We at Media Carrier GmbH take the protection of your personal data very seriously. We shall therefore handle your personal data with due care, conscientiously and in accordance with the applicable laws.
ePapers are digital magazines and newspapers (hereinafter referred to as digital publications) that we sell through our digital newsstand. This privacy policy applies to your personal data collected when you use our digital newsstand.
The purpose of this document is, therefore, to provide you with information about the data we collect when you use our digital newsstand.

Part I – ePapers available for order (paid/ free)

Part I regulates paid and free digital publications which are available for order singly through the digital newsstand. Part II regulates the exclusively free acquisition of digital publications through the digital newsstand.

Section 1: Information on the collection of personal data

  1. Personal data means any information relating to you personally, e.g. name, address, e-mail addresses, user behaviour.
  2. The data controller within the meaning of Article 4 (7) of the EU General Data Protection Regulation (GDPR) is
    • Media Carrier GmbH
    • Muthmannstraße 1
    • 80939 Munich, Germany
    • Managing directors representing the company: Dr Holger Bingmann, Philipp J. Jacke
    • Register court Munich, HRB 194121
    • VAT reg. No: DE 279651768
    • Telephone +49 89 32471 47 00
    • Fax +49 89 32471 66 4264
    • Email: support@media-carrier.com

    You can contact our data protection officer at datenschutz@melo-group.com or through our postal address, stating clearly: “Data protection officer”.

  3. We only collect and process your personal data if we have a legal basis to do so. In the following sections, we shall outline the relevant legal basis for data processing in each case. Your voluntary consent can also act as a legal basis for the processing of your personal data.
  4. When you contact us by email, we store and process the data you provide (e.g. email address, name and any telephone number, contents of your message, etc.) in order to be able to respond to your inquiry.
    Data processing for purposes of contacting us is done in accordance with Article 6 (1) (1) point (a) of the GDPR, based on the consent you have given voluntarily.
    We shall erase the data we collected on this basis when it is no longer required, e.g. because we have answered your query; alternatively we shall restrict the processing if there are statutory retention requirements.
  5. Our website and digital newsstand may not be used by persons who have not reached the age of sixteen.
  6. We may disclose your personal data to companies within the MELO Group in order to provide the services you have requested for and to allow for a uniform customer management system. Media Carrier GmbH is a member of this group of companies. The legal basis for this is Article 6 (1) (1) point (f) of the GDPR. The purposes listed above constitute our legitimate interests.
  7. MELO Service GmbH, Muthmannstraße 1, 80939 Munich provides us with hosting services and services relating to the presentation of the website and the digital newsstand. All personal data collected when you use the website or the digital newsstand will be processed on the servers of MELO Service GmbH. The legal basis for this is Article 6 (1) (1) point (f) of the GDPR. The purposes listed above constitute our legitimate interests.
  8. To prevent unauthorised access by third parties to your personal data and in particular, financial data, the ordering process is encrypted using SSL (Secure Socket Layer). We also take reasonable physical, technical and administrative security measures to protect your personal data from loss, misuse, unauthorised access, disclosure and alteration. These security measures include firewalls, data encryption, physical access restrictions to our data centres, and access authorisation controls.

Section 2: Collection of personal data when visiting our website

  1. If you use the website for information purposes only, we only collect the personal data that your browser transmits to our server. This information is temporarily stored in a so-called log file. If you would like to visit our website, we shall collect the following data:
    • IP address
    • Date and time of the request
    • Time zone difference to Greenwich Mean Time (GMT)
    • Content of the request (specific page)
    • Access status/ HTTP status code
    • Amount of data transferred
    • The referring website
    • Browser
    • Operating system and its interface
    • Language and version of the browser software
    • We process this data for the following purposes:

    • To ensure smooth connectivity of the website,
    • To ensure that our website is user-friendly,
    • To evaluate the security and stability of the system, and
    • for other administrative purposes.

    The legal basis for this data processing is Article 6 (1) (1) point (f) of the GDPR. The purposes of data processing listed above constitute our legitimate interests.
    Furthermore, you give us your consent to store and process the aforementioned personal data for the technical stability and security of our website. The legal basis for this is the consent given by you voluntarily in accordance with Article 6 (1) (1) point (a) of the GDPR. We shall store this data for as long as it is necessary to ensure the technical stability and security of our website or until you withdraw your consent.

  2. On various pages of our website, we use cookies to make our website more user-friendly and to enable the use of certain functions and features to display needs-based products or for market research purposes. Cookies are small text files that are automatically stored on your device.
    Use of cookies

    1. This website uses the following types of cookies, the scope and functionality of which will be explained below:
      • Transient cookies
      • Persistent cookies.
    2. Transient cookies are automatically deleted when you close your browser. These include, in particular, session cookies. They save a so-called session ID which is used to assign different requests from your browser to the common session. This allows your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close the browser.
    3. Persistent cookies are automatically deleted after a specified period, which may differ, depending on the cookie. You can delete cookies at any time in the security settings of your browser.
    4. You may configure your browser settings according to your preferences and, for example, block the acceptance of third-party cookies or all cookies. Please note that if you do this, you may not be able to use all the functions and features of this website.
    5. For information about the length of storage, please refer to the overview in the cookie settings of your browser.

    The legal basis for this type of data processing is Article 6 (1) (1) point (f) of the GDPR. The purposes listed above (making the website more user-friendly, etc.) constitute our legitimate interests.

Section 3: Collection of personal data when placing orders through the digital newsstand

  1. If you would like to order for a digital publication in our digital newsstand, you will need to provide personal data (e.g. email address, chosen digital publication, payment method, purchase price, etc.) in order to conclude the contract. In addition, we need this personal information in order to process your order. The legal basis for this is Article 6 (1) (1) point (b) of the GDPR
  2. Under the provisions of the applicable commercial and tax laws, we are obliged to retain your order data for the legally prescribed period. The legal basis for this is Article 6 (1) (1) point (c) of the GDPR. At the end of the statutory retention periods stipulated by the commercial and tax laws, we shall erase your order data, unless you have consented to further use of your data or unless we reserve the right to continue using the data for purposes permitted by law and specified in this privacy policy.
  3. We also store the following data when you download a digital publication:
    • Date of the download
    • Language of the media box
    • Used media box

    We store and process this data to ensure and improve the technical stability and security of the digital newsstand. The legal basis for this is Article 6 (1) (1) point (f) of the GDPR. The purposes listed above constitute our legitimate interests.
    Furthermore, you give us your consent to store and process the aforementioned personal data for the technical stability and security of our digital newsstand. The legal basis for this is your voluntary consent in accordance with Article 6 (1) (1) point (a) of the GDPR. We store this data for as long as it is necessary to ensure the technical stability and security of our digital newsstand or until you withdraw your consent.

  4. We sometimes use external service providers, in particular payment service providers (e.g. PayPal, mobile service providers, etc.) to process your order. To process your order, we have to pass on your order data to these companies. During the ordering process, you may be redirected to the websites of these companies, whose privacy policies will, in this case, apply in a supplementary manner. The legal basis for data processing in this case is Article 6 (1) (1) point (b) of the GDPR.

Section 4: Promotional emails and subscription to our newsletter

  1. If you subscribe to our newsletter, we will regularly send you an email to inform you about interesting air travel offers and access to digital publications and their content, among other things. Subscription to our newsletter is voluntary,
  2. The only information we need from you for sending the newsletter is your email address. We store your email address for the purpose of sending you the newsletter. The legal basis for this is Article 6 (1) (1) point (a) of the GDPR.
  3. In addition, we store your IP addresses and the date and time of your subscription and confirmation. This process allows us to prove that you have subscribed to the newsletter and to investigate any possible misuse of your personal data. The legal basis for this is Article 6 (1) (1) point (f) of the GDPR. The purposes listed above constitute our legitimate interests.
  4. We use the so-called double opt-in process for subscriptions to our newsletter. This means that once you have subscribed to our newsletter, we will send you an email to the email address you have provided, in which we ask you to confirm that you wish to receive the newsletter.
  5. You can withdraw your consent and unsubscribe from the newsletter at any time. To unsubscribe, you can use our contact details specified above to send us a message, or the unsubscribe link in our newsletters or you can send us an email to support@media-carrier.com
  6. Once you have unsubscribed, we will erase your email address, unless you have consented to further use of your data or we reserve the right to continue using the data for purposes permitted by law and specified in this privacy policy (e.g. when you purchase a digital publication).
  7. The newsletter will be sent by a service provider (MailChimp) we engage to process data on our behalf and to whom we shall forward your email address for this purpose. This service provider is located in the US and is certified under the EU-US Privacy Shield. Click here to view the current certificate. This means that US-based companies certified under the EU-US Privacy Shield can provide an adequate level of data protection.

Section 5: Surveys

  1. If we ask for your opinion as part of a survey, we shall store and process the personal data you provide to us in this context to improve our products and services. The legal basis for this is Article 6 (1) (1) point (a) of the GDPR. Your participation in such a survey is voluntary.
  2. We will store your personal data for as long as it is necessary to improve our products and services or until you withdraw your consent to this type of data processing.

Section 6: Use of Google Analytics

  1. The website uses functions from the web analytics service Google Analytics. Provider is Google Inc, (“Google”). Google Analytics uses so called “cookies”. They are text files that are being saved on your PC and that enable analytic of the use of the website by you. The information created by the cookies about your use of the website is usually transmitted to a Google server in the USA and saved there. If the IP anonymization is activated on this website, Google will shortened your IP address within Member States of the European Union or in other states party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and Internet use.
  2. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other data from Google.
  3. You can prevent the saving of the cookies by choosing the respective setting; however we point out that you cannot use all functions of the website fully if you do so. You can furthermore prohibit the registration of the of you use of the website related data created by the cookie (including your IP-address) to Google as well as the processing of this data by Google by downloading and installing the browser plugin provided by this link: http://tools.google.com/dlpage/gaoptout?hl=de.
  4. The website uses Google Analytics with the extension “_anonymizeIp()”. As a result, IP addresses are further processed in a shortened form, so that direct reference to persons can be ruled out. As far as the data collected about you is personal, it will be excluded immediately and the personal data will be deleted immediately.
  5. As an alternative to the browser plugin you can use the following link to prevent future acquisition of data by Google Analytics on this website. If you do so, an opt-out cookie is stored on your terminal device. If you delete your cookies, you must click the link again.
  6. We use Google Analytics to analyze and be able to regularly improve the use of our website. With the gained statistics we can improve our offer and make it more interesting for you as a user. The legal basis for the use of Google Analytics is Article 6 para. 1 S. 1 lit. f GDPR. Our legitimate interest results from the aforementioned improvement of the offer.
  7. Contact information Europe:
    • Google Dublin, Google Ireland Ltd.,
    • Gordon House,
    • Barrow Street,
    • Dublin 4,
    • Ireland,
    • Fax: +353 (1) 436 1001.

    Privacy declaration:
    http://www.google.com/intl/de/analytics/learn/privacy.html; http://www.google.de/intl/de/policies/privacy.

  8. After our purpose of the use of Google Analytics has ceased and the use has ended, the data collected in this context will be deleted

Section 7: Your rights

  1. You have the following rights with respect to personal data concerning you:
    • Right to information (Article 15 of the GDPR)
    • Right to rectification of data (Article 16 of the GDPR)
    • Right to erasure of data (Article 17 of the GDPR)
    • Right to restriction of processing (Article 18 of the GDPR)
    • Right to data portability (Article 20 of the GDPR)
  2. In addition, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes against this regulation (Article 77 of the GDPR).
  3. You have the right to withdraw the consent you once gave to us with regard to data processing any time (Legal basis: Article 6 (1) (1) point (a) of the GDPR). As a result, we shall no longer be allowed to process data based on this consent going forward. The withdrawal of consent shall not affect the legality of the processing done on the basis of this consent before its withdrawal.
  4. Right to object to processing (Article 21 of the GDPR)

Right to object

  1. You have the right, for reasons arising from your particular situation, to object to the processing of your personal data which is based on Article 6 (1) point (f) of the GDPR (Data collection for purposes of safeguarding legitimate interests), any time; this includes profiling based on those provisions. If you make use of this right to object, we shall no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or unless the processing is for purposes of asserting, exercising or defending legal claims.
  2. Where we process your personal data for direct advertising purposes, you will have the right to object at any time to the processing of your personal data for such advertising purposes; this also includes profiling to the extent that it is related to such direct advertising. The existence of a special situation, as in (a), is therefore, not necessary for an effective objection to direct advertising. If you object to processing for direct advertising purposes, your personal data will no longer be processed for such purposes.

Part II – exclusively free ePapers

Part II regulates the acquisition of exclusively free ePapers. This part is applicable if you are asked to agree to the terms and conditions of use and the privacy policy before you can view the digital newsstand. Without your consent, you will not be able to view or use the digital newsstand.
In this case, the following sections shall apply accordingly:
Sections 1, 2 and 3, subsections 3 and 4 – 7

Media Carrier GmbH, 25/05/2018