Privacy Policy

1. General Notice and Mandatory Information

We at Global Commerce Media GmbH (“we,” “us,” “our”) are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, process, and store your personal data when you visit our website, use our services, and interact with us.

Designation of the Responsible Entity

The responsible entity (or “controller”) for data processing on this website, in accordance with GDPR and other applicable laws, is:

Global Commerce Media GmbH
Bahnhofstraße 20
86551 Aichach, Germany

Contact Information:

The responsible entity determines, either alone or jointly with others, the purposes and means of processing personal data (e.g., names, contact details, etc.).

2. Data Processing and Collection

(a) Website Visits and Analytics

When you visit our website, certain information is automatically collected to help us understand user interactions and improve site functionality. This data includes:

  • Technical data: IP address, browser type, operating system
  • Cookies: Our website uses cookies to enhance the browsing experience, conduct analytics, and support marketing activities (see Section 5).

(b) Contact Forms and Communication

When you reach out via our contact form or customer service email, we collect the information you provide to respond to your inquiry, including:

  • Contact details: Name, email address, message content

(c) Email Marketing and Newsletters

We utilize two email marketing platforms, Brevo (formerly known as Sendinblue) and Beehiiv, to manage our email communications and newsletters.

  • Brevo: Brevo is a comprehensive email marketing service that allows us to create, send, and track email campaigns. When you subscribe to our newsletter or provide your email through Brevo, your data is stored securely and processed in compliance with GDPR. Brevo implements strong security measures, including encryption and data access controls, to protect your information. Additionally, Brevo provides features that allow you to manage your consent preferences, ensuring that you have control over the communications you receive from us. You can review Brevo’s data protection measures in their Privacy Policy.

  • Beehiiv: Beehiiv is an innovative newsletter platform that helps us design and distribute engaging content to our subscribers. Similar to Brevo, Beehiiv adheres to GDPR regulations, prioritizing user privacy and data protection. Beehiiv employs robust security protocols to safeguard your personal data, including regular security audits and data encryption. Subscribers can easily unsubscribe or manage their preferences at any time through the links provided in our emails. For more information on Beehiiv’s data protection policies, please visit their Privacy Policy.

By subscribing to our newsletters, you consent to the processing of your data by these platforms for the purposes of sending you updates, promotions, and relevant information. You may unsubscribe from our newsletters at any time by following the instructions in the emails we send or by contacting us directly.

3. Legal Basis for Processing

Our processing of your personal data is based on the following legal grounds:

  • Consent (Art. 6(1)(a) GDPR): Where you have provided explicit consent, e.g., for marketing emails.
  • Contractual Obligations (Art. 6(1)(b) GDPR): For processing necessary to fulfill contractual obligations or steps requested by you.
  • Legitimate Interests (Art. 6(1)(f) GDPR): For website analytics and security.

4. Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC (“Google”), to help us analyze how users interact with our website. Google Analytics uses cookies to collect information about website usage, including:

  • The pages you visit
  • The time spent on each page
  • The referring URL (the website that led you to our site)
  • Your geographical location
  • The type of device you use

This information is transmitted to and stored by Google on servers in the United States. Google uses this data to evaluate your use of the website, compile reports on website activity for website operators, and provide other services related to website activity and internet usage.

Legal Basis for Using Google Analytics
The legal basis for using Google Analytics is our legitimate interest in optimizing our website and analyzing user behavior (Art. 6(1)(f) GDPR).

Data Retention and Anonymization
We have implemented IP anonymization on our website, which means that Google truncates your IP address within the European Union or other parties to the Agreement on the European Economic Area before it is transmitted to the U.S. This ensures that your personal data is protected in accordance with GDPR.

You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout

For more information on how Google processes data, please visit Google’s Privacy Policy and Google Analytics Terms of Service.

5. Your Rights

As a data subject, you have the following rights under GDPR:

  • Right to Access: Obtain confirmation of data processing and access your personal data.
  • Right to Rectification: Request correction of inaccurate personal data.
  • Right to Erasure: Request deletion of your data where applicable.
  • Right to Restrict Processing: Request limitation on processing under certain conditions.
  • Right to Data Portability: Receive your data in a machine-readable format, and request its transfer to another controller.
  • Right to Object: Object to processing based on legitimate interests or direct marketing.
  • Right to Withdraw Consent: Where consent has been provided, you can withdraw it at any time with future effect by contacting us via email.

6. Revocation of Consent

Some data processing activities require your explicit consent. You may revoke any consent you have provided at any time by sending an informal email to [email protected]. Data processing activities carried out before the revocation will remain legally valid.

7. Right to Complain

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority. You can find the data protection authority for our registered office here: https://www.bfdi.bund.de/

8. Data Security

To protect your data, we use SSL or TLS encryption on our website. You can identify a secure connection by the “https://” prefix in the address bar and the lock symbol in your browser. SSL/TLS encryption ensures data you transmit cannot be read by unauthorized parties.

9. Third-Party Services and Plugins

Our website utilizes several third-party services, which may process data on our behalf:

  • Google Analytics: We use Google Analytics to gather website usage data for analytics purposes. Google may use cookies to help us understand how visitors interact with our site. You can opt out of Google Analytics by using Google’s opt-out tool.
  • CookieYes: We use CookieYes for cookie consent management, ensuring GDPR compliance.
  • Twitter Feed Plugin: Our website includes a Twitter feed plugin to display recent Twitter posts. Twitter may collect your data if you interact with the feed.

10. Cookies

Our website uses cookies for essential functionality, analytics, and marketing. You can manage your cookie preferences through our CookieYes consent tool or adjust your browser settings to block cookies.

11. Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected or as required by law.

12. Hosting

Our website is hosted by Cloudflare, which provides secure infrastructure and content delivery services. Cloudflare may collect certain data, such as IP addresses, to monitor and ensure website functionality and security. Data is processed in compliance with GDPR and other applicable regulations. Cloudflare’s privacy practices can be reviewed in their Privacy Policy, available on their website.

We take all necessary measures to ensure that our hosting provider complies with GDPR, and we have entered into a Data Processing Agreement (DPA) with Cloudflare to safeguard your data.

13. Contact

For questions or concerns regarding this Privacy Policy or data processing activities, please contact us at: