Privacy policy
This privacy policy provides information about how we handle your personal data and your rights under the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz - BDSG). Druckerei C.H.BECK (hereinafter referred to as "we" or "us") is the controller for data processing.
Contents
I. General information
-
1. Contact details
2. Legal basis
3. Duration of storage
4. Categories of recipients
5. Data transfer to third countries
6. Processing when exercising your rights
7. Your rights
8. Right to object
9. Data protection officer
II. Data processing on our website
-
1. Processing of server log files
2. Contact options and enquiries
3. Online shop
4. Check for input errors
5. Payment service providers
6. Cookies
7. Website analysis
III. Further data processing
-
1. Contacting us
2. Customer and prospect data
3. Note for data subjects in Switzerland
I. General information
-
1. Contact details
If you have any questions or suggestions regarding this privacy policy, or if you wish to contact us to claim your rights, please send your enquiry to
-
Druckerei C.H.BECK
A branch of Verlag C.H.Beck GmbH & Co. KG
Bergerstraße 3-5
D-86720 Nördlingen
Phone: +49 9081 85 – 0
Email: info@becksche.de
-
-
2. Legal basis
The data protection term "personal data" refers to all information relating to an identified or identifiable person. We process personal data in compliance with the relevant data protection regulations, in particular the GDPR and the BDSG. We only process data on a legal basis. We only process personal data with your consent (§ 25 (1) TDDDG or Art. 6 (1) (a) GDPR), to fulfil a contract to which you are a party or at your request to carry out pre-contractual measures (Art. 6 (1) (b) GDPR), to fulfil a legal obligation (Art. 6(1)(c) GDPR) or if the processing is necessary to safeguard our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms requiring the protection of personal data prevail (Art. 6 (1) (f) GDPR).
-
3. Duration of storage
Unless otherwise specified in the following, we only store the data for as long as is necessary to achieve the purpose of processing or to fulfil our contractual or legal obligations. Such storage obligations may arise in particular from commercial or tax law regulations. From the end of the calendar year in which the data was collected, we will store personal data contained in our accounting data for eight years and personal data contained in commercial letters and contracts for six years. In addition, we will retain data relating to consents requiring proof of consent, as well as complaints and claims, for the duration of the statutory limitation periods. We will delete data stored for advertising purposes if you object to processing for this purpose.
-
4. Categories of recipients
We use processors to process your data. The processing operations carried out by such processors include, for example, sending emails, maintenance and support of IT systems, customer and order management, accounting and billing, marketing measures, and file and data carrier destruction. A processor is a natural or legal person, authority, institution or other body that processes personal data on behalf of the controller. Processors do not use the data for their own purposes but carry out data processing exclusively for the controller and are contractually obliged to ensure appropriate technical and organisational measures for data protection. In addition, we may transfer your personal data to entities such as postal and delivery services, our bank, tax advisory/auditing companies or the tax authorities. Further recipients may be identified in the following information.
-
5. Data transfer to third countries
Our data processing may involve the transfer of certain personal data to third countries, i.e. countries where the GDPR does not apply. Such transfers are permitted if the European Commission has determined that an adequate level of data protection is provided in such a third country. If no such adequacy decision has been made by the European Commission, personal data will only be transferred to a third country if there are appropriate safeguards in place in accordance with Article 46 of the GDPR or if one of the conditions set out in Article 49 of the GDPR is met. If no adequacy decision has been made and unless otherwise specified below, we use the EU standard contractual clauses as appropriate safeguards for the transfer of personal data to third countries. You have the option of obtaining or viewing a copy of these EU standard contractual clauses. To do so, please contact us at the address provided under Contact details.
If you consent to the transfer of personal data to third countries, the transfer will be carried out on the legal basis of Art. 49 (1) (a) GDPR.
-
6. Processing when exercising your rights
If you exercise your rights in accordance with Articles 15 to 22 GDPR, we will process the personal data transmitted for the purpose of implementing these rights by us and in order to be able to provide evidence of this. We will only process data stored for the purpose of providing information and preparing it for this purpose, as well as for data protection control purposes, and will otherwise restrict processing in accordance with Art. 18 GDPR.
This processing is based on the legal basis of Art. 6 (1) (c) GDPR in conjunction with Art. 15 to 22 GDPR and § 34 (2) BDSG.
-
7. Your rights
As a data subject, you have the right to assert your rights as a data subject against us. In particular, you have the following rights:
-
In accordance with Art. 15 GDPR and § 34 BDSG, you have the right to request access to information about whether and, if so, to what extent we process personal data relating to you.
-
You have the right to request that we correct your data in accordance with Art. 16 GDPR.
-
You have the right to request that we delete your personal data in accordance with Art. 17 GDPR and § 35 BDSG.
-
You have the right to have the processing of your personal data restricted in accordance with Art. 18 GDPR.
-
You have the right, in accordance with Art. 20 GDPR, to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and to transmit this data to another controller.
-
If you have given us separate consent to data processing, you can withdraw this consent at any time in accordance with Art. 7 (3) GDPR. A withdrawal of consent does not affect the lawfulness of the processing that took place on the basis of the consent until revocation.
-
If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR.
-
-
8. Right to object
In accordance with Art. 21(1) GDPR, you have the right to object to processing based on the legal basis of Art. 6 (1) (e) or (f) GDPR for reasons arising from your particular situation. If we process personal data about you for the purpose of direct marketing, you may object to this processing in accordance with Art. 21 (2) and (3) GDPR.
-
9. Data protection officer
You can contact our data protection officer at the following address:
-
Email: dsb_druckereibeck@datenschutzkanzlei.de
Herting Oberbeck Datenschutz GmbH
Hallerstr. 76, 20146 Hamburg
-
II. Data processing on our website
When you use our website, we collect information that you provide yourself. In addition, during your visit to the website, we automatically collect certain information about your use of the website. Under data protection law, IP addresses are also considered personal data. An IP address is assigned to every device connected to the Internet by the Internet provider so that it can send and receive data.
-
1. Processing of server log files
When you use our website for purely informational purposes, general information that your browser transmits to our server is initially stored automatically (i.e. not via registration). This includes, by default: browser type/version, operating system used, page accessed, previously visited page (referrer URL), IP address, date and time of the server request, and HTTP status code.
The processing is carried out to safeguard our legitimate interests and is based on the legal basis of Art. 6 (1) (f) GDPR. This processing serves the technical administration and security of the website. The stored data is deleted after 90 days at the latest, unless there are specific indications of a justified suspicion of illegal use and further examination and processing of the information is necessary for this reason. We are not able to identify you as the data subject on the basis of the stored information. Articles 15 to 22 GDPR therefore do not apply in accordance with Article 11(2) GDPR, unless you provide additional information enabling your identification in order to exercise your rights set out in these articles.
-
2. Contact options and enquiries
Our website contains contact forms that you can use to send us messages. Your data is transferred in encrypted form (indicated by "https" in the address bar of your browser). All data fields marked as mandatory are required to process your request. Failure to provide this information will result in us being unable to process your request. The provision of further data is voluntary. Alternatively, you can also send us a message via the contact email address. We process the data for the purpose of responding to your enquiry.
If your enquiry relates to the conclusion or performance of a contract with us and you are a party to the contract, Art. 6 (1) (b) GDPR is the legal basis for data processing. Otherwise, we process the data on the basis of our legitimate interest in answering requests. The legal basis for data processing is then Art. 6 (1) (f) GDPR.
-
3. Online shop
If you order a product via our website, we will only process your personal data for the purpose of fulfilling your order. As part of the booking or ordering process, we only process the data that you have entered in the entry form and, if applicable, payment information if you pay by advance bank transfer. In order to deliver the products you have ordered, we transfer your data required for delivery to a shipping service provider. The legal basis for the processing is Art. 6 (1) (b) GDPR. If you are not a party to the contract yourself, this data processing is based on our legitimate interest in the performance of the contract in accordance with Art. 6 (1) (f) GDPR. All mandatory data fields must be completed in order for us to process your booking or order. If you do not provide this information, we will be unable to process your booking or order.
The provision of further data is voluntary. We process such voluntarily provided data on the basis of Art. 6 (1) (f) GDPR.
In our online shop, you have the option of creating a customer account by registering. If you have registered for a customer account, your stored data will be automatically entered into the order form when you order a product in our shop. You can also use your customer account to check the status of your orders and save products in a wish list.
The information required for registration is shown in the entry form. The provision of information marked with an asterisk (*) as mandatory is essential for the registration to be completed. A valid email address is required for registration. After registering, you can log in to your customer account by entering your email address and password. The processing of the data provided during registration and use of the customer account is based on the legal basis of Art. 6 (1) (b) GDPR. If you are not a party to the contract yourself, this data processing is based on our legitimate interest in the performance of the contract in accordance with Art. 6 (1) (f) GDPR.
-
4. Check for input errors
We process personal data in connection with entries in address forms in our online shop for the purpose of validating and correcting customer master data. The information you enter, such as your name, address and email address, is automatically checked, corrected if necessary, and then sent back to us. For this purpose, a comparison is made with address databases hosted by our sub-service provider Endereco UG (Germany).
The processing is carried out on the basis of Art. 6 (1) (f) GDPR. We have a legitimate interest in preventing fraud and ensuring that data is correct, so that our business processes can be carried out reliably.
The data is processed separately by Endereco UG and is not merged. The enquiries are deleted by the service provider as soon as the status of the data entered has been determined and storage in the online shop has been completed, but no later than after 30 days.
-
5. Payment service providers
You can choose between various options to pay for products ordered in our online shop. We work with various payment providers for this purpose. The payment details you provide during the ordering process will be transmitted by us to the payment service provider, insofar as this transmission is necessary to carry out the payment transaction.
The legal basis for this transfer is Art. 6 (1) (b) GDPR.
Please note that the respective payment information is processed independently by the relevant payment service providers.
We use the following payment service providers:
-
PayPal
You have the option of paying via the PayPal service provided by PayPal Europe S.a.r.l. et Cie s.c.a. (Luxembourg, EU). PayPal may transfer your address data stored with PayPal to us, which we process exclusively for the purpose of contract processing. Further information on data protection at PayPal can be found at: https://www.paypal.com/uk/legalhub/paypal/privacy-full .
-
Google Pay
You have the option of paying via the Google Payments service provided by Google Ireland Limited (Ireland, EU). Information on data protection at Google Payments can be found at: https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=en_GB .
-
Apple Pay
You have the option of paying via the Apple Pay service. Please note that the relevant payment information is processed by Apple Distribution International (Ireland, EU). Information on data protection at Apple can be found at: https://www.apple.com/uk/legal/privacy/ .
-
Klarna (Invoice and Installment Purchase)
We offer the invoice and instalment purchase payment method in cooperation with Klarna AB (publ) (Sweden, EU). To do this, Klarna must carry out an identity and credit check. For this purpose, when you choose invoice and instalment purchase, we will collect additional data (such as your date of birth, gender and telephone number) and transmit it to Klarna, which you can find in detail in Klarna's terms and conditions. The legal basis for the transfer to Klarna is Art. 6 (1) (b) GDPR. Otherwise, Klarna processes the data on its own responsibility. Further information on data protection at Klarna can be found at https://www.klarna.com/uk/privacy/ .
-
Instant transfer
We offer the "instant transfer" payment method in cooperation with the service provider Computop Paygate GmbH (Germany, EU). When you use this service, Computop sends us confirmation that the transfer order for your order has been successfully submitted. This only includes the data from the transfer form (name, account number, bank code, reference, transfer amount) as well as the date (with time) and the transaction ID we have chosen (e.g. order number). For SEPA transfers and if required by your bank, BIC and IBAN to set up the transfer in your online banking account, the confirmation sent to us also contains your BIC and IBAN. We can also obtain this data from our account statement. Computop does not transmit any further personal data to us. Further information on data protection at Computop can be found at: https://computop.com/uk/data-protection .
-
-
6. Cookies
We use cookies and similar technologies ("cookies") on our website. Cookies are small data files that are stored by your browser when you visit a website. This identifies the browser used and allows it to be recognised by web servers. You have full control over the use of cookies through your browser. You can delete cookies at any time in your browser's security settings. You can object to the use of cookies either generally or in specific cases through your browser settings.
The use of cookies on our website is technically necessary for the operation of our website and is therefore permitted without the consent of the user in accordance with § 25 (1) TDDDG.
-
7. Website analysis
To analyse user behaviour on our website, we use an analysis method from the provider NETPROFIT (Germany) that runs without cookies. A tracking script is temporarily integrated into the page, but no information is stored on the website visitor's device or read from it. The IP address is processed exclusively in anonymised form, so that no personal reference can be made.
The anonymised analysis data is first processed on the provider's server and then transmitted to the Google Analytics service without any personal reference. Profiling or merging with other data sources is excluded.
The processing is based on our legitimate interest in analyzing user behavior and optimizing our web offering, pursuant to Article 6(1)(f) of the GDPR.
You can object to the collection of analytics data by clicking the following link:
This will set an opt-out cookie that will prevent your data from being collected during future visits to this website in your current browser.
-
Further information on the analysis procedure can be found in the provider's notes at: https://www.analytics-ohne-einwilligung.de/datenschutz/.
III. Further data processing
-
1. Contacting us
If you contact us by phone or email, we will process the data you provide to respond to your enquiry. We process this data based on our legitimate interest in communicating with enquirers.
The legal basis for data processing is Art. 6 (1) (f) GDPR.
-
2. Customer and prospect data
If you contact our company as a customer or interested party, we will process your data to the extent necessary to establish or implement the contractual relationship. This regularly includes the processing of the personal master data, contract data and payment data provided to us, as well as the contact and communication data of our contact persons at commercial customers and business partners. The legal basis for this processing is Art. 6 (1) (b) GDPR, provided that you are a party to the contract. Otherwise, this data processing is based on our legitimate interest in the performance of the contract in accordance with Art. 6 (1) (f) GDPR.
We also process customer and prospect data for evaluation and marketing purposes. This processing is carried out on the legal basis of Art. 6 (1) (f) GDPR and serves our interest in further developing our offering and providing you with targeted information about our offerings.
Further data processing may take place if you have given your consent (Art. 6 (1) (a) GDPR) or if this is necessary to fulfil a legal obligation (Art. 6 (1) (c) GDPR).
-
3. Note for data subjects in Switzerland
If you are a data subject within the scope of the Swiss Federal Act on Data Protection, the additional information under this point applies.
The legal references made in this privacy policy are directed at data subjects in Switzerland in accordance with the comparable provisions of the Swiss Federal Act on Data Protection (DSG). This applies in particular to the applicable rights of data subjects under Articles 25-29, 32 DSG.
Data processing also takes place in the following countries outside Switzerland:
-
Countries of the EU and the EEA.
We guarantee an adequate level of data protection. This is ensured by:
-
An established adequate level of data protection in accordance with Art. 16 para. 1 DSG for the recipient country;
-
Standard contractual clauses that have been previously approved, issued or recognised by the EDÖB, in particular the standard contractual clauses of the European Commission;
-
An international treaty regulating an adequate level of data protection.
Status: August 2025
-