Datenschutz

Privacy Policy

(revised: 11 October 2023)

Welcome to our website. The protection of your personal data is important to us. In this document, we explain which personal data we process, how we process this personal data and the rights you have with regards to our processing of data.

1. Controller

Responsible Controller for all processing of personal data on our website is

Helbling Verlagsgesellschaft m.b.H.
Kaplanstraße 9
6063 Rum bei Innsbruck
Austria

For any queries on our processing of personal data, please contact us: privacy [at] helbling.com (privacy[at]helbling[dot]com)              

2. Your rights

We will be happy to provide you with information about whether and which of your personal data is processed by us and for what purposes (Article 15 GDPR). In addition, you have the right to rectification (Article 16 GDPR), the right to restriction of processing (Article 18 GDPR), the right to erasure (Article 17 GDPR) and the right to data portability (Article 20 GDPR), provided the conditions to exercise such rights are met.  

If our data processing is based on your consent as per Article 6 (1) a GDPR, you may freely withdraw this consent at any time without giving reasons (Article 7 (3) GDPR). Please note such withdrawal of consent does not affect the lawfulness of processing based on your consent before its withdrawal.

Right to object: You may, at any time, object to the processing of your data for direct marketing purposes (Article 21 (2) GDPR). Furthermore, you may also object, on grounds relating to your particular situation, to any other processing of your personal data which based on our legitimate interests as per Article 6 (1) f GDPR (Article 21 (1) GDPR).

The exercise of these rights is free of charge.

Without prejudice to these rights and the possibility of seeking any other administrative or judicial remedy, you have the possibility to lodge a complaint with a supervisory authority. The supervisory authority responsible for us is:

Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Wien
Austria
Telefone: +43 1 52 152-0
E-Mail: dsb [at] dsb.gv.at (dsb[at]dsb[dot]gv[dot]at)

3. Data security

We employ comprehensive technical and organizational measures to protect your personal data from manipulation, loss, destruction or unauthorized access.

This website uses SSL or TLS encryption for security and to protect the transmission of confidential content, for example orders or requests that you send to us as the site operator. If SSL or TLS encryption is activated, the data you transmit to us cannot be read in transit by third parties. Our technical and organizational measures are continuously adapted in accordance with technological progress. Payment transactions are made exclusively via an encrypted SSL or TLS connection.

We would like to point out that in general usage of the Internet (e.g. sending e-mails) may impose security risks. We cannot guarantee protection of the data while in transit to us, so we recommend to use the postal service for confidential information.

4. Automated individual decision-making, including profiling

We do not process your personal data in the context of a procedure for automated decision-making (including profiling) and do not intend to initiate such processing.

5. Collection and processing of User Data

5.1. Country Settings

The website uses country settings for non-registered and registered users. This is necessary due to country distribution restrictions for individual products. The country settings also allow the display of products available and relevant for the specific market (e.g. teaching and learning materials suitable for the national education system) and by doing so, help to prevent incorrect purchases. The country settings can be changed by users at any time. Please refer to the product descriptions for information on availability of a product in your country.

Legal basis of this processing is Art. 6 (1) f GDPR. Our legitimate interest lays in the prevention of misuse, the provision of a user-friendly application and the improvement of our website.

5.2. HELBLING Account and User Profile 

The HELBLING Account authorizes users to access specific applications or parts of the website (e.g. webshop functions of the website). For the creation and usage of the Account, provision of personal data (name, e-mail address, user name, password) is mandatory to enable us to correctly assign and manage the account. To access certain specific applications or parts of the website, additional information may be required (e.g., choice of user role or country settings). Without providing such personal data, we are unable to operate such Account and will reject registration.

The Account offers additional functions at the users discretion, e.g. to store the contact details and delivery address (in order to not have to re-enter them each time an order is placed), or an overview of past orders.

The legal basis of this processing is the execution of the contract concluded between you and us regarding the Account, i.e. Art. 6 (1) b GDPR. We will retain the data until your Account is deleted. Statutory retention periods remain unaffected.

You can delete your HELBLING Account at any time, which will also terminate the user agreement regarding the Account. Please remember to individually save any information you want to retain from the Account as it will not be retrievable once the Account is deleted.

5.3. Shopping on our website

When you shop on our website in our webshop, we have to ask you to provide us with personal data, including name, postal address, username, password and your e-mail address. Without this information we are unable to process your purchase and send or provide you with the product you desire.

To process payments, we use the services of Stripe and PayPal.

By default, the payment is processed by Stripe, a service offered by Stripe Payments Europe Ltd, Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland. For this purpose, we will transfer your payment data to Stripe. Please note that after this transfer, the payment will be processed by Stripe as Controller, based of the contractual relationship that exists between you and Stripe. Information on which data Stripe processes as Controller, for which purposes, onward transfers of data by Stripe and how Stripe ensures the protection of your personal data is explained by Stripe in their privacy policy, which may be accessed here: https://stripe.com/privacy.

You may choose to use PayPal, a service offered by PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, for processing your payment. If you choose PayPal, we will transfer your payment data to PayPal. Please note that after this transfer, the payment will be processed by PayPal as Controller, based of the contractual relationship that exists between you and PayPal. Information on which data PayPal processes as Controller, for which purposes, onward transfers of data by PayPal and how Stripe ensures the protection of your personal data is explained by PayPal in their privacy policy, which may be accessed here: https://www.paypal.com/de/webapps/mpp/ua/privacy-full/.

Please note that for HELBLING, the contract may be entered into and performed by the controller’s sister companies. For orders placed in Germany, HELBLING Verlag GmbH will enter into and perform the contract. For orders placed in Switzerland, Liechtenstein, Büsingen and Livigno, HELBLING Verlag AG will enter into and perform the contract. We will transfer your data to our respective sister company for the purpose of fulfilling the contract and delivering and/or providing you with the goods as ordered.

Our sister company in Germany is:

HELBLING Verlag GmbH
Martinstraße 42-44
73728 Esslingen am Neckar
Germany
Tel: +49 (711) 758701-0
E-Mail: service [at] helbling.com (service[at]helbling[dot]com)
Data Protection Officer: Mario Leidel, Martinstraße 42-44, 73728 Esslingen, E-Mail: m.leidel [at] helbling.com (m[dot]leidel[at]helbling[dot]com)

Our sister company in Switzerland is:

HELBLING Verlag AG
Aemmenmattstrasse 43
3123 Belp
Switzerland
Tel: +41 (31) 812 22 28
E-Mail-Adresse: mail [at] helbling.com (mail[at]helbling[dot]com)

Legal basis of the data transfer to our sister companies is Art. 6 (1) f GDPR. Our legitimate interest lies in offering a common webshop, enhancing efficiency of our online and e-commerce activities and facilitating delivering our goods and services to you. While Switzerland is a third-party country outside of the EEA and the scope of GDPR, transfer of personal data to Switzerland is permissible as per Art. 45 (1) GDPR.

The following statements refer to the sister company that becomes the contractual partner:

Legal basis of this processing is Art. 6 (1) b GDPR. Processing of your personal data is necessary for our contractual performance. In addition, we also process your data to protect legitimate interests, namely to maintain customer relations. Legal basis for this processing is Art. 6 (1) f GDPR. Insofar as there are legal retention obligations for business correspondence and tax-relevant documents, we store your data for the fulfillment of our legal obligations, Article 6 (1) lit. c Basic Data Protection Regulation. We will store your personal data as long as necessary for the respective purpose. We will delete the data processed in these contexts if the purpose for storing the data no longer applies. Mandatory legal provisions - in particular retention periods - remain unaffected. 

5.4. Contacting us

If you contact us with a request, we will process your personal data given within such request to process, manage and answer your request. You may use our contact form provided by us for such contact. In such form, we ask you to provide a selection of personal data, such as your name and e-mail address, to allow to process, manage and answer your request in a meaningful way.

Legal basis for this processing of your data is Art. 6 (1) (b) GDPR, insofar as it concerns the initiation of a contract or customer support in the context of an existing contractual relationship. If you give us your express consent, legal basis is Art 6 (1) a GDPR. Otherwise, legal basis is Art. 6 (1) f GDPR, namely our legitimate interest to communicate with our customers as they requested.

We will store the data you provided when contacting us until you request us to delete it, revoke your consent to store it, or if the purpose for storing the data no longer applies (e.g. after we have completed processing your inquiry). Mandatory legal provisions - in particular retention periods - remain unaffected.

5.5. Newsletter

If you want to keep in touch with news on HELBLING and our products, you may subscribe to our newsletter. To be able to send you our newsletter, we must ask you to provide a selection of personal data.

For dispatch of our newsletters, we use the service CleverReach as provided by CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany.

We have concluded a Data Processing Agreement with CleverReach in accordance with Art. 28 GDPR. You may find CleverReach's privacy policy here: https://www.cleverreach.com/de-de/datenschutz/.

Newsletters sent with CleverReach enable us to analyze the behavior of newsletter recipients. We evaluate how many recipients have opened the newsletter message and how often which link in the newsletter was used. With the help of so-called conversion tracking, we can also analyze whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on the link in the newsletter. For more information on data analysis by CleverReach newsletter, please click here: https://www.cleverreach.com/de-de/datenschutz/.

Legal basis for this processing of your data is your consent given in accordance with Art. 6 (1) (a) GDPR, which we request when offering the newsletter. You make revoke your consent anytime. We will delete the data processed in the context of the newsletter dispatch if you revoke your consent, or if the purpose for storing the data no longer applies. Mandatory legal provisions - in particular retention periods - remain unaffected. For revoking your consent, you may use the link we include in all newsletter messages.

5.6. Direct advertising

We may use the personal data you provide to advertise our goods and services, unless the explicit consent of the addressee is required by law. Legal basis for this data processing is Art. 6 (1) f GDPR, namely our legitimate interest to pursue and offer direct advertising. We will delete data if you raise an effective objection in accordance with Art. 21 GDPR, or if the purpose for storing the data no longer applies. Mandatory legal provisions - in particular retention periods - remain unaffected.

If you give your consent for direct advertising via e-mail, legal basis for this processing is Art. 6 (1) a GDPR. You make revoke your consent anytime. We will delete data if you revoke your consent, or if the purpose for storing the data no longer applies. Mandatory legal provisions - in particular retention periods - remain unaffected.

6. Collection and processing of Usage Data

6.1. Logfiles

When you visit our website and view its contents, some information on the connection and the device used is transmitted. We will store and analyze such information as needed for technical and security reasons to protect the HELBLING systems against attacks (e.g. protection against attacks such as brute force attacks or DDoS attacks) as well as for statistics in order to improve the offers.

Legal basis of this data processing is Art. 6 (1) f GDPR. Our legitimate interest lies in offering a functional website and satisfying user experience, to set access authorizations and in ensuring the stability and security of the services involved. We will delete data if you raise an effective objection in accordance with Art. 21 GDPR, or if the purpose for storing the data no longer applies. Mandatory legal provisions - in particular retention periods - remain unaffected.

6.2. Cookies and other “identifiers”

On our website, we use technical means for various services and functions, which are stored on your device. These are, in particular, so-called cookies, but also similar identifiers, such as tracking pixels or web beacons (all such technical means are referred to in the following as "cookies"). Third parties may also be given the opportunity to store cookies on your device, especially if content or functionalities of such third parties are integrated in the website and used and/or activated by the user. Which elements of our website use cookies is explained in this Privacy Policy. Most of the cookies we use are so-called "session cookies": they are automatically deleted from your device after the end of your visit. Other cookies remain stored on your device for a set storage time or until you delete them. These cookies enable us to recognize your browser on your next visit.

You can deny the storage of cookies on your device at any time in the set-up of your browser software or may delete all cookies when you close the browser by default. Each browser has its own, specific cookie management options, and we recommend adapting them to your preferences. However, please note that if you refuse employment of all (or specific) cookies, you will not be able to use all (or specific) functions of this website to their full extent.

Please see a list of tutorials explaining the deletion of cookies (last updated 18th August 2023, please check your browser version):

6.3. Consent management with our Consent-Manager 

We enable you to control our use of Cookies with the help of our Consent Manager. The Consent-Manager will be displayed on your first visit to our website and will give you the opportunity to select and manage your consent to our usage of Cookies. The Consent-Manager will store a functional cookie in your browser, to memorize the consent you have given, as well as their rejection or revocation. This data will not be passed on to third parties.

Legal basis of this data processing is Art. 6 (1) f GDPR. Our legitimate interest lies in offering a functional website and a satisfying user experience, while complying with legal requirements. We will delete data if you raise an effective objection in accordance with Art. 21 GDPR, or if the purpose for storing the data no longer applies. Mandatory legal provisions - in particular retention periods - remain unaffected.

6.4. Functional Cookies 

Our website employs technically necessary cookies ("functional cookies") to provide the essential basic functions of the service. Without these functions, our website cannot be displayed completely and correctly. Hence, you cannot deselect these cookies if you wish to use our website.

Legal basis of this data processing is Art. 6 (1) f GDPR. Our legitimate interest lies in offering a functional website and a satisfying user experience, while complying with legal requirements. We will delete data if you raise an effective objection in accordance with Art. 21 GDPR, or if the purpose for storing the data no longer applies. Mandatory legal provisions - in particular retention periods - remain unaffected.

6.5. Other Cookies 

In addition to functional cookies, we use optional cookies ("performance cookies" and "marketing cookies"). These will only be employed with your express consent, which you may (or may not) express via the Consent Manager. Such cookies may serve in particular to enable us to analyze and improve visits to our website, to make it easier for you to use it via different browsers or terminal devices, to recognize your browser on a visit or to serve advertising (e.g. including showing advertising based on interests or measuring performance and effectiveness of advertisements).

Legal basis for this processing is your consent as per Art. 6 (1) a GDPR, given via our Consent-Manager. You maye revoke your consent anytime using our Consent-Manager. We will delete data if you revoke your consent, or if the purpose for storing the data no longer applies. Cookies will delete themselves when their storage time expires or earlier if you delete them. Mandatory legal provisions - in particular retention periods - remain unaffected.

7. Analytics  and similar services

7.1. Google Analytics

We would like to know how users use our website and how we can improve our website. To analyze user behavior, we use the service Google Analytics on our website. The service employs cookies and processes the IP address used by your device.

"Google" is a group of companies and consists of Google Ireland Ltd (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA as well as other affiliated companies of Google LLC. We have concluded a Data Processing Agreement with Google Ireland Ltd. as our service provider in accordance with Art. 28 GDPR. Further information on Google Analytics as well as Google's privacy policy can be found here: https://policies.google.com/privacy.

We use Google Analytics using the "anonymization of the IP address" functionality. According to Google, the IP address used by your device is shortened and anonymized by Google immediately when read out, with anonymization taking place within the European Union. According to Google, non-anonymized IP addresses only reach the USA in exceptional cases. According to Google, the IP address transmitted by your browser as part of Google Analytics is also not merged with other Google data.

The information generated by the cookies, about your use of this website, which because of the anonymization of the IP address regularly cannot be assigned to any person, is usually transmitted to a Google server in the U.S. and stored there. On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. 

Legal basis for this processing is your consent as per Art. 6 (1) a GDPR, given via our Consent-Manager. You may revoke your consent anytime using our Consent-Manager. Cookies will delete themselves when their storage time expires or earlier if you delete them. Mandatory legal provisions - in particular retention periods - remain unaffected. Google participates in the EU/US Data Privacy Framework. Any data transfers to the USA associated with our use of Google services are permissible as per Art. 45 (1) GDPR.

You can also prevent the described processing through the set-up of your browser, for example, by downloading and installing the browser plugin available under the following link (http://tools.google.com/dlpage/gaoptout?hl=de).

7.2. Google Ads

We would like to know the benefit of advertisements we place on other websites and in search engines. For this purpose, we use service Google Ads-Conversion on our website. The service employs cookies.

"Google" is a group of companies and consists of Google Ireland Ltd (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA as well as other affiliated companies of Google LLC. We have concluded a Data Processing Agreement with Google Ireland Ltd. as our service provider in accordance with Art. 28 GDPR. Further information on Google Analytics as well as Google's privacy policy can be found here: https://policies.google.com/privacy.

When we place advertisements on other websites and search engines, these advertisements are displayed via an ad server. If you are routed to our website by clicking on such advertisement from displayed by such ad server, Google Ads-Conversion will employ an individual cookie on your device ("conversion cookie"). These cookies have a storage time of 30 days. As long as the cookie is active, we can recognize that a user has clicked on the Google Ads advertisement. By means of the so-called "view-through conversions", we can track how many users have seen our ad without clicking on it and have later completed a purchase on our website. This allows us to understand user behavior and their response to our ads. The information obtained with the cookies is used solely to generate conversion statistics for us as Google Ads customers. Thus, we learn, among other things, the total number of users who have clicked on one of our ads and were redirected to a page of ours provided with a conversion tracking tag.

Legal basis for this processing is your consent as per Art. 6 (1) a GDPR, given via our Consent-Manager. You may revoke your consent anytime using our Consent-Manager. We will delete data if you revoke your consent, or if the purpose for storing the data no longer applies. Cookies will delete themselves when their storage time expires or earlier if you delete them. Mandatory legal provisions - in particular retention periods - remain unaffected. Google participates in the EU/US Data Privacy Framework. Any data transfers to the USA associated with our use of Google services are permissible as per Art. 45 (1) GDPR.

Using Google's general evaluation tools, we are only able to see how many users, subdivided according to general criteria not associated with personal data, have seen our advertising. Please note, however, that we cannot exclude Google processing this data under its own responsibility, over which we have no control. If you do not agree or no longer agree with this, please do not declare your consent or revoke your consent in our Consent-Manager.

7.3. Wistia

On our website, we display videos which are stored by the video hosting service "Wistia" on their servers. Operator of Wistia is Wistia, Inc, 120 Brookline Street, Cambridge, MA 02139, USA. By integrating Wistia's video player into the respective page, we embed such videos into our website so the videos can be displayed and viewed as part of our website page. Once the player is activated, Wistia will receive your IP address and appoint it to the video with a time-stamp. You can find more information about Wistia and Wistia's privacy policy here: https://wistia.com/privacy.

Please note, Wistia is not activated by default and only activated if the user expressly wishes to view such video.

Legal basis for this processing is your consent as per Art. 6 (1) a GDPR, given when activating Wistia. You may revoke your consent anytime using our Consent-Manager. We will delete data if you revoke your consent, or if the purpose for storing the data no longer applies. Mandatory legal provisions - in particular retention periods - remain unaffected. Wistia participates in the EU/US Data Privacy Framework. Any data transfers to the USA associated with our use of Wistia services are permissible as per Art. 45 (1) GDPR.

7.4. Youtube

On our website, we display videos which are stored by the video hosting service "Youtube" on their servers. Operator of Youtube is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (privacy policy: https://policies.google.com/privacy?hl=de&gl=de). By integrating Youtube's video player into the respective page, we embed such videos into our website so the videos can be displayed and viewed as part of our website page. YouTube may use cookies and process your data in accordance with their privacy policy, which you can find here: https://policies.google.com/privacy?hl=en&gl=en.

Please note, Youtube is not activated by default and only activated if the user expressly wishes to view such video.

Legal basis for this processing is your consent as per Art. 6 (1) a GDPR, given when activating Youtube. You may revoke your consent anytime using our Consent-Manager. We will delete data if you revoke your consent, or if the purpose for storing the data no longer applies. Mandatory legal provisions - in particular retention periods - remain unaffected. Google participates in the EU/US Data Privacy Framework. Any data transfers to the USA potentially associated with our use of Youtube’s services are permissible as per Art. 45 (1) GDPR.

7.5. Cloudflare

We use the content delivery network with DNS of Cloudflare Inc, 101 Townsend St, San Francisco, California 94107, USA ("Cloudflare"). Technically, the information transfer between your browser and our website is routed through Cloudflare's network. Cloudflare is thus able to analyze the traffic between users and our websites, for example, to detect and prevent attacks on our services. In addition, Cloudflare may store cookies on your computer for optimization and analysis.

Cloudflare collects statistical data about visits to our websites. The access data includes: name of the page accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type along with version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider. Cloudflare uses the log data for statistical analysis for the purpose of operation, security and optimization of the offer.

Legal basis for this processing is Art. 6 (1) f GDPR, namely our legitimate interest in the protection and security of our systems. We will delete data if you raise an effective objection in accordance with Art. 21 GDPR, or if the purpose for storing the data no longer applies. Mandatory legal provisions - in particular retention periods - remain unaffected. Cloudflare participates in the EU/US Data Privacy Framework. Any data transfers to the USA potentially associated with our use of Cloudflare’s services are permissible as per Art. 45 (1) GDPR.

7.6. DataDog

We use monitoring and security services of Datadog Inc., 620 8th Ave., 45th Fl., New York, NY 10018 USA (“DataDog”) to improve the security of applications and the availability of our website. We have concluded a Data Processing Agreement with DataDog in accordance with Art. 28 GDPR. The Data Processing Agreement incorporates Standard Contractual Clauses as per Art. 46 (2) c GDPR. You may find DataDog’s privacy policy here: https://www.datadoghq.com/legal/privacy/.

Legal basis for this processing is Art. 6 (1) f GDPR, namely our legitimate interest in the protection and security of our systems. We will delete data if you raise an effective objection in accordance with Art. 21 GDPR, or if the purpose for storing the data no longer applies. Mandatory legal provisions - in particular retention periods - remain unaffected. Any data transfers to the USA potentially associated with our use of DataDog’s services are permissible as per Art. 46 (2) c GDPR.

8. Social media plug-ins 

We do not use social media plugins on our website. If our website contains icons from social media providers (e.g. Facebook, Instagram), we only use these to passively link to our pages on the respective platform: If you click on the icon, you will be redirected to the corresponding platform.