Privacy Policy

Since we greatly value your privacy, we endeavour to make the collection, use and transfer of your data as transparent as possible. Here, we describe our policy concerning the application, disclosure and collection of certain information, including your personal data and your options. This Privacy Policy informs you how we collect information about you when you use our products or services, or when you contact i-Magazine AG (hereinafter “i-Mag”), for another purpose. We also explain how you can access and update certain information. We have drafted this Privacy Policy according to the requirements of the EU General Data Protection Regulation (GDPR) and the Swiss Federal Data Protection Act (DPA).

In this Privacy Policy, we refer only to the use of YumpuNews and/or YumpuNews+, both products of i-Mag. For queries concerning this Privacy Policy, our use of your personal data, or our cookie guidelines, please email our Data Protection Office at privacy@yumpu.com. If you disagree with this Privacy Policy, we kindly ask you to refrain from accessing or utilising our services, and from interacting with us.

1. Data protection
   1. How do we record your data?
      1. Information you volunteer to us: we collect data about you when you disclose it in our services or otherwise transfer it to us. We collect personal data about you when you register for our service or subscribe to one, make a payment, to prevent or detect fraud, or when you engage with us in any other way, for example via social media, ask for information or help, provide us with feedback, access the media, participate in surveys or use a contact form. The collected data is used for earmarking purposes. If you send us personal data beyond this website, for example via email, we cannot guarantee a secure transfer or that your data will be safe. We recommend that you never transfer any unencrypted confidential data to us via email. By registering, using or subscribing to our service, you approve of the collection of your personal data in accordance with this Privacy Policy. We are also able to access your data via our group or via third parties, with which we do business.
      2. Certain data (usage data) is collected automatically. Most of this data is not person-based. The usage data is collected in that we record how you engage with our products and services.
   2. Types of personal data::

      Category	Data
      Name	First name, surname
      Contact details	Email address*, address, postcode, city, country*, language, phone number
      Receipt	Email address for receipt, transaction date, amount, VAT, subscription period, method of payment (in case of payment by credit card: type of card, expiry date)
      User ID	Profile name*, password*, user/reader ID*
      Electronic ID	IP address*, active sessions
      Personal details	Date of birth, sex
      User-generated content	Date of birth, sex
      Communication	Content of your communication/correspondence with the YumpuNews team
      Data entered by reader	This covers all personal details which the reader can add to the user-defined fields.

      Data required (mandatory field) to enable use of the service is marked “*”.
   3. Transfer of data to third parties: we do not disclose your personal data to third parties, unless you have consented to this or we are authorised or obliged to do so due to legal and/or official or judicial requirements. We partially operate with external providers, who process your data in our name. These are carefully chosen by us and commissioned in writing. They are bound by our instructions and are regularly monitored by us. In doing so, we only transfer your data in connection with data processing. The third party may not use your personal data for his own purposes, and is obliged to protect the latter.
      1. Payment services
         For payment processing, we use the support of payment services. Our payment service providers adhere strongly to PCI DSS requirements. The Payment Card Industry Data Security Standard (PCI DSS) consists of a set of security checks which the companies are obliged to implement to protect credit card data and to comply with the PCI DSS. The requirements were developed by the Payment Card Industry Security Standards Council and are continually updated there. Your account information is transferred to our payment service providers. This occurs with the payment service provider under strict adherence to the contractual agreement in accordance with Art. 28 GDPR. The subscription management tool we utilise is certified according to both the EU-US Privacy Shield agreement and the Swiss-US Privacy Shield agreement. This agreement is designed to provide a higher level of data protection for non-EU companies. Further information can be found at: https://www.privacyshield.gov/welcome
   4. Where do we process the information we collect?
      When we use your data according to the present Privacy Policy, we usually transfer them to our servers in Ireland (EU). We may also process your data outside the European Economic Area (EEA). In this case, we take corresponding measures to protect both your personal data and your rights. By submitting your personal data, you consent to your data also being filed, stored and processed outside of the EEA.
   5. How can you access and update your personal data?
      You reserve the right to access data which we store concerning you. You reserve the right to examine and update your personal data. If you have reason to believe that the personal data we keep concerning you is incorrect, please access your account and examine your data. You may also exercise your right to data portability pursuant to Art. 20 GDPR, to receive your data in a commonly used, machine-readable format. At your request, if this is required for the provision of our service, or if you require help in using it, members of our team may also be allowed access.
   6. Protecting the personal data concerning you: we take great trouble to implement appropriate safety measures to guarantee the security, confidentiality, integrity, availability and resilience of the data disclosed by you. For this reason, we have set up technical and organisational measures (TOM), which are designed to protect the personal data we have received concerning you. Furthermore, we adhere to safety measures specified by applicable data protection regulations. This includes the requirement to safely store, use and release all information you have disclosed to us. We apply measures to protect your data from unauthorised access.
   7. Newsletter
      We deliver two types of newsletter:
      1. The first category includes ideas and tips (information, tips and hints), and product information (new features and updates). You have the option of managing these notifications in your account.
      2. The category of transaction emails includes important information (information about receipts and about chosen payment methods and transactions), which you require for use of our fee-based service. You cannot deactivate these emails.
   8. Application of cookies
      i-Mag utilises cookies – small files with configuration data. They help to identify user-specific settings, and to implement special user functions. For further information on cookies, please go to our cookie guidelines
   9. Children
      If you are under eighteen, you must obtain permission from your parent or guardian. You may then use this service even if you are under eighteen. If we discover that we have collected the personal data of children under eighteen without consent, we take steps to erase the latter. If you are a parent or guardian, and you discover that your child has disclosed personal data to us, please contact us at privacy@yumpu.com.
2. Log files
   YumpuNews collects and stores data automatically in so-called server log files, which your browser transfers as a matter of course. We store the latter for up to a month, after which these are deleted. These are:
   - browser type & version
   - operating system used
   - referrer URL
   - host name of accessing computer
   - time of server inquiry
   - IP address
   This data will not be combined with other data sources. Processing occurs pursuant to point (f) of Art. 6 (1) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. A transfer or sundry use of the data does not take place. However, we reserve the right to subsequently examine the server log files, if there are concrete indications of illegal use.
   1. Geolocation
      To provide you with special services (e.g. automatic preselection of your country-specific value-added tax), this website utilises software developed by MaxMind, Inc. (14 Spring Street, 3rd Floor, Waltham, MA 02451, USA) for geolocation. This software analyses IP addresses, in order to locate your approximate location. Geolocation takes place entirely on the basis of anonymised IP addresses. In this way, an exact determination of the website visitor’s location is ruled out. You may also consult MaxMind’s privacy policy, which is available here: https://www.maxmind.com/en/privacy_policy
   2. Links
      Our website includes links to other websites. As an operator, we are responsible for our own content in accordance with general laws. We take no responsibility for third-party content, recognisable via links provided for your use, and reject ownership of such content. We have no influence on whether the operators of other websites adhere to data protection regulations.
3. Website analytics
   1. Google Analytics
      1. This website uses Google Analytics, a web analysis service of Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). Use occurs in accordance with point (f) of Art. 6 (1) GDPR. Google Analytics utilises cookies, text files which are stored on your computer and which allow Google to analyse your use of the site. The data generated by the cookie about your use of the website, such as the browser type/version, operating system in use, referrer URL (the site visited previously), the host name of the accessing computer (IP address), and the time of the server inquiry, are usually transferred to a Google server in the USA and stored there. The IP address transmitted by your browser in connection with Google Analytics is not combined with other Google data. Also, on this website, we have added the code “anonymizeIP” to Google Analytics. This ensures that your IP address is masked, allowing anonymised collection of all data. In exceptional cases only, the full IP address is transferred to a Google server in the USA and truncated there.
         The anonymisation of IP addresses was developed by Google so that this website can adhere to the valid data protection regulations and recommendations of local data protection authorities, in case the latter do not permit storage of the complete IP address. Anonymisation or masking of the IP address takes place as soon as the IP addresses arrive at Google Analytics’ data collection network, and before storage or processing of the data occurs. You can find more information on IP anonymisation at https://support.google.com/analytics/answer/2763052?hl=de.
         Google uses this information on our behalf to analyse your use of the website, to compile reports on website activity, and to provide us with further services in connection with website and Internet use. You can prevent the storage of cookies by setting your browser accordingly. We remind you that in this case you may not be able to use all features of our website to the full. Furthermore, you can prevent the collection by Google of data generated by the cookie and relating to your use of the website (including the IP address) as well as the processing of this data by Google. To do this, simply download and install the following browser plug-in (http://tools.google.com/dlpage/gaoptout?hl=de). Instead of using a browser add-on, especially with browsers on mobile terminals, you can prevent data collection by Google Analytics (cf. 3.1.3). Please find more information on data protection in connection with Google Analytics in the Google Analytics help (https://support.google.com/analytics/answer/6004245?hl=de).
      2. Google Analytics reports on demographic characteristics and interests: we have, in Google Analytics, turned on the advertising report functions. The reports on demographic characteristics and interests contain information on age, gender and interests. In this way, we can gain a better picture of our users without assigning this data to particular individuals. For more information on advertising functions, please go to https://support.google.com/analytics/answer/3450482?hl=de_AT&utm_id=ad. You can prevent the processing of activities and information of your Google account by ticking a box under “ads settings” at https://adssettings.google.com/authenticated.
      3. Google Analytics deactivation link: you may prevent Google from recording further visits to this website. Please note: by erasing cookies, using the incognito/private mode of your browser, or using another browser, data is collected once more. Deactivate Google Analytics . An opt-out cookie is set, which prevents the future collection of your data when using this website. The opt-out cookie is only valid for this browser, and only for our website. It is stored on your computer. If you erase the cookies in this browser, you will have to re-set your opt-out cookie (more information can be found at: https://developers.google.com/analytics/devguides/collection/gajs/?hl=de#disable).
      4. We have concluded a direct customer contract with Google for the application of Google Analytics, by accepting the “add-on for data processing” in Google Analytics. For more information on the Google Analytics data processing add-on, please go to: https://support.google.com/analytics/answer/3379636?hl=de&utm_id=ad
   2. Alexa Metrics
      On this website, data is collected by Alexa Metrics, a Web analysis service of Alexa Internet Inc. (2730 Gateway Oaks Drive, Suite 100, Sacramento, CA 95833). This data is stored, and user profiles are generated using pseudonyms. These user profiles are used to analyse consumer behaviour, and are assessed for improvements and for a user-friendly design of our website. To this end, cookies may be applied. Opting out of Alexa Measurement Pixel: https://support.alexa.com/hc/en-us/articles/200685410-Opting-Out-of-Alexa-Measurement-Pixel
   3. Visual Website Optimizer (VWO)
      This website utilises the analysis tool Visual Website Optimizer, provided by Wingify (Wingify, 14th Floor, KLJ Tower North, Netaji Subhash Place, Pitam Pura, Delhi 110034, India), to find out more about user behaviour on this site, and to optimise the service for users. Only pseudonymised data is used or stored. If you don’t want Visual Website Optimizer to store data on how you use our website, you may object to its use. By using the opt-out link (https://vwo.com/opt-out/) a cookie is set to block the analysis tool. This opt-out declaration is valid until you erase the cookie. The cookie is set for our website under the named domain, per browser and computer. If you access our website from numerous computers or with various browsers, we recommend you set the opt-out cookie for every computer and browser. You may at any time object to the pseudonymous storage of your visitor data with effect for the future (https://vwo.com/opt-out/).
4. Google Fonts
   1. On our website, we use Google Fonts by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). The use of Google Fonts takes place without authentication, and no cookies are transferred to Google Font API. If you have an account with Google, none of your account data will be transferred to Google during use of Google Fonts. Google merely processes the use of CSS and the corresponding fonts, and stores this data safely. Among the features of Google Fonts is an improved display of fonts, texts, characters and other elements. For more information and further queries, please consult https://developers.google.com/fonts/faq . For information on what data Google collects, and what this data is used for, please go to https://www.google.com/intl/de/policies/privacy/.
5. Advertising
   1. Google Tag Manager (GTM)
      GTM is a solution with which marketers can manage website tags on an interface. The Tool Tag Manager itself (which implements the tags) is a domain without cookies. The tool triggers further tags, which may collect data. Google Tag Manager does not have access to this data. If deactivation has been performed at domain or cookie level, this remains in place for all tracking tags implemented by Google Tag Manager. The IP address transmitted by your browser in connection with Google Tag Manager is not combined with other Google data. We have also made an adjustment in Google Tag Manager for this website so that your data is transmitted anonymously to Google. This ensures that your IP address is masked, allowing anonymised collection of all data. In exceptional cases only, the full IP address is transferred to a Google server in the USA and truncated there.
   2. Application of Google AdWords (remarketing/conversion tracking)
      Our website uses the Google AdWords service. Google AdWords is an online advertising programme from Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
      1. We apply the remarketing function within the Google AdWords service. With the remarketing function, we can present users of our website with adverts based on their interests on other websites within the Google display network (on Google, on Google Ads or on other websites). In doing so, the interaction of users on our website is analysed, such as the offers the user is interested in, so that when users leave our website they can be provided with user-specific advertising on other sites. To achieve this, Google stores a number in the browsers of users who use particular Google services or websites in the Google display network. Via this number (cookie), the visits of these users are registered. This number enables clear identification of a Web browser on a particular computer, and does not identify persons; personal data is not stored.
         1. To find out how to deactivate cookies, please check our cookie guidelines at https://www.yumpu.com/news/cookie-policy. You may deactivate the use of cookies by Google by following the link below, and by downloading and installing the plug-in available there: https://www.google.com/settings/ads/plugin. For more information on Google Remarketing and Google’s Privacy Policy, please go to: http://www.google.com/privacy/ads/ . If you generally prevent us from implementing cookies, i.e. deactivate these in your browser settings, some features and pages may not function as expected.
      2. Within the framework of Google AdWords, we use conversion tracking. If you click an advert placed by Google, a cookie is stored on your computer for conversion tracking. After thirty days, these cookies become invalid and do not contain any personal data, and therefore do not identify persons. The information stored with the help of the conversion cookie is used to collect conversion statistics for AdWords clients who have chosen to use conversion tracking.
         1. To find out how to deactivate cookies, please check our cookie guidelines at: https://www.yumpu.com/news/cookie-policy.
            You may prevent the storage of cookies for conversion tracking by setting your browser software correspondingly, but we must remind you that in this case you will probably be unable to use all features of our website to the full.
         2. Deactivating interest-related advertising
            You may also deactivate interest-related adverts on Google as well as interest-related Google ads on the Web (within the Google display network) in your browser by going to http://www.google.de/settings/ads and activating the Off button or deactivating these via http://www.aboutads.info/choices/. For more information on the relevant settings and data protection at Google, please consult https://www.google.de/intl/de/policies/privacy/?fg=1.
         3. When you deactivate the personalised advertising on the Web, the following applies: the advertising is no longer personalised by Google. You continue to see adverts on the Web, but they are no longer so relevant to you. You can no longer hide advertising. The advertising you see is probably based on the accessed website and on your general location.
   3. We continue to use Google Analytics to analyse double-click cookies and also AdWords for statistical purposes. If you don’t want this to happen, you can deactivate this via the Ads Preferences Manager (https://adssettings.google.com/authenticated?hl=de).
6. Social Media
   1. Social log-in
      To register and log into the YumpuNews account, you have the option of using your existing profile in one of the following social networks: Facebook, Twitter or Google, thus proving your authenticity, after which you can register or log in. For this purpose, you will find a corresponding button on the registration or log-in page as well as the symbols of those operators of social networks which our website supports. Before you can connect up with the operator, you must state that you expressly approve of the transfer of your data and of the procedure described below: by clicking the relevant button, a new window (app) opens, in which you must log into the social network with your log-in data. After you have successfully logged in, the social network informs you what data (name and email address) and profile image are transferred to us for authentication within the framework of the registration or log-in process. Providing you have agreed to this data transfer, the boxes we require for registration are filled with the transferred data. The data we need for registration or for log-in purposes are your name and your email address. Only after you have expressly agreed to the processing of your transferred required data do we store the latter and use it. In order to implement the authentication process for registration or logging in, your IP address is transferred to the corresponding social network operator. We have no influence on the purpose and scope of data collection, or on the further processing of the data by the corresponding social network operator. For further information, please read the privacy policy of the corresponding social network (Facebook cf. 5.2.3, Google+ cf. 5.2.5, and Twitter cf. 5.2.4).
   2. Facebook data protection notice
      On this website, we use functions by Facebook, a social media network of Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). facebook.com is operated by Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA). To see which functions (social plug-ins) Facebook provides, please read https://developers.facebook.com/docs/plugins/. When visiting our website, information may be transferred to Facebook. If you have a Facebook account, the latter can assign this data to your personal account. As a page host, we remind you that we receive no information on the content of transmitted data or on Facebook’s use of it. If you disapprove of this, please log out of your Facebook account. For data protection guidelines, showing what information Facebook collects and how it uses the latter, please consult https://www.facebook.com/policy.php .
   3. Google data protection notice
      On our website, we use features from Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). To make full use of the available features, you require a Google account. Even when using the Sign-In button without a Google account, data is transferred to Google. If you are signed in to your Google account whilst using the aforementioned functions, depending on your settings on https://plus.google.com/settings/ your data will be published worldwide and collected and analysed by Google. You can find out what data Google collects, and what this data is used for, at https://www.google.com/intl/de/policies/privacy/.
7. Communication
   We communicate with our readers via email. If you have queries, we can offer help at short notice via email. Please contact the YumpuNews team under support(at)yumpu.com.
   1. Facebook integration
      We transfer your private Facebook messages to our @yumpucom Facebook page to our Intercom inbox. In this way, we log all our reader correspondence in one place. This means the conversations in Intercom are shared with Facebook. You receive our answer directly in your Facebook message inbox. Please find Facebook’s terms of use at https://www.facebook.com/legal/terms.
   2. Twitter integration
      We transfer your Twitter direct messages to our @yumpu_com Twitter page to our Intercom inbox. In this way, we log all our reader correspondence in one place. This means the conversations in Intercom are shared with Twitter. You receive our answer directly in your Twitter message inbox. Here you can find the General Terms & Conditions https://twitter.com/de/tos or Twitter’s privacy policy https://twitter.com/de/privacy .
8. Privacy Policy updates
   We reserve the right to update or adjust this Privacy Policy from time to time. We may decide to for example collect further data or process it for other purposes than those mentioned in our Privacy Policy. We give you appropriate prior notice of any changes, for example by placing a notice in our service or by emailing you.
9. Your rights
   You have a fundamental right to access, rectification, erasure and ‘being forgotten’, restriction, portability, withdrawal and objection. If you believe that the processing of your data does not comply with data protection legislation or your data protection rights are otherwise violated, you may lodge a complaint with the supervisory authority. You of course have the right to lodge a complaint with your local supervisory authority or at our company headquarters in Diepoldsau. However, we ask you to first make contact with us. In this way, any misunderstanding or problems can be quickly and safely resolved.
   1. Data protection officer
      i-Magazine AG (Gewerbestrasse 3, 9444 Diepoldsau)
      Email: privacy@yumpu.com