Privacy Policy

In the following we will inform you in accordance with the legal requirements - in particular the EU General Data Protection Regulation (GDPR, available Here) - about the processing of personal data by our company.

Contents Overview:

1. General Information
   1. Important
   2. Terms  Scope
   3. Controller
   4. Data Protection Officer

2. Data Processing in Detail
   1. General Information about Data Processing
   2. Use of Our Services
   3. Customer Feedback or Contacting Customer Services
   4. Competitions and Promotions
   5. Download Offers and Activation of Content that Requires Registration
   6. Push Notifications via Apps in Browser
   7. Tracking & Usage Analysis

3. Rights of the Data Subject
   1. Right to Object
   2. Right to Be Informed
   3. Right to Rectification
   4. Right to Erasure (“Right to Be Forgotten”)
   5. Right to Restriction of Processing
   6. Right to Data Portability
   7. Right to Revocation of Consent
   8. Right to Lodge a Complaint with a Supervisory Authority

1. General Information

In this section of the Privacy Policy, you will find information on the scope, the person responsible for the data processing, the Data Protection Officer and data security. In addition, we explain in advance the meaning of important terms that are used in the Privacy Policy.

1. 1. Important Terms

Browser: Computer program for displaying websites (e.g. Chrome, Firefox, Safari)

Cookies: Text files that the visited web server places on the user’s computer using the browser used. The stored cookie information can contain an identifier (cookie ID), which is used for recognition, as well as content-related information such as the registration status or information about websites visited. The browser sends the cookie information back to the web server with each request on subsequent visits to this page. Most browsers accept cookies automatically.

Third Countries: Countries outside the European Union (EU)

GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 for the protection of natural persons with regard to processing of personal data on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation), available here.

Personal Data: All information relating to an identified or identifiable natural person. An identifiable person is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Profiling: Any automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to the performance of work, economic situation, health, personal preferences, interests, reliability, conduct, whereabouts or movements of that natural person.

Services: Our offers to which this Privacy Policy applies (see Scope).

Tracking: The collection of data and their evaluation regarding the behavior of visitors to our Services.

Tracking Technologies: Tracking can be done both via the activity logs (log files) stored on our web servers and via data collection from your device vial pixels, cookies or similar tracking technologies.

Processing: Any process or series of processes carried out with or without the help of automated processes in connection with personal data such as the collection, recording, organization, arrangement, storage, adaptation or modification, reading, querying, use, disclosure through transmission, distribution or any other form of provision, comparison or linking, restriction, deletion or destruction.

Pixel: Pixels are also called counting pixels, tracking pixels, web beacons or web bugs. They are small, invisible graphics in HTML emails or on websites. When a document is opened, this small image is loaded from a server on the Internet, and the download is registered there. In this way, the server operator can see whether and when an email was opened or a website was visited. This function is usually implemented by calling up a small program (Javascript). Certain types of information on your computer system can be recognized and passed on, for example the content of cookies, time, and date of the page view and a description of the page on which the tracking pixel is located.

1. 2. Scope

This Privacy Policy applies to the following offers:

Our online offer “mygarden.com” especially available at www.mygarden.com,

Whenever a reference is made to this Privacy Policy from one of our offers (e.g. websites, subdomains, mobile applications, web services or integration in third-party sites), regardless of how you access or use it.

All of these offers are collectively referred to as “Services”.

1. 3. Responsible Entity

The entity responsible for data processing – i.e. the entity who is responsible for the purposes and means of processing of personal data – in connection with the Services is:

Burda Senator Verlag GmbH Hubert-Burda-Platz 1

77652 Offenburg

1. 4. Data Protection Officer

Contact Information for our Data Protection Officer:

Data Protection Inquiry Form

Via the address named under I.3 (Attention of Data Protection Department) or via:

Email:     mygarden@burda.com

2. Data Processing in Detail

In this section of the Privacy Policy, we will inform you in detail about the processing of personal data in the context of our

Services. For better clarity, we have broken down this information according to certain functionalities of our Services. During normal use of the Services, different functionalities and therefore different processing operations may occur consecutively or simultaneously.

1. 1. General Information on Data Processing

Unless otherwise stated, the following applies to all processing operations shown below:

1. No obligation to provide data & consequences of non-provision

The provision of personal data is not required by law or contract, and you are not obliged to provide data. As part of the input process, we will inform you if the provision of personal data is required for the respective Service (e.g. by designating it as a “mandatory field”). If the data is required, failure to provide it means that the Service in question cannot be provided. Otherwise, failure to provide it may mean that we cannot provide our Services in the same form and quality.

2. Consent

In various cases you have the option of giving us your consent to further processing (possibly for part of the data) in connection with the processing described below. In this case, we will inform you separately in connection with the submission of the respective Declaration of Consent about all modalities and the scope of the consent and about the purposes that we pursue with this processing. The processing operations based on your consent are therefore not listed again here (Art. 13 (4) GDPR).

3. Transmission of Personal data to Third Countries

If we transfer data to third countries, i.e. countries outside the European Union, then the transfer will only take place in compliance with the legal requirements for admissibility.

If the transfer of the data to a third country does not serve to fulfill our contract with you, we do not have your consent, the transfer is not required to assert, exercise or defend legal claims, and there are no other exceptions pursuant to Art. 49 GDPR , we will only transfer your data to a third country if an adequacy decision pursuant to Art. 45 GDPR or appropriate guarantees pursuant to Art. 46

GDPR exist.

Alternatively or additionally, by concluding the EU standard data protection clauses issued by the European Commission with the receiving body, we create appropriate guarantees pursuant to Art. 46 (2) (c) GDPR as well as an adequate level of data protection. Copies of the EU standard data protection clauses are available on the website of the European Commission here.

4. Hosting with External Service Providers

Our data processing takes place to a large extent with the involvement of so-called hosting service providers, who provide us with storage space and processing capacities in their data centers and, according to our instructions, also process personal data on our behalf. With all of the following functionalities, personal data may be transmitted to hosting service providers. These service providers process data either exclusively in the EU, or we have guaranteed an adequate level of data protection with the help of the EU standard data protection clauses (see under c.).

5. Transfer to Government Authorities

We transfer personal data to government authorities (including law enforcement authorities) if this is necessary to fulfill a legal obligation to which we are subject (legal basis: Art. 6 (1) (c) GDPR) or if it is necessary for the establishment, exercise or defense of legal claims (legal basis: Art. 6 (1) (f) GDPR).

6. Retention Period

In the “Retention Period” section, it is specified how long we use the data for the respective processing purpose. After this period has elapsed, the data will no longer be processed by us, but will be deleted at regular intervals, unless continued processing and storage is provided for by law (in particular because it is necessary to fulfill a legal obligation or to assert, exercise or defend legal claims) or if you give us further consent.

7. Duration of Operation of cookies

Some of the data processing presented in the following sections is carried out using cookies. The information stored in a cookie can only be accessed via the Internet by the operator of the web server that originally set the cookie. It is not possible for third parties to gain access in this way. The cookies have different durations of operation. Some cookies are only active during a browser session and are then deleted; others are active for longer periods of time, but usually for less than a year. After the duration of operation has expired, the browser deletes the cookie. You can manage cookies using the browser functions (usually under “Options” or “Settings”). This allows the setting of cookies to be deactivated, made dependent on your consent in individual cases, or otherwise restricted. You can also delete cookies at any time.

8. Names of Data Categories

In the following sections, the following summarizing category names are used for certain types of data:

Access Data: Date and time of your visit to our Service; the website from which the accessing system came to our website; website pages called up during use; session identification data (Session ID); in addition, the following information from the accessing computer system: Internet protocol address (IP address) used, browser type and version, device type, operating system, and similar technical information.

1. 2. Accessing our Services

In the following, we describe how your personal data is processed when you access our Services (e.g. loading and viewing the website, opening and navigating within the mobile device app). In addition, we use technically or legally necessary auxiliary tools that do not collect any data themselves (such as the Google Tag Manager) but only serve to manage and operate other tools or to manage the consent you have given (Consent Management Platform). We particularly point out that the transfer of access data to external content providers (see under b.) is unavoidable due to the technical functionality of the transmission of information on the Internet. The third-party providers are responsible for the data protection-compliant operation of the IT systems they use. The decision about the retention period of the data is incumbent on these service providers.

1. Purpose of data processing and legal basis as well as, if applicable, legitimate interests, storage duration

2. Recipients of the personal data

2. Recipients of the personal data

2. Recipients of the personal data

1. Purpose of data processing and legal basis as well as, if applicable, legitimate interests, storage duration

2. Recipients of the personal data