Privacy policy

The protection of your personal data is very important to us. Below, we provide you with detailed information about how we handle personal data processed during your use of the website rbb-media.de. Compliance with the provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act of the Federal Republic of Germany (BDSG), and other data protection regulations is our highest priority.

1. Name and Address of the Controller

The Controller within the meaning of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and other data protection regulations is:

rbb media GmbH
Kaiserdamm 80/81
14057 Berlin
Tel. +49 30 97993-84901
Fax +49 30 97993-84909
E-Mail: info@rbb-media.de
Internet: www.rbb-media.de

You can reach our Data Protection Officer at:

rbb media GmbH
Data Protection Officer
Kaiserdamm 80/81
14057 Berlin
Tel. +49 30 97993-84901
Fax +49 30 97993-84909
E-Mail: datenschutz@rbb-media.de

2.    Data Protection and data security

The security of your personal data is a high priority for us. We protect the data stored with us through technical and organizational measures to effectively prevent loss or misuse by third parties. In particular, our employees who process personal data are obligated to maintain data confidentiality and must adhere to it.

To protect your personal data, it is transmitted in encrypted form; for example, we use SSL (Secure Socket Layer) for communication via your internet browser. You can recognize an SSL connection by the padlock icon displayed by your browser. To ensure the ongoing protection of your data, technical security measures are regularly reviewed and, if necessary, updated to align with the latest technological standards.

These principles also apply to companies that process and use data on our behalf and in accordance with our instructions.

3.    Purposes of Processing and Legal Basis

We collect, process, and use your personal data for the following purposes:

  • Processing contact and support requests
  • Collecting data for the distribution of newsletters
  • Establishing and carrying out contractual relationships within the framework of our recording service
  • Receiving applications

The processing of your personal data may be based on the following legal grounds:

  • Article 6(1)(a) GDPR serves as the legal basis for processing operations for which we obtain your consent for a specific purpose.
  • Article 6(1)(b) GDPR applies when the processing of personal data is necessary to fulfill a contract, such as when you order a recording. This also applies to processing operations required to carry out pre-contractual measures, such as inquiries about our products or services.
  • Article 6(1)(c) GDPR applies if we are subject to a legal obligation that requires the processing of personal data, for instance, to meet tax obligations.
  • Article 6(1)(d) GDPR applies in cases where the processing of personal data is necessary to protect vital interests of you or another natural person.
  • Article 6(1)(f) GDPR is used based on our legitimate interests, for example, when using service providers for order processing, such as shipping providers, or conducting statistical surveys and analyses, as well as logging registration procedures. Our interest lies in providing a user-friendly, appealing, and secure presentation and optimization of our web offerings, which serves both our business interests and meets your expectations.

4.    Duration of Storage and Deletion of Personal Data

We process and store your personal data only for as long as is necessary to fulfill the purpose of storage or as required by applicable laws or regulations. Once the purpose has been fulfilled or is no longer applicable, your personal data will be deleted or restricted. In cases of restriction, deletion will occur as soon as there are no legal, statutory, or contractual retention periods opposing it, there is no reason to assume that deletion would affect your legitimate interests, and deletion does not involve disproportionately high effort due to the specific nature of the storage.

5.    Forms of Data Processing when Using the Website

5.1 Collection of General Data and Information, so-called Logfiles

Each time the website is accessed, the system automatically collects the following data from the requesting device’s computer system and stores it in log files (so-called Logfiles): name of the retrieved file, date and time of access, amount of data transferred, message about successful retrieval, type of browser and version used, the user’s IP address, the user’s operating system, and websites from which the user’s system accesses our website. This data is not merged with other data sources. The legal basis for the collection of the data and its storage in log files is Article 6(1) sentence 1 letter f) GDPR.

The temporary collection of data by the system is necessary to deliver the website to your device and ensure its proper display. The storage in log files also serves to ensure the stability and functionality of the website. Furthermore, the data is used to optimize the website and ensure the security of the information technology systems against potential external attacks. This also constitutes our legitimate interest in data processing under Article 6(1) sentence 1 letter f) GDPR.

The data is deleted as soon as it is no longer necessary to achieve the purpose of its collection, but at the latest after 90 days.

The collection of data to provide the website and its storage in log files is required for the operation of the website, so there is no possibility for you to object.

5.2 Data Processing for Recording Requests

If you use our recording service via the online form, we collect the contact and research data necessary to process your request. The information you provide as part of a request is collected, processed, and used for the purpose of contract fulfillment in accordance with Article 6(1) sentence 1 letter b) GDPR. We store the information you provide for the duration of processing and completing your request. Afterward, your data will be deleted. Data that we are required to store due to legal, statutory, or contractual retention obligations will be blocked instead of deleted to prevent its use for other purposes.

5.3 Data Processing for Job Applications

If you apply for a position with us, we process the data you provide as part of your application. This may include general personal information (such as name, address, and contact details), details about your professional qualifications and education, or information about further professional development, or other details you submit in connection with your application. Additionally, we may process publicly available, job-related information, such as a profile on professional social media networks (e.g., LinkedIn, Xing). Data processing occurs regardless of whether you apply for a position advertised on our website or through a third-party recruitment portal (e.g., Stepstone), or if you initiate your application on your own. If you send your application via email, we ask that you refrain from submitting sensitive personal data in HTML format.

We process personal data about you for the purpose of your application for an employment relationship, to the extent necessary for making a decision regarding the establishment of an employment relationship with us. The legal basis for data processing is § 26(1) in conjunction with § 8 sentence 2 BDSG (Federal Data Protection Act).

Furthermore, we may process personal data about you as necessary to defend against asserted legal claims arising from the application process. The legal basis for this is Article 6(1)(f) GDPR, where our legitimate interest may include the obligation to provide evidence in proceedings under the General Equal Treatment Act (AGG).

If an employment relationship is established between you and us, we may, in accordance with § 26(1) BDSG, further process the personal data already provided by you for the purposes of the employment relationship if this is necessary for the performance or termination of the employment relationship, or for exercising or fulfilling rights and obligations arising from laws, collective agreements, or works or service agreements.

The data will be deleted as soon as they are no longer required for the purpose of their collection. This is the case after the respective recruitment process is completed, unless you have explicitly consented to the storage of your data, or there is a possibility that a procedure will be initiated due to violations of the General Equal Treatment Act (AGG). In these cases, the data will be deleted six months after the completion of the recruitment process or after the final conclusion of the legal proceedings.

5.4 Data Processing for Registration to B2B Events by RBB Media

If you or third parties register for an event organized by RBB Media (such as the Media Breakfast, Licensee Meetings, etc.), we process the personal data you provide in connection with the event, including for purposes such as access control and the creation of name tags, based on Article 6(1) sentence 1 letter a) GDPR. Consent for the processing of the data is obtained as part of the registration process, and these privacy notices are referenced. If you provide data of a third party, you confirm that you are authorized to give consent on their behalf. The data will only be processed in connection with the event and will be deleted no later than 7 days after the event.

5.5 Contacting Us

When you contact us via email or through a contact form on this website, the data you provide is processed based on Article 6(1) sentence 1 letter a) GDPR to respond to your inquiries. The contact is logged to comply with legal requirements for documenting communication. Consent for data processing is obtained through the contact form, and these privacy notices are referenced. In the case of contacting us via email, you give your consent to data processing implicitly by sending the email. The data related to this communication will be deleted once the conversation is concluded and the relevant matter is resolved.

5.6 Cookies, Web Analytics, and Integrated Platforms

We aim to provide you with a pleasant online experience through our website and use cookies and web analytics services for this purpose.

Cookies are small text files that are temporarily stored on your device by your internet browser when visiting a website. These cookies may contain a unique string that allows for the identification of the internet browser upon subsequent visits to the website.

It is generally possible to use our website without cookies. Most internet browsers are set to automatically accept cookies. However, you can disable the storage of cookies or configure your browser to notify you when cookies are being transmitted. Additionally, upon your first visit to our website, you will be informed about the use of cookies via a so-called cookie banner, and you have the option to object to the setting of cookies.

Therefore, you can decide whether to accept cookies or not. You have full control over the use of cookies. Any cookies that have already been stored can be deleted by you at any time. However, please note that certain functionalities on our website may no longer be available or may only be partially available if you do not allow functional cookies.

5.6.1     Functional Cookies

This website uses so-called functional cookies, which ensure that our website operates properly. The legal basis for the collection and use of data is Article 6(1) sentence 1 letter f) GDPR. These cookies are stored for a maximum of 1 month and are then automatically deleted. The following functions are made possible by these cookies:

  • Capturing your browser settings to optimally display our website on your screen,
  • Detecting misuse of our website and services,
  • Ensuring the consistent loading of the website to maintain accessibility.

You have the option to block the setting of these cookies and delete any cookies that have already been set. For more information on this, you can refer to the provider or the help function of your internet browser. However, please note that certain functionalities on our website may no longer be available or may only be partially available if you do not allow functional cookies.

5.6.2     SALESVIEWER

With your consent, which you provide through your selection in the cookie banner, data is collected and stored on this website using the SalesViewer technology of SalesViewer GmbH for marketing, market research, and optimization purposes. This involves the use of a JavaScript-based code that serves to collect company-related data and their corresponding use. The data collected with this technology is encrypted using a one-way function (called hashing), which is not reversible. SalesViewer is designed to identify companies visiting our website. The data is pseudonymized immediately and is not used to personally identify the visitor to this website.

The following information (company data) is collected using the procedure described above, and neither targeted access is made to information stored on the website visitor’s device that is not already transmitted when visiting the website, nor are cookies or similar files stored on the device:

  • Name, origin, and industry of the visiting company
  • Source/Referrer of the visiting company
  • Keyword
  • Visitor behavior (e.g., visited (sub)pages, time of visit, duration of visit)


The data stored through SalesViewer will be deleted once it is no longer necessary for its intended purpose, and there are no legal retention obligations preventing its deletion.

You can object to the data collection and storage at any time, with future effect, by clicking on the link https://www.salesviewer.com/opt-out, thereby preventing future collection by SalesViewer on this website. An opt-out cookie will be placed on your device for this website. If cookies are deleted in your browser, the link must be clicked again in the respective browser to continue preventing data collection.

5.6.3     MATOMO

With your consent, which you provide through your selection in the cookie banner, this website uses the open-source software Matomo to create general and anonymous usage statistics. Matomo is operated locally on our servers. Due to this local usage, your data is not shared with third parties.

The following data is collected using Matomo:

  • IP address
  • IP-based location
  • Access times
  • Duration of stay
  • Browser data
  • Device type
  • Operating system
  • Referrer
  • Visited webpages

The IP address is stored exclusively in an anonymized form by deleting the last two of the four octets. No usage profile is created about you or your browser, but only aggregated data is compiled into anonymous statistics. The legal basis for the processing is your consent according to Article 6(1) letter a) GDPR, which you provide through your selection in the cookie banner. You can withdraw your consent for Matomo by clicking the link “Open Privacy Cookie Settings” located above the text. For more information about the privacy settings of the Matomo software, please visit the following link: https://matomo.org/docs/privacy/.

5.6.4     GOOGLE ANALYTICS

With your consent, which you provide through your selection in the cookie banner, this website uses Google Analytics to enable analysis of the use of our website. The information generated by the cookie about your use of this website is usually transferred to a server of Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) and stored there. However, your IP address will be anonymized by Google within member states of the European Union or in other countries that are parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and anonymized there. The IP address transmitted by your browser within the framework of Google Analytics will not be merged with other data from Google. The cookies stored by Google Analytics will be deleted after a maximum of 14 months.

For more information on privacy and terms of use regarding Google Analytics, please visit:

https://www.google.com/analytics/terms/de.html and https://policies.google.com/privacy?hl=de

You can give your consent for the use of Google Analytics via the corresponding button in the so-called cookie banner, which appears upon your first visit to our website. You can withdraw your consent at any time or give it retroactively by clicking the following link: Disable Google Analytics.

5.6.5     GOOGLE TAG MANAGER

The Google Tag Manager is a solution from Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) that allows us to manage website tags via an interface. Tags are small code elements on our website that are used, among other things, to measure traffic and visitor behavior, track the impact of online advertising and social channels, use remarketing and target audiences, and test and optimize our website.

The Tag Manager application (which implements the tags) is a cookie-free domain and does not collect personal data. The application triggers other tags that may, in turn, collect data. Google Tag Manager does not access these data. If a deactivation is applied at the domain or cookie level, this will apply to all tracking tags implemented via Google Tag Manager. Google Tag Manager Use Policy

If you disable tracking by Google Analytics (see above), you will also not be tracked by Google Tag Manager.

5.6.6     YOUTUBE

We embed videos from the “YouTube” platform, provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, using an embedding method. We use a so-called “two-click solution.” This means that the actual YouTube video is only loaded after you press the play button.

Until then, all YouTube content is disabled by default and will only be loaded and displayed after you click the “Activate content” button. By clicking this button, you consent to your IP address being transferred to YouTube, and to the provider setting cookies in your browser. For your convenience, we will remember your consent for 30 days using a so-called Local Storage object stored in your browser. We do not receive any information about your accounts on social networks or your browsing behavior on third-party platforms. Data exchange occurs solely between you and YouTube.

You can find YouTube’s privacy policy at: https://www.google.com/policies/privacy

The opt-out option is available at: https://adssettings.google.com/authenticated.

5.7 Miscellaneous

Based on Article 6(1) sentence 1 lit. c) and f) GDPR, we use and store your personal data and technical information as far as necessary to prevent or track misuse or other unlawful behavior on our website, e.g., to maintain data security in the event of attacks on our IT systems. This also occurs insofar as we are legally obligated to do so, for example, due to regulatory or court orders, and for the exercise of our rights and claims, as well as for legal defense.

6.    TRANSFER OF PERSONAL DATA TO THIRD PARTIES

We only transfer your data to third parties if we are entitled or required to do so under applicable law.

Entitlement exists if you give us your consent or if third parties process the data on our behalf:

If we do not carry out certain business activities ourselves (e.g., creating and sending promotional materials, data analysis, and possibly data cleansing) but outsource them to other companies, and these activities are linked to the processing of your data, we have contractually obligated these companies to use the data only for legally permitted purposes. We are entitled to monitor these companies in this respect.

In certain cases, we may be legally obligated to transfer personal data to authorities or courts. The data processing associated with this is based on a legal obligation.

7.    SOCIAL MEDIA PRESENCES OF RBB MEDIA

We maintain online presences on intermediaries such as social networks and other platforms to communicate with customers, prospects, and users and inform them about our services, products, and content. These are:

  • Facebook (Meta Platforms Ireland Limited, Merrion Road Dublin 4, D04 X2K5, Ireland)
  • Instagram (Meta Platforms Ireland Limited, Merrion Road Dublin 4, D04 X2K5, Ireland)
  • YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)
  • LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Pl, Dublin 2, Ireland)
  • Xing (New Work SE, Am Strandkai 1, 20457 Hamburg)

7.1 FACEBOOK aND INSTAGRAM

rbb media operates corporate pages on the social media platforms Facebook and Instagram, both of which are operated by Meta Platforms. It uses the services Facebook Insights and Instagram Insights. Below, we want to inform you, to the extent possible, about the processing of personal data when using these pages:

As the operator of Facebook and Instagram pages, rbb media is jointly responsible with the operator of the social network Facebook (Meta Platforms Ireland Limited, Merrion Road Dublin 4, D04 X2K5, Ireland) as per Article 4, No. 7 GDPR, as both parties process personal data when visiting the Facebook/Instagram pages. The data processing is based on an agreement between jointly responsible parties in accordance with Article 26 GDPR, which you can view here:
https://www.facebook.com/legal/terms/page_controller_addendum.

We only receive anonymized evaluations as part of the Insights data. These data are used exclusively for analyzing target groups and general usage behavior. No data is shared with third parties. The legal basis for processing the data is Article 6 (1) (f) GDPR. Our legitimate interest lies in presenting our company and communicating with our customers or prospects. Meta Platforms processes your data for its own commercial purposes. Meta Platforms also uses cookies for this purpose. The specific data Meta Platforms collects and its purposes are not fully known to us. Therefore, we refer to Meta’s privacy policy here: https://www.facebook.com/policy.

Meta Platforms is certified under the EU-US Data Privacy Framework.

The following data is provided to us by Meta Platforms for evaluation purposes. Please note that these are anonymized and grouped data:

– Page activities
– Page views
– “Likes”
– Reach
– Post interactions
– Videos
– Page followers
– Demographic data about visitors

For a detailed presentation of the respective processing and the options for objection, we refer to the following linked information from Meta Platforms:

7.2 YOUTUBE

rbb media operates channels on the platform YouTube, which is operated by Google. Below, we aim to inform you, to the best of our ability, about the processing of personal data when using this site:

As the channel operator, rbb media is jointly responsible with the platform operator YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) in the sense of Art. 4 No. 7 GDPR, as personal data is processed by both parties when visiting the YouTube channels. The data processing takes place based on an agreement between the joint controllers pursuant to Art. 26 GDPR.

The way in which YouTube uses your personal data from visiting our YouTube channels for its own purposes, the extent to which activities on our YouTube channels are assigned to individual users, how long YouTube stores data, and whether data from visits to our YouTube channels is shared with third parties, is not conclusively and clearly stated by YouTube and is unknown to us. We refer to YouTube’s privacy policy under: https://policies.google.com/privacy.

YouTube is certified under the EU-U.S. Data Privacy Framework.

Since only YouTube has information about the data actually collected and its use, any requests for information or the exercise of other data subject rights should be directed to Google. Of course, you can also direct such inquiries to us, and we will forward them to YouTube for further processing according to the agreement mentioned above.

For a detailed explanation of the respective processing and opt-out options, we refer to the following information provided by YouTube:

7.3 LINKEDIN

rbb media operates a LinkedIn company page. It is jointly responsible with the operator of the social network (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Pl, Dublin, 2, Ireland) in accordance with Art. 4 No. 7 GDPR. Since only LinkedIn has information about the data actually collected and its use, any requests for information or the exercise of other data subject rights should be made directly to LinkedIn. Of course, you can also address such inquiries to us, and we will forward them to LinkedIn for further processing according to the agreement mentioned above.

We only receive anonymized evaluations/statistics from LinkedIn, which are generated based on visits to our LinkedIn page. These data are used only for analyzing target groups and general usage behavior. No data is shared with third parties. The legal basis for the data processing is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is in presenting our company and communicating with our customers or potential clients. LinkedIn processes your data for its own commercial purposes. We do not know what data LinkedIn collects and for what purposes they are used. We refer to LinkedIn’s privacy policy here: https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy and https://www.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy.

LinkedIn is certified under the EU-U.S. Data Privacy Framework.

LinkedIn provides us as page administrators with the following data for evaluation purposes. Please note that these are anonymized and aggregated data:

  • Page activities
  • Page views
  • “Likes”
  • Reach
  • Post interactions
  • Videos
  • Page followers
  • Demographic data about the visitors

Processing of the anonymized data we use only takes place within the EU or EEA. No data transfer to third countries by rbb media takes place. However, we cannot make any statement about the location of data processing by LinkedIn as we do not have this information.

For a detailed explanation of the respective processing and opt-out options (Opt-Out), we refer to the following linked information from LinkedIn:

7.4 XING

rbb media operates a Xing company page. The operator of the Xing platform is New Work SE, Am Strandkai 1, 20457 Hamburg. We have access to statistical evaluations of visits to the company profile and the job postings we have published. These data are presented in aggregated and anonymized form and do not allow us to draw conclusions about individual visitors to our company page.

Please note that when using and accessing our company profile, data processing also occurs by Xing. This data processing is carried out solely under the responsibility of NEW WORK SE, whose privacy policy you can view here: https://privacy.xing.com/de/datenschutzerklaerung.

We do not have any influence on the data collected and the data processing activities, nor are we aware of the full scope of data collection, the purposes of processing, or the retention periods. We also do not have information about the deletion of the collected data by Xing.

8.    Your Rights

Of course, you have legally prescribed rights in connection with the processing of your data, which we would like to explain to you here. If you wish to exercise any of the following free rights, a simple message to us is sufficient. You can use the following contact details, and no costs other than the transmission costs at the basic rate will be incurred:

For your own protection, we reserve the right to request additional information to confirm your identity in the case of an inquiry, and if identification is not possible, to refuse processing the request.

8.1 Right to access

You have the right to request information from us about the personal data we have stored about you.

8.2 Right to rectification

You have the right to request the immediate correction and/or completion of your personal data.

8.3 Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful but you object to its deletion, we no longer need the data but you require it for the establishment, exercise, or defense of legal claims, or you have objected to the processing.

8.4 Right to deletion

You have the right to request the deletion of your personal data stored with us, unless the exercise of the right to freedom of expression and information, processing to fulfill a legal obligation, for reasons of public interest, or for the assertion, exercise, or defense of legal claims is required.

8.5 Right to notification

You have the right to request correction, deletion, or restriction of processing. If you exercise this right, we will notify all recipients to whom your personal data has been disclosed about the correction or deletion of the data or the restriction of processing, unless this proves impossible or involves a disproportionate effort.

8.6 Right to data portability

You have the right to request that personal data you have provided to us be handed over to you or to a third party in a structured, commonly used, and machine-readable format. If you request the direct transfer of the data to another controller, this will be done only if it is technically feasible.

8.7 Right to object

If your personal data is processed based on legitimate interests pursuant to Art. 6 (1) lit. f DSGVO, you have the right to object to the processing at any time according to Art. 21 DSGVO.

8.8 Right to withdraw consent

You have the right to withdraw your consent regarding the collection of data at any time with effect for the future. The data collected up until the withdrawal becomes legally effective will remain unaffected by this. Please understand that due to technical reasons, implementing your withdrawal may take some time, and you may still receive messages from us during this period.

8.9 Right to lodge a complaint with a supervisory authority

If the processing of your personal data violates data protection law or your data protection rights have been otherwise infringed, you have the right to lodge a complaint with the supervisory authority. The responsible supervisory authority for rbb media GmbH according to § 48 para. 1 of the Broadcasting Treaty Berlin-Brandenburg from 03./17.11.2023 can be contacted at:

The Broadcasting Data Protection Officer
Stephan Schwarze
Kantstraße 71-73, 04275 Leipzig
Complaint form of the supervisory authority
www.rundfunkdatenschutz.de

The current activity report of the Broadcasting Data Protection Officer can be accessed here:

https://www.mdr.de/rundfunkdatenschutz/infothek/taetigkeitsberichte/taetigkeitsbericht-rdsb-zweitausenddreiundzwanzig-100.html

9.    LINKS to websites of other companies

Our website contains links to websites of other companies. We are not responsible for the data protection practices on external websites that you can access via these links. Please inform yourself about the data protection of these external websites.

10.    Changes to the privacy notice

In order to ensure that our privacy notice always complies with current legal requirements, we reserve the right to make changes at any time. This also applies if the privacy notice needs to be adjusted due to new or revised offers or services.

Status: 18.06.2024