FAQ | Data Protection 1. Data protection and information regarding the GDPR at tolino 1.1. Our privacy policy uses terms that are used and defined by the legal provisions of the GDPR. We will explain the key terms here, to ensure that you understand them. Personal data Personal data means any information relating to an identified or identifiable natural person (hereinafter ‘data subject’). An identifiable natural person is one that can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data or an online identifier (e.g. IP address or cookies), or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Processing Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means. That fundamentally includes every action involving personal data, such as collection, storage, adaptation or alteration, use, transmission, dissemination, erasure or destruction, etc. Responsible entity (controller) The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. The controller must safeguard such data processing through the use of regularly inspected technical and organizational measures. Pseudonymization Pseudonymization means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person. Contract processor A contract processor is a natural or legal person, public authority, agency or another body that processes personal data on behalf of the controller. Recipient The recipient is a natural or legal person, public authority, agency or another body to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the context of a particular inquiry in accordance with the laws of the European Union or its member states shall not be regarded as recipients. Third party A third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons which, under the direct authority of the controller or processor, is authorized to process personal data. Consent Consent is an expression of the right to self-determination under data protection law. It is the freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her. Consent may be revoked at any time. 1.2. What about privacy and data security with tolino? Privacy Information about the data protection is available under mytolino.com/privacy-policy/ Collection and use of personal data The tolino book retailers use your personal data only for the technical management of their websites and to provide you with the services you request. If you would like more information on data privacy, please visit the website of your tolino book retailer. Customer choice The tolino book retailers may sometimes wish to contact customers to inform them of special offers, new products and services. When you register on these websites or buy products or services, you will be asked to state whether you would like to receive such promotional messages. Freedom of information On written request, the tolino book retailers will inform you what personal data (e.g. name, address) they hold on you. Please contact your tolino book retailer if you would like to request this information. 1.3. What data about me is recorded when I visit the tolino brand website? Our website uses the open-source software tool Matomo (formerly PIWIK) to analyze the browsing behavior of our users. We thereby analyze use of our website and try to constantly improve the information we offer. The Matomo software saves a cookie to the user’s computer. The following data is saved when individual pages of our website are accessed: – Two bytes of the IP address of the accessing user system (anonymized IP address) – The website accessed – The website from which the user accesses the requested page (referrer) – The sub-pages accessed from the website visited – The time spent on the website – How often the website is accessed The software only runs on our website servers. The user’s personal data is only saved to the website server. The data is not shared with third parties. The software is set so that the IP address is not fully saved, but so that two bytes of the IP address are hidden (e.g.: 192.168.xxx.xxx). That means it is no longer possible to identify the accessing computer using the shortened IP address. 1.4. What data about me is stored by the tolino website? We fundamentally only process personal data about our users insofar as such processing is required for the provision of a functioning website, as well as our content and services. Under normal circumstances, we only process personal data about our users with their consent. An exception is made in cases in which prior consent cannot be given for factual reasons and data processing is permissible under the applicable laws. As the tolino brand website does not include an online shop or customer area, only a very limited amount of data is stored and is largely deleted when the user’s session ends (e.g. so-called session cookies). tolino cookies and tracking on the website: Our website uses the open-source software tool Matomo (formerly PIWIK) to analyze the browsing behavior of our users. We thereby analyze use of our website and try to constantly improve the information we offer. The Matomo software saves a cookie to the user’s computer. The following data is saved when individual pages of our website are accessed: – Two bytes of the IP address of the accessing user system (anonymized IP address) – The website accessed – The website from which the user accesses the requested page (referrer) – The sub-pages accessed from the website visited – The time spent on the website – How often the website is accessed The software only runs on our website servers. The user’s personal data is only saved to the website server. The data is not shared with third parties. The software is set so that the IP address is not fully saved, but so that two bytes of the IP address are hidden (e.g.: 192.168.xxx.xxx). That means it is no longer possible to identify the accessing computer using the shortened IP address. tolino newsletter and data protection: No separate newsletter is sent to customers and users of the tolino bookstores via the mytolino websites. If you have questions about data protection with regard to the newsletter of your tolino bookstore, please contact their customer service department. Registration for the tolino brand website and data protection: We do not offer users the opportunity to register for our website by providing personal data. Accordingly, no customer data is recorded, stored or used on mytolino brand websites. If you have any questions about registering with your tolino bookstore, please contact the local customer service department. Contact forms and e-mail contact: The international tolino brand websites include contact forms, which can be used to contact us electronically. If a user contacts us in this way, then the information entered in the input screen is transmitted to us or the customer service department of the relevant bookstore (a selection is made directly in the contact form) at the customer’s request and automatically deleted following transmission. Depending on what the user enters, the following information is transmitted to tolino media or the relevant bookstore for the purpose of processing the query: – Contact details: first name, last name, e-mail address, (optional telephone number) – Query information and responsibility: tolino bookstore, product allocation, reason for query, description of issue and category (optional image material upload) Consent for data processing by the relevant customer service department is requested during the transmission process, which makes reference to this data protection statement. Alternatively, users may contact us using the e-mail address provided. In such cases, the personal data transmitted by e-mail is saved. The data transmitted to us is only used to process the conversation and is deleted immediately afterwards. 1.5. Which tolino customer data is saved by tolino on the mytolino brand website? We do not offer users the opportunity to register for our website by providing personal data. Accordingly, no customer data is recorded, stored or used on mytolino brand websites. If you have any questions about registering with your tolino bookstore (e.g. regarding your Thalia, Hugendubel or Weltbild customer account), please contact the relevant customer service department. 1.6. Who can I contact if I want to exercise my right to disclosure and deletion according to the new General Data Protection Regulation (GDPR) with regard to my tolino bookstore? For comprehensive information about the processing of your data, please contact your tolino bookstore’s customer service department. Because the tolino website is only a portal and does not involve any separate customer relationships, you can only request information from your tolino bookstore. The customer service staff will provide rapid assistance and, where applicable, the contact details of the respective data protection officer.
1. Data protection and information regarding the GDPR at tolino 1.1. Our privacy policy uses terms that are used and defined by the legal provisions of the GDPR. We will explain the key terms here, to ensure that you understand them. Personal data Personal data means any information relating to an identified or identifiable natural person (hereinafter ‘data subject’). An identifiable natural person is one that can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data or an online identifier (e.g. IP address or cookies), or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Processing Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means. That fundamentally includes every action involving personal data, such as collection, storage, adaptation or alteration, use, transmission, dissemination, erasure or destruction, etc. Responsible entity (controller) The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. The controller must safeguard such data processing through the use of regularly inspected technical and organizational measures. Pseudonymization Pseudonymization means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person. Contract processor A contract processor is a natural or legal person, public authority, agency or another body that processes personal data on behalf of the controller. Recipient The recipient is a natural or legal person, public authority, agency or another body to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the context of a particular inquiry in accordance with the laws of the European Union or its member states shall not be regarded as recipients. Third party A third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons which, under the direct authority of the controller or processor, is authorized to process personal data. Consent Consent is an expression of the right to self-determination under data protection law. It is the freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her. Consent may be revoked at any time. 1.2. What about privacy and data security with tolino? Privacy Information about the data protection is available under mytolino.com/privacy-policy/ Collection and use of personal data The tolino book retailers use your personal data only for the technical management of their websites and to provide you with the services you request. If you would like more information on data privacy, please visit the website of your tolino book retailer. Customer choice The tolino book retailers may sometimes wish to contact customers to inform them of special offers, new products and services. When you register on these websites or buy products or services, you will be asked to state whether you would like to receive such promotional messages. Freedom of information On written request, the tolino book retailers will inform you what personal data (e.g. name, address) they hold on you. Please contact your tolino book retailer if you would like to request this information. 1.3. What data about me is recorded when I visit the tolino brand website? Our website uses the open-source software tool Matomo (formerly PIWIK) to analyze the browsing behavior of our users. We thereby analyze use of our website and try to constantly improve the information we offer. The Matomo software saves a cookie to the user’s computer. The following data is saved when individual pages of our website are accessed: – Two bytes of the IP address of the accessing user system (anonymized IP address) – The website accessed – The website from which the user accesses the requested page (referrer) – The sub-pages accessed from the website visited – The time spent on the website – How often the website is accessed The software only runs on our website servers. The user’s personal data is only saved to the website server. The data is not shared with third parties. The software is set so that the IP address is not fully saved, but so that two bytes of the IP address are hidden (e.g.: 192.168.xxx.xxx). That means it is no longer possible to identify the accessing computer using the shortened IP address. 1.4. What data about me is stored by the tolino website? We fundamentally only process personal data about our users insofar as such processing is required for the provision of a functioning website, as well as our content and services. Under normal circumstances, we only process personal data about our users with their consent. An exception is made in cases in which prior consent cannot be given for factual reasons and data processing is permissible under the applicable laws. As the tolino brand website does not include an online shop or customer area, only a very limited amount of data is stored and is largely deleted when the user’s session ends (e.g. so-called session cookies). tolino cookies and tracking on the website: Our website uses the open-source software tool Matomo (formerly PIWIK) to analyze the browsing behavior of our users. We thereby analyze use of our website and try to constantly improve the information we offer. The Matomo software saves a cookie to the user’s computer. The following data is saved when individual pages of our website are accessed: – Two bytes of the IP address of the accessing user system (anonymized IP address) – The website accessed – The website from which the user accesses the requested page (referrer) – The sub-pages accessed from the website visited – The time spent on the website – How often the website is accessed The software only runs on our website servers. The user’s personal data is only saved to the website server. The data is not shared with third parties. The software is set so that the IP address is not fully saved, but so that two bytes of the IP address are hidden (e.g.: 192.168.xxx.xxx). That means it is no longer possible to identify the accessing computer using the shortened IP address. tolino newsletter and data protection: No separate newsletter is sent to customers and users of the tolino bookstores via the mytolino websites. If you have questions about data protection with regard to the newsletter of your tolino bookstore, please contact their customer service department. Registration for the tolino brand website and data protection: We do not offer users the opportunity to register for our website by providing personal data. Accordingly, no customer data is recorded, stored or used on mytolino brand websites. If you have any questions about registering with your tolino bookstore, please contact the local customer service department. Contact forms and e-mail contact: The international tolino brand websites include contact forms, which can be used to contact us electronically. If a user contacts us in this way, then the information entered in the input screen is transmitted to us or the customer service department of the relevant bookstore (a selection is made directly in the contact form) at the customer’s request and automatically deleted following transmission. Depending on what the user enters, the following information is transmitted to tolino media or the relevant bookstore for the purpose of processing the query: – Contact details: first name, last name, e-mail address, (optional telephone number) – Query information and responsibility: tolino bookstore, product allocation, reason for query, description of issue and category (optional image material upload) Consent for data processing by the relevant customer service department is requested during the transmission process, which makes reference to this data protection statement. Alternatively, users may contact us using the e-mail address provided. In such cases, the personal data transmitted by e-mail is saved. The data transmitted to us is only used to process the conversation and is deleted immediately afterwards. 1.5. Which tolino customer data is saved by tolino on the mytolino brand website? We do not offer users the opportunity to register for our website by providing personal data. Accordingly, no customer data is recorded, stored or used on mytolino brand websites. If you have any questions about registering with your tolino bookstore (e.g. regarding your Thalia, Hugendubel or Weltbild customer account), please contact the relevant customer service department. 1.6. Who can I contact if I want to exercise my right to disclosure and deletion according to the new General Data Protection Regulation (GDPR) with regard to my tolino bookstore? For comprehensive information about the processing of your data, please contact your tolino bookstore’s customer service department. Because the tolino website is only a portal and does not involve any separate customer relationships, you can only request information from your tolino bookstore. The customer service staff will provide rapid assistance and, where applicable, the contact details of the respective data protection officer.
