Wenn Sie die Nachrichten-App der Süddeutschen Zeitung nutzen, indem Sie nach dem Öffnen der App einen Vertrag mit Werbung abschließen bzw. abgeschlossen haben, verarbeitet die Süddeutsche Zeitung GmbH Ihre personenbezogenen Daten. Mit diesen Datenschutzhinweisen informieren wir Sie, wie und warum wir Ihre Daten verarbeiten und wie wir gewährleisten, dass sie vertraulich bleiben und geschützt sind.
Wenn Sie die Nachrichten-App als SZ Plus-Abonnent nutzen, finden Sie die in diesem Fall geltenden Datenschutzhinweise unter diesem Link: https://www.datenschutz.swmh.de/sz-nachrichtenapps.
Ihr Endgerät übermittelt bei der Nutzung des Service aus technischen Gründen automatisch Daten an unseren Webserver. Es handelt sich dabei unter anderem um
Die Daten, die beim Herunterladen bzw. Aufrufen der Services anfallen, erheben wir automatisiert. Wir erfassen und speichern zudem die Informationen, die Sie eingeben oder uns in anderer Weise übermitteln, sowie durch den Einsatz von Cookies und ähnlichen Technologien.
To fulfill the contract through advertising
In order to provide our journalistic content alongside usage analytics, product optimization, personalized content, marketing for our products, and third-party advertising (AIB), we process the personal data you provide in exchange for the contract through advertising for the purpose of fulfilling the contract (Art. 6(1)(b) GDPR) for the following purposes:
Provision of content:
Product optimisation:
Personalisierte Inhalte und Marketing
Advertising by third parties (IAB)
To provide you with additional services
If you use the following SZ services—which are no longer covered by the advertising agreement—data processing takes place on the legal grounds specified in the respective description:
In order to use our digital services, it may be necessary to transfer certain personal data to third countries, i.e. countries where the GDPR does not apply. However, we only allow your data to be processed in a third country if the specific requirements of Art. 44 ff. GDPR are met and thus an adequate level of data protection is guaranteed in that country. This means that the third country must either have an adequacy decision by the European Commission or suitable safeguards in accordance with Art. 46 GDPR or one of the conditions of Art. 49 GDPR. Unless otherwise stated below, we use the currently valid [standard contractual clauses](https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/? uri=CELEX:32021D0914&from=DE “current version of the standard contractual clauses”) for the transfer of personal data to processors in third countries.
In order to protect your privacy and ensure a level of protection appropriate to the risk, we take technical and organizational measures in accordance with legal requirements, taking into account the state of the art, implementation costs, and the nature, scope, circumstances, and purposes of processing, as well as the varying likelihood and severity of threats to the rights and freedoms of natural persons. These measures ensure the confidentiality, integrity, availability, and resilience of your data. This includes, among other things, the use of recognized encryption methods (SSL or TLS) and pseudonymization.
However, we would like to point out that, due to the structure of the Internet, it is possible that the rules of data protection and the above-mentioned security measures may not be observed by other persons or institutions outside our area of responsibility. In particular, unencrypted data disclosed, e.g., by email, may be read by third parties. We have no technical influence on this.
You can contact the data protection officer with your request by mail or by email at swmh-datenschutz@atarax.de.
This privacy policy is updated from time to time. The date of the last update can be found at the beginning of this information.
In the cookie policy, which you can access in the footer of the website under “Contract with advertising” via the “Cookie policy” link, you will find information about the cookies and similar technologies we use, as well as about the third parties authorised for advertising.
You will find detailed data protection information below.
We use cookies and similar technologies in order to provide you with an optimal experience and to finance our services, i.e. cookies, device identifiers, or other personal data are stored or accessed on your device. This data processing is carried out for the performance of the contract on the basis of the contract with advertising concluded with you (Article 6 (1) sentence 1 (b) GDPR).
In order to be able to provide the telemedia service expressly requested by you, we also take into account the provisions of Section 25 TDDDG and, in particular, the requirement of strict necessity under Section 25 (2) no. 2 TDDDG.
When our offer is used, we automatically employ essential technologies and process the following information:
The collection of these logs and their temporary storage and processing are necessary to ensure system security and integrity (in particular to ward off and defend against attempts at attack or damage) and are carried out in accordance with our legitimate interest (§ 25 (2) No. 2 TDDDG, Art. 6 (1) f GDPR).
The storage period for this log data is usually seven days; for reliable detection of AI bots, it is 30 days. From this point on, this specific server log data is anonymized based on our legitimate interest in statistical evaluation to assess AI bots and their impact on our content (Art. 6 (1) f GDPR).
Account takeover for troubleshooting
If you contact us about an error in the operation of our digital service, we can take over your SZ account for a short time to identify and rectify the error so that we can trace the error and rectify it more quickly. This is only necessary for a few minutes in order to obtain information about the version, operating system, etc.
The legal basis for the aforementioned data processing is Art. 6 para. 1 lit. b) GDPR.
The following tools and cookies are strictly necessary technologies, i.e., essential for providing our services as requested by the user.
The legal basis for the data processing activities described below is Article 6 (1) sentence 1 (b) GDPR.
We have introduced a payment model for our online content, i.e. the content of our websites and apps is only made available for a fee. On the one hand, the conclusion of a contract is required for use, whereby the user has the choice of either paying a sum of money for a digital subscription or providing data. On the other hand, our paid content model provides that initially selected content or a certain number of articles can be accessed without prior conclusion of a subscription (so-called metering model) and then the content is restricted and only made available against payment of a sum of money or conclusion of a paid subscription. In addition, access to individual, exclusive "Plus" articles is only granted to subscribers.
The setting of cookies is absolutely necessary for this function, as otherwise it would not be possible for paying customers to access paid journalistic content.
If you have registered with us via Login, these reading authorisations will be linked to the personal data in your user account.
We use Datawrapper (Datawrapper GmbH, Raumerstraße 39, 10437 Berlin) to create interactive charts from statistics. We do not store any personal data and do not perform any tracking. The transfer of the IP address, which is used solely for the provision of the service, and a cookie are essential for embedding and display. This data is only required for the technical implementation of the embedding and is deleted from all systems after a maximum of 24 hours.
Firebase Crash Reporting dient der Stabilität und Verbesserung der App. Dabei werden Informationen über das verwendete Geräte und die Nutzung unserer App gesammelt (beispielsweise der Zeitstempel, wann die App gestartet wurde und wann der Absturz aufgetreten ist), die es uns ermöglichen, Probleme zu diagnostizieren und zu lösen. Hier finden Sie Informationen rund um die Funktionsweise von Crashlytics.
In order to obtain and store your consent under data protection law, we use the consent management platform from Sourcepoint (Sourcepoint Technologies, Inc., 228 Park Avenue South, #87903, New York, NY 10003-1502, United States). This platform uses strictly necessary cookies to query the consent status and thus display the corresponding content.
The data is stored for a maximum of 13 months.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| consentUUID | UniqueUserID to store the user's consent status | 12 months | Cookie |
| _sp_su | Identification of users for sampling consent rates reporting | 12 months | Cookie |
| _sp_user_consent | UniqueUserID to retrieve the user's consent status stored in our database if necessary | Unlimited | Local storage |
| _sp_local_state | Determines whether a user has seen the consent banner so that it is only shown once | unlimited | local storage |
| _sp_non_keyed_local_state | Information about the metadata and the user's UniqueUserID | unlimited | local storage |
In order to display the adverts on our digital offers in the correct size and in a format supported by your device and to be able to redirect you to the corresponding target page when you click on the advert, we, our advertising marketers and the respective third-party provider process your IP address and information about your device type. This is an absolutely necessary technology, which is shown in the data protection settings under the special category "Provide adverts or content technically".
| Name | Purpose | AdServer | Type |
|---|---|---|---|
| adnxs | Deliver ads | Xandr | Cookie |
| szdm_uxid | Deliver ads | AdSpirit | Cookie |
We use embeds, i.e. embedded content, in order to offer you interesting content. The respective embedding is carried out using the technical process known as framing. In framing, the simple insertion of a provided HTML link into the code of a website creates a playback frame on our pages, thereby enabling the content stored on the servers of the third-party platform to be played.
This third-party content is displayed to you for the performance of the contract on the basis of the contract with advertising concluded with you (Article 6 (1) sentence 1 (b) GDPR).
Some of this content originates from social networks or other companies, including those based in the USA. By embedding their content, cookies and similar technologies may be used by these providers and data may be transmitted to them, possibly also to the USA (e.g. your IP address, browser information, cookie ID, pixel ID, page accessed, date and time of access). Details of the embedded content of the individual networks or these companies, which are stored on their servers and for the provision of which your IP address is transmitted to these companies, as well as of the data processing operations carried out by these companies, which may also include advertising purposes, can be found in the following sections.
We use software from our service providers tickaroo (Tickaroo GmbH, Waffnergasse 8, 93047 Regensburg) and Heim:spiel (HEIM:SPIEL Medien GmbH & Co. KG, Am Stadtgraben 48, 48143 Münster) for our live reporting. Your browser calls up the online news ticker directly from the servers of the service providers. Your IP address, date, time and URL of all accesses are stored for a maximum of four weeks. Tickaroo creates anonymised access statistics; it is no longer possible to assign them to individual users. For the statistics, a random token is generated in the browser, stored as a cookie and sent with every ticker call.
The storage of and access to information in your device is absolutely necessary and is carried out in accordance with Section 25 (2) TDDDG.
The legal basis for the aforementioned data processing is Art. 6 para. 1 lit. b) GDPR.
Mit dem Ausspielen und Anzeigen von Podcasts und Videos haben wir Dienstleister beauftragt, die in unserem Auftrag und nach unserer Weisung ihre Dienste und Tools in unsere digitalen Angebote einbinden. Dabei werden die IP-Adresse und Geräteinformationen für das technische Bereitstellen dieser Dienste sowie das Erheben statistischer Daten wie beispielsweise von Abrufzahlen verarbeitet. Diese Daten werden vor der Speicherung in der Datenbank anonymisiert oder pseudonymisiert, sofern sie für die Bereitstellung der Podcasts nicht erforderlich sind.
The legal basis for the aforementioned data processing is Art. 6 para. 1 lit. b) GDPR.
If advertising and advertisements from third parties are played in the podcasts, this likewise takes place for the performance of the contract.
Our digital services offer you the option of accessing digital puzzles directly from our services. For this purpose, your IP address is transmitted to the puzzle server of our service provider and stored in a system log file. We also save your score. The IP addresses are deleted after 10 days.
The legal basis for the aforementioned data processing is Art. 6 para. 1 lit. b) GDPR.
You have the option of recommending content on our websites via the buttons placed on the content; on mobile devices via the native sharing function. We provide the social networks with content - and no personal data - that is used exclusively to display content. If you use the buttons, we merely link to the page of the respective social media provider. We do not process any of your personal data.
We use cookies and tracking tools to optimize our digital offerings based on your usage. To do this, we measure the development of reach and the use of content and functions, and use A/B testing to determine which variants users prefer.
The legal basis for the aforementioned data processing is Art. 6 para. 1 lit. b) GDPR.
We want to continuously develop and improve our products. To do this, we need to analyze usage. This serves to evaluate visitor traffic to our digital offerings and may include behavior, interests, or demographic information about visitors, such as age or gender, as pseudonymous values. With its help, we can see, for example, when our digital offerings are used most frequently or which functions are popular. This enables us to identify areas that need optimization.
In addition to usage analysis, we also use testing procedures to test different versions of our digital offerings or their components, for example, and to increase certain user actions or reactions if necessary.
For these purposes, profiles, i.e., data summarized for a usage process, are created and information is stored in a browser or on a terminal device and read from it. The information collected includes, in particular, websites visited and elements used there, as well as technical information such as the browser used, the computer system used, and information on usage times.
The IP addresses of users are also stored. We use an IP masking procedure (i.e., pseudonymization by shortening the IP address) for your protection. In general, no clear data of users (such as email addresses or names) is stored in the context of web analysis, A/B testing, and optimization, but rather pseudonyms, so that neither we nor the providers of the software used, who act as processors for us, know the actual identity of the users.
To analyse the performance of our articles live, we use the analysis script from Kilkaya (Kilkaya AS, Åsveien 3, 1424 Ski, Norway). Kilkaya is an analysis tool that was specially developed for news sites with high traffic and helps us to optimise and prioritise our pages and articles. Kilkaya captures all traffic metrics in real time, such as page views, clicks, time spent on pages, unique users. The tool uses the IP address to establish the connection to the server and to be able to function technically. We use a user ID to count unique users. No further data is linked to this, so that you cannot be personally identified.
In order to analyse how our digital services are used and how frequently each individual user reads us, we store cookies in your browser. This enables us, on the one hand, to further develop our offering and, for example, to understand how often users return and which browsers or devices are used.
On the other hand, this allows us to determine the conversion rate in order to understand which users have taken out which digital subscription via which channel (websites, apps), as well as to display suitable offers and calculate personalised values for our customers. For the calculation of customer values, we collect a Single Sign-On ID (SSO ID) and combine this with usage data collected on our data platform.
For data processing for these purposes, we use the CeleraOne software from the service provider Piano (Drammensveien 165, 0277 Oslo, Norway).
Your data are deleted as soon as they are no longer required for the intended purpose and there are no statutory retention obligations that prevent their erasure.
The legal basis for the aforementioned data processing is Art. 6 para. 1 lit. b) GDPR.
We analyse the behaviour of our users, i.e. we monitor individual browsers and thus the behaviour of users only on the SZ websites and in the SZ apps, in order to be able to display special content or offers tailored to their interests to target groups on our websites and in the apps. We use this data to create reports on the use of the website and apps. We store either the 20 most recently read articles or the behaviour in the last 30 days in order to display appropriately adapted content, i.e. if users have consumed two articles on the same topic within 30 days, we display content or an offer that matches this topic.
To do this, we collect context-related data, i.e. data about the content (article) itself. Only with your consent do we set a cookie with a unique identifier so that we can analyse where and when you have actually consumed the content and so that we can then assign you to user segments with at least five users. We use the user segments for a personalised customer approach, i.e. according to the criteria of the segment, by displaying special content and offers via a user segment ID.
For this purpose, we use software from our service provider Piano Software (Drammensveien 165, 0277 Oslo, Norway), which enables us to use the following functionalities
The legal basis for the aforementioned data processing is Art. 6 para. 1 lit. b) GDPR.
To enable you to discover content of interest to you as quickly and directly as possible in our digital offering, we analyse which SZ offerings and SZ products (editorial texts, podcasts, newsletters, quizzes, games, purchases, events, etc.) you use, read or order from us. We create your profile from this collected behaviour and derive possible preferences and interests from it in order to be able to recommend further content and products to you on the one hand and to enable you to personalise our digital offering for yourself on the other.
In practice, this gives you the opportunity to
We process the following personal data from you
We bring this data from the individual products together via a pseudonymised and cross-product ID so that we can improve the overall user experience with a cross-product analysis and provide you as a user with manual, semi-automated and fully automated content and offers from Süddeutsche Zeitung tailored to your needs.
Secondly, we determine the conversion rate in order to track which users have taken out which digital subscriptions via which channels (websites, apps) and calculate personalised values for our customers. To calculate customer values, we use the SingleSignOn ID (SSO ID) and merge this with usage data in our data platform.
We also process your email address in the following cases:
The data will be deleted after 90 days without activity or after cancellation.
The legal basis for the aforementioned data processing is Art. 6 para. 1 lit. b) GDPR.
In order to be able to show you advertising for our own products, we use services provided by advertising partners or cooperate with advertising partners and advertising networks (remarketing). These use cookies, pixels, or similar technical means in order to display and evaluate advertisements.
Advertisements can be tailored to the respective user, for example by using information from the browser about usage (such as pages visited, visit times, and length of stay). User-specific advertising placements are also possible. In addition, analyses relating to reach or for billing purposes can be carried out in pseudonymised form.
We use the _pcfe._ cookie to count how often you have been shown a certain number of self-advertisements so that these self-advertisements can no longer be displayed or other self-advertisements can be displayed. This cookie stores up to 30 interactions of each type. The cookie is deleted after 90 days.
The legal basis for the aforementioned data processing is Art. 6 para. 1 lit. b) GDPR.
To find out whether and how effective our advertising for our own products is, we use conversion measurement by embedding a conversion tracking tag or code snippet in our digital products. When you view our ads, a temporary cookie is stored on your computer or mobile device. As soon as you complete an action, our system recognizes the cookie and we record a conversion.
In order to measure how many users have responded to a particular advertising campaign for our products and offers and have placed orders, we use a URL parameter that also sets a cookie (tpcc_). The cookie is deleted after 90 days.
To optimize our marketing campaigns, we process data that shows us how people interact with our advertising materials, as well as installation and event data, and use this to create anonymous evaluations.
This data will be stored for a maximum of 24 months.
The legal basis for data processing is your consent in accordance with Art. 6 (1) (a) GDPR.
In order to track a user's journey from our digital offering to an advertisement and on to a possible purchase, we use a tool from Awin (AWIN AG, Eichhornstraße 3, 10785 Berlin). The purpose of this tracking is to assign our sales and marketing expenses to a specific user transaction so that advertisers can be compensated for the transaction. In addition, summary reports with cumulative statistical data are created. This only reveals that the same user started their journey with us and completed it with an advertiser, and that the affiliate marketing campaign was therefore successful for this user.
By creating a restricted user profile that does not contain the user's name or identity, it is also possible to track the so-called "user journey" when it begins on one device and ends on another. The profile is only used to assign sales and marketing efforts to us, even if the user has changed devices before completing a transaction.
In order to enable the payment of commissions owed to us, even though no corresponding transaction was recorded by the tool, we exchange information about the unrecorded transaction with the advertisers in these cases so that we can verify it using their own records.In order to track a user's journey from our digital offering to an advertisement and on to a possible purchase, we use a tool from Awin (AWIN AG, Eichhornstraße 3, 10785 Berlin). The purpose of this tracking is to assign our sales and marketing expenses to a specific user transaction so that advertisers can be compensated for the transaction. In addition, summary reports with cumulative statistical data are created. This only reveals that the same user started their journey with us and completed it with an advertiser, and that the affiliate marketing campaign was therefore successful for this user.
In order to show you advertising for our products, we work with Criteo (Criteo, 32 rue Blanche, 75009 Paris, France), an advertising platform that displays personalised online advertising to users. For this purpose, a JavaScript is installed on our websites that starts a call via HTTP or HTTPS protocol to the Criteo domains. This call is processed with an anonymised user ID and the context of the call. By setting cookies on the Criteo domains, usage is tracked anonymously across customer and publisher pages and used for personalised advertising (retargeting). The data is deleted after 13 months.
In order to achieve the optimum performance for a campaign, Criteo loads pixels to signal your current interest in an advert. The control and frequency of the publisher and network pixels is dynamically controlled via the availability of the publisher's inventory and performance.
The pixels are loaded in the protocol of the calling page (HTTP/HTTPS) and are limited to static image pixels. Publishers and networks from which Criteo pixels are loaded are listed here. The list is not exhaustive and is updated regularly.
As both we and Criteo jointly decide on data processing, we have concluded a Joint Controllership Agreement in accordance with Article 26 GDPR. Further information on Criteo's data protection can be found here.
To draw attention to our offers, we place adverts in the Google search network and advertising banners in the Google display network (banners on third-party websites) and use the conversion measurement and remarketing of Google Ads and Analytics. We can combine adverts with search terms or use individual adverts to advertise products and services that you have viewed on our site. With Ads remarketing lists, we can optimise search and display campaigns if you have already visited our site. With conversion measurement, we see the success of interest-based advertising in the Google search network and advertising banners in the Google display network (banners on third-party websites) based on the analysis of user behaviour for more targeted advertising.
For this interest-based advertising, Google analyses your user behaviour with cookies that are set when you click on ads or visit our websites. We and Google then receive information that you have clicked on an advert and have been forwarded to us. Based on these evaluations, we can recognise which of the advertising measures used are particularly effective and can optimise them as a result.
The statistics that Google provides us with include the number of users who have clicked on one of our adverts and show which of our websites you have been redirected to. We can also target you more specifically if you have already visited our website. We can also track which search terms were clicked on particularly often and which adverts lead to the purchase of a subscription, for example.
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: Through the integration of Ads Advertising, Google receives the information that you have called up the corresponding part of our website or clicked on an advert from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out your IP address and store it.
You can also find more information on this in the notes on website statistics and in the data protection provisions of Google.
You can prevent this technology by disabling the use of cookies via your browser settings, deselecting individual types of ads in Google's ad settings, disabling interest-based ads on Google or disabling cookies from advertising providers with the help of the respective deactivation help of the network advertising initiative. We and Google will then only receive statistical information on how many users have visited a page and when. This can only be prevented by appropriate browser extensions.
Within our online offer and also for newsletters and podcasts, we use the "Conversion API" of the social network Meta Platforms and Instagram, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, for the analysis, optimisation and economic operation of our online offer.
In order to ensure suitable and appropriate guarantees for the protection of personal data, we have concluded EU standard contractual clauses with Meta Platforms and, if necessary, take additional measures to protect the rights of data subjects.
The "Conversion API" is an interface to which conversion information can be sent on the server side. By transferring data via the API, we want to ensure that our Meta Platforms and Instagram adverts correspond to the potential interest of users and are not annoying. We can also track the effectiveness of Meta Platforms and Instagram adverts for internal performance measurement purposes by seeing whether users have been redirected to our website after clicking on a Meta Platforms or Instagram advert and whether they have carried out an action (so-called "conversion").
User data is generated, read or sent at the following points:
User clicks on an SZ advert on Meta Platforms or Instagram
User reaches target page (a subdomain of sueddeutsche.de)
If consent is available: fbclid information is read from URL and stored in a cookie ("szpay_fbclid", duration: 7 days)
If a user performs a certain action on the target page (e.g. purchase of a subscription), the system checks whether the fbclid cookie is present. Only if the cookie is present is the information passed on to Meta Platforms.
We save the click ID for 7 days, after which we only see the total number of actions.
In addition to the information about the completion of the purchase, the following information is also transmitted to Meta Platforms:
At no time is user-related information other than the click ID "fbclid" transmitted to Meta Platforms.
The processing of data by Meta Platforms takes place within the framework of Meta Platforms' Data Usage Policy. Accordingly, general information on the display of Meta Platforms ads can be found in the Meta Platforms Data Usage Policy: https://de-de.facebook.com/policy.php. Specific information and details about the "Meta Platforms Conversion API" and how it works can be found in the Meta Platforms help section: https://www.facebook.com/business/help/2041148702652965?id=818859032317965.
We use the technology "Microsoft Advertising Conversion" and specifically conversion tracking. Microsoft Advertising Conversion Tracking is an analytics service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. If you click on an advert placed by Microsoft, a cookie for conversion tracking will be stored on your PC. If you visit certain pages of our website when the cookie has not yet expired, Microsoft and we can recognise that you have clicked on a specific ad and have been redirected to this page.
The data collected with the help of the conversion cookie is used to create conversion statistics for Microsoft Advertising Conversion customers who use conversion tracking. We find out the number of users who have clicked on an advert and were then redirected to a page with a conversion tracking tag. We do not receive any information that can be used to personally identify users.
We use Outbrain from Outbrain Inc (39 West 13th Street, 3rd floor, New York, NY 10011, USA) to show you adverts on partner sites. It is not the use by you as a person that is analysed, but the usage history of your Internet browser. We use the Outbrain cookie to determine the success of our adverts on the partner sites and how you react to our adverts.
Outbrain uses cookies for this purpose and thus processes data in anonymised form.
You can recognise that you are connected to an Outbrain widget by the text that refers to Outbrain (e.g. "Recommended by Outbrain", "from Outbrain" next to the recommendations). If you click on the link to Outbrain, you will see a detailed note that allows you to navigate to Outbrain's interest profile, where you will find a general presentation of the types of data categories Outbrain uses to make its recommendations.
In order to improve the accuracy of our Google Ads conversion tracking, we use “Google Ads Enhanced Conversions”. In this context, data that you provide to us with your consent for personalised advertising (e.g. your email address) is transmitted to Google in encrypted form. This makes it possible to link conversions on this website to Google Ads campaigns with which you have interacted on this or another device. Such a link is only established if you provide identical data (e.g. email address) both to us and to the site on which you interacted with the ad.
The legal basis for the aforementioned data processing is Art. 6 para. 1 lit. b) GDPR.
To measure how many users have responded to and ordered a specific advertising campaign for our products and offers, we use a URL parameter that also sets a cookie (tpcc_). The cookie is deleted after 90 days.
The legal basis for the aforementioned data processing is Art. 6 para. 1 lit. b) GDPR.
As part of our services, we sometimes use artificial intelligence (AI) technologies to improve our offerings and provide you with a more efficient service. In doing so, we place particular emphasis on the following principles:
To retain our subscribers, we target them with special promotional offers on our digital platforms when there is a high probability that they will cancel. To do this, we analyze the usage behavior of active subscribers and calculate the probability that a subscriber will cancel their subscription within the next 30 days or 10 days. For this calculation, we use an algorithm that segments subscribers based on their churn risk.
To do this, we process the following subscriber data: billing period, subscription price, subscription duration, total amount of payments made, number of billing periods and payments to date, payment provider, remaining days until the end of the current billing period, and information about the channel through which the subscription was purchased (direct, external, internal, or via social media). We also collect usage data, i.e., the number and type of page views (total, by article, by device and browser), devices and browsers used (e.g., Android, iOS, Firefox, Internet Explorer), the average time of day and hour of use, the source of visits (direct, internal, external, social media), and the number of visits with and without access to paid content.
The model is trained and updated daily using the XGBoost classification algorithm. Each active subscriber is assigned a score that reflects the probability of cancellation.
This is an automated analysis that does not involve any individual manual evaluation.
The legal basis for the aforementioned data processing is Art. 6 para. 1 lit. b) GDPR.
When you use the SZ Wirecard Assistant, you are interacting with AI, not a human being. The content you enter is passed on to third-party providers of large language models so that the AI can deliver appropriate responses automatically and almost in real time.
You can also use the voice function. Your voice will then be processed in real time so that the AI can respond. To do this, we temporarily store the audio data and transcribe it, i.e., convert it into text. For this purpose, we require a user ID, which is deleted together with the audio data immediately after transcription. The resulting text (your dialogue) can be stored for up to 30 days — e.g., to clarify complaints and detect abuse — and is then deleted.
Processing generally takes place in Europe, but in exceptional cases, the AI response may also be generated outside the EU. In such cases, we use the applicable standard contractual clauses for the transfer of personal data to processors in third countries as appropriate safeguards.
By starting and using the SZ Wirecard Assistant, you consent to the data processing described above. You can revoke this consent at any time by discontinuing use of the SZ Wirecard Assistant.
In order to refinance our digital offerings, we market our advertising space - via our marketing service providers but also via third parties.
An overview of the third parties and how they process your data and for what purpose can be found in the data protection settings. As a SZ Plus subscriber, you will be shown fewer adverts. By reducing the amount of advertising, we ensure that the data we collect from SZ Plus subscribers is processed exclusively by us and by partners that we have checked. We oblige these partners to minimise data in accordance with European data protection regulations. Data collection via our verified advertising partners is thus reduced to a necessary minimum, for example in order to carry out reach measurements and quality improvements. These measures prevent unknown and unverified third parties from creating individual profiles of our digital subscribers based on their usage behaviour and using them for their own purposes.
Our advertising marketers support us in marketing our advertising space by acquiring and displaying adverts.
We use the following marketers:
We have concluded either an agreement within the meaning of Art. 26 GDPR with these third parties and the third parties they use in the context of marketing within the meaning of Art. 4 No. 10 GDPR, in which we have defined the respective responsibilities for the fulfilment of the obligations under the GDPR with regard to joint processing, or an order processing agreement within the meaning of Art. 28 GDPR.
In the case of joint responsibility, we are obliged to enable you to grant and withdraw consent under data protection law. We are also the central point of contact for you as a data subject. We forward data subject enquiries that we receive and that relate to joint processing to our marketers for response without delay. Irrespective of this, you can assert the rights to which you are entitled under the GDPR as a data subject both with and against us and with and against any other controller.
The legal basis for the aforementioned data processing is Art. 6 para. 1 lit. b) GDPR.
When you access our digital services, you will also be shown content from third parties who use our advertising space to place ads. We refinance our services through the delivery of these ads. When such content is loaded, this is done from the servers of the respective third-party providers. In this process, certain data are always transmitted to the third-party providers, in many cases including personal data. In addition, for most of the third-party services used to load this content, cookies are set or similar technologies are employed.
You can find an overview of these third parties and how they process your data and for which purposes in the cookie policy in the footer of the website.
The legal basis for the aforementioned data processing is Art. 6 para. 1 lit. b) GDPR.
In this context, data may also be transferred to third countries outside the EU in accordance with Article 49 (1) (b) GDPR.
The publisher uses the Transparency and Consent Framework of IAB Europe 2.2 to manage this type of advertising in compliance with data protection regulations. This framework of the Interactive Advertising Bureau Europe ("IAB Europe"), an industry association for online marketing, defines and monitors the data protection-compliant display of advertising.
IAB Europe has defined the following purposes for the processing of data, including the personal data of users, in order to manage advertising in compliance with data protection regulations:
Saving or accessing information on a terminal device (Purpose 1)
Cookies, terminal device or similar online identifiers (e.g. login-based identifiers, randomly generated identifiers, network-based identifiers) may be stored on or read from your terminal device together with other information (e.g. browser type and browser information, language, screen size, supported technologies, etc.) in order to recognise it each time it accesses an app or a website. This is done for one or more of the processing purposes listed here.
Most of the processing purposes explained in this notice are based on the storage of or access to information on your device when you use an app or visit a website. For example, it may be necessary for a provider or website operator to store a cookie on your device when you first visit a website in order to recognise it on your next visits (by retrieving this cookie each time).
Use of reduced data to select adverts (Purpose 2)
Adverts presented to you on this service may be based on reduced data, such as the website or app you are currently using, your approximate location, your device type or the content you are interacting with (or have interacted with) (e.g. to limit the frequency of adverts displayed to you).
*Examples
Creation of profiles for personalised advertising (Purpose 3)
Information about your activities on this service (such as completed forms, viewed content) may be stored and combined with other information about you (e.g. information from your previous activity on this service or other websites or apps) or similar users. This is then used to create or improve a profile about you (this may include, for example, possible interests and personal characteristics). Your profile may be used (including at a later date) to enable us to present you with adverts that are likely to be more relevant to you based on your potential interests.
*Examples
Use of profiles to select personalised advertising (Purpose 4)
Advertising displayed to you on this service may be based on your advertising profile. This advertising profile may include your activities (such as completed forms, viewed content) on this service or other websites or apps, possible interests and personal characteristics.
*Examples
Creating profiles to personalise content (Purpose 5)
Information about your activities on this service (such as: completed forms, non-promotional content viewed) may be stored and combined with other information about you (such as your previous activity on this service or other websites or apps) or similar users.
This is then used to create or complete a profile about you (this may include, for example, possible interests and personal characteristics). Your profile may be used (including at a later date) to show you content that is likely to be more relevant to you based on your potential interests, for example by changing the order in which content is shown to you to make it even easier for you to find content that matches your interests.
*Examples
Use of profiles to select personalised content (Purpose 6)
Content presented to you on this service may be based on your personalised content profiles, which include your activities on this or other services (such as forms you submit, content you view), possible interests and personal characteristics, such as the changed order in which content is displayed to you, to make it even easier for you to find (non-advertising) content that matches your interests.
*Examples
Measurement of advertising performance (Purpose 7)
Information about which adverts are presented to you and how you interact with them can be used to determine how much an advert has appealed to you or other users and whether the objectives of the advertising campaign have been achieved. The information includes, for example, whether you have viewed an advert, whether you have clicked on it, whether it has encouraged you to buy a product or visit a website, etc. This information is helpful in determining the relevance of advertising campaigns.
*Examples
Measuring the performance of content (Purpose 8)
Information about what advertising is presented to you and how you interact with it can be used to determine whether (non-advertising) content has reached the intended target group and matched your interests, for example. This includes, for example, information about whether you have read a particular article, watched a particular video, listened to a particular podcast or looked at a particular product description, how much time you have spent on that service and the websites you have visited, and so on. This information helps to determine the relevance of (non-advertising) content that is displayed to you.
*Examples
Analysing target groups through statistics or combinations of data from different sources (Purpose 9)
Based on the combination of data sets (such as user profiles, statistics, market research, analytics data), reports can be created about your interactions and those of other users with advertising or (non-advertising) content in order to identify common characteristics (e.g. to determine which target groups are receptive to an advertising campaign or to certain content).
*Examples
Development and improvement of offers (Purpose 10)
Information about your activities on this website, such as your interaction with adverts or content, can help to improve products and offers and to develop new products and offers based on user interactions, the type of target group, etc. This processing purpose does not include the development, supplementation or improvement of user profiles and identifiers. This processing purpose does not include the development, enhancement or improvement of user profiles and identifiers.
*Examples
Use of reduced data to select content (Purpose 11)
Content presented to you on this service may be based on reduced data, such as the website or app you are using, your approximate location, your device type or information about what content you interact (or have interacted) with (e.g. to limit how often you are shown a video or article).
*Examples
Special processing purposes
The user has no choice for the following two special processing purposes, as these are absolutely necessary to provide the service.
Functions
For the following functions, personal data will be used for one or more of the above purposes if you consent to these purposes.
Special functions
For the following special functions, personal data will be used for one or more of the above-mentioned purposes, provided that you consent to these purposes.
If you allow push notifications, you give your consent to receive the notification and for the statistical analysis with which we can recognise whether and when our push notifications were displayed and clicked on (Art. 6 para. 1 sentence 1 lit. a) GDPR). This includes storing the time of registration and your browser ID or device ID.
Your data will be deleted as soon as you withdraw your consent.
You can revoke your consent at any time with effect for the future by clicking on the corresponding symbol in front of the address bar in your browser and deactivating the notifications.
"My SZ" offers you the option of displaying content that interests you or that you want to remember. Once you have selected your favourite topics, we will show you articles from the selected subject areas or the articles you have bookmarked. This requires a Login.
The legal basis for the aforementioned data processing is Art. 6 para. 1 lit. b) GDPR.
You can create a digital account (login) via our login systems, which you can use to log in to all of our digital services after your initial registration. Some offers can only be used if you have a login. When you log in, we use cookies in your browser to identify you.
The following data is processed when a digital account is created:
| Data | Purpose of processing | Storage period |
|---|---|---|
| Log-in data (email address, password) | Logging in or rejecting a user | Until account deletion or after two years if not used if not used after two years |
| Master data | Personal address | Until objection |
| Pseudonymous identifier | Link between user account and subscriber data and recognition of a user | Until end of contract |
| Opt-in data | Securing system operation and identification of the e-mail address | Three years |
| Subscription data | Query of reading authorisation | Until end of contract |
| Identification numbers | Prevention and analysis of misuse | Seven days |
| Usage data | Further development and optimisation of our digital products and subscription offers | Until revocation |
If you do not log out after logging in and before leaving the website or app so that you do not have to log in again the next time you visit, you will remain logged in. If you are inactive, we will log you out after 20 days for security reasons.
The legal basis for the aforementioned data processing is Art. 6 para. 1 lit. b) GDPR.
Wir können Ihnen Informationen über ähnliche Produkte und Leistungen per E-Mail zusenden (§ 7 Abs. 3 UWG). Ein Widerspruch ist jederzeit durch Klick auf den Abmeldelink in der E-Mail oder unter werbewiderspruch@sz.de möglich.
You can delete your login yourself at sz.de/abo under "Login data" or request this. It will be deleted after two years of inactivity at the latest.
Once you have deleted your login, you will no longer be able to use any digital services that require a login. If you still have digital subscriptions with us that require a login, the login cannot be deleted before the end of the agreed subscription term. If you delete your login, this does not replace the written cancellation of a digital subscription.
If you have a digital account with us as a subscriber to the printed edition, you can delete your digital account or instruct us to do so, but you will then lose the associated functions such as the online subscription service.
We use the data stored in your profile (this may be data that you have actively added there during registration or at a later date, or data that you have entered as part of a previous order and which we automatically adopt when you place a new order) to facilitate the ordering or other processes by means of pre-filled forms (Art. 6 para. 1 sentence 1 lit. f) GDPR).
If you have concluded a subscription contract with us or have given your consent to advertising, we process the following data:
| Data | Data category | Processing purpose | Storage period |
|---|---|---|---|
| Name, user name, customer number, e-mail address, password | login data | logging in or rejecting a user | until account deletion or after two years if not used |
| Name, title, customer number, subscription number | contract data | allocation to contract | 10 years after conclusion of contract |
| telephone number | contact details | queries on fulfilment of contract | until end of contract |
| Postal address, telephone number, email address | contact data | advertising | until revocation or objection |
| delivery address, billing address*, forwarding address* | delivery data | contract fulfilment | upon conclusion of contract 10 years or until deletion |
| IBAN | payment data | payment of subscription | upon conclusion of contract 10 years |
| ID | subscription data | query of reading authorisation | until revocation or after two years if not used |
| ID | Usage data | Further development and optimisation of our digital products and subscription offers | Until revocation or after two years if not used |
| DOI (IP address, time stamp, email address) | Opt-in data | Securing system operation, identification of the email address, proof of consent | Until revocation or after two years if not used |
| ID | Pseudonymous identifier | Link between user account and subscriber data and recognition of a user | Until revocation or after two years if not used |
| Date of birth* | Personal data | Birthday greetings | Until revocation |
*Voluntary information
We also use your contact data beyond contract-related use for advertising purposes. This is only done if you have expressly consented (Art. 6 para. 1 lit. a) GDPR) or on the basis of our legitimate interest in a personalised customer approach or direct advertising (Art. 6 para. 1 lit. f) GDPR), for example for information about the same and similar products of our company (Section 7 para. 3 UWG).
If you no longer wish to receive advertising, you can withdraw your consent or object to advertising at any time.
The data processed by us will be deleted as soon as they are no longer required for their intended purpose, you have objected to the advertising and the deletion does not conflict with any statutory retention requirements.
You will receive newsletters from us if you explicitly order them by providing your e-mail address. We will check the e-mail address you have provided by sending a confirmation e-mail to it ("double opt-in procedure") to ensure that you are really the owner of the e-mail address.
We process the email address to send and analyse the newsletter (Art. 6 (1) (b) GDPR). We analyse your clicks in newsletters with the help of so-called tracking pixels, i.e. invisible image files. These are assigned to your email address and are linked to a unique ID so that clicks in the newsletter can be clearly assigned to you. The purpose of the user profile is to be able to tailor the newsletter offer to your interests. We record when you read newsletters and which links you click on and use this information to create an interest profile.
You can unsubscribe from any newsletter at any time. There is a corresponding link in every newsletter for this purpose.
Your data will be deleted after cancellation of the newsletter at the end of the year in which you unsubscribed from the newsletter.
| Data | Purpose of processing | Legal basis for processing | Storage period |
|---|---|---|---|
| E-mail address | Sending the newsletter | Consent | until cancellation |
| IP address for opt-in | Proof of double opt-in | Consent | until cancellation |
| Time of DOI verification | Proof of double opt-in In | Consent | until revocation |
| Salutation* | Direct address | Consent | until revocation |
| First name* | Direct address | Consent | until revocation |
| Last name* | Direct address | Consent | until revocation |
| Usage data | Further development and improvement of the service | Consent | until revocation |
| End devices | Correct delivery of the newsletter | Consent | until revocation |
*Voluntary information
When you contact us, we only collect personal data (e.g. name, e-mail address, telephone number) if you provide it to us voluntarily. This information is expressly provided on a voluntary basis. The purpose of processing your data is to process and respond to your enquiry. This is also our legitimate interest in data processing in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR.
In the case of a telephone enquiry, your data will also be processed by telephone applications and in some cases also via a voice dialogue system in order to support us in the distribution and processing of enquiries.
We will delete your data that we have received in the course of contacting you as soon as your request has been fully processed and no further communication with you is required or requested by you.
To improve the quality of our services, we also use artificial intelligence (AI) technologies in certain cases. To this end, calls recorded with your consent are anonymized, transcribed, and analyzed so that we can assess service quality, identify relevant topics, and derive recommendations for action (Art. 6(1)(f) GDPR).
The recorded calls are deleted after no more than 80 days.
In online comments, you can question the opinions of our authors, exchange arguments, and provide additional information to enrich the dialogue. In order to express your opinions, you must be a subscriber to an SZ Plus subscription, have an SZ account, and log in via our login function (see Registration and login). All users can read comments – even without being SZ Plus subscribers.
To enable you to comment, we use your name and a UID as well as your email address to identify you as a user. We also use your email address so that you can receive notifications from the community. When a comment written by you is published, the full name stored in your SZ account is displayed in the comments section on SZ.de. Please note that, as a result, it can also be found on the internet, for example by search engines.
We collect and process the data you provide in order to publish your comment as requested (Article 6 (1) (b) GDPR). In particular, we also require your email address so that we can contact you in the event of complaints about your comment or your report and give you the opportunity to respond (Article 6 (1) (c) GDPR).
The tool also supports us in moderating user comments, including in connection with our social media channels. The analysis of user comments likewise serves to ensure compliance with the netiquette rules in the comments sections.
The following data are processed by Conversario:
• Username (e.g. Facebook name)
• User image
• Comment text
• Date and time
• User ID
• Comment ID
The legal basis for data processing in this case is Article 6 (1) sentence 1 (f) GDPR; processing takes place in our interest in detecting breaches of our netiquette rules in advance and preventing publication in such cases. Further information is available in Conversario’s privacy notice.
If you have previously published comments using a username freely chosen by you, we will in future use your name for both new comments and your comments already published, provided you have previously consented to this data processing (Article 6 (1) sentence 1 (a) GDPR). You can withdraw this consent at any time by emailing debatte@sz.de. You also have the option of deleting your comments previously published under your username under “My comments” if you do not wish your full name to be displayed.
If you do not consent to the use of your full name, your previous comments will continue to be published under your username. You will not be able to publish new comments.
You can change your data and delete them together with your comments by logging into the comments function and making the desired changes under Profile/Settings. There you also have the option of downloading your comment archive.
In order to find out how satisfied you are with our products, you can take part in our surveys. You decide separately for each survey whether you wish to participate and which personal data you wish to provide to us.
To ensure that we do not show users the same survey multiple times, we read IP addresses, which are anonymised before being stored. This anonymisation is irreversible.
For our surveys, we use the online survey tool easyfeedback provided by our service provider easyfeedback GmbH, Ernst-Abbe-Straße 4, 56070 Koblenz. Information on data protection can be found here.
Your personal data are deleted no later than at the end of the year in which the survey and its evaluation have been completed.
To enable participants to interrupt a survey embedded on the website and continue it later using the same browser, a session cookie is created when the survey participation is started. This cookie contains a session ID formed from the prefix “efSurveySession” and a sequential number.
The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.
In order to participate in competitions, it is sometimes necessary for you to
To take part in quizzes and online games, you only need to register if you want to be entered in the high scores/leaderboards.
For registration and entry in the leaderboard, we process your e-mail address, a user name - preferably a fictitious one - and a password. You must enter the user name in your profile in your SZ account in order to be entered in the leaderboard. The user name will be published in the leaderboard on SZ.de if you click on the "Add to leaderboard" button after registering.
When offering (non-cash) prizes, further personal data is required from the winners, in particular after the end of the competition, such as their address, in order to be able to notify them if they win and send them the prize.
The collection and processing of personal data is used to organise the respective competition and quizzes and, if applicable, to send prizes. The data will be processed with your consent (Art. 6 para. 1 sentence 1 lit. a) GDPR), in the case of competitions in accordance with Art. 6 para. 1 sentence 1 lit. b) GDPR. All data will be stored for the purpose and for the duration of the competition and deleted at the end of the campaign, provided there are no statutory retention obligations. The user name published in the high scores/best lists will only be deleted upon cancellation.
Your data may be passed on to our competition service providers and sponsors within the framework of the conditions of participation to which you have consented and deleted if they are no longer required.
For further details in connection with the respective competition, please refer to the conditions of participation.
You have the right to revoke your consent with effect for the future in accordance with Art. 7 para. 3 GDPR at datenschutz@sz.de.
If you order one of our services, we require your address, contact and communication details as well as your bank details and, where applicable, your credit card details when the contract is concluded.
The processing of the personal data you provide is necessary for the proper handling of the contractual relationship. It is based on Article 6 (1) (b) GDPR.
The data are deleted as soon as they are no longer required for the aforementioned purposes. However, we retain your personal data for as long as we are legally obliged to do so, for example due to retention obligations or limitation periods for potential legal claims that have not yet expired.
Süddeutsche Zeitung GmbH
Hultschiner Str. 8
D-81677 Munich
Germany
atarax group of companies
Luitpold-Maier-Str. 7
D-91074 Herzogenaurach
Germany
Phone: 09132 79800
Email: swmh-datenschutz@atarax.de.
Aus der DSGVO ergeben sich für Sie als Betroffener einer Verarbeitung personenbezogener Daten die folgenden Rechte:
Im Falle datenschutzrechtlicher Verstöße steht Ihnen ein Beschwerderecht bei einer Datenschutz-Aufsichtsbehörde zu.
Sie haben das Recht, erteilte Einwilligungen gem. Art. 7 Abs. 3 DS-GVO mit Wirkung für die Zukunft zu widerrufen unter datenschutz@sz.de.
We reserve the right to change or adapt this privacy policy at any time in compliance with the applicable data protection regulations.