Table.Briefings

Privacy Policy

Any collection, usage, storage, deletion, or other use (hereinafter referred to as “processing”) of data is solely for the purpose of providing our services. Our services are designed to use as little personal data as possible. In this context, “personal data” (hereinafter also referred to as ‘data’) means all individual informationabout the personal or factual circumstances of an identified or identifiable natural person (known as the “data subject”). The following information on data protection describes the types of personal data that are processed when you visit our website, what happens to this personal data, and how you may object to data processing if necessary.

‍1 General information on data processing on this website‍

‍1.1 Controller of personal information

‍Under the EU General Data Protection Regulation (GDPR), the controller of collected personal data is:

‍Table Media GmbH

‍Address: Wöhlertstraße 12-13, 10115 Berlin, Germany

Phone: +49 30 30 809 520

Email: datenschutz@table.media

Homepage: https://table.media

‍1.2 Data protection officer

‍The data protection officer is: Christina Webersohn of WS Datenschutz GmbH

If you have any questions about data protection, you may contact WS Datenschutz GmbH at the following email address:

tablemedia@ws-datenschutz.de

WS Datenschutz GmbH

Dircksenstraße 51

D-10178 Berlin

https://webersohnundscholtz.de

‍1.3 Protection of your data

‍We have taken technical and organizational measures to ensure that the provisions of the GDPR are observed both by us and by external service providers that we employ. If and when we collaborate with other companies, such as email and server providers, to provide our services, we follow an extensive selection process. Through this selection process, each i service provider is carefully selected for their suitability in terms of technical and organizational data protection capabilities. This selection process is documented in writing, and a contract in accordance with Art. 28 (3) GDPR on the processing of personal data on behalf of others (AV contract) is only entered subject to the requirements of Art. 28 GDPR. Your data is stored on specially protected servers. Access to these servers is restricted toa few persons with special authorization. Our website is SSL/TLS encrypted, which you can recognize by the “https://” at the beginning of the URL.

‍1.4 Deletion of personal data

‍We only process personal data for as long as necessary. Once the data has been processed for its intended purpose, the data is rendered inaccessibleand deleted in accordance with local data deletion standards, unless legal regulations prevent deletion.

‍2 Data processing on this website and creation of log files‍

‍2.1 Description and scope of data processing

‍When you visit our website, our web servers temporarily store each access in a log file. The following personal data is collected and stored until it is automatically deleted:

• Date and time of access

• Notification of whether the retrieval was successful

• Identification data of the browser and operating system used

• Name of your Internet access provider

In addition to this personal data, further personal data may be collected by us and our partners; further details are provided below.

‍2.2 Legal basis for data processing

‍This data is processed based on Art. 6 (1) (f) GDPR. Our legitimate interest is based on making our website accessible to you.

‍2.3 Purpose of data processing

‍Data processing is carried out for the purpose of enabling the use of the website (connection establishment). It serves the purposes of system security, technical administration of the network infrastructure, and optimization of the Internet offering. The IP address is only evaluated in the event of attacks on our network infrastructure or the network infrastructure of our Internet provider.

‍2.4 Duration of data storage

‍Personal data is deleted as soon as it is no longer required for the above-mentioned purposes. This is the case when you close the website. Our hosting provider may use the data for statistical analysis.However, the data is anonymized for this purpose.

‍2.5 Option for the data subject to delete data

‍The website can only be displayed if the data described is processed. Please contact our data protection officer or the hosting provider if you wish to object to further processing of your data.

‍2.6 Hosting service provider Amazon Web Services (AWS)

‍Our website uses the services of the hosting provider AWS. Data processing is carried out by: Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, Luxembourg 1855, Luxembourg (a subsidiary of Amazon.com Inc., 410 Terry Avenue North, Seattle WA 98109, USA) .Further information on the service provider's data protection can be found here: https://aws.amazon.com/de/privacy/

2.7 Hosting service provider Hetzner

‍Our website uses the services of the hosting provider Hetzner. Data processing is carried out by: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen. Further information on the service provider's data protection can be found here: https://www.hetzner.com/de/legal/privacy-policy/

‍3 Use of cookies‍

‍3.1 Description and scope of data processing

‍Our website uses cookies. These are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive, assigned to the browser you are using, and through which certain information flows to us or the entity that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer. We use them to personalize content and advertisements, to offer social media functions, and to analyze traffic to our website. We also share information about your use of our website with our social media, advertising, and analytics partners. Our partners may combine this information with other data you have provided to them or that they have collected as part of your use of their services. This allows various data to be transmitted, specifically:

• Frequency of website visits

• Usage of website features

• Search terms used

• Your cookie settings

When you visit the website, a cookie banner informs you about the use of cookies and refers you to our privacy policy.

‍3.2 Legal basis for data processing

‍The legal basis for the processing of data by cookies that do not solely serve the functionality of our website is Art. 6 (1) (a) GDPR. The legal basis for data processing for cookies that exclusively serve the functionality of this website is Art. 6 (1) (f) GDPR.

‍3.3 Purpose of data processing

‍Our legitimate interest arises from ensuring a smooth connection and convenient use of our website, as well as from a need to evaluate system security and stability. Data processing also occurs to facilitate a statistical analysis of website usage.

‍3.4 Duration of data storage

‍There are two types of cookies. Both are used on this website:

• Transient cookies (see a)

• Persistent cookies (see b)

a) Transient cookies: These are automatically deleted when you close your browser. These include, in particular, session cookies. These store a so-called session ID, which can be used to assign various requests from your browser to the shared session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.

b) Persistent cookies: These are automatically deleted after a specified period, which may vary depending on the cookie.

‍3.5 Removal option by the data subject

‍You can revoke your consent to data processing by cookies that do not solely serve the functionality of the website at any time. Additionally, we only set cookies after you have agreed to cookie settings when you visit the site. This allows you to prevent data processing via cookies on our website. You can also delete cookies at any time in your browser’s security settings. Please note doing so may prevent you fromusing all the functions of this website. You can also prevent the setting of cookies at any time by adjusting the settings in your internet browser.

‍4 Contact‍

4.1 Description and scope of data processing

Our website offers the option to contact us via email. Various data is required to respond to the inquiry, which is automatically stored for processing. The following data is collected as a minimum (marked as mandatory fields) when contacting us:

• Email address

• Your request

• Any other information you provide

The data will not be passed on to third parties.

‍4.2 Legal basis for data processing

‍The legal basis used here is Art. 6 (1) (b) GDPR.

‍4.3 Purpose of data processing

‍We process your data exclusively for the purpose of processing your contact request.

‍4.4 Duration of data storage

‍We will delete your data as soon as the purpose of data processing has been fulfilled, usually immediately after responding to your request. In rare cases, however, we may store your data for a longer period of time. This may be due to legal, regulatory, or contractual obligations.

‍4.5 Option for the data subject to delete their data

‍You can contact us at any time and object to the further processing of your data. In this case, we will unfortunately not be able to continue communicating with you. All personal data processed by us in the course of contacting you will be deleted in this case, unless there are legal obligations to retain your data that prevent deletion.

‍5 Registration on the website‍

‍5.1 Description and scope of data processing

‍You can register on our website. To do so, you must enter personal data in the registration form. The following data is collected for this purpose:

• Email address

• First name

• Last name

You can optionally provide the following data:

• Institution/Company

The data you enter in the registration form will be used exclusively for processing and will not be passed on to third parties.

‍5.2 Legal basis for data processing

‍If you provide personal data that is required in the mandatory fields, data processing is based on Art. 6 (1) (b) GDPR. If you also enter personal data in the other (optional) input fields, data processing is based on Art. 6 (1) (a) GDPR.

‍5.3 Purpose of data processing

‍We process your data exclusively for the purpose of completing your registration and managing your website account with us.

‍5.4 Duration of data storage

‍The data will be deleted as soon as it is no longer necessary for its intended purpose. This is the case when you close your account with us and there are no legal or regulatory retention periods that prevent deletion.

‍5.5 Option for the data subject to delete data

‍Both during and after registration, you are free to change, correct, or delete your personal data.

‍6 Data processing in the context of events‍

‍6.1 Description and scope of data processing

‍In the context of organizing and conducting events, we collect and process personal data of participants, for example, to send you the relevant invitation. The data processed usually includes:

• Name,

• Contact details (such as email address and telephone number),

• Company/institution affiliation

• and, if applicable, specific event participation details.

If the event is held with or by a third party, you will be informed in advance that your participation data may be passed on to them for this purpose.

‍6.2 Legal basis for data processing

‍The processing of your personal data is based on Art. 6 (1) (b) GDPR, insofar as the data processing is necessary for the performance of a contract to which the data subject is party or to take steps at the request of the data subject before entering into a contract. In other cases, we rely on Art. 6 (1) (f) GDPR, whereby our legitimate interest lies in the efficient execution and organization of our events.

‍6.3 Purpose of data processing

‍Your data is collected and processed for the purpose of planning, organizing, and executing the event.

‍6.4 Duration of data storage

‍Your personal data will be stored for as long as is necessary to fulfill the purpose for which it was collected. After the event has ended and all associated obligations have been fulfilled, your data will be deleted, provided that there are no legal retention obligations to the contrary.

‍6.5 Option for the data subject to request deletion

‍You can contact us at any time and object to the further processing of your data. In this case, all personal data processed by us in the course of the event will be deleted, unless there are mandatory legal provisions that prevent deletion.

‍7 Data processing in the context of job applications‍

‍7.1 Description and scope of data processing

‍It is possible to apply for employment with us via our website using an application form and/or via email. For this purpose, personal data is processed and stored for further processing for the respective application procedure. If an application form is used, we process the following data:

• Last name

• First name

• Email address

• Availability

• Salary expectations

• Your application documents

You can optionally provide your telephone number.

‍7.2 Legal basis for data processing

‍The legal basis for data processing is Art. 88 GDPR and § 26 BDSG.

‍7.3 Purpose of data processing

‍We process your data exclusively to facilitate the application process.

‍7.4 Duration of data storage

‍If the application results in the establishment of an employment relationship, the personal data will be stored in accordance with the relevant statutory provisions. If the application is not considered in the selection of a potential candidate, it will be deleted in accordance with the rules of the local deletion concept, taking into account the provisions of the AGG, in particular the existing obligation to provide evidence pursuant to Section 22 AGG. This does not apply if legal provisions prevent deletion or if you have given your consent to longer storage. In this case, the further storage of your personal data will be based on Art. 6 (1) (c) or (a) GDPR.

‍7.5 Option of deletion by the data subject

‍You can contact us at any time and object to the further processing of your data. In this case, all personal data processed by us in the course of the application process will be deleted, unless mandatory legal provisions prevent deletion.

‍7.6 Personio‍

‍7.6.1 Description and scope of data processing

‍Our career page is operated by the personnel management and applicant management software Personio. Data processing is carried out by: Personio SE & Co. KG, Seidlstraße 34, 80335 Munich, Germany. The data transmitted as part of your application is transferred using TLS encryption and stored in a database. We are solely responsible for this data as the controller conducting this online application process. Personio is merely the operator of the software and this recruiting site and, in this context, the processor pursuant to Art. 28 GDPR. A data processing agreement has been concluded with Personio. In addition, Personio GmbH processes further data, some of which may also be personal data, for the purpose of providing its services, in particular for the operation of this recruiting site. The following data is processed by Personio:

• Access logs (server logs)

• Error logs

• Cookies

In addition, when you fill out the application form, we process the following data:

• First and last name

• Email address

• Phone number

• Date of availability

• Salary expectations

• Resume

• Personal cover letter

• Other personal documents

Further information on data protection at Personio can be found here: https://www.personio.de/datenschutzerklaerung. If you have any questions about data protection at Personio, you can contact Personio at any time at the following email address: datenschutz@personio.de.

‍7.6.2 Legal basis for data processing

‍The legal basis for data processing is Art. 88 GDPR and § 26 BDSG. The legal basis for the use of Personio is our legitimate interest in providing an online application process in accordance with Art. 6 (1) (f) GDPR.

‍7.6.3 Purpose of data processing

‍We process your data exclusively to facilitate the application process. The purpose of data processing by Personio is to provide an online application process and to optimize the application process.

‍7.6.4 Duration of data storage

‍If the application leads to the establishment of an employment relationship, the personal data will be stored in accordance with the statutory provisions. If the application is not considered in the selection of a potential candidate, it will be deleted in accordance with the rules of the local deletion concept, taking into account the provisions of the AGG, in particular the existing obligation to provide evidence pursuant to § 22AGG. This does not apply if legal provisions prevent deletion or if you have given your consent to longer storage. In this case, the further storage of your personal data will be based on Art. 6 (1) (c) or (a) GDPR.

‍7.6.5 Option of deletion by the data subject

‍You can contact us at any time and object to the further processing of your data. In this case, all personal data processed by us in the course of the application process will be deleted, unless there are mandatory legal provisions preventing deletion.

‍8 Newsletter‍

‍8.1 Description and scope of data processing

‍We offer the option of subscribing to our newsletter on our website. When ordering the newsletter, you will be asked to provide personal data for processing. This is the data requested in the newsletter input mask. Input fields marked with an “*” are mandatory:

• First name

• Last name

• Email address

These mandatory fields are necessary in order to send you the newsletter. The newsletter is sent by email. You will only receive the newsletter after you have registered for it. To comply with the requirements of the GDPR, we use the so-called DOI procedure (“double opt-in”). If you register for our newsletter, you will receive a confirmation email to the email address you entered in the input field. This email contains a confirmation link that you must click on. After this procedure, you have successfully registered for the newsletter. The IP address, date, and time of registration are stored in order to carry out the procedure. This is to prevent misuse. The data will not be passed on to third parties.

‍8.2 Legal basis for data processing

‍The legal basis for data processing is your consent in accordance with Art. 6 (1) (a) GDPR.

‍8.3 Purpose of data processing

‍The newsletter serves to inform you at regular intervals about our offers and news.

‍8.4 Duration of data storage

‍We only process your data for as long as is necessary to fulfill the purpose and as long as there are no legal or official retention obligations that prevent deletion.

‍8.5 Option for the data subject to delete their data

Consent to the processing of personal data in connection with the newsletter subscription can be revoked at any time. To do so, you can click on the unsubscribe link included in every newsletter or notify us of your revocation of consent in another way.

‍8.6 Shipping service provider Amazon Web Services (AWS)

‍8.6.1 Description and scope of data processing

‍The newsletter is sent via AWS, a US cloud computing provider. Data processing is carried out by: Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, Luxembourg 1855, Luxembourg (a subsidiary of Amazon.com Inc., 410 Terry Avenue North, Seattle WA 98109, USA).

The email addresses of our newsletter recipients, as well as their other data described in this notice, are stored on Amazon's servers in the USA. Amazon uses this information to send and evaluate the newsletters on our behalf. Furthermore, according to its own information, Amazon may use this data to optimize or improve its own services, e.g., for technical optimization of the sending and display of the newsletters or for economic purposes to determine from which countries the recipients come. However, Amazon does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties. The newsletters contain a so-called “web beacon,” i.e., a pixel-sized file that is retrieved from the AWS server when the newsletter is opened. As part of this retrieval, technical information such as information about your browser and your system, as well as your IP address and the time of retrieval, is initially collected. The statistical surveys also include determining whether the newsletters are opened, how often they are opened, and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor that of Amazon to monitor individual users. We trust in the reliability and IT and data security of Amazon. Furthermore, we have concluded a “Data Processing Agreement” with Amazon. This is a contract obliging Amazon to protect our users' data, to process it on our behalf in accordance with its data protection regulations, and, in particular, not to pass it on to third parties. You can view the AWS data protection regulations at https://aws.amazon.com/de/privacy/?nc1=f_pr.

‍8.6.2 Legal basis for data processing

‍Data processing by AWS is based on your consent in accordance with Art. 6 (1) (a) GDPR.

‍8.6.3 Purpose of data processing

‍We use AWS as our shipping service provider to ensure effective address management and to stay in touch with you via the newsletter.

‍8.6.4 Duration of data storage

‍According to the provider, it only stores personal data for as long as we use your personal data to send the newsletter. AWS deletes your data when we delete you from our address file.

‍8.6.5 Option of deletion by the data subject

‍You have the option of revoking your consent at any time. To do so, please contact our data protection officer. Additionally, you can use the “opt-out” link at the end of each email at any time, which will result in us deleting your email address from our address file, meaning that AWS will no longer process your personal data. However, this has no effect on address files that AWS manages on behalf of other clients.

‍9 Shopping in the online store‍

‍9.1 Description and scope of data processing

‍When you shop with us, we process the following data about you:

• Name,

• Address,

• Phone number

• Email address.

‍9.2 Legal basis for data processing

‍The legal basis for the associated data processing is Art. 6 (1) (b) GDPR, i.e., the processing of your data is necessary for the fulfillment of the purchase agreement.

‍9.3 Purpose of data processing

‍We process your data in order to conclude the purchase agreement with you, to process the purchase agreement, including invoicing by email or post and receipt of payment, to ensure the timely provision of licenses, and to inform you about changes to the product.

‍9.4 Duration of data storage

‍Your data will only be stored for as long as necessary to fulfill the intended purpose and as long as we are obliged to store your data due to legal, contractual, or official obligations.

‍9.5 Option for the data subject to erase data

‍Data processing is essential for processing your purchase contract and, therefore, cannot be waived. There is therefore no option to erase data.

‍10 Podcast

‍‍10.1 Description and scope of data processing

‍We embed podcasts on our website via the external service Acast. Acast is operated by Acast AB, Kungsgatan 26, 111 35 Stockholm, Sweden. The integration is done to provide you with audio content directly on our website. By using this service, personal data, such as your IP address, may be transferred to Acast and processed by Acast. For more information about data processing by Acast, please see: Acast Privacy Policy. Acast may use cookies or similar technologies to collect user data. This is done to improve the service, analyze user behavior, and optimize content. The data is processed by Acast, and Acast is responsible for the processing and storage of the data.

10.2 Legal basis for data processing

The legal basis for the transfer of personal data to Acast in connection with listening to the podcasts is your consent in accordance with Art. 6 (1) (a) GDPR.

10.3 Purpose of data processing

‍The data is processed to enable you to use and play the podcast via our website. This allows us to offer you interesting content and improve the user experience.

‍10.4 Duration of data storage

‍The data collected by Acast is processed and stored by Acast in accordance with its privacy policy. We have no influence on the duration of data storage by Acast.

10.5 Option for the data subject to delete data

You can revoke your consent to the processing of your data in connection with the use of the Acast podcast service at any time by contacting us or Acast. You can also delete cookies in your browser and adjust your data collection settings. For more information, please refer to Acast's privacy policy: https://www.acast.com/privacy-policy.

‍11 Social media links

‍We have integrated social media platforms into our services via links, which may result in the relevant social media providers receiving data from you. If you click on a social media link, you will access the website of the respective social media provider. By accessing the website of the respective social media provider via our services, the respective reference data will be transmitted to the respective social media provider. The social media provider will thus receive the information that you have visited us.

Note on data processing in the USA: If you click on a social media link, your data may be processed by the respective provider in the USA. According to the ECJ, the data protection standard in the USA is insufficient, and there is a risk that your data may be processed by the US authorities for control and surveillance purposes, possibly without any legal recourse. If you do not click on the links of the social media providers, no data will be transferred. Further information on data processing by social media providers can be found here:

‍LinkedIn: https://www.linkedin.com/legal/privacy-policy

‍X: https://twitter.com/privacy?lang=de

‍Spotify: https://www.spotify.com/de/legal/privacy-policy/

‍Deezer: https://www.deezer.com/legal/personal-datas

‍Apple Podcasts: https://www.apple.com/de/legal/privacy/data/de/apple-podcasts/

‍13.2 Self-hosted web fonts‍

‍13.2.1 Description and scope of data processing

‍We use so-called web fonts on our website to ensure a uniform presentation of fonts. When you access a page, your browser loads the required web fonts into your browser cache in order to display text and fonts correctly. We have integrated the web fonts locally on our own website, so that external providers do not gain knowledge that our website was accessed via your IP address. If your browser does not support web fonts, a standard font from your computer will be used.

‍13.2.2 Legal basis for data processing

‍The legal basis is based on our legitimate interest pursuant to Art. 6 (1) (f) GDPR.

‍13.2.3 Purpose of data processing

‍The purpose of data processing is to ensure the uniform display of fonts on this website in order to provide a visually appealing and user-friendly website.

‍13.2.4 Duration of data storage

‍No data is stored.

‍13.2.5 Removal option by the data subject

‍You can set your browser so that it does not support web fonts. In this case, a standard font from your computer will be used.

‍14 Data transfer to a third country

‍In order to provide our services, we use the support of service providers from the European Union as well as from third countries. To ensure the protection of your personal data even in the case of data transfer to a third country, we conclude special order processing agreements with each of the carefully selected service providers. All service providers we use have offered sufficient evidence to prove that they will ensure data security through appropriate technical and organizational measures. Our service providers from third countries are either located in countries that have an adequate level of data protection recognized by the EU Commission (Art. 45 GDPR) or have provided appropriate safeguards (Art. 46 GDPR).

Adequate level of protection: The provider comes from a country whose adequate level of data protection has been recognized by the EU Commission. For more information, see: Adequacy decisions (europa.eu)

EU standard contractual clauses: Our provider has submitted to the EU standard contractual clauses to ensure secure data transfer. For more information, see: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX%3A32021D0914&locale=en

Binding Corporate Rules: Article 47 of the GDPR provides for the possibility of ensuring data protection when transferring data to a third country through binding internal data protection rules. These are reviewed and approved by the competent supervisory authorities as part of the consistency procedure under Article 63 of the GDPR.

Consent: Furthermore, data will only be transferred to a third country without an adequate level of protection if you have given us your consent in accordance with Art. 49 (1) (a) GDPR or if another exception under Art. 49 GDPR applies to the data transfer.

‍15 Your rights

‍You have the following rights vis-à-vis us with regard to your personal data:

‍15.1 Right to withdraw consent (cf. Article 7 GDPR)

‍If you have given your consent to the processing of your data, you can revoke this consent at any time. Such revocation affects the permissibility of the processing of your personal data for the future after you have notified us of your revocation. You can notify us of your revocation verbally, in writing by mail, or by email.

‍15.2 Right to information (cf. Art. 15 GDPR)

‍In the event of a request for information, you must provide sufficient details regardingyour identity and provide proof that the information relates to you. The information provided on request concerns the following:

• the purposes for which the personal data is processed;

• the categories of personal data that are processed;

• the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;

• the planned duration of storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;

• the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller, or a right to object to such processing;

• the existence of a right to lodge a complaint with a supervisory authority;

• any available information on the source of the data, if the personal data is not collected from the data subject;

• the existence of automated decision-making, including profiling, pursuant to Art. 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

‍15.3 Right to rectification or erasure (cf. Articles 16 and 17 GDPR)

‍You have the right to request that we, as the controller, rectify and/or complete your personal data if the personal data processed concerning you is inaccurate or incomplete. The controller must rectify the data without undue delay. In addition, you may request the erasure of personal data concerning you if one of the following reasons applies to you:

• The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.

• You withdraw your consent on which the processing was based in accordance with Art. 6 (1) (a) or Art. 9 (2) (a) GDPR, and there is no other legal basis for the processing.

• You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.

• The personal data concerning you has been processed unlawfully.

• The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.

• The personal data concerning you has been collected in relation to the services offered by information society services pursuant to Art. 8 para. 1 GDPR. If we have made the personal data concerning you public and are obliged to erase it pursuant to Art. 17 (1) GDPR, we shall take all reasonable measures to inform other controllers of the erasure of all links to this personal data or of copies or replications of this personal data.

The right to erasure does not apply if the processing is necessary:

• for exercising the right of freedom of expression and information;

• for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

• for reasons of public interest in the area of public health pursuant to Art. 9 (2) (h) and (i) and Art. 9 (3) GDPR;

• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) GDPR, insofar as the above-mentioned right is likely to render impossible or seriously impair the achievement of the objectives of that processing, or

• for the establishment, exercise or defense of legal claims.

15.4 Right to restriction of processing (cf. Art. 18 GDPR)

‍Under the following conditions, you may request that we restrict the processing of personal data concerning you:

• if you contest the accuracy of the personal data concerning you for a period enabling us to verify the accuracy of your personal data;

• if the processing is unlawful and you oppose the erasure of the personal data and request the restriction of the use of the personal data instead;

• we no longer need the personal data for the purposes of processing, but you need it to assert, exercise, or defend legal claims; or

• if you have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet clear whether our legitimate reasons outweigh your reasons.

If the processing of personal data concerning you has been restricted, such data may, with the exception of storage, only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If the restriction of processing has been restricted in accordance with the above conditions, we will inform you before the restriction is lifted.

15.5 Right to be informed (cf. Art. 19 GDPR)

If you have asserted your right to rectification, erasure, or restriction of data processing against us, we are obliged to notify all recipients of your personal data of the rectification, erasure, or restriction of data processing. This only applies insofar as this notification does not prove impossible or would involve a disproportionate effort. You have the right to know which recipients have received your data.

‍15.6 Right to data portability (cf. Art. 20 GDPR)

‍You have the right to receive your personal data from us in a commonly used, machine-readable format so that you can have it forwarded to another controller, if applicable, provided that the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art.

9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR and the processing is carried out using automated procedures. When exercising your right to data portability, you have the right to have the personal data transmitted directly from us to another controller, insofar as this is technically feasible. The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

‍15.7 Right to object to processing (cf. Art. 21 GDPR)

‍If we base the processing of your personal data on a legitimate interest (pursuant to Art. 6 (1) (f) GDPR), you may object to the processing. The same applies if we base the data processing on Art. 6 (1) (e) GDPR. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adjust the data processing or point out to you our compelling legitimate reasons for continuing the processing.

15.8 Right to lodge a complaint with the relevant supervisory authority (cf. Art. 77 GDPR)

‍Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR. The supervisory authority with which the complaint has been lodged will inform you of the status and outcome of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.

‍16 How to exercise these rights

‍To exercise these rights, please contact our data protection officer:

Christina Webersohn from WS Datenschutz GmbH

tablemedia@ws-datenschutz.de

or by mail:

WS Datenschutz GmbH

Dircksenstraße 51D-10178 Berlin

‍17 Right to make changes

‍We reserve the right to change this privacy policy in accordance with legal requirements.

18 Panel surveys using SurveyMonkey

Description and scope of data processing

We use the services of SurveyMonkey to conduct surveys. The data is collected using cookies. These cookies are used to ensure that our survey service is fully functional and that the surveys run as intended and optimally. Cookies are used to ensure that each respondent can only participate in a survey once and to track the completion rates of surveys.

The survey data collected is anonymous; we cannot assign it to any individual.

Data processing is carried out by:

SurveyMonkey Europe UC, 2 Shelbourne Buildings, Second Floor, Shelbourne Rd, Ballsbridge, Dublin 4, Ireland.

The following categories of personal data may be processed:

· Demographics (e.g., age, gender, state, income)

· User data (e.g., IP address, operating system, device type, browser type)

· Your opinions/ratings on the survey—this data is aggregated and anonymized.

For more information on data protection at SurveyMonkey, please refer to SurveyMonkey's privacy policy: https://www.surveymonkey.de/mp/legal/privacy-policy/?ut_source=footer#pp-section-1

Legal basis for data processing

The legal basis for the processing of users' personal data is Art. 6 (1) (f) GDPR and your consent to voluntary participation, Art. 6 (1) (a) GDPR. Our legitimate interest is based on comparing customer satisfaction with our services to improve our offerings.

Purpose of data processing

The purpose of data processing is to optimize our briefings.

Duration of data storage

After a period of 90 days, all account data that we have deleted will be permanently removed from SurveyMonkey's data backups.

Removal options by the data subject

If you have any questions about data protection at Survey Monkey or would like to exercise your rights, you can contact Survey Monkey's data protection officer at the following email address: dpo@surveymonkey.comoder directly to us datenschutz@table.media

As long as your account is active, you have full control over the various types of data and the duration of their storage. Please specify deletion periods for this purpose and enter these deletion periods for the requested data here.

19.LinkedIn Ads and Conversion Tracking

19.1. Description and scope of data processing

We place advertisements on LinkedIn. We also use the platform LinkedIn’s analytics and conversion tracking technology to measure the effectiveness of these advertisements. Data processing is carried out by: LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

LinkedIn downloads a pixel (image file) to your computer, which allows LinkedIn to obtain the following data about you: the pages of our website that you visit and that contain the pixel, your IP address, and other user data to provide specific product recommendations during subsequent visits to our website or third-party websites.

You can find more information about data protection at LinkedIn here: https://de.linkedin.com/legal/privacy-policy

19.2. Legal basis for data processing

Data processing is based on your consent in accordance with Art. 6 (1) (a) GDPR.

19.3. Purpose of data processing

We use LinkedIn Ads to provide information about our services and to increase our reach.

19.4. Duration of data storage

The data will be deleted as soon as it is no longer required for the purposes described above and there are no legal, contractual, or regulatory provisions preventing its deletion.

19.5. Option for the data subject to delete data

You can revoke your consent to data processing at any time with future effect. To do so, please use our consent banner.

20. Google Ads and Google Conversion Tracking

20.1. Description and scope of data processing

We have integrated the services of Google Ads (formerly Google AdWords) on this website. Google Ads is a service for internet advertising. Data processing for the European Economic Area and Switzerland is carried out by: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

If you have accessed our website via a Google ad, Google will place a so-called conversion cookie on your system. For explanations of cookies, please refer to the section on cookies. The conversion cookie is used to compile and analyze visitor statistics. It stores the IP address when you visit the website. This data is stored in the USA. Google may also pass this data on to third parties. For further information on Google's data protection policy, please refer to: https://www.google.de/intl/de/policies/privacy

20.2. Legal basis for data processing

The legal basis for data processing is your consent in accordance with Art. 6 (1) (a) GDPR.

20.3. Purpose of data processing

We use Google Ads to place targeted advertisements for our company in Google's search engine results.

20.4. Duration of data storage

The cookie loses its validity 30 days after it is set. This means that you can no longer be identified. Within these 30 days, we and Google can use the conversion cookie to track which subpages have been accessed.

20.5. Removal option by the data subject

You can revoke your consent to data processing at any time. Please use our consent banner for this purpose.

You can prevent cookies from being set at any time by adjusting the settings in your internet browser. Cookies that have already been set can also be deleted in your internet browser settings. You can permanently prevent data processing in your browser by using this link: http://www.google.com/settings/ads/plugin. As a result, it is possible that some of our website’s functionality will no longer be fully available.

In your browser settings, it is also possible to opt out of cookies for conversion tracking and thus user-related advertising by Google. To do so, please click on the following link: www.google.de/settings/ads. Please note that you will need to reset your preferences if you delete the cookies in your browser.

In addition, by clicking on the following link, you can deactivate those user-related ads that are part of the “About Ads” self-regulation campaign. Please note that you will need to reset your settings if you delete the cookies in your browser.