Privacy Policy

1.

General information and mandatory disclosures

When you use this website, various kinds of personal data may be collected. Personal data is data that can be used to identify you personally. Our first principle is to collect as little data as possible. Where we do collect it, we handle your data with care and sensitivity.

1.1

Name and contact details of the controller

getpress GmbH
Zossener Str. 55-58
10961 Berlin

Maximilian Ziche
Phone: +49 (0) 173 6273833
Email: maximilian@get-press.de

2.

Collection and storage of personal data, and the nature and purpose of its use

2.1

Statistical analysis

Google Analytics

I. Description and scope of the data processing

We use the analytics and tracking tool Google Analytics on our website. This is analytics software that allows us to carry out analyses and, with the help of the reports we receive from Google Analytics, to understand your behaviour as a user and support you better as you navigate our product and service pages. It also allows us to record how you move through those pages, so that we can tailor our services and offerings to your needs. If you consented to the use of Google Analytics at the start of your visit to our website, data about how you use the website is collected. If you click a link, for example, that action is stored in a cookie and sent to Google Analytics. Each time you visit our pages, our system automatically records data and information from the computer system of the device making the request (e.g. a computer or smartphone).

We use Google Analytics with the anonymisation function enabled. This function truncates your IP address by two bytes, making it impossible to link it to you or to the internet connection you are using. Below we explain which data Google Analytics processes and how:

To use Google Analytics, we embed a tracking code in the code of our website. When you visit the website, this code records the actions you take on it. When you leave the website, that data is sent to the Google Analytics servers in the USA and stored there. Google processes the data and we receive reports on your usage behaviour.

Data that Google Analytics processes: the tracking code generates a random, unique ID and links it to your browser cookie. This is how Google Analytics identifies you as a new user. The next time you visit our site, you are identified as a “returning” user. All data collected is stored under this user ID as a pseudonym. Your interactions and actions on our website are measured on the basis of such identifiers. If you use other Google tools (a Google account, for example), data generated via Google Analytics may be linked to third-party cookies.

Overview of the data processed by Google Analytics:

– Session duration: the time you spend on our site without leaving it. The session ends automatically after 20 minutes of inactivity.

– Bounce rate: a bounce is recorded when you view only one page on our website and then leave again immediately.

– Account creation: if you create an account on our website, Google Analytics collects your data.

– IP address: the IP address is collected in truncated form only, so that it cannot be attributed to a specific individual.

– Location: the IP address can be used to determine your country and approximate location.

– Technical information: this includes the operating system and type of your device, the internet service provider you use, information about your browser type, the date and time of access, the duration of your visit and the page load time, and your screen resolution.
‍
– Traffic source: the website or advertisement through which you reached our site.

This list is intended to give you a general sense of what Google Analytics stores. It does not claim to be exhaustive.

II. Legal basis for the data processing

The legal basis for processing this data is your consent under Art. 6(1)(a) GDPR. Consent is obtained via a pop-up the first time you visit the website.

III. Purpose of the data processing

The purpose is to analyse and optimise our website.

IV. Storage period

The data is deleted after 26 months at the latest.

V. Right to object and to erasure

We do not collect any data without your consent. You can withdraw your consent at any time. You are of course also free to exercise any of the rights set out below in relation to the processing of your data at any time.

Content for advertising and marketing purposes

I. Description and scope of the data processing

Google Ads allows us to display advertisements in the Google search engine or on third-party websites when you, as a user, enter certain search terms on Google (keyword targeting). Targeted advertisements can also be displayed on the basis of the user data Google holds, such as location data and interests (audience targeting). As the website operator, we can evaluate this data quantitatively – by analysing, for example, which search terms led our advertisements to be displayed and how many advertisements resulted in clicks.

II. Legal basis for the data processing

The legal basis for processing this data is your consent under Art. 6(1)(a) GDPR.

III. Purpose of the data processing

The purpose of this processing is to enable us to run advertising campaigns.

IV. Storage period

Personal data is retained for as long as it is needed to fulfil the purpose of the processing. It is deleted as soon as it is no longer needed for that purpose.

V. Right to object and to erasure

We do not collect any data without your consent. You can withdraw your consent at any time.

I. Description and scope of the data processing

Meta Ads allows us to display advertisements on the platforms of the Meta group (Facebook, Facebook Messenger and Instagram) as targeted advertisements based on the user data Meta holds, such as location data and interests (audience targeting). As the website operator, we can evaluate this data quantitatively – by analysing, for example, which ads resulted in clicks.

II. Legal basis for the data processing

The legal basis for processing this data is your consent under Art. 6(1)(a) GDPR.

III. Purpose of the data processing

The purpose of this processing is to enable us to run advertising campaigns.

IV. Storage period

Personal data is retained for as long as it is needed to fulfil the purpose of the processing. It is deleted as soon as it is no longer needed for that purpose.

V. Right to object and to erasure

We do not collect any data without your consent. You can withdraw your consent at any time.

Press and public relations (HubSpot)

I. Description and scope of the data processing

If you work as a journalist, editor or media representative, we process your contact details as part of our PR work. The data processed includes basic details (surname, first name), contact details (email address, telephone number), professional information (publication, editorial team) and notes on our interactions.
‍
Information pursuant to Art. 14 GDPR: some of this data is not collected directly from you but researched from publicly available sources, such as mastheads, published articles and professional networks. We use the CRM system HubSpot to manage these contacts, which also processes data on servers in the USA.

II. Legal basis for the data processing

The legal basis is our legitimate interest under Art. 6(1)(f) GDPR in targeted press and public relations work.

III. Purpose of the data processing

The purpose is to send relevant press releases, respond to media enquiries and maintain our media network.

IV. Storage period

The data is deleted as soon as it is no longer needed for the purpose of the processing. If there has been no interaction for a period of two to three years, your data is deleted from HubSpot.

V. Right to object and to erasure

You can object to the processing of your data for PR purposes at any time. A simple message to hello@get-press.de is enough.

Data processing in connection with the use of our software

Registration and login

I. Description and scope of the data processing

If you wish to enter into a contract for the use of news engine, your data is stored in a customer account.

We collect personal data when you provide it to us voluntarily in the course of entering into a contract, contacting us, or opening a customer account. Mandatory fields are marked as such, because in these cases we need the data in order to perform the contract, respond to your enquiry or open the customer account. Without this information, the order and/or the account cannot be completed, or your enquiry cannot be processed. The data we collect is apparent from the input forms. We use the data you provide in accordance with Art. 6(1)(1)(b) GDPR (necessary for the performance of a contract) to perform the contract and respond to your enquiries. Once the contract has been fully performed or your customer account has been deleted, further processing of your data is restricted and the data is deleted after the retention periods under tax and commercial law have expired.
‍
Any further use of the data takes place only if you have expressly consented to it, or if we have reserved the right to a broader use of the data that is permitted by law and about which we inform you in this policy. You can delete your customer account at any time, either by sending a message to the contact address given above or by using the function provided for this purpose in your customer account.

II. Legal basis for the data processing

The legal basis for processing this data is your consent under Art. 6(1)(a) GDPR.

III. Purpose of the data processing

The purpose is to provide our software services to you.

IV. Storage period

Personal data is retained for as long as it is needed to fulfil the purpose of the processing. It is deleted as soon as it is no longer needed for that purpose.

V. Right to object and to erasure

We do not collect any data without your consent. You can withdraw your consent at any time. You are of course also free to exercise any of the rights set out below in relation to the processing of your data at any time.

Database infrastructure and authentication (Supabase)

I. Description and scope of the data processing

We use the database and authentication services provided by Supabase to operate our software “news engine”, to store application data and to manage user logins. This involves processing technical connection data, registration data (such as your email address and password hash) and the data you enter while using the software. The data processing takes place wholly or partly on Supabase servers in the USA.

II. Legal basis for the data processing

The legal basis is Art. 6(1)(b) GDPR (performance of a contract and pre-contractual measures) for registered users of our software, together with our legitimate interest under Art. 6(1)(f) GDPR in a secure, high-performance database infrastructure.

III. Purpose of the data processing

The purpose is the secure provision, storage and user authentication required for our software services.

IV. Storage period

The data is stored for as long as your customer account exists or for as long as it is needed to fulfil the purpose of the contract. Once your account has been deleted, the data is deleted subject to statutory retention periods.

V. Right to object and to erasure

Collecting this data is strictly necessary in order to operate and provide the software. You can have your customer account deleted at any time.

Disclosure of data and processors

Where we engage external service providers to support us with specific services, any data processing is carried out solely on the basis of a data processing agreement. Subject to express consent (for example via a cookie banner) or a transfer required by contract or by law, we only process data, or allow it to be processed, in third countries that offer a recognised level of data protection, that are subject to contractual obligations under the European Commission's standard contractual clauses, that hold relevant certifications, or that have binding internal data protection rules in place (Art. 44 to 49 GDPR).

The following service providers have full or partial access to your personal data:

Demio – We use the services of Demio to run our webinars. Demio is part of Banzai International, Inc., 101 Yesler Way, Suite 600, Seattle WA, 98104, USA – https://www.banzai.io/legal/privacy-policy

Google – For various functions described in this privacy policy or in our cookie policy, we use the services of Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland – https://policies.google.com/privacy

HubSpot – We use the services of HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA for our customer relationship management (CRM), for managing our press distribution lists and for contact management. The data processing takes place wholly or partly on servers in the USA. The transfer is safeguarded by EU standard contractual clauses and by certification under the EU-US Data Privacy Framework (DPF) – https://legal.hubspot.com/privacy-policy

Meta – For various functions described in this privacy policy or in our cookie policy, we use the services of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland – https://www.facebook.com/privacy/policy

Supabase – We use the services of Supabase, Inc., 972 Mission Street, San Francisco, CA 94103, USA to provide our database infrastructure and for user authentication (for example logins within our software). Here too, data processing takes place on servers in the USA. The transfer of data is legally safeguarded by the conclusion of EU standard contractual clauses – https://supabase.com/privacy

Webflow – We host our website with our processor Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA. Connection data is processed in order to monitor technical performance and improve the operational security of our website – https://webflow.com/legal/eu-privacy-policy

Rights of data subjects

If we process personal data relating to you, you are a data subject within the meaning of the GDPR and you have the following rights in relation to us:

Right of access

You can ask us to confirm whether we are processing personal data relating to you. If we are, you can ask us for the following information:

1. the purposes for which the personal data is processed;

2. the categories of personal data being processed;

3. the recipients, or categories of recipients, to whom the personal data relating to you has been or will be disclosed;

4. the intended storage period for the personal data relating to you or, where specific details are not possible, the criteria used to determine that period;

5. the existence of a right to have personal data relating to you rectified or erased, a right to have our processing restricted, or a right to object to that processing;

6. the existence of a right to lodge a complaint with a supervisory authority;

7. all available information about the origin of the data, where the personal data was not collected from the data subject;

8. the existence of automated decision-making, including profiling, pursuant to Art. 22(1) and (4) GDPR and – at least in those cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
You have the right to ask whether the personal data relating to you is transferred to a third country or to an international organisation. In this context, you can ask to be informed of the appropriate safeguards in place for the transfer pursuant to Art. 46 GDPR.

Right to rectification

You have the right to ask us to rectify and/or complete personal data relating to you where the data we process is inaccurate or incomplete. As the controller, we must make the correction without undue delay.

Right to restriction of processing

You can request that we restrict the processing of personal data relating to you in the following circumstances:

1. where you contest the accuracy of the personal data relating to you, for a period that allows us to verify its accuracy;

2. where the processing is unlawful and you object to the personal data being erased, requesting instead that its use be restricted;

3. where we no longer need the personal data for the purposes of the processing, but you need it in order to establish, exercise or defend legal claims; or

4. where you have objected to the processing pursuant to Art. 21(1) GDPR and it has not yet been established whether our legitimate grounds as the controller override yours.

Where the processing of personal data relating to you has been restricted, that data may – apart from being stored – only be processed with your consent, in order to establish, exercise or defend legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State. Where the processing has been restricted on the grounds set out above, we will inform you before the restriction is lifted.

Right to erasure

a) Obligation to erase
‍
You can ask us to erase personal data relating to you without undue delay, and we are obliged to erase that data without undue delay, where one of the following grounds applies:

1. The personal data relating to you is no longer necessary for the purposes for which it was collected or otherwise processed.

2. You withdraw the consent on which the processing was based pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing.

3. You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR.

4. The personal data relating to you has been processed unlawfully.

5. Erasure of the personal data relating to you is required in order to comply with a legal obligation under European Union or Member State law to which we are subject.

6. The personal data relating to you was collected in relation to information society services offered pursuant to Art. 8(1) GDPR.


b) Informing third parties
‍
Where, as the controller, we have made the personal data relating to you public and are obliged to erase it pursuant to Art. 17(1) GDPR, we will take reasonable steps – including technical measures, having regard to the technology available and the cost of implementation – to inform controllers who are processing that personal data that you, as the data subject, have asked them to erase all links to, and all copies or replications of, that personal data.


c) Exceptions
‍
The right to erasure does not apply where the processing is necessary

1. for exercising the right of freedom of expression and information;

2. for compliance with a legal obligation requiring processing under European Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

3. for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) GDPR;

4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) GDPR, where the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or

5. for the establishment, exercise or defence of legal claims.

Right to be notified

Where you have exercised your right to rectification, erasure or restriction of processing in relation to us, we are obliged to inform every recipient to whom the personal data relating to you has been disclosed of that rectification, erasure or restriction, unless doing so proves impossible or would involve disproportionate effort. You have the right to be informed of these recipients.

Right to data portability

You have the right to receive the personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to transmit that data to another controller without hindrance from us as the controller to whom the personal data was provided, where

1. the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, or on a contract pursuant to Art. 6(1)(b) GDPR, and

2. the processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data relating to you transmitted directly from us as the controller to another controller, where this is technically feasible. This must not adversely affect the freedoms and rights of others. The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you that is carried out on the basis of Art. 6(1)(e) or (f) GDPR. We will then stop processing the personal data relating to you, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or unless the processing serves to establish, exercise or defend legal claims.

Right to withdraw consent given under data protection law

You have the right to withdraw your consent under data protection law at any time. Withdrawing your consent does not affect the lawfulness of any processing carried out on the basis of that consent before it was withdrawn.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority – in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement – if you believe that the processing of personal data relating to you infringes the GDPR. The supervisory authority with which the complaint is lodged will inform you of the progress and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information)
Friedrichstr. 219
10969 Berlin
mailbox@datenschutz-berlin.de

Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always reflects current legal requirements, or to incorporate changes to our services – for example when we introduce new services. The updated privacy policy will then apply to your next visit.