Privacy Policy

01Privacy at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. Detailed information on data processing can be found in the following sections of this Privacy Policy.

Data collection on this website

Your data is collected, on the one hand, when you provide it to us. This may occur, for example, when you contact us, make an enquiry or use a form.

Other data is collected automatically by our IT systems when you visit the website or after you have given your consent. This mainly concerns technical data, such as information about your browser, operating system, the time at which you access a page or your IP address.

Purposes of data processing

We process data in order to provide the website securely and without technical errors, to handle enquiries, manage contacts and analyse the use and reach of our services. We only use analysis and advertising services which require consent after you have given your consent.

Your rights

You have the right at any time to receive free information about your stored personal data, its origin, recipients and purposes of processing. You may also request rectification, erasure or restriction of processing. You may withdraw any consent given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.

02Hosting and Content Delivery Network

RAIDBOXES

We host this website with RAIDBOXES GmbH, Hafenstraße 32, 48151 Münster. When the website is accessed, RAIDBOXES processes, in particular, connection and log data, including your IP address, insofar as this is necessary for operation, security and error analysis.

Processing is carried out on the basis of Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest lies in the secure, high-performance and reliable provision of the website. Where RAIDBOXES acts as a processor, a data processing agreement exists pursuant to Art. 28 DSGVO.

RAIDBOXES privacy information

Cloudflare

We use Cloudflare as a content delivery network and security service. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare routes traffic between your browser and our website through its network. In particular, IP addresses, technical connection data and security data may be processed in this context.

Processing is carried out on the basis of Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest lies in the secure, stable and fast provision of the website and in defending against unauthorised access.

Where information that is strictly necessary for the security function is stored on or accessed from your device, this is carried out on the basis of § 25 Abs. 2 Nr. 2 TDDDG. Where Cloudflare acts as a processor, a data processing agreement exists pursuant to Art. 28 DSGVO.

Cloudflare privacy information

03General information and mandatory details

Controller

The controller responsible for data processing on this website is:

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

Retention period

Unless a more specific retention period is stated within this Privacy Policy, we only store personal data for as long as is necessary for the respective purpose. Data is erased when the purpose no longer applies and no statutory retention obligations or legitimate interests in further storage prevent this.

Legal bases for data processing

Where you have given your consent, we process your personal data on the basis of Art. 6 Abs. 1 lit. a DSGVO. Where the consent concerns the storage of information on your device or access to such information, this is additionally carried out on the basis of § 25 Abs. 1 TDDDG.

Where processing is necessary for the performance of a contract or pre-contractual measures, it is based on Art. 6 Abs. 1 lit. b DSGVO. Where we are subject to a legal obligation, processing is carried out on the basis of Art. 6 Abs. 1 lit. c DSGVO. In all other cases, we process data on the basis of our legitimate interest pursuant to Art. 6 Abs. 1 lit. f DSGVO. The applicable legal basis is stated for the individual processing operations.

Data protection officer

We have appointed a data protection officer.

Data transfers to third countries

Some of the service providers named in this Privacy Policy are based in the USA or may transfer data to the USA. A transfer only takes place where the requirements of Art. 44 ff. DSGVO are met. This may be based, in particular, on an adequacy decision by the European Commission for recipients certified under the EU-US Data Privacy Framework or on EU standard contractual clauses with supplementary safeguards.

Withdrawal of your consent

You may withdraw consent that you have given at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected. You can change your selection via the privacy settings of Borlabs Cookie.

Right to object pursuant to Art. 21 DSGVO

Where we process your data on the basis of Art. 6 Abs. 1 lit. f DSGVO, you may object to this processing at any time on grounds relating to your particular situation.

Where personal data is processed for direct marketing purposes, you may object to this processing at any time. Following your objection, we will no longer use your data for direct marketing purposes.

Right to lodge a complaint with a supervisory authority

In the event of an infringement of the DSGVO, you have the right to lodge a complaint with a data protection supervisory authority. The right to lodge a complaint is without prejudice to other administrative or judicial remedies.

Access, rectification, erasure and restriction of processing

Within the framework of the statutory provisions, you have the right to obtain information about your stored personal data and to request rectification, erasure or restriction of processing. You may contact us at any time regarding this or any further questions on data protection.

Right to data portability

You have the right to receive data which we process automatically on the basis of your consent or for the performance of a contract in a commonly used, machine-readable format or to have it transferred to another controller, insofar as this is technically possible.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address in the browser begins with “https://” and a padlock symbol is displayed.

04Data collection on this website

Cookies and comparable technologies

Our website uses cookies and comparable technologies. Cookies are small data packages that may be stored on your device. Some technologies are strictly necessary to ensure that the website functions technically or that functions expressly requested by you can be provided.

The storage of information on your device or access to such information in the case of strictly necessary technologies is carried out on the basis of § 25 Abs. 2 Nr. 2 TDDDG. The associated processing of personal data is carried out on the basis of Art. 6 Abs. 1 lit. f DSGVO.

We only use cookies and comparable technologies for analysis, marketing or other non-essential purposes after you have given your consent pursuant to Art. 6 Abs. 1 lit. a DSGVO and § 25 Abs. 1 TDDDG. You may withdraw your consent at any time via the privacy settings.

Consent management with Borlabs Cookie

We use Borlabs Cookie from Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, to obtain, manage and document your consents. In particular, your selection, the time and version of the consent are stored in a cookie on your device.

Borlabs Cookie is used to fulfil our obligation to demonstrate consent pursuant to Art. 7 Abs. 1 DSGVO on the basis of Art. 6 Abs. 1 lit. c DSGVO. Where this involves strictly necessary access to your device, this is based on § 25 Abs. 2 Nr. 2 TDDDG.

Consent data is stored until you delete the relevant cookie, change your selection or the purpose of storage no longer applies. Statutory retention obligations remain unaffected.

Your selection in Borlabs Cookie controls the services that require consent. Cookieless audience measurement with etracker runs independently of it on the basis of our legitimate interest. You can object to it at any time using the objection switch in the etracker section.

Borlabs Cookie privacy information

Server log files

When this website is accessed, our hosting provider automatically processes data in server log files. This includes, in particular:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data is not combined with other data sources. Processing is carried out on the basis of Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest lies in the secure, technically error-free and stable provision of the website and in investigating misuse and disruptions.

HubSpot CRM and forms

We use HubSpot to process contact and concept enquiries and to manage our business contacts. The provider is HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA. The HubSpot portal used is operated in an EU data centre.

Our forms are our own forms. No HubSpot script is loaded when the page is opened. No third-party captcha service is used. Your entries are only transmitted to HubSpot when you submit the form. Depending on the page, this is done via our server or directly from your browser to HubSpot's form interface. When data is transmitted via our server, we do not pass your IP address on to HubSpot. When data is transmitted directly, HubSpot receives your IP address with the request for technical reasons. To protect against automated submissions, we use an invisible check field and limit the number of submissions.

When you use a form or contact us, we process the data you provide, in particular contact and company data as well as the content of your enquiry. Processing is carried out to handle your enquiry, initiate or perform a business relationship and manage our business contacts.

Evernine Media GmbH is the controller for the processing of its own lead data. The HubSpot portal is technically provided and operated by Evernine GmbH as the portal owner. The allocation of data protection roles between the two companies is documented separately.

Where enquiries concern the performance of pre-contractual measures or a contract, processing is carried out on the basis of Art. 6 Abs. 1 lit. b DSGVO. In all other cases, it is based on Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest lies in the efficient handling of B2B enquiries and the maintenance of business relationships.

Where HubSpot uses cookies or comparable technologies, this only takes place after you have given your consent pursuant to Art. 6 Abs. 1 lit. a DSGVO and § 25 Abs. 1 TDDDG.

Where data is transferred to the USA, this takes place in accordance with Art. 44 ff. DSGVO. This is carried out, in particular, on the basis of the EU-US Data Privacy Framework for certified recipients or EU standard contractual clauses.

HubSpot privacy information

MBF Media Newsletter with Rapidmail

When you subscribe to the MBF Media Newsletter, we process your email address and, where applicable, your name and other data voluntarily provided during registration. Registration takes place using the double opt-in procedure. After registration, you will receive an email containing a confirmation link. Your email address will only be added to the mailing list once this link has been activated.

We log registration and confirmation, including timestamps and the IP address used, insofar as this is necessary to demonstrate your consent. The legal basis for sending and managing the newsletter is your consent pursuant to Art. 6 Abs. 1 lit. a DSGVO. You may withdraw your consent at any time with effect for the future via the unsubscribe link in each newsletter.

We use Rapidmail to send the newsletter. The provider is Positive Group Deutschland GmbH, Ingeborg-Krummer-Schroth-Straße 18a, 79106 Freiburg im Breisgau, Deutschland. Rapidmail processes data on our behalf. The data is stored on servers in Germany.

Newsletter registration through Rapidmail is separate from HubSpot. An expression of interest in the newsletter made via a HubSpot form does not constitute registration and does not result in automatic transmission to or inclusion in the newsletter mailing list.

Depending on the setting activated for the respective mailing, Rapidmail may record opens using a tracking pixel and clicks on links in the newsletter. The evaluation serves to measure technical success and improve future content. Where a personalised evaluation of opens or clicks takes place, this is based on Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest lies in designing the newsletter in line with demand. You may object to this evaluation with effect for the future by unsubscribing from the newsletter.

We store your newsletter data until you unsubscribe. Following unsubscription, we erase the data unless it remains necessary for documenting consent, taking account of an objection or fulfilling legal obligations.

Rapidmail privacy information

05Analysis tools and advertising

etracker audience measurement

We use etracker analytics to measure audience reach and improve our website. The provider is JustRelate Deutschland GmbH, Kitzingstraße 15, 12277 Berlin.

In our cookieless configuration, etracker records, in particular, pages accessed, the time of access, referrer information and technical browser and header information. The IP address is anonymised or pseudonymised at the earliest possible point. No analysis cookies are set. The etracker script generates an identifier in the browser and sends it with the measurement requests so that interactions can be assigned to a page view. As no cookie is set, this identifier is created anew with every page view and does not make you recognisable across pages. A Do Not Track setting transmitted by the browser is respected.

To measure scroll depth, etracker stores an entry in your browser's session storage for some visits (et_scroll_depth). It contains the page name, a timestamp and the time spent in each scroll segment, but no device or user identifier. The entry bundles the values so that not every scroll movement triggers a separate measurement request. The script reads it again with the next measurement request. Your browser deletes it when you close the tab. etracker also discards it after one hour at the latest. We base this temporary storage on § 25 Abs. 2 Nr. 2 TDDDG.

Processing is carried out on the basis of Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest lies in data-minimising audience measurement and the technical and content-related improvement of our website. As no analysis cookies are set in the configuration used and the temporary storage of scroll values falls under § 25 Abs. 2 Nr. 2 TDDDG, we do not obtain consent for etracker. Measurement therefore runs independently of your selection in Borlabs Cookie.

You may object to processing by etracker at any time with effect for the future. To do so, use the following switch. The objection is stored in the browser through a technically necessary opt-out cookie.

etracker processes data solely on our behalf on the basis of a data processing agreement pursuant to Art. 28 DSGVO. The data is processed and stored in Germany. etracker does not transfer data to third countries.

etracker privacy information and objection function

Google Tag Manager

We use Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. Google Tag Manager is used to manage and deliver services on our website. We deliver the Tag Manager program file from our own server. Where Tag Manager nevertheless connects to Google, for example for technical diagnostic messages, Google may process connection data, including the IP address.

Google Tag Manager is used on the basis of Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest lies in the efficient, secure and traceable management of the services used. The analysis and advertising services integrated via Google Tag Manager process data in accordance with the respective legal bases stated.

Google Consent Mode

To control the Google services integrated via Google Tag Manager, we use Google Consent Mode. Before you make your selection, the storage settings for analysis and advertising are set to “denied”.

In this state, the Google tags for analysis and advertising do not fire. Before you give your consent, they therefore transmit neither measurement data nor cookieless signals to Google. URL passthrough may append technical information about ad clicks to links within our website without storing it in cookies or sending it to Google.

After you have given your consent, Google Analytics or Google Conversion Tracking processes data to the extent of the consent given. The legal bases are then Art. 6 Abs. 1 lit. a DSGVO and § 25 Abs. 1 TDDDG. You may withdraw your consent at any time with effect for the future via the privacy settings.

Google Consent Mode information

Google Analytics

We use Google Analytics to analyse the use of our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. After you have given your consent, Google Analytics processes, in particular, information on page views, duration of use, technical device and browser information and the source of the visit. The data may be assigned to a pseudonymous identifier using cookies or comparable technologies.

Google Analytics is used with its full functionality only after you have given your consent. The legal bases are Art. 6 Abs. 1 lit. a DSGVO and § 25 Abs. 1 TDDDG.

Personal user and event data in our Google Analytics property is automatically erased in accordance with the retention period selected there. Retention is no more than 14 months. Aggregated standard reports may remain unaffected by this setting.

Where data is transferred to the USA, this takes place in accordance with Art. 44 ff. DSGVO.

Google Analytics data retention

Google Conversion Tracking

We use Google Conversion Tracking to measure the success of advertising measures. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. Google may determine whether a predefined action has taken place on our website following interaction with an advertisement. We receive statistical evaluations of such actions.

Google Conversion Tracking is used with its full functionality only after you have given your consent. The legal bases are Art. 6 Abs. 1 lit. a DSGVO and § 25 Abs. 1 TDDDG. You may withdraw your consent at any time with effect for the future via the privacy settings.

Where data is transferred to the USA, this takes place in accordance with Art. 44 ff. DSGVO.

Google privacy information

06Plugins and tools

Local fonts

We integrate the fonts used on this website locally from our own domain. Therefore, when the website is accessed, no connection is established to Google servers for the purpose of delivering fonts. Your IP address or other connection data is not transmitted to Google for fonts. No consent is required for local integration.