Data Protection notice of Schweitzer Fachinformationen

This data protection notice provides you with an overview and detailed information about the processing of your personal data. We would like to inform you in a simple and understandable manner how and why Schweitzer Fachinformationen processes your data.

General Data Protection Information from Schweitzer Fachinformationen

1. General Informationen

In a webshop, the storage and processing of personal data is sometimes necessary – e.g. for an order. However, in the interests of "data minimisation", Schweitzer Fachinformationen will only ask you to enter your information if it is necessary.
Since you enter the data yourself in the form, you will always have a transparent overview of what data we store. You will always be able to see the purpose for which we store the data in the context. In most cases, it is for registering as a customer so that you can enter an order. But data is also collected in the contact form so that you can receive a response from us.
This data protection notice is for your information only. You do not have to agree to this privacy policy at any point on our website.

The data controller within the meaning of the data protection laws is:
Schweitzer Fachinformationen GmbH & Co. KG
Elsenheimer Straße 41-43 | 80687 München
089 55134-0 | Telefax: 089 55134-103
info@schweitzer-online.de

2. Contact

If you have any questions about data protection, please write us an email:
Schweitzer Fachinformationen
Data protection and information security
Elsenheimerstraße 41-43
80687 München
datenschutz@schweitzer-online.de

The official data protection officer is provided by Herting Oberbeck Datenschutz GmbH. You can contact the data protection officer in writing or by e-mail:
Herting Oberbeck Datenschutz GmbH
Hallerstr. 76
20146 Hamburg
dsb_schweitzer-online@datenschutzkanzlei.de

3. Changes to this Data Protection Notice

We will adapt this data protection notice in the future if the change enables us to better inform you or if the legal requirements make this necessary. This data protection notice is for your information only. You do not have to agree to this data protection notice at any point on our website.

4. Date of Information

This notice on data protection at Schweitzer Fachinformationen was last amended in November 2023.

5. Joint Responsibility for Data Processing Within the Group of Companies

Schweitzer Fachinformationen is jointly responsible within the group for the processing of the data ("data controllers"). For this purpose, we have concluded an agreement on joint data responsibility in accordance with Art. 26 GDPR. In accordance with this agreement, we have regular access to the collected data within the Group.

You can find a list here: Legal notice . You may exercise the rights to which you are entitled both against us and against the respective company with which you are a customer. If rights are asserted, the data controllers shall inform each other and support each other in the fulfilment of such claims. The data controllers shall take the necessary steps among themselves in an appropriate manner.

6. Your Rights as a Data Subject

Right of access — the right to be informed about the personal data we process about you and to request information about it in accordance with Art. 15 GDPR.
Right to rectification — the right to request that we amend or update your personal data if it is inaccurate or incomplete, in accordance with Art. 16 GDPR.
Right to erasure — the right to request that we permanently delete your personal data in accordance with Art. 17 GDPR, provided that other statutory regulations (e.g. retention obligations or the restrictions under § 35 BDSG) or an overriding interest on our part (e.g. to defend our claims) do not prevent this.
Right to restriction — the right to request that we temporarily or permanently stop processing your personal data in accordance with Art. 18 GDPR.
Right to data portability — the right, under Art. 20 GDPR, to request a copy of your personal data in electronic format and the right to transfer that personal data to a third party for use.
Right to object — the right under Art. 21 GDPR to object to the processing of your personal data by us at any time on grounds relating to your particular situation. This right to object requires the existence of special circumstances of your personal situation, whereby rights of Schweitzer Fachinformationen may conflict with your right to object in individual cases.
Right of appeal — In addition, you have the right to appeal to a competent data protection authority (Art. 77 GDPR in conjunction with § 19 BDSG). A list of the data protection authorities (for the non-public sector) with address can be found at
https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

7. Disclosure of Data to Third Parties

The following applies to all processing: If necessary, your data will be passed on within the companies in the Schweitzer Fachinformationen Group. A list of the companies in the group can be found in the legal notice of this website. If necessary, your data will be passed on to service providers or business partners who are involved in the execution
of your order. This may be Deutsche Post, which needs your address to deliver the parcel to you. In the case of a periodical subscription, this may also be a publisher or printer who sends new issues to you on our behalf within this subscription.
Insofar as this is necessary, your data shall be passed on to business partners if a contractual relationship is also established with this third party in the case of a special legal transaction. This is the case, for example, with the purchase of a software licence, access to online resources or an e-book.

8. Duration of Storage

The following applies to all processing: We store your data for the duration of our business relationship until it is no longer required for the purpose of the respective processing. For legal reasons, storage beyond this point may be mandatory. We are subject to various storage and documentation obligations vis-à-vis the tax authorities resulting from the German Commercial Code (Handelsgesetzbuch; HGB) and the German Fiscal Code (Abgabenordnung; AO). The specified periods are up to ten years beyond the end of the business relationship.

9. Processing of Data Domestically / Abroad

All personal and order data is stored and processed exclusively on hardware owned by Schweitzer Fachinformationen. This hardware is located in a data centre in Germany, so no storage or processing is carried out abroad. The only case in which a transfer to a third country is possible is if the product purchased involves a business relationship with a rights holder based in the third country.

Supplementary Data Protection Information for our Website

1. Orders

Purpose: For the purpose of placing an order via our website, you have two options to choose from:

Use a permanent customer account. You can create an account as described under "Customer account". This allows you to view the status of your orders at any time and to view and change your master data under "My Account". You can also enter new orders without having to enter your name and address again. But third parties can also access your customer account if you do not protect the password sufficiently.
Use a one-time account, which will only be linked to this order. No password is set and no customer account is created. In this case, you will not be able to check the status of your order on the website, but you can contact Schweitzer Fachinformationen by telephone or email, for example. For future orders, you can then use a new one-time account or create a permanent account as described above.

Personal data: For each order, your name, address and email address as well as the quantity, price and description of the ordered item are stored in the order table of the web shop. In addition, the delivery method you have selected, the payment method, if you pay by SEPA order also your bank details and, if applicable, the delivery address you have requested will be saved. In addition, this data will be transferred to Schweitzer Fachinformationen's merchandise management system. This software is used in Schweitzer Fachinformationen's locations or bookshops to procure the articles from the publishers or wholesalers, to create an invoice and to control the dispatch to you.

Storage time: Once an invoice has been created, which is the norm, the data stored in the merchandise management system is transferred to the financial software in the accounting department to post and monitor your payments. In order to comply with our statutory retention obligations, we store copies of our invoices and purchase order documents in our archiving system for a period of up to 10 years. In order to comply with our statutory retention obligations, we store copies of our invoices and purchase order documents in our archiving system for a period of up to 10 years.

If you choose to pay by credit card when placing an order, you will be linked to the ConCardis website at the end of the ordering process. This service provider has been certified by the credit card providers (Amex, MasterCard, Visa) to collect and process your credit card information. Schweitzer Fachinformationen does not have access to this credit card data and only receives a message as to whether the payment or reservation for a particular order has been successfully made.

If you choose to pay by PayPal when placing an order, you will be linked to the PayPal website at the end of the ordering process. From there you can log in with your PayPal account. Schweitzer Fachinformationen does not have access to your PayPal data and only receives a message as to whether the payment or reservation for a particular order has been successfully made.

Legal basis: The processing of the data for handling the order is based on the fulfilment of the contract (Art. 6 para. 1 point b) GDPR).
Legal or contractual duty to provide: The provision of personal data is neither legally nor contractually required. However, it is not possible to process an order without providing the data.

Recipient or third country: Your personal data will not be transferred to other recipients or to a third country. Ordering an e-book is a special case. In this case, you do not buy a file (e.g. a PDF) from Schweitzer Fachinformationen, but rather a licence to use this file, which also places you in a contractual relationship with the licensing publisher. Therefore, Schweitzer Fachinformationen will also pass on your data to the respective publisher, if this is requested by that publisher. If a watermark is used as copyright protection for the e-book, your data may also be entered in this watermark. This transfer is necessary for the performance of the contract.

2. Customer Account

Purpose: You can create your own customer account on our website.

Personal data: We will ask you for the following information: Title, first name, last name, street, postcode, city and your email address. Optionally, you can also enter your telephone or fax number or enter your VAT ID (the ID is important for all corporate clients in other EU countries).

You will be asked to enter a password of your choice when you register so that you can log in on future visits to our website to enter new orders or view old orders. For security reasons, the password must contain at least 6 characters. Never give your password to a third party and only use it to log in to our website. No employee of Schweitzer Fachinformationen will ever ask you for your password.

Your password is only stored after it has been encrypted, so that no Schweitzer Fachinformationen employee can see the passwords. Therefore, we will never be able to send you your old password if you have forgotten it. However, you can receive a link from us by email to set a new password of your choice.

In order to avoid misuse where someone enters the email address of a third party, we use the double opt-in method. After registration we will send an email to the registered address. Only the recipient of this email can then confirm that they are the owner of this email address with a simple click.

If you have created a customer account by registering, you can check your data at any time after successfully logging in under My Account. All stored master data (name, address, email) can be displayed and changed. Delivery addresses can be created, changed and also deactivated.

In My Account you can also view all orders and search your order history using keywords. You can also change your password here at any time. You should do this whenever you suspect that your password is no longer secure.

Legal basis: The processing of registration data is based on the implementation of pre-contractual measures (Art. 6 para. 1 point b) GDPR).

Recipient or third country: Our website is maintained by a service provider who acts as our data processor.

Processing does not take place in third countries.

Storage time: The data will be deleted as soon as it is no longer necessary for the purpose of processing. This is the case, for example, if you request the deletion or closure of your customer account.

Legal or contractual duty to provide: The provision of personal data is neither legally nor contractually required. However, registration is not possible without the customer details and password.

3. Contact Form

Purpose: If you use the contact form on our website, the information you provide will only be stored for the purpose of processing this enquiry. By providing the contact form, we hope to make it easier for you to get in touch with us. The information you provide will be stored for the purpose of processing your enquiry and for possible follow-up questions.

Personal data: The mandatory fields for submitting the contact form are: Name, first name, email address, subject and your request.

Legal basis: The processing of the data entered in the contact form is based on a legitimate interest, namely the uncomplicated
establishment of contact (Art. 6 para. 1 point f) GDPR). If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 para. 1 point b) GDPR). If you provide data that goes beyond the mandatory information, the processing of the data entered is based on your consent (Art. 6 para. 1 point a) GDPR).

Recipient or third country: Our website is maintained by a service provider who acts as our data processor. Processing does not take place in third countries.

Storage time: The data shall be deleted no later than 6 months after the request has been processed. If there is a contractual relationship, we are subject to the statutory retention periods and delete your data after six or ten years.

Legal or contractual duty to provide: The provision of personal data is neither legally nor contractually required. However, it is not possible to process the request without this information. To exercise your right to object in accordance with Art. 21 of the GDPR, please read the relevant information in Chapter A) Data protection information from Schweitzer Fachinformationen, 7. Your rights as a data subject.

4. Use of Cookies

You can delete individual cookies or all cookies via your browser settings. In addition, you will receive information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you will find the necessary information under the following links:

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-l%C3%B6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
Opera: http://www.opera.com/de/help
Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE

4.1 Technically Required Cookies

Purpose: During your visit, our web server also sends cookies in addition to the requested web page. These cookies are very small files that are usually stored in your system by your browser. If you access another Schweitzer Fachinformationen web page, these Schweitzer cookies will be sent by your browser to our server. This links the various page views you make to one visit (a session). If you put an item in the shopping basket, it would be empty again after the next click if this connection did not exist as a session.

Personal data: Cookies are usually harmless and do not contain any data about you. These cookies are also used when you surf the internet completely anonymously. Nevertheless, you can define in the settings of your browser if you want the browser to accept cookies and if so, which ones. However, rejecting cookies has the disadvantage that a session is then carried out via a technical route, which means more uncertainty for you.

Legal basis: The processing of data by means of technically necessary cookies is based on a legitimate interest, the provision of a functional website (Art. 6 para. 1 point f) GDPR).
Recipient or third country: Schweitzer Fachinformationen does not use cookies from third parties (third-party cookies).

Legal or contractual duty to provide: The provision of the aforementioned personal data is neither legally nor contractually required. However, without this data, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted.

5. Encryption

In order to protect the security of your data during transmission, we use state-of-the-art encryption procedures (e.g. SSL) via HTTPS.

6. Credit Checks and Profiling

Purpose: We do not use a systematic and comprehensive creditworthiness check in our web shop. In justified individual cases – e.g. conspicuously large initial orders from a new customer – a query will be made to the Creditreform association or a manual plausibility and screening check will be carried out.

We do not use any automated decision-making procedures pursuant to Article 22 GDPR. We do not carry out any profiling based on your visit to our website.

Legal basis: Processing for the purpose of credit assessment is based on an overriding legitimate interest to protect against payment defaults and to contain the risk of financial damage in the event of advance payments (Art. 6 para. 1 point f) GDPR).

Storage time: The data will be deleted as soon as it is no longer necessary for the purpose of processing.

Legal or contractual duty to provide: The provision of personal data is neither legally nor contractually required. However, it is not possible to process an order without providing the data. To exercise your right to object in accordance with Art. 21 of the GDPR, please read the relevant information in Chapter A) Data protection information from Schweitzer Fachinformationen, 7. Your rights as a data subject.

Recipient or third country: No data is transferred to third countries. The data is processed in the accounting department and, if necessary, by tax advisors and/or the tax authorities.

Personal data: The name and company name are processed by the plausibility and screening check.

7. Server Logfiles

Purpose: When you access our website, general information is automatically collected – even if you do not register or otherwise submit information. In particular, it is processed for the following purposes:

Ensuring that the website is connected without any problems
Ensuring the smooth use of our website
Evaluation of system security and stability as well as for other administrative purposes

We also reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.
Personal data: This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and other similar information.

Recipient or third country: No data is transferred to third countries. We use service providers to provide services as part of data processing, in particular for the provision, maintenance and care of IT systems.

Storage time: The data will be deleted as soon as it is no longer necessary for the purpose of processing. This is generally the case for data used to access the website when the respective session has ended.

Legal or contractual duty to provide: The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address and the cookie identifier, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted.

Legal basis: Processing is carried out in accordance with Art. 6 para. 1 point f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. We use technical service providers, acting as our data processors, for the operation and maintenance of our website.

Supplementary Data Protection Information for Order Processing

1. Order Processing

Purpose: For each order, regardless of the ordering method (for the webshop, supplementary instructions apply, which you can find here), your personal data are processed for processing and fulfilment. In order to be able to provide you with information about the status of your orders online, we also transfer your order data to our webshop and our Schweitzer Connect customer portal.

Personal data: Your name, address, telephone and fax number and email address as well as the quantity, price and designation of the ordered item will be stored in Schweitzer Fachinformationen's merchandise management system. In addition, the delivery method you have selected, the payment method, if you pay by SEPA order, your bank details, and, if applicable, the delivery address you have requested will be saved as well.

Recipient or third country: No data is transferred to third countries. This software is used in Schweitzer Fachinformationen's locations or bookshops to procure the articles from the publishers or wholesalers, to create an invoice and to control the dispatch to you. Once an invoice has been created, which is the norm, the data stored in the merchandise management system is transferred to the financial software in the accounting department to post and monitor your payments.

Legal basis: For contracts with customers as natural persons: Art. 6 I point b) GDPR and in the case of a legal person (for the employees of the legal person): Art. 6 I point f) GDPR. The legitimate interest in the data processing is to make the licensing to the customer possible.

Storage time: In order to comply with our statutory retention obligations, we store copies of our invoices and purchase order documents in our archiving system for a period of up to 10 years.

Legal or contractual duty to provide: The provision of the aforementioned personal data is neither legally nor contractually required. Without this personal data, Schweitzer Fachinformationen cannot enter into a contract with you or fulfil its performance obligations.

2. Order Processing for Digital Access (Licence Comparison)

Purpose: Some orders and subscriptions exist or contain digital portions as an add-on. Your personal data will be processed for the purpose of processing, fulfilling and providing access through a licence. The respective licensed content is subject to copyright restrictions. In order to preserve the restrictions, a subscription check or licence comparison is carried out between the rights holder and Schweitzer Fachinformationen.

Personal data: Your name and email address will be processed by Schweitzer Fachinformationen. In addition, the scope of the licence shall be stored.

Recipient or third country: No data is transferred to third countries. The provision of access shall be made directly to the rights holder of the digital portion. Based on the contractual relationship with Schweitzer Fachinformationen, your personal data shall be transmitted for the above-mentioned purpose.

Legal basis: For contracts with customers as natural persons: Art. 6 I point b) GDPR and in the case of a legal person (for the employees of the legal person): Art. 6 I point f) GDPR. The legitimate interest for processing the data is to enable licence matching).

Storage time: In order to comply with our statutory retention obligations, we store copies of our invoices and purchase order documents in our archiving system for a period of up to 10 years. Otherwise, personal data shall be deleted after the purpose has expired.

Legal or contractual duty to provide: The provision of the aforementioned personal data is neither legally nor contractually required. Without the personal data Schweitzer Fachinformationen cannot provide the access to the digital portion.

Supplementary Data Protection Information for Applications

Supplementary Data Protection Information for Video Conferences and Online Events

1. GoToWebinar / GoToMeeting

Purpose: Schweitzer uses the tool "GoToWebinar" for the purpose of conducting online meetings and video conferences. Personal data: The scope of the data also depends on the data you provide before or during participation in an "online meeting". Execution requires the processing of the following personal data:

Details of the user or participant: First name, last name, telephone (optional), email address, password (if "SingleSign-On" is not used), profile picture (optional), department (optional)
Meeting metadata: Subject, description (optional), participant IP addresses, device/hardware information
For recordings (optional): MP4 file of all video, audio and presentation recordings, M4A file of all audio recordings, text file of the online meeting chats.
When dialling in by phone: Incoming and outgoing call number, country name, start and end time. If applicable, further connection data such as the IP address of the device can be saved
Text, audio and video data: You may have the opportunity to use the chat, question or survey functions in an online meeting. In this respect, the text entries you make are processed in order to display them in the online meeting and, if necessary, to log them. To enable the display of video and the playback of audio, data from your terminal's microphone and any terminal video camera will be processed accordingly for the duration of the meeting. You can switch off or mute the camera or microphone yourself at any time via the "GoToMeeting" application

In order to participate in an online meeting or to enter the "meeting room", you must at least provide your name details.

Schweitzer Fachinformationen receives the registration data from the participants or from their companies.

Recipient or third country: Personal data processed in connection with participation in "online meetings" will generally not be passed on to third parties unless it is intended to be passed on. Other recipients: The provider of "GoToWebinar" receives knowledge of the above-mentioned data as necessary, insofar as this is provided for in the context of our data processing contract with "GoToWebinar". "GoToWebinar" is a service of LogMeIn Ireland Limited (Bloodstone Building Block C 70 Sir John Rogerson's Quay Dublin 2, Ireland), a subsidiary of LogMeIn Inc. (LogMeIn, 320 Summer Street, Boston, MA 02210, USA). Processing of personal data therefore also takes place in a third country. Schweitzer Fachinformationen has concluded a contract for data processing with the provider of "GoToMeeting" which complies with the requirements of Art. 28 GDPR. Furthermore, LogMeIn Inc. guarantees the conclusion of an EU standard contractual clause for transfers. Storage time: Schweitzer Fachinformationen shall delete your personal data as a matter of principle if there is no need for further storage. A need may arise in particular if the data is still required in order to fulfil contractual services. In the case of statutory retention obligations, deletion only comes into consideration after expiry of the respective retention obligation.

Legal or contractual duty to provide: The provision of personal data is neither legally nor contractually required. However, it is not possible to use or participate in the online events without providing the data.

Legal basis: Schweitzer Fachinformationen shall process the aforementioned personal data on the legal basis of Article 6 para. 1 point b) GDPR

for the fulfilment of the contractual relationship with a natural person. The processing of the personal data of the employees of the respective legal entity shall be carried out on the legal basis of the overriding legitimate interest of Schweitzer Fachinformationen, 6 para. 1 point f) GDPR (performance of the contract, implementation of online events and training to enable the use of the products).

Note: Insofar as you access the website of "GoToWebinar", the provider of "GoToWebinar" is responsible for data processing. However, accessing the website is only necessary to download the software for the use of "GoToWebinar". You can also use "GoToWebinar" if you enter the respective MeetingID and, if applicable, further access data for the meeting directly in the "GoToWebinar" app. If you do not want to or cannot use the "GoToWebinar" app, then the basic functions can also be used via a browser version, which you can also find on the "GoToWebinar" website. Further data protection information of the provider "GoToWebinar" can be found under the following link: LOGMEIN PRIVACY POLICY

2. Zoom

Purpose: Schweitzer Fachinformationen uses the "Zoom" tool for the virtual organisation of events. For the organisation of virtual events, communication and exchange with the participants and the sending of access data via email.
Personal data: For the implementation of the aforementioned event, the following personal data shall be processed for access to the Zoom account of the participant in the Zoom meeting:

Master data (first and last name, email address, identifier, rights, roles, phone number and country of residence for phone dial-in, optional profile details, language settings, approximate geographical location)
Communication-related meta-data (meeting title, meeting description, start and end time of communication, joining/entry of participants, IP address, device/hardware/browser information such as MAC address, device ID, device type, operating system details, etc.)
Communication content (text, audio, image and video transmission, file transfers, audio and video recordings of communication content in the Zoom Cloud)
In individual cases, Schweitzer Fachinformationen receives the registration data of participants from their employer for the purpose of participation.

Recipient or third country: Since Zoom is a cloud service, the aforementioned personal data is transmitted to the provider Zoom Video Communications, Inc. in the USA or processed on servers of the provider. Schweitzer Fachinformationen has concluded a contract for data processing pursuant to Art. 28 GDPR with Zoom Video Communications, Inc. within the framework of a licence agreement. Your personal data may be transferred within the Schweitzer Fachinformationen group of companies. This transfer shall only take place within the scope of satisfactory responsibility in order to enable you to participate in events. The transfer of data to Zoom Video Communications, Inc. in the USA also takes place in accordance with Art. 46 para. 1 GDPR with the documentation of appropriate guarantees by means of the standard data protection clauses (Art. 46 para. 2 point c) and d) GDPR).

Storage time: Meta-data related to communication will be deleted as soon as the storage is no longer necessary for the provision or maintenance of the service. Communication content shall not be stored beyond the communication. Registration and invoice data are subject to retention periods arising from the German Commercial Code (Handelsgesetzbuch; HGB) and the German Fiscal Code (Abgabenordnung; AO). The specified periods are up to ten years beyond the end of the business relationship.
Legal or contractual duty to provide: The provision of personal data is neither legally nor contractually required. However, participation and use is not possible without the provision of data. No automated decision-making within the meaning of Art. 22 GDPR is used.

Legal basis: Schweitzer Fachinformationen shall process the aforementioned personal data on the legal basis of Article 6 para. 1 point b) GDPR for the fulfilment of the contractual relationship with a natural person. The processing of the personal data of the employees of the respective legal entity shall be carried out on the legal basis of the overriding legitimate interest of Schweitzer Fachinformationen, 6 para. 1 point f) GDPR (performance of the contract, implementation of online events and training to enable the use of the products).

Note: Insofar as you access the website of "Zoom", the provider of "Zoom" is responsible for data processing. However, accessing the website is only necessary to download the software for the use of Zoom. You can also use Zoom if you enter the respective Meeting-ID and, if applicable, further access data for the meeting directly in the Zoom app. If you do not want to or cannot use the Zoom app, then the basic functions can also be used via a browser version, which you can also find on the Zoom website. Further data protection information of the provider Zoom can be found under the following link: Zoom privacy policy

3. Microsoft Teams

Purpose: Schweitzer Fachinformationen uses the Microsoft Office 365 TEAMS video conferencing system for communication via the internet. In the following section, you will find information about the processing of your personal data when using Teams.
Personal data: In the context of online meetings via Teams, the following personal data will be processed:

Communication data (e.g. your email address, if you choose to provide it to us on an individual basis),
Personal data (if you choose to provide it to us),
Log files, log data,
Metadata (e.g. IP address, time of participation, etc.),
Profile data (e.g. your username, if you provide it of your own accord).
Logging of chat content. Files that users share in chats are saved in the OneDrive for Business account of the user who shared the file. The files that team members share in a channel are stored on the team's SharePoint site.

Recipient or third country: For the purpose of remote maintenance, Microsoft may request remote access. We will review and approve such access on a case-by-case basis if it is necessary for Microsoft to perform support services (e.g., troubleshooting). In this case, such access may also be provided by Microsoft affiliates from outside the European Union. Exclusively in the case of access from outside the European Union in individual cases approved by us, we have concluded standard contractual clauses with Microsoft.
Storage time: Schweitzer Fachinformationen shall delete your personal data as a matter of principle if there is no need for further storage. A need may arise in particular if the data is still required in order to fulfil contractual services.

Legal or contractual duty to provide: The provision of personal data is neither legally nor contractually required. However, participation and use is not possible without the provision of data. No automated decision-making within the meaning of Art. 22 GDPR is used.

Legal basis: Schweitzer Fachinformationen shall process the aforementioned personal data on the legal basis of Article 6 para. 1 point b) GDPR
for the fulfilment of the contractual relationship with a natural person. The processing of the personal data of the employees of the respective legal entity shall be carried out on the legal basis of the overriding legitimate interest of Schweitzer Fachinformationen, 6 para. 1 point f) GDPR (performance of the contract, implementation of online events and training to enable the use of the products).

Note: The provider, Microsoft, reserves the right to process customer data for its own legitimate business purposes. Schweitzer Fachinformationen has no influence on this data processing by Microsoft. The data controller for these processing operations, who is therefore responsible for compliance with all applicable data protection provisions, is Microsoft in these cases. Further data protection information of the provider Microsoft can be found under the following link: https://privacy.microsoft.com/de-de/privacystatement

Supplementary Data Protection Information for Social Media

Supplementary Data Protection Information for Schweitzer Products

Diese Hinweise ergänzen die Allgemeinen Datenschutzhinweise von Schweitzer Fachinformationen.

1. Schweitzer New Release Service

Purpose: With our Schweitzer new release service, you can specify which new releases our system should present to you. With this customised solution, you then receive title lists that are individually compiled for you.

Personal data: You need a customer account for this service.

Recipient or third country: No data is transferred to third countries. Our website is maintained by a service provider who acts as our data processor.

Legal basis: The processing of data for the new release service is based on your consent in the form of the creation of the search profile (Art. 6 para. 1 point a) GDPR).

Storage time: The data shall be deleted as soon as you revoke your consent by deleting your search profile. If the search profile is deleted, the associated profile history shall also be deleted.

Legal or contractual duty to provide: The provision of personal data is neither legally nor contractually required.

2. Schweitzer Mediacenter

The Schweitzer Mediacenter is used to manage your complete and professional specialised library - online and print media. You need a user account for this service. There is a direct login and automatic registration for access to your licensed publisher content. In this context, please note the data protection regulations of the connected databases and publishers.

You can find more information here: https://mediacenter.schweitzer-online.de/statics/PrivacyTerms.aspx

3. Schweitzer Connect

Purpose: Schweitzer Connect is the tool for convenient management of all subject information. The web-based and individually configurable solution offers comprehensive possibilities for your inventory management with many functions and an overview of all titles, into which your own inventory can also be integrated. Authorised users can view and directly edit order documentation and use automated reports.

Personal data: You need a customer account for this service (see data protection notice on "customer account"). Recipient or third country: No data is transferred to third countries. Schweitzer Connect is maintained by a service provider who acts as our data processor.

Storage time: The personal data relating to you shall be stored until the purpose of the data processing no longer applies or after the expiry of statutory or official retention periods.

Legal or contractual duty to provide: The provision of personal data is neither legally nor contractually required. However, you will not be able to use this service without providing it.

Legal basis: The use of the Schweitzer Connect is based on a contract with a legal entity. For any employees, the processing is based on the legal basis of legitimate interest, Art. 6 para. 1 point f) GDPR (performance of the contract).

4. Schweitzer App

Purpose: Your personal data is processed for the provision and use of the Schweitzer App.

A Schweitzer user account is a prerequisite (see data protection notice on "customer account"). Our app is available from an app platform operated by a third party, the so-called app stores (e.g. Google Play and Apple App Store). Our app is available from an app store operated by a third party (e.g. Google Play and Apple App Store). The data controller is the respective operator of the app store.

Personal data: In addition to the device and access data that is collected each time you use the app, the type of data processed and the purposes of processing depend in particular on how you use the features and services provided through our services.

Recipient or third country: No data is transferred to third countries. The Schweitzer App is maintained by a service provider who acts as our data processor.
Storage time: The personal data concerning you shall be stored until the purpose of the data processing no longer applies. The purpose does not apply to requests to delete the customer's account.

Legal or contractual duty to provide: The provision of personal data is neither legally nor contractually required. However, you will not be able to use this service without providing it.

Legal basis: The basis for the processing are the terms of use for the Schweitzer App that exist between you and us (Art. 6 para. 1 point b) GDPR).

5. Newsletter and Product Recommendations by E-Mail

Purpose: Our newsletters are divided into prospective customer newsletters, user newsletters and product recommendations. Each newsletter offers you the possibility to "unsubscribe". Your data will only be used to send you the newsletter you have subscribed to by email and, if you have also consented to this, to evaluate how you use the newsletter and any content linked to it. Your name is given in order to be able to address you personally in the newsletter and, if necessary, to identify you if you wish to exercise your rights as a data subject.

Prospective customer newsletter: The purpose of the prospective customer newsletter is to inform you about the interesting, simple, efficient and secure use of your printed and digital subject information, databases, e-journals, e-books. You can subscribe (and unsubscribe) to this newsletter independently of a user account or registration. The processing is carried out on the legal basis of your consent (Art. 6 para. 1 point a) GDPR).

User newsletter: The purpose of the user newsletter is to provide you with more detailed information about important contents and functions of the Schweitzer Mediacenter. To do this, you log in (and out) as a user of the Schweitzer Mediacenter yourself. The processing is carried out on the legal basis of your consent (Art. 6 para. 1 point a) GDPR).

Product recommendations: Product recommendations for our own similar goods or services will be sent to you on the basis of orders already placed and the existing contractual relationship if we have already received your email address in the course of the order. The processing is carried out on the legal basis of the overriding legitimate interest of Schweitzer Fachinformationen (Art. 6 para. 1 point f) GDPR) and in compliance with § 7 para. 3 UWG. The relevant interest is communication with business contacts or their contacts. The product recommendations that are sent offer you the possibility of "unsubscribing" – this is equivalent to an objection.

Personal data: We process your email address in the context of advertising.

Recipient or third country: No data is transferred to third countries. For this promotional approach, use is made of a service provider who acts as our data processor.

Storage time: The personal data concerning you shall be stored until the purpose of the data processing no longer applies. The purpose ceases to apply upon revocation of your consent or objection.

Legal or contractual duty to provide: The provision of personal data is neither legally nor contractually required. However, newsletter invitations and product information cannot be sent without providing data.

6. Schweitzer Magazine Content Service

Purpose: The Schweitzer magazine content service offers you the opportunity to be informed about newly published issues of specialist magazines and to read the tables of contents of the issues. These tables of contents are sent by email or can be read online.

Personal data: You need a customer account for this service (see data protection notice on "customer account").

Recipient or third country: No data is transferred to third countries. Schweitzer magazine content service is maintained by a service provider who acts as our data processor.

Storage time: The personal data relating to you shall be stored until the purpose of the data processing no longer applies, your revocation is received or after the expiry of statutory or official retention periods.

Legal or contractual duty to provide: The provision of personal data is neither legally nor contractually required. However, you will not be able to use this service without providing it.

Legal basis: For natural persons, the legal basis is the fulfilment of the contract, Art. 6 para. 1 point b) GDPR. In the case of legal persons and their employees, the legal basis is the legitimate interest, Art. 6 para. 1 point f) GDPR (fulfilment of the contract).

7. Schweitzer Cooperations

Purpose: Schweitzer Fachinformationen cooperates with associations, service providers and publishers. This is done for the purpose of organising professional events, product developments and the exchange of information. Should you register for a corresponding event or select the respective product, you will be informed about the configuration and the processing of your personal data in each individual case.