PRIVACY POLICY

1. Name and contact details of the data protection officer and the data protection representative
   We,
   
   United Kiosk AG
   CAS-Weg 1-5
   76131 Karlsruhe
   Germany
   
   Telephone 0721-9638-522
   Fax
   Email info@united-kiosk.de
   
   (hereinafter also referred to as "we").
   
   Our data protection officer is
   
   Mr Thomas Heimhalt
   DATENSCHUTZ perfect e.K.
   
   Emaildatenschutz@united-kiosk.de
2. Visiting our website
   
   1. Data collected
      
      When you visit our website, we temporarily collect and store the following information, which may be personal data, that your browser transmits to our server:
      
      – IP address
      – Date and time of the request
      – Execution time of the request
      – Time zone difference from Greenwich Mean Time (GMT)
      – Content of the request (specific page)
      – Access status/HTTP status code
      – Amount of data transferred in each case
      – Website from which the request originates
      – Browser
      – Operating system and its interface
      – Language and version of the browser software.
      
      This data is technically necessary to display the website to you and to ensure stability and security, in particular to detect and prevent attacks or abusive access. We delete the log files containing this data after seven days, unless otherwise specified in this privacy policy.
      
      The legal basis for this is Art. 6 (1) sentence 1 lit. f) GDPR (safeguarding legitimate interests, unless the interests of the data subject prevail), and in the case of an intended or completed order, Art. 6 (1) sentence 1 lit. b) GDPR (implementation of pre-contractual measures and contract fulfilment).
   2. Use of cookies and analysis tools
      
      
      
      We only use cookies and tools that are absolutely necessary to make the website and its functions available and whose use is expressly requested by the user.
      
      The legal basis for this is Section 25 (2) TDDDG and Art. 6 (1) sentence 1 lit. f) GDPR (safeguarding legitimate interests, unless the interests of the data subject prevail), and in the case of an intended or completed order, Art. 6 (1) sentence 1 lit. b) GDPR (implementation of pre-contractual measures and fulfilment of the contract).
   3. Integration of the Trusted Shops Trustbadge
      
      We integrate the Trusted Shops Trustbadge to display our Trusted Shops seal of approval and any reviews collected, as well as to offer Trusted Shops products to buyers after they have placed an order.
      
      This serves to safeguard our legitimate interests in optimal marketing by enabling secure shopping in accordance with Art. 6 (1) sentence 1 lit. f) GDPR, which prevail in the context of a balancing of interests. The Trustbadge and the services advertised with it are offered by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. The Trustbadge is provided as part of order processing by a CDN (content delivery network) provider. Trusted Shops GmbH also uses service providers from the USA. An adequacy decision applies in the USA for all companies registered for the EU-U.S. Data Privacy Framework (DPF). In this case, the transfer of data is possible without further guarantees. If processing takes place in a third country without an adequacy decision or at a US company that is not registered for the DPF, Trusted Shop agrees on standard contractual clauses with the data recipient to ensure an adequate level of data protection. Where possible and necessary, Trusted Shop also agrees on additional measures. Further information on data protection at Trusted Shops GmbH can be found in their privacy policy.
      
      When the Trustbadge is called up, the web server automatically stores a so-called server log file, which also contains your IP address, date and time of access, amount of data transferred and the requesting provider (access data) and documents the access. Individual access data is stored in a security database for the analysis of security incidents. The log files are automatically deleted no later than 90 days after creation.
      
      Further personal data is transferred to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or if you have already registered to use them. The contractual agreement between you and Trusted Shops applies. For this purpose, personal data is automatically collected from the order data. Whether you as a buyer are already registered to use a product is automatically checked using a neutral parameter, the email address hashed by a cryptological one-way function. Before transmission, the email address is converted into this hash value, which cannot be decrypted by Trusted Shops . After checking for a match, the parameter is automatically deleted.
      
      This is necessary for the fulfilment of our and Trusted Shops' overriding legitimate interests in providing buyer protection linked to the specific order and transactional evaluation services in accordance with Art. 6 (1) (f) GDPR. Further details, including information on how to object, can be found in the Trusted Shops privacy policy linked above and in the Trustbadge.
3. Purchase and use of our apps
   
   1. When you download our app from an app store, personal data is regularly collected and used by the app store operator. The operator is responsible for data protection in this regard. Please therefore note the data protection information in the app store.
   2. When you launch one of our apps, we download some device-dependent information to enable you to use the app, including an ID to make your in-app purchases available to you in the app's "library" and the type/name of your mobile device for device management.
   3. In addition, you have the option of registering in the app with your email address in order to synchronise your purchases of digital content across devices as a registered user, read such digital content across devices, and take advantage of Trusted Shops buyer protection. If you already have an account with United Kiosk, you can also log in to the app with your personal password.
   4. If you have activated the iCloud service in the settings on your Apple device, our apps check whether the feature has been activated when they start up and store your email address as an app-related setting in your iCloud account, provided you have previously entered it under "My Account" in the app menu. Your library is then loaded and displayed via this email address. This feature allows you to use the app with the same settings on multiple devices using the same Apple ID without having to re-enter them. This synchronisation is based on a service provided by Apple within the iCloud service; you can disable synchronisation at any time in your iOS settings at the app level.
   5. The legal basis for the aforementioned data processing is Art. 6 (1) sentence 1 lit. f) GDPR (protection of legitimate interests, unless the interests of the data subject prevail) and, in the case of an intended or completed registration and/or order, Art. 6 (1) sentence 1 lit. b) GDPR (performance of pre-contractual measures and fulfilment of the contract).
   6. Unless otherwise stated, the provisions of this privacy policy also apply to the use of our apps.
4. Orders, contract fulfilment, registration and customer enquiries
   
   1. Orders placed with us
      
      When you order products from us via the online shop on our website or via our apps, we collect the information requested in the respective order form as mandatory ("order data"). This order data includes:
      
      • First and last name
      • E-mail address
      • Address (when ordering print products; for digital products, only when paying by SEPA direct debit or on account)
      • Account holder and IBAN/BIC (when paying by bank transfer or SEPA direct debit)
      
      We use the order data to process your order and conclude and fulfil the contract and to handle any contractual claims or obligations. The legal basis for this is Art. 6 (1) sentence 1 lit. b) GDPR (implementation of pre-contractual measures and contract fulfilment).
      For tax-compliant invoicing, we also collect and use information about whether you are ordering as a consumer or as a business and where your place of residence or habitual abode is located; relevant information in this regard includes, for example, your VAT identification number and your IP address. The legal basis for this is Art. 6 (1) sentence 1 lit. b) GDPR (implementation of pre-contractual measures and contract fulfilment) and Art. 6 (1) sentence 1 lit. c) GDPR (fulfilment of legal obligations).
   2. Orders from third parties
      
      If contracts concluded via our online shop or our apps in accordance with the declarations made during the ordering process and our General Terms and Conditions, as well as any third-party terms and conditions that may be included, are not concluded with us but with third parties (e.g. directly with publishers for certain magazine subscriptions or other offers) at , we will forward the personal data you provided when placing your order, which is necessary for the conclusion and fulfilment of the contract, to the respective third party specified in the order process for this purpose. If the specified third party (e.g. the publisher in the case of certain magazine subscriptions or other offers) has commissioned a service provider to conclude the contracts on its behalf and/or to process a subscription order, we will inform you of this during the ordering process and also forward your specified data to this service provider for this purpose. The legal basis for this is Art. 6 (1) sentence 1 lit. b) GDPR (implementation of pre-contractual measures and contract fulfilment).
      Please also note the information under Section 6 lit. e) regarding email advertising that may be sent by third parties in the event that a contract is concluded with third parties via our online shop or our apps.
      
      A list of publishers to whom your data will be forwarded if you order a product from that publisher can be found here.
   3. Ordering a free ePaper
      
      If you order a free ePaper from our shop, we will forward your email address to the relevant publisher from whom the ePaper originates with your consent. With your consent, the publisher may inform you about its editorial offerings and send you offers to your email address. Details about the respective publisher will be provided during the ordering process. These can also be found in the privacy policy of the respective publisher, whose address will be provided during the ordering process and in every email sent by this publisher.
      
      The legal basis for this is your consent to the transfer of your email address and to advertising in accordance with Art. 6 (1) (a) GDPR and § 7 (2) No. 3 UWG (German Unfair Competition Act). You can revoke your consent at any time with effect for the future. This can be done by clicking on this unsubscribe link or by clicking on the unsubscribe link at the end of each advertising email from the publisher.
   4. Orders for delivery to third parties (e.g. gift subscriptions)
      
      If, at your request, we are to deliver an ordered product to a third party named by you or make it available for download to a third party named by you (e.g. in the case of gift subscriptions), we will also use the personal data of the named third party provided by you for the above-mentioned purposes. In such cases, please ensure that you do not provide the third party's data against their will and that the provision of such data does not conflict with any overriding interests of the third party ( ). The legal basis for this is Art. 6 (1) (b) GDPR (implementation of pre-contractual measures and fulfilment of the contract).
   5. Mere provision of products by us that you have purchased from third parties
      
      If, on the basis of a separate agreement with a third party, e.g. a publisher, or on the basis of a voucher issued by a third party, digital content is provided via our online shop solely on behalf of the third party, we will process the email address you have provided for this purpose. This is necessary to enable the provision of the content from a technical point of view. The legal basis for this processing is Art. 6 para. 1 lit. b) GDPR (implementation of pre-contractual measures and contract fulfilment).
   6. Setting up a user account when ordering digital content; library function
      
      When you order digital content (e.g. ePaper or eAbo) for the first time, we will send you an activation link to the email address provided during the order process and set up a personal user account for you. You must log in there with your email address and a personal password in order to download the digital content. In accordance with our terms and conditions, this also gives you access to a library function (hereinafter referred to as "library") where you can read the digital content online even after downloading it, view your order history and manage any existing subscriptions. You may also see notifications about interesting offers there.
      
      When logging into your user account, you can voluntarily provide additional personal information beyond the details already provided when placing your order, e.g. your name and title so that we can address you personally, or your reading interests so that we can take these into account when providing information about interesting offers. If you order further products while you are logged in to your user account, our system will recognise you as a registered customer and allow you to access your existing order data. You can update the data stored in your user account, manage your advertising settings and change or reset your reading interests in your profile.
      
      We use your personal data in the manner described here within the scope of the user account and the library function for as long as the registration exists. You can terminate an existing registration at any time by sending a corresponding declaration, e.g. by email to our email address mentioned in section 2 above.
      The legal basis for the aforementioned data processing is Art. 6 (1) (b) GDPR (implementation of pre-contractual measures and contract fulfilment) and Art. 6 (1) sentence 1 (f) GDPR (protection of legitimate interests, unless the interests of the data subject prevail).
   7. Notification of new issues within the scope of existing e-subscriptions
      
      Within the scope of existing subscription contracts for the purchase of digital press products, we may inform you by email to the email address provided when ordering about available new digital issues of the subscribed press product. The legal basis for this is Art. 6 (1) sentence 1 lit. f) GDPR (safeguarding legitimate interests, provided that the interests of the data subject do not prevail) and § 7 (3) UWG (German Unfair Competition Act). You can object to this notification at any time with effect for the future.
   8. Use of flat-rate subscription offers
      
      If we offer digital newspaper or magazine editions for online reading or downloading as part of a flat-rate subscription offer for a flat fee, we collect and use information on the extent of use of this service, in particular the number of digital newspaper or magazine editions read and/or downloaded online in certain periods of time or the number of pages of such editions. This information is used for the purpose of billing the publishers for the pro-rata remuneration agreed for this use and is communicated to the publishers in anonymised form in sales reports for billing purposes. The legal basis for this is Art. 6 (1) (b) GDPR (implementation of pre-contractual measures and contract fulfilment).
      We also use this information to inform you about interesting offers when you log in as a registered customer when visiting our website or visit your library (see lit. f) above).
      
      When you use a flat-rate subscription offer, we also contact you by e-mail to send you information about the flat-rate subscription you have booked, e.g. information about changes to the content of the subscription, such as new magazines and issues, or improved functions of the user account or its legal framework. The selection and sending of subscription benefits in this context is carried out for the purpose of fulfilling the subscription contract in accordance with your interests. The legal basis for data processing in this respect is Art. 6 (1) lit. f) GDPR. Our legitimate interest lies in the customer-friendly design of our flat-rate subscription offers. The sending of contractual communications in this context is carried out in implementation of the subscription contract on the basis of Art. 6 (1) lit. b) GDPR.
   9. Payment via PayPal
      
      If you choose to use the payment services of PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg) , you will be redirected to the PayPal website. Regardless of this, we only transmit information about the products in your shopping basket and their prices, as well as order and order numbers, to PayPal.
      
      After PayPal has carried out a risk assessment, we only receive information from PayPal as to whether the order has been accepted or (if necessary, after manual verification by PayPal) rejected for further order processing. Please note PayPal's privacy policy, which can be found here.
      
      In order to enable payment via PayPal, we use technically necessary cookies. An overview, including the duration of storage, can be found here. The legal basis is Section 25 (2) TDDDG and Art. 6 (1) lit. f) GDPR.
      
      When processing the payment, PayPal transmits your first and last name and your address, including your email address, as you have provided it to PayPal. We use this data for invoicing and, if applicable, for delivering the product to you.
      Unless otherwise stated above, the legal basis for this use of data is Art. 6 (1) sentence 1 lit. b) GDPR (contract performance) and Art. 6 (1) sentence 1 lit. f) GDPR (legitimate interest in efficient and secure payment processing). Please also note PayPal's privacy policy in this regard.
   10. Storage of contract text and order confirmation
       
       In accordance with legal requirements, we store the contract text and send you the data by email. For security reasons, your order data is not accessible to you as the customer via the internet. The legal basis for this is Art. 6 (1) sentence 1 lit. b) GDPR (contract fulfilment) and Art. 6 (1) sentence 1 lit. c) GDPR (fulfilment of legal requirements).
   11. Customer enquiries
       
       If you simply contact us with questions and provide us with personal data in the process, we will use this data exclusively to answer your question.
   12. Channel on We.Network
       
       We maintain a publicly accessible channel on the We.Network social media platform. Your visit to this channel triggers a number of data processing operations. Below, we provide an overview of which of your personal data we collect, use and store when you visit our channel on We.Network.
       
       You are not obliged to provide us with your personal data on . However, this may be necessary for individual functions of our channel on We.Network. These functions will not be available to you, or will only be available to a limited extent, if you do not provide us with your personal data.
       
       When you visit our channel, your personal data is collected, used and stored not only by us, but also by the platform operator of We.Network. This also happens if you do not have a profile on We.Network yourself. For details on the collection and storage of your personal data and the nature, scope and purpose of its use by the We.Network platform operator, please refer to the platform operator's privacy policy at Privacy Policy | We.Network.
       
       As the owner of a channel, we can only view the information stored in your public profile, and only if you have such a profile and are logged in to it while visiting our channel.
       
       If you use our channel on We.Network to contact us (e.g. by creating your own posts, responding to one of our posts or sending us private messages), we will process the data you provide to us exclusively for the purpose of contacting you. If you send us a private message regarding existing contractual relationships, e.g. cancellations or changes of address, or regarding the conclusion of a contract, we will ask you to contact us by email so that we can clearly identify you as a customer. Only correspondence regarding general matters will be conducted directly via private messages to our channel on We.Network.
       
       The legal basis for data collection is therefore Art. 6 (1) (a) and (b) GDPR.
       
       We delete stored data from your private messages to the channel 30 days after the end of the conversation, as soon as their storage is no longer necessary or you request us to delete them; in the case of legal retention obligations, we restrict the processing of the stored data accordingly. Your public posts and comments are generally stored until you request us to delete them or there is a legal obligation to delete them.
       
       Otherwise, we do not transfer your personal data to the platform operator of We.Network or to other third parties.
5. Sending our newsletter by e-mail
   
   1. We will send you our newsletter by e-mail if you give us your consent via the input mask provided. In the newsletter, you will receive interesting information about the products and services we offer.
   2. We use the double opt-in procedure for consent to receive the newsletter. After you register, we will send an email to the email address you provided asking you to confirm that you consent to receiving the newsletter. If you do not confirm your registration within 24 hours, we will delete the information you provided when ordering the newsletter, unless you have already provided us with this information in another way for other purposes (e.g. to contact you to answer questions or in the context of contracts to be fulfilled) and we are still permitted to use the information for these other purposes. In addition, we store your IP addresses and the times of registration and confirmation so that we can verify your registration and, if necessary, investigate any possible misuse of your personal data.
   3. The only mandatory information required for sending the newsletter is your email address. The separately marked field for your name is voluntary and is only used to address you personally in the newsletter.
   4. After your confirmation, we will store your email address for the purpose of sending you the newsletter.
   5. You can revoke your consent to receive the newsletter at any time with future effect and unsubscribe from the newsletter, e.g. by clicking on the link provided in the newsletter, by sending an email to our email address given above in section 1, or by sending a message to the contact details given in our legal notice.
   6. The legal basis for the aforementioned processing is Art. 6 para. 1 sentence 1 lit. a GDPR (consent).
6. Other advertising by email to existing customers
   
   1. According to Section 7 (3) UWG, advertising by email is also permitted without prior consent in exceptional cases. This applies if you are already a customer of ours, e.g. if you have purchased one of our products or taken out a subscription with us. In this case, we may send advertising and interesting news to the email address you provided when purchasing one of our products, provided that the advertising relates to our own similar products and you have not objected to this. We will also inform you of this, in particular of your right to object at any time, when you enter your email address.
   2. We reserve the right to make use of this option. We may therefore send advertising about interesting similar offers to the email address you provided when ordering a product from.
   3. You can object to this at any time. You will not incur any costs for objecting other than the transmission costs according to the basic rates.
   4. The legal basis for email advertising under this section 6 is Section 7 (3) UWG and Art. 6 (1) (f) GDPR.
   5. If a contract is concluded via our online shop or our apps not with us but with a third party, this third party may also send you advertising for its own similar offers to the email address provided to it when the order was placed, in accordance with Section 7 (3) UWG and Art. 6 (1) (f) GDPR. You can also object to this at any time by contacting the third party. You will not incur any costs other than the transmission costs according to the basic rates for such an objection.
7. Information about your favourites
   
   If you have given your consent, we will use your email address and your first and last name to send you information by email about the magazines you have marked as "favourites" and other magazines similar to your favourites. You can withdraw your consent at any time in your customer account under "Advertising settings" by deleting the magazine from your favourites. Alternatively, you can also easily revoke your consent by sending an email to info@united-kiosk.de. The legal basis for processing is Art. 6 (1) (a) GDPR.
8. Transfer of data to third partie
   
   1. We may disclose personal data to third parties within the scope of the purposes specified in this privacy policy, e.g. to publishers, distribution partners, payment service providers or providers of quality seals and related services such as Trusted Shops, and, where applicable, to tax advisors, our lawyers or authorities. In some cases, we also commission processors to process personal data on our behalf and in accordance with our instructions, e.g. in the context of technical services and the operation of our IT infrastructure. These have been carefully selected by us in accordance with data protection regulations and are bound by our instructions on the basis of contractual agreements on order processing and are obliged to process data confidentially and in compliance with data protection regulations.
   2. We only pass on personal data to third parties if we are entitled or obliged to do so on the basis of legal provisions and/or official or court orders, or if you have given your prior consent to such disclosure.
9. Revocation of consent and objection to data processing
   
   1. If the processing of personal data is based on consent, you can revoke your consent at any time with future effect in accordance with Art. 7 (3) GDPR. If you have permitted the use of data by third parties in the revoked consent, we will inform the respective third parties of the revocation in the event of revocation.
   2. If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) sentence 1 lit. f GDPR, you may object to this at any time with effect for the future, provided that there are reasons for this arising from your particular situation. You can send your objection to our contact details given above in section 1. Please state the reason for your objection.
10. Duration of processing
    
    Unless otherwise stated in this privacy policy, we delete the data once it is no longer required for the specified processing purpose. If statutory retention obligations prevent deletion or if we need the data to pursue or defend legal claims or to fulfil legal obligations, we will restrict its use in accordance with these purposes.
11. Your rights as a data subject
    
    1. In accordance with the relevant data protection regulations, you have the right, under the respective legal requirements, with regard to the personal data concerning you, to
       
       - pursuant to Art. 15 GDPR, to request information about your personal data processed by us,
       
       - pursuant to Art. 16 GDPR, to request the immediate correction of inaccurate or incomplete personal data stored by us,
       
       - pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims,
       
       - to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, unless the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to have it deleted and we no longer need the data, but you need it to assert, exercise or defend legal claims, or you have objected to the processing pursuant to Art. 21 GDPR, and
       
       - pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transfer to another controller, provided that the processing is carried out using automated procedures and is based on consent pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR.
       
       There are no costs for exercising these rights.
    2. You also have the right to lodge a complaint with a data protection supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or our company headquarters for this purpose. Of course, you can also contact us directly with any questions, criticism or complaints.

United Kiosk AG, Karlsruhe (as at: 23.10.2025)