Privacy policy.
How we handle your personal data when you visit this website. In short: no cookies, no fonts or advertising from outside providers, and form data only to answer your request.
Visitor count
An exception to what this page otherwise says about outside services: every page loads a small counting script from analytics.axaix.app, the network's own statistics server. It is hosted in a data centre in Frankfurt am Main, Germany, and the data is not passed on to third parties.
The script sets no cookies and stores nothing in your browser. It records the page viewed, the page the visit came from, screen width and language, the broad device type, browser and operating system, and clicks on downloads and on links to other websites. Your IP address is used only briefly to determine country and city and to form a daily hash, then discarded and never stored. The hash changes every day, so a visitor cannot be recognised from one day to the next. Raw data is deleted after twelve months. If your browser sends “Do Not Track”, the visit is not counted.
The legal basis is our legitimate interest in measuring the reach of these pages with as little data as possible (Art. 6 (1) (f) GDPR).
Advertising
Through the counting script, every page also loads the advertising script ad.member.show/axaix.js. On the network’s magazines it shows labelled ads from members of the member.show network, and banner.member.show serves the banner images. Both addresses belong to the network itself and are hosted by the provider Hostinger. No data is passed on to advertisers or any other third parties.
The advertising script sets no cookies, stores nothing in your browser and builds no user profiles. Which ad appears depends only on the page viewed and its language. Impressions and clicks are counted solely as totals per ad, page and day, and your IP address is not stored for this. A click on an ad passes briefly through ad.member.show and then on to the advertiser.
The legal basis is our legitimate interest in funding the magazines through advertising and showing advertisers the reach of their ads (Art. 6 (1) (f) GDPR).
1) Controller
The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is NexTao GmbH, Königsallee 27, 40212 Düsseldorf, Germany, phone +49 1577 5588 888, e-mail info@nextao.com. The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
2) Data collected when you visit the website
When you use our website purely for information, that is when you do not send us any information, we only collect the data your browser transmits to the server (known as server log files). The following is technically required to display the website to you:
- the page visited
- date and time of access
- the amount of data sent, in bytes
- the source or link through which you reached the page
- the browser used
- the operating system used
- the IP address used, shortened where applicable
Processing takes place under Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the stability and functionality of our website. The data is not passed on or used in any other way. We reserve the right to check the server log files retrospectively if there are specific indications of unlawful use.
For security reasons and to protect the transmission of confidential content, such as requests you send us, this website uses SSL or TLS encryption. You can recognise an encrypted connection by “https://” and the padlock symbol in your browser’s address bar.
Fonts, images and scripts on this website are stored on our own server. When a page is loaded, no content is fetched from outside servers such as font services or advertising networks. The one exception is the visitor count described above.
3) Hosting
To host our website we use a provider that delivers its services itself or through selected subcontractors exclusively on servers within the European Union. All data collected on our website is processed on these servers. We have a data processing agreement with the provider that safeguards the data of our visitors and prohibits any unauthorised disclosure to third parties.
4) Contacting us
Contact form and e-mail
If you write to us through the contact form or by e-mail, we process the details you provide: name, e-mail address, phone number if you choose to give it, the topics you select and your message. We use this data solely to answer your request. The form sends your details to us as an e-mail, no database is created for this. To protect against automated spam, our server checks the time, origin and content of a submission, and blocked attempts are logged with their IP address.
The legal basis is our legitimate interest in answering your request under Art. 6 (1) (f) GDPR. If your request is aimed at concluding a contract, Art. 6 (1) (b) GDPR is an additional legal basis. Your data is deleted once your request has been fully dealt with, unless statutory retention obligations apply.
WhatsApp Business
You can reach us through the messaging service WhatsApp, provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. We use the business version of WhatsApp for this. Clicking a WhatsApp link on this website opens WhatsApp, nothing is sent to WhatsApp beforehand.
If you contact us about a specific transaction, we store and use the mobile number you use on WhatsApp and, if provided, your name under Art. 6 (1) (b) GDPR to deal with your request. For general enquiries this is done under Art. 6 (1) (f) GDPR on the basis of our legitimate interest in answering quickly. Your data is used only to answer your request and is not passed on to third parties.
WhatsApp Business has access to the address book of the device we use and transfers stored phone numbers to a server of its parent company Meta Platforms Inc. in the USA. In this address book we only store contacts of people who have written to us on WhatsApp themselves. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission. You will find details in the WhatsApp privacy policy.
5) Your rights
Data protection law gives you the following rights towards us:
- Access under Art. 15 GDPR
- Rectification under Art. 16 GDPR
- Erasure under Art. 17 GDPR
- Restriction of processing under Art. 18 GDPR
- Notification under Art. 19 GDPR
- Data portability under Art. 20 GDPR
- Withdrawal of consent given under Art. 7 (3) GDPR
- Complaint to a supervisory authority under Art. 77 GDPR
Right to object
Where we process your personal data on the basis of a balancing of interests, you have the right to object to this processing at any time, with effect for the future, on grounds relating to your particular situation. If you do so, we stop the processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
Where we process your data for direct marketing, you can object to this at any time. We will then stop processing for this purpose immediately.
6) Storage period
How long we store personal data depends on the legal basis, the purpose of processing and, where relevant, statutory retention periods, for example under commercial and tax law. Data based on consent is stored until you withdraw your consent. Data based on a legitimate interest is stored until you object, unless compelling grounds prevent this. Otherwise we delete data as soon as it is no longer needed for its purpose.
This page is a translation of the German privacy policy, which is the binding version: Datenschutz
Controller: NexTao GmbH · Königsallee 27 · 40212 Düsseldorf · Legal notice