Privacy Policy

1. Controller and data protection officer

The controller within the meaning of Art. 4 No. 7 GDPR and other data protection provisions is:

Hirmer Verlag GmbH

Bayerstraße 57–59, 80335 Munich, Germany

Tel.: +49 89 121516-0 · Email: info@hirmerverlag.de

The company’s data protection officer can be reached at: Hirmer Verlag GmbH, Data Protection, Bayerstraße 57–59, 80335 Munich, Email datenschutz@hirmerverlag.de.

2. General information on data processing

We process personal data of users of our website only to the extent necessary to provide a functional website as well as our content and services. Personal data is any information relating to an identified or identifiable natural person (Art. 4 No. 1 GDPR).

Depending on the processing situation, the legal basis for processing is Art. 6(1) GDPR: Consent (a), Performance of a contract or pre-contractual measures (b), Compliance with a legal obligation, or the (c) Safeguarding of legitimate interests (f).

3. Provision of the website and server log file

ach time our website is accessed, the system automatically collects data and information from the accessing device. In particular, the following is collected:

  • IP address of the requesting device;
  • Date and time of access;
  • Name and URL of the file retrieved, as well as the amount of data transferred;
  • Notification of successful retrieval;
  • Browser type and version used, operating system, and — if transmitted — the previously visited page (referrer URL).

The purpose of the processing is to deliver the website, ensure system stability and security, and evaluate incidents in the event of malfunctions or attacks.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically error-free presentation and the security of our website.

Hosting: Our website is operated by an external service provider (IONOS SE, Elgendorfer Straße 57, 56410 Montabaur). A data processing agreement under Art. 28 GDPR is in place with the hosting provider.

4. Cookies and local storage on the device

The storage of information on the device and access to information already stored are governed by § 25 TDDDG (Telecommunications-Digital-Services-Data-Protection Act); the subsequent processing of personal data is governed by the GDPR. Our website stores only technically necessary information:

  • Language cookie (WPML): The cookie wp-wpml_current_language stores the display language selected by the user. It is required to provide the multilingual service expressly requested (§ 25(2) No. 2 TDDDG) by the user; consent is not required. It is a session cookie (first-party). Legal basis for the subsequent processing: Art. 6(1)(f) GDPR.
  • Accessibility settings (OneTap): Under the key onetap-accessibility-free, only the accessibility settings you have selected (e.g., contrast, font size) are stored in the browser’s local storage (localStorage). This information remains local in your browser and is not transmitted to us or to third parties. The storage serves the function you requested and is necessary for it (§ 25(2) No. 2 TDDDG).

5. Web fonts (Google fonts)

For a consistent display of fonts, this website dynamically embeds fonts from the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, from Google’s external servers (fonts.gstatic.com). When a page is accessed, your browser loads the required fonts from these servers. This results in your IP address being transmitted to Google. A transfer to the USA (Google LLC) cannot be ruled out; Google LLC is certified under the EU-US Data Privacy Framework, so the transfer is based on the European Commission’s adequacy decision under Art. 45 GDPR.

Purpose: consistent and appealing presentation of our online offering.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a consistent font presentation).

6. Contact

If you contact us by email or via a contact form, we process the information you provide (e.g., name, email address, content of the inquiry) in order to handle your request. The legal basis is Art. 6(1)(b) GDPR, insofar as the inquiry is aimed at the conclusion or performance of a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). We delete the data as soon as it is no longer necessary to achieve the purpose in question and no statutory retention obligations apply.

7. Recipients of the data

Recipients of personal data are the hosting provider named under Section 3 and — in connection with the embedded web fonts (Section 5) — Google. No further disclosure to third parties takes place, unless we are legally obliged to do so or you have given your consent. Where we engage service providers, this is done on the basis of a data processing agreement under Art. 28 GDPR.

8. Transfer to third countries

A transfer of personal data to a third country occurs only in connection with the Google Fonts described under Section 5, and is based on the European Commission’s adequacy decision on the EU-US Data Privacy Framework (Art. 45 GDPR). Otherwise, no data transfer to third countries takes place.

9. Duration of storage

We process and store personal data only for as long as necessary to achieve the necessary processing purpose, or as required by statutory retention periods. Once the purpose no longer applies and any applicable periods have expired, the data is routinely deleted.

10. Your rights as a data subject

You have the following rights with respect to us regarding personal data concerning you:

  • Right of access (Art. 15 GDPR);
  • Right to rectification (Art. 16 GDPR);
  • Right to erasure (Art. 17 GDPR);
  • Right to restriction of processing (Art. 18 GDPR);
  • Right to data portability (Art. 20 GDPR);
  • Right to object to processing (Art. 21 GDPR);
  • Right to withdraw a given consent with effect for the future (Art. 7(3) GDPR).

Right of objection (Art. 21 GDPR): Insofar as we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time, for reasons arising from your particular situation. We will then no longer process the data, unless we can demonstrate compelling legitimate grounds that override your interests.

Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach.