed information on the terms of use and privacy of Google is available at http://www.google.com/analytics/terms/gb.html or http://www.google.com/intl/en/analytics/privacyoverview.html.

Demographics Function of Google Analytics

This website uses the Demographics function of Google Analytics. This function enables the creation of reports containing information on the age, gender and interests of website visitors. These data originate from Google’s interest-based advertising and from the visitor data of third-party providers. These data cannot be associated with any specific person. You can deactivate this function via the display settings in your Google account whenever you wish or prevent the collection of your data by Google Analytics entirely as shown under „Objecting to the Collection of Data“.

WordPress Stats

This website uses the WordPress Stats tool for the statistical analysis of the user access. The provider is Automattic Inc., 60 29th Street #343, San Francisco, CA 94110-4929, USA.

WordPress Stats uses cookies that are stored on your computer and that enable the analysis of the use of the website. The information about the use of our website, which is generated by the cookies, is stored on servers in the USA. Your IP address is anonymised after the processing and prior to the storage. WordPress Stats cookies will remain on your device until you delete them.

The storage of WordPress Stats cookies takes place on the basis of point (f) of Art. 6 (1) GDPR. The website operator has a legitimate interest in the anonymised analysis of the user behaviour in order to optimise his website as well as his advertising.

You can configure your browser in such a way that you are informed about the setting of cookies and permit cookies on a case-by-case basis, reject cookies in certain cases or

generally, and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of our website might be limited.

You can object to the collection and use of your data for the future by setting an opt-out cookie in your browser by clicking the following link: https://www.quantcast.com/opt-out/

If you delete the cookies on your computer, you need to set the opt-out cookie anew.

Google reCAPTCHA

On our website, we use Google reCAPTCHA (hereinafter referred to as „reCAPTCHA“). The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA („Google“).

The objective of reCAPTCHA is to check whether the data input on our website (e.g. in a contact form) is performed by a human or by an automated program. For this purpose, reCAPTCHA analyses the behaviour of the website visitor on the basis of various properties. The analysis begins automatically as soon as the website visitor accesses the website. For the analysis, reCAPTCHA evaluates various pieces of information (e.g. IP address, duration of the website visitor on the website or mouse movements performed by the user). The data collected in the course of the analysis are forwarded to Google.

The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place.

The data processing takes place on the basis of point (f) of Art. 6 (1) GDPR. The website operator has a legitimate interest in protecting his website from abusive automated interception and SPAM.
For further information on Google reCAPTCHA and to review the privacy policy of Google, please refer to http://www.google.com/intl/gb/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

Facebook Pixel

For the conversion tracking, our website uses the visitor action pixel of Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA („Facebook“).

In this way, the behaviour of the page visitors can be tracked after they have been forwarded to the provider’s website by means of a click on a Facebook ad. Thus, the effectiveness of the Facebook ads can be evaluated for statistical and market research purposes, and future advertising measures can be optimised.

The collected data are anonymous for us as the operator of this website, i.e. we cannot draw any conclusions concerning the identity of the users. However, the data are stored and processed by Facebook. This allows the data to be associated with the respective user profile and the use of the data by Facebook for its own advertising purposes according to the privacy policy of Facebook. In this way, Facebook can enable the publication of ads on Facebook pages and outside Facebook. We as the website operator do not have any influence on this use of the data. For further information on the protection of your privacy, please refer to the privacy policy of Facebook at https://www.facebook.com/about/privacy/.

Furthermore, you can deactivate the remarketing function „Custom Audiences“ in the ad preferences under

https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. For this, you need to be logged in to Facebook.

If you do not have any Facebook account, you can deactivate the usage-based advertising of Facebook on the European Interactive Digital Advertising Alliance website http://www.youronlinechoices.com/uk/your-ad-choices/.

Facebook

When you are logged in to Facebook, Facebook may collect information about your access to our website. To prevent Facebook from collecting the information when you access the website, check the privacy policy on the Facebook website at http://www.facebook.com/policy.php and/or log out from Facebook before accessing a page.

For details on the purpose and scope of the data collection and the further processing and use of the data by Facebook and your rights and configuration options to protect your privacy, please refer to the privacy policy of Facebook at http://www.facebook.com/policy.php.
If you do not wish Facebook to be able to associate the visit to our pages with your Facebook user account, please log out from your Facebook user account.

Twitter

Depending on your login status at Twitter, Twitter may store various data about your use of the Internet. This may allow conclusions to be drawn concerning your use of the DisplayGround web pages, which Twitter could use for its own purposes. The purpose and scope of the collection of data by Twitter and the further processing by Twitter are not influenced by Grimmer DisplayGround GmbH, and Grimmer DisplayGround GmbH does not have access to these data.

For details concerning the purpose and scope of the data collection and the further processing and use of the data by Twitter and your rights and configuration options to protect your privacy, please refer to http://twitter.com/privacy. You can modify your Twitter privacy settings in the account settings at http://twitter.com/account/settings.

The website may contain hyperlinks to and from third-party websites. In case you follow a hyperlink to one of these websites, please note that we cannot accept any responsibility or liability for third-party contents or privacy policies. Please check the applicable privacy policies before you send personal data to these websites.

YouTube

Our website uses plugins of the YouTube pages operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

When you visit one of our pages with a YouTube plugin, a connection will be established to the YouTube servers. The YouTube server will be informed which of our pages you have visited.

If you are logged in to your YouTube account, YouTube will be able to directly associate your surfing behaviour with your personal profile. You can prevent this by logging out from your YouTube account.

The use of YouTube takes place for the benefit of a uniform, appealing display of our online offerings. This represents a legitimate interest in the meaning of point (f) of Art. 6 (1) GDPR.

Further information on the handling of user data is available in the YouTube privacy policy at http://www.google.com/intl/gb/policies/privacy.

Vimeo

Our website uses plugins of the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

When you visit one of our pages with a Vimeo plugin, a connection will be established to the Vimeo servers. The Vimeo server will be informed which of your pages you have visited. Moreover, Vimeo will receive your IP address. This applies even if you are not logged in to Vimeo or do not have any Vimeo account. The information collected by Vimeo will be transmitted to the Vimeo server in the USA.

If you are logged in to your Vimeo account, Vimeo will be able to directly associate your surfing behaviour with your personal profile. You can prevent this by logging out from your Vimeo account.

Further information on the handling of user data is available in the Video privacy policy at https://vimeo.com/privacy.

Amazon Partner Programme
The website operator participates in the Amazon EU partner programme. Our pages feature Amazon ads and links to the Amazon.de website, by means of which we can earn money via the refunding of advertising costs. Amazon makes use of cookies in order to trace the origin of orders. In this way, Amazon can see that you have clicked the partner link on our website.

The storage of Amazon cookies takes place on the basis of point (f) of Art. 6 (1) GDPR. The website operator has a legitimate interest in this, as the cookies are essential for determining the amount of his affiliate commission.

Further information on the use of data by Amazon is provided in the privacy policy of Amazon at https://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&language=en_GB&nodeId=3312401

Klarna

Among other things, our website supports payments using the services of Klarna. The provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter referred to as „Klarna“).

Klarna offers various payment options (e.g. payment by instalments). If you decide to pay with Klarna (Klarna checkout solution), Klarna will ask you for various personal data. For details, please refer to the privacy policy of Klarna at https://www.klarna.com/uk/privacy- policy/.

Klarna uses cookies in order to optimise the use of the Klarna checkout solution. The optimisation of the checkout solution represents a legitimate interest in the meaning of point (f) of Art. 6 (1) GDPR. Cookies are little text files that are stored on your device and that do not cause any damage. They will remain on your device until you delete them. Details concerning the use of Klarna cookies are available at https://www.klarna.com/international/cookies/.

The transmission of your data to Klarna takes place on the basis of point (a) of Art. 6 (1) GDPR (consent) and point (b) of Art. 6 (1) GDPR (processing for the performance of a contract). You can withdraw your consent to the processing of data at any time. Such withdrawal will not affect the validity of any previous data processing.

Pay Now

One of the payment methods we offer on our website is „Pay now“. The provider of this payment service is Sofort GmbH, Theresienhöhe 12, 80339 München, Germany (hereinafter referred to as „Sofort GmbH“).

With the help of the „Pay now“ procedure, we receive a payment confirmation from Sofort GmbH in real time and can commence with the performance of our obligations without delay.

If you opt for the payment method „Pay now“, you will transmit the PIN and a valid TAN to Sofort GmbH in order to enable it to log in to your online banking account. Following the login, Sofort GmbH will automatically check your account balance and execute the transfer to us with the help of the TAN you transmitted. Subsequently, Sofort GmbH will promptly send us a transaction confirmation. After the login, your transactions, the credit line and the existence of other accounts as well as their balances will automatically be checked.

Apart from the PIN and TAN, the payment data you enter as well as data concerning you will be transmitted to Sofort GmbH. The data concerning you comprise your first name and surname, address, telephone number(s), e-mail address, IP address and any other data required for the payment transaction. The transmission of these data is necessary in order to verify your identity beyond doubt and to prevent fraud attempts.

The transmission of your data to Sofort GmbH takes place on the basis of point (a) of Art. 6 (1) GDPR (consent) and point (b) of Art. 6 (1) GDPR (processing for the performance of a contract). You can withdraw your consent to the processing of data at any time. Such withdrawal will not affect the validity of any previous data processing.

For details concerning payments using „Pay now“, refer to https://www.klarna.com/pay-now-with-direct-banking/privacy-statement/ and https://www.klarna.com/pay-now-with-direct-banking/.

Apart from your comment, information on the time of creation of the comment, your e-mail address, and (unless you post anonymously) your selected user name will be stored for the comment function on this page.

Storage of the IP Address

Our comment function stores the IP address of the users who post comments. As we do not review comments on our website before releasing them, we need these data in order to be able to take steps against the author in the event of legal violations such as insults or propaganda.

Subscription to Comments

As a user of the page, you can subscribe to comments after registering. You will receive a confirmation e-mail to verify that you are the owner of the specified e-mail address. You can unsubscribe by means of a link in the information e-mails at any time. In this case, the data entered during the subscription to comments will be deleted; however, they will remain with us if you entered these data elsewhere for other purposes (e.g. newsletter subscription).

Storage Duration of the Comments

The comments and associated data (e.g. IP address) will be stored and will remain on our website until the commented content is fully deleted or the comments need to be deleted for legal reasons (e.g. offensive comments).

Legal Basis

Comments are stored on the basis of your consent (point (a) of Art. 6 (1) GDPR). You can withdraw any previously granted consent at any time. For this, simply send us an informal notice by e-mail. Such withdrawal will not affect the lawfulness of any previous data processing.