And

Our parent company is Heinrich Bauer Verlag KG, Burchardstraße 11,20077 Hamburg

Please click on the following links or scroll down to see the details of our Privacy Policy:

1.    Our Data Promise to you

2.    The lawful bases Bauer Media Group process personal data

3.    What personal data do we collect?

4.    How do we keep it secure?

5.    How do we collect your Personal Data?

6.    How do we use your Personal Data?

7.    Do we share your Personal Data with any other companies?

8.    The information we may collect from you about others

9.    Leaving our website and moving on to third party websites

10. Cookies and how we use them

11. Our Audio and Magazine Apps

12. Online Behavioural Advertising

13. Logging in using social networking

14. Opting Out on Receipt of Email Marketing Communications

15. Telephone and Mailing Preference Services

16. Marketing to Children

17. Using our websites from outside the UK

18. Your rights

19. How long do we keep your personal data?

20. Questions regarding this Privacy Policy

21. California Privacy Rights

22. Changes to Privacy Policy

1.   Our Data Promise to you

The Bauer Media Group is absolutely committed to respecting and protecting your data whilst it is in our care. We collect your personal information because it helps us to understand your needs and guides the way in which we interact and communicate with you about our products and services now and in the future.

We promise you that we will:

·       have strict policies and procedures in place to protect your data;

·       only process your data if we have a legal reason to do so; or where you have given us your permission to do so;

·       only hold your information for as long as there is a business requirement to kept it;

·       store your data on our secure servers and ensure that we have strong controls in place to protect your data;

·       only work with external companies that share the same strong data protection values as we do.

We encourage you to read this Privacy Policy in full.

We are registered with the Information Commissioner's Office, the regulator of General Data Protection Regulations (GDPR) and other relevant legislation and abide by its requirements.

2.   The lawful bases Bauer Media Group process personal data

Bauer Media Group rely upon four of these lawful ways to collect, use, store and process personal data: Consent, Contractual; Legitimate Interests and Legal Obligations

To perform our contractual obligations to you.

We and our external companies process your information to perform our contractual obligations to you when we use your information to provide you with the Services.  For example, when you purchase a subscription from us, we process your payment and contact information as necessary to confirm the subscription and we process your contact information and other details to provide you with support services in regard to your subscription. If you exhibited at an event, we will process your payment and contact information as necessary to provide the services. Or to provide a prize to which you are entitled.

To pursue our legitimate interests.

We process your information to meet our legitimate interests we have balanced our interests with your interests and believe that these activities will not have a negative impact on your privacy rights. We specially rely on Legitimate Interests: -

·       Manage specific aspects of our events;

·       manage our subscription service;

·       personalise the marketing content we provide you;

·       share your contact details with a competition providers;

·       undertake business sales and advertising activities;

·       to develop, deliver and maintain relevant products services and advertising;

·       to build an understanding of our audiences so we can serve them with relevant content;

·       understanding when our audience engage with us or other organisations;

·       customise the content you see on our websites

·       send you marketing communications related to other companies’ products and services (in a business-to-business context);

·       research publicly available business contact details.

You can withdraw your consent at any time, by using the unsubscribe link or emailing                           Bauer Data Protection Officer

To comply with our legal obligations.

We process and share your information as necessary to comply with our legal obligations when we use your information to protect our rights or the rights of others and when we share your information with other parties where required by law or as necessary to protect our rights. For example, we are required to collect certain information from you when processing your subscription payment for tax or financial reporting reasons.

With your consent.

We obtain your consent to process your information when we are required to do so by law.  In relation to Cookies and Similar Technologies, we obtain your consent as described in our Cookies Policy. You can withdraw your consent at any time, by using the unsubscribe link or emailing Bauer Data Protection Officer or as described in our Cookies Policy.

If you withdraw your consent, we may be unable to provide that product of service that you have requested.

3.   What Personal Data do we collect?

The Bauer Media Group collects Personal Data in a number of ways, such as, when you give us a paper form to subscribe to a magazine, enter a competition, exhibit at an event or provide details at an event or when you interact with us via a website, mobile app or other digital services (“Services”). This Personal Data could include:

·       Contact information, your name; postal address; email address; phone number.

·       Comments, photos, videos and other content that you choose to publish or share with us.

·       Payment information for subscriptions or purchases made through our websites, mobile application or other digital services.

·       Your vehicle registration number if you are requesting a vehicle valuation.

·       Your dietary and accessibility requirements if you are attending one of our events.

·       Information you provide when participating in a competition; survey; event or apply for a job.

·       Location information, when you permit the digital service to access device location. To prevent this access, please refer to instructions provided by your mobile service provider.

·       Information we obtain from other sources, such as our business partners, and social media platforms

You may give us information about other people, such as the name and email of a contact if you are attending an event or the name and address of a gift subscription recipient. Please ensure that you are authorised or have the person’s permission to do so.

4.   How do we keep it secure?

We hold your personal data on our secure systems, mainly based with the UK and the European Economic Area (EEA). Our staff are trained in data security, and our staff policies and procedures help our staff to understand what is required of them under their obligations to us, and also their responsibilities under GDPR and other privacy legislation.

When we ask another organisation to provide a service for us, we ensure that they have appropriate security measures in place. If we or our service providers transfer any information out of the European Economic Area (EEA), it will only be transferred with the correct protection in place. This includes the use of Model Contractual Arrangements as approved by the European Commission.

5.   How do we collect Personal Data?

We collect your details when you register on one of our websites; subscribe to our service; place an order on our website; search for a product; correspond with us by phone, e-mail or otherwise; register to attend one of our events; participate in discussion boards or other social media functions on our website; enter a competition or promotion; apply for a job.

With regard to each of your visits to our websites and/or apps we may automatically collect the following information:

·       technical information, including the Internet Protocol (IP) address used to connect your computer to the internet, your login information, browser/ app type and version, device type, time zone setting, browser plug-in types and versions, operating system and platform;

·       information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our site (including date and time); products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our customer service number.

We use Sourcepoint on our apps and websites. This is the GDPR compliance system that we use and asks users for permissions regarding the various vendors we use and stores those preferences.

It uses a Unique Identifier to recognise each user and remember their preferences. It is essential, without it, we would not be able to comply with the law.

We will always be transparent about how we plan to use your data so that you have the choice whether or not to give it to us. We respect your preferences and will do our best to make sure that we keep our promises.

If you give us your consent to send you further marketing messages, we may contact you from time-to-time with carefully selected offers and promotions from our network of carefully selected partners, from which you may always opt-out or unsubscribe. It is not our practice to contact you if you have made it clear that you do not wish to hear from us about our products and services.

We may need to authenticate your identity to provide you with access to subscriber-only services. We might also send you surveys or invite you to enter a competition or receive a newsletter, for instance. If you do not wish to participate you may simply decline our invitations.

Our iPad, Android and other "apps" may collect user data, which we use to learn about our readers and improve our apps.

To understand how our "apps" are used, we may use the service Google Analytics, Google Firebase, Adjust, Braze and App Tweak to provide us with anonymous statistical information about your use of our app(s).

Facebook

 A Facebook software development kit (SDK) is integrated with the app’s software. This allows us and Facebook to track when you launch the app and if / when you take some actions (like making a purchase).

This assists us when it comes to advertising campaigns we run – it helps us serve relevant adverts to target audiences on Facebook, and attribute revenues we receive against money spent advertising on the Facebook platform.

This is only done using your device’s unique identifier. We do not track, trace or monitor any other personal information within the app. It is non-essential and the user can opt out.

Google Firebase

Google Firebase is an analytics and marketing platform that we use to engage users and help us to improve our apps. A software development kit (SDK) is integrated with the app’s software.

As well as enabling features like push notifications (which the user opts into / out of using their phone’s built-in operating system), it allows us to monitor app usage and form cohort audiences for Google Ads.

Much like Facebook, each device is given a Unique Identifier and we don’t store any personally identifiable data. It is non-essential and the user can opt out.

Adjust

Adjust is our attribution software. It allows us to see which ad campaign/email/Facebook post users arrived at our app from. This means we know what’s working.

As part of our Google Analytics tracking, we have implemented the following features: Remarketing, Google Analytics Demographics and Interest Reporting. Visitors can opt-out of Google Analytics for Display Advertising by visiting here https://tools.google.com/dlpage/gaoptout/

We use this information for reporting purposes and to advertise online. Third-party vendors, including Google and Facebook, may show your ads on sites and mobile/native apps across the Internet. We may use the cookies relating to Google Analytics together with third party cookies to inform, optimise and serve ads based on a user's part visits to our websites. For more information please see our Cookies Policy.

Airship

Airship is a marketing user engagement platform that enables us to serve features like push notifications and other in-app communications.

Like Google Firebase, it allows us to monitor app usage and from that data form cohort audiences, which we can tailor unique messages for and then send to. Again, each device is given a Unique Identifier to help achieve this and we don’t store any personally identifiable data.

Airship again is classified as non-essential, so the user can opt out at any time.

LiveRamp

When you browse through our websites or use our mobile apps and when you enter your email address on these (either to log in, or to sign up to a newsletter, or similar) we may share personal or other information that we collect from you, such as your email address (in hashed, pseudonymous form), IP address, your mobile advertising ID or information about your browser or operating system, with our partner LiveRamp, Inc. and its group companies, acting as joint controllers. LiveRamp uses this information to create an online identification code for the purpose of recognising you on your devices. This code does not contain any of your identifiable personal data and will not be used by LiveRamp to re-identify you. We place this code in our cookie or use a LiveRamp cookie and allow it to be used for online and cross-channel advertising. It may be shared with our advertising partners and other third-party advertising companies globally for the purpose of enabling interest-based content or targeted advertising throughout your online experience (e.g., web, email, connected devices, and in-app, etc). These third parties may in turn use this code to link demographic or interest-based information you have provided in your interactions with them. Detailed information on LiveRamp’s data processing activities is available in LiveRamp’s privacy policy and opt-out here: https://your-rights.liveramp.uk/home. You have the right to withdraw your consent or opt-out to the processing of your personal data at any time.

LiveRamp again is classified as non-essential, so the user can opt out at any time.

6.   How do we use your Personal Data?

Fulfilment of a service

We will use your personal data when fulfilling a product or service that you have requested. For example, when you subscribe to a magazine; register to access online content; register to attend an event; enter a prize draw/competition or apply for a job.

Marketing

We will only send you direct marketing when you have either provided consent for example by ticking a box or where we believe we can demonstrate a legitimate interest and have balanced this with your interests and privacy. You can opt out of receiving direct marketing at any time by clicking on the unsubscribe link on our emails or emailing Bauer Data Protection Officer

Events

If you register to attend, sponsor or exhibit at one of our events such consumer events, a B2B event such as a conference; awards or roundtable events, we will share your details such as your name, job title and company name, with the events sponsors to ensure that the activity is specific to the audience, suppliers of event services such as shell scheme supplier. We also may share the delegate list with the venue for health and safety purposes.

Exhibitors and or sponsors may ask to scan your badge at the event to gain your consent to contact you in the future. If you do not wish your details to be shared, you can choose not to have your badge scanned.

Please note that at some events photographs and video footage may be taken and used for post event publicity. If you have any objection please email Bauer Data Protection Officer

We sometimes make assumptions about your interests based on the way you interact with our products and services and the information we hold about you. This allows us to understand the products, content and services our customers like, letting us focus our efforts on developing those areas. We may also use this information to make decisions about what direct marketing and advertising to show you.

We will use your information to optimise article and content recommendations. Based on the kind of articles and content which prove to be of interest, we will use this information to provide a more engaging and personalised experience for you.

We may use the information we hold about you, including how you engage with our products and services, as well as from other sources, to segment our audiences into groups with particular attributes (likes/dislikes/reading behaviours etc). This helps us personalise your experience and show you more relevant content and adverts.

7.   Do we share that data with any other companies?

Except as otherwise stated in this Privacy Policy or in the data collection statements that will always be visible when we collect your information and where we give you the opportunity to select your preferences, we may release your data to external companies that we use to process your orders, to supply you with a prize in the event you win a competition, or charge your credit card, for instance.

Every supplier we use has to go through a rigorous up-front process to ensure that their processes are at least as good as our own, and they are required to sign a contract that defines what their responsibilities and liabilities are. We make site visits regularly whether our suppliers are in the UK, the EEA or outside the EEA, where we require an EU approved model contract to be signed.

If you send in a comment, we may post it on our site or use it as a testimonial without mentioning your full name or publishing any information that would identify you. Furthermore, in some circumstances we may display some of your information such as your username and age. Others may be able to see your personal data if you post any information on bulletin boards or forums and may be used to send you unsolicited communications over which we have no control.

When you visit our websites and apps, we may check to see if you have a cookie ID. This is a form of identifier that tells us who you are. We may share this with advertisers, ad servers and ad networks to deliver targeted advertising both on our websites/apps and on selected partner websites but this will not include any information which directly identifies you. However, by interacting with or viewing an advert, you should be aware that the third party may make the assumption that you meet the targeting criteria used to display the advert and we accept no responsibility for the content of any advertising you may see.

We do tell you which third parties may collect and use your information when you visit our sites and provide you with the ability to opt out. To learn more or to see how you can opt out of targeted advertising, for more information please read our Cookie Policy.

Please take care when using social networking sites to which we may invite you to join that you do not disclose anything that you might later wish to retract.

There are certain times when we may have a legal obligation to disclose your data in good faith where it is required by law or to respond to subpoenas or warrants served on us, or where we have a requirement to protect or defend the rights of The Bauer Media Group or any users of our servers. We will always ensure that those requesting the information have the legal right to do so.

If another company should acquire any of our companies or our assets, including our database, that company will have the right of possession to the Personal Data collected by us and will assume the rights and obligations formerly attributable to us and will use the data in line with the terms under which you submitted it or as described in this Privacy Policy.

Occasionally we may allow our clients to compare their customer database to ours. This is called data matching and allows our partners to see if they can reach their audiences on our platforms. Generally, this will be conducted at an aggregate audience level to provide insights, rather than individual level information, although your information may be used to generate these insights. These insights might include the overlap between our audiences and the client and other information that would be useful to understand if an advertising campaign would be effective.

As part of the data matching process we may allow partners to build target audiences based on predefined attributes. These ‘lookalike’ audiences may be similar to our partners’ existing audiences. For example, a sports brand may want to reach ‘car enthusiasts’ or those who enjoy ‘motoring. They could select audiences who have been identified as having an interest in these areas. To do this, we segment our audiences into groups depending on what we think they like or other behaviours. This helps them find the right audiences and we are able to show you more relevant advertising.

In the event that a partner wishes to send direct marketing or other promotional communications to an audience as a result of data matching, they must confirm to us that they have permission to contact any individual on their database. In some circumstances, we may use the marketing permissions we hold for us to reach those audiences to send relevant communications.

We may share personal data collected on our websites and apps with the Ozone Project and Octave Audio, who act as our processors to help deliver relevant advertising across our platforms. Information that may be shared with these partners includes: contact details, biographical details, engagement information (how a user engages with a product or service), declared data from surveys and polls, online identifiers and inferences such as audience segments based on engagement data. If you would prefer that your information was not shared with Octave Audio and Ozone Project for these purposes, you can change your cookie settings when you visit our websites. You may still receive advertising when you use our products and services but this may not be tailored to you.

We may share your personal data with a third-party auditing organisation (ABC) so they can verify aggregated statistics about circulation and usage of our products or review our policies, processes and procedures for compliance with relevant standards. You can view their privacy policy by following this link

We may collect information from your devices that tells us whether you’re using an ad blocker. This is so that we can manage our compliance with the law and also determine if we are able to show you advertising. We may also ask you to suspend or whitelist our websites so that we can show you adverts. As a predominantly advertising funded business, we do rely on our ability to show you advertising to help ensure we are able to provide you with the products and services you.

8.   The information we may collect from you about others

Sometimes we may offer you the chance to invite a family member or a friend to enjoy a particular service. In such circumstances, we will collect both your personal details and those of your friend or family member. We will ask your consent to mention your name when we contact the person or persons you have recommended and we will only use this information once and not save it in our database, unless they have entered a competition, for example, when the information will be stored purely for that purpose. If they decide to take up any of our invitations then their data will be treated exactly the same as your own, using the terms under which the data was collected and the information as described in this Privacy Policy, which they will be made aware of at the time of our invitation.

9.   Leaving our website and moving on to third party websites

When you click on advertisements or links on any of our sites, you will leave that site and go to a third-party site, which is outside of our control. When we place an advertisement on one of our sites, it does not signify that we are endorsing that advertiser's product or service. We do not accept responsibility for content, which we have no control over, and our Privacy Policy does not apply to these companies, sites or content; and if such third-party sites collect Personal Data, we cannot control how this data is processed, stored or used. We advise that you read their data collection statements, which accompany any registration and their Privacy Policies, before you submit your personal information.

10. Cookies and how we use them

"Cookies" are small pieces of information that a website sends to your computer's hard drive while you are viewing a website. The Bauer Media Group uses cookies for a number of reasons:

·       To provide you with a more personal and interactive experience on our sites.

·       For statistical purposes to track how many users we have and how often they visit our websites.

·       We use organisation to collect anonymous user information so they can analyse how the website is being used and the number of visitors.

·       We and our advertisers may use statistical cookies to track who has seen an advert and clicked on it.

·       To show you adverts that you may be interested in and to control the number of time you see them and measures the effectiveness of the ad campaign.

·       We may use ‘Flash’ cookies to store your preference for your media player. If we do not use them, it may not be possible for you to watch some video content.

You have the ability to accept or decline cookies, when you use the website for the first time via “see all options” link on the “pop up” banner, but please be aware that for some parts of our sites to work, you will need to accept cookies.

 For more information about third party cookies generated by advertisers, please visit www.allaboutcookies.org and/or www.youronlinechoices.com

For more information on how the Bauer Media Group use cookies please read our Cookie Policy.

11.  Our Audio and Magazine Apps

If you use any of our apps on your mobile device, we will process the following information:

·       Your location, you may decline this request, but this may mean that we cannot offer relevant services and information that are relevant to your area.

·       Your device ID, this will be processed automatically.

·       Your email address, if you create an account used to contact you and to recognise you when you contact us.

·       Your age and gender, if you provide it.

You may edit your details, opt-out of advertising profiling or de-activate your account at any time by selecting ‘Account Preferences’ from the ‘More’ menu on your app.

12. Online Behavioural Advertising

We use an advertising service called online behavioural advertising (OBA). This allows us to deliver targeted advertising to the visitors of our websites. It works by showing you adverts that are based on your browsing patterns and the way you have interacted with the website. For example, if you have been reading a lot of car articles, you may be shown more adverts for cars.

None of the OBA techniques used will collect personal information such as your name, email address, postal address or phone number.

If you would like more information regarding OBA and how to opt out, please read our please read our Cookie Policy. Or visit http://www.youronlinechoices.com/uk/

13. Logging in using social networking

If you login to our sites using a Facebook login or a Google login, you are granting permission to Facebook and/or Google to share your user details with Bauer Media Group. This will include your name, email address, date of birth and location which will then be used to form a Bauer Media Group identity. This will also allow Bauer Media Group and Facebook and/or Google to share your networks, user ID and any other information you choose to share according to your Facebook and/or Google account settings. If you remove the Bauer Media Group app from your Facebook and/or Google settings, we will no longer have access to this information.

14. Opting out on Receipt of Marketing Communications

Email

If you receive a marketing email from one of our brands, you will have the option to “opt-out” by clicking on the unsubscribe link provided at the bottom of each and every message we send you. If you wish to unsubscribe from all brand lists please contact Bauer Data Protection Officer Please be aware that this will not unsubscribe you from our service based messages, such as subscription rewards and subscription reminders.  If you wish to be opted out of reward emails, please contact Bauer Data Protection Officer.

SMS

If you receive a marketing SMS text, please text “STOP” to any message received.

Phone

If you receive a marketing call from Bauer, please let the call operator know you do not wish to receive any further calls.

If you wish to stop all marketing communications from Bauer, please email Bauer Data Protection Officer

Push Notifications

We work with OneSignal to deliver Push Notifications via your internet browser if you select the option to “Subscribe” via the pop up message that appears when you visit the site.  We will only send you messages about relevant content, products and services available from the site.  On every push notification you receive there will be the option to Unsubscribe. 

15. Telephone and Mailing Preference Services

The Telephone Preference Service (TPS), the Corporate Telephone Preference Service (CTPS) and the Mailing Preference Service (MPS) allow you to choose to opt out of unsolicited marketing. However, if you are registered on any of the preference services, which are general opt-out registers, you may still receive marketing communications from us if you have given us your consent previously or if you subsequently give us that consent or if we are contacting you under legitimate interests.

16. Marketing to Children

We do not knowingly collect personal information from children under the age of 16 for marketing purposes.

17. Using our websites from outside the UK

Our servers are situated in the EEA and when you submit your details and in whichever country you are situated you agree to the data being transferred to the EEA and processed under the terms of GDPR and the Privacy and Electronic Communications (EC Directive) Regulations 2003 which stem from European Directives 95/46/EC and 2002/58/EC respectively. If you are not in agreement please do not add your personal details on the website.

18. Your Rights

Under GDPR, you have a number of rights, which are aimed at giving you control about how your personal data is used by us.

Access your personal data

You have the right to see what information we hold about you and the purposes for which we are using it. This is known as a Subject Access Request. In responding to such a request, we may ask for proof of your identity, to ensure that we do not send you personal data to another person. We will respond to any requests as soon as possible, but at least within 30 days.

Please click here to make a Subject Access Request

Amend your personal data

You may ask us to make any changes that you consider necessary to make the information accurate, please let us know and we will rectify this as soon as possible. Please write to or email:

Bauer Data Protection Officer
Bauer Media Group
Media House

Peterborough Business Park
Lynch Wood
Peterborough
PE2 6EA

We will require that you satisfactorily identify yourself to demonstrate your entitlement to view this data.

Delete your personal data

If you wish for your personal data to be deleted, we will review any request on a case-by-case basis. We will respond to you as soon as possible, at least within 30 days of receiving your request.

19. How long do we keep your personal data?

We hold personal data for different purposes and the length of time we keep your information will vary depending on the services or products we are providing. We will only keep your data for a reasonable period of time, which is based on the purpose for which we are using your data. Once that purpose has been fulfilled, we will securely delete that data or anonymise your information (so that we, or anyone else, can no longer tell that data relates to you) unless we are required to retain the data longer for legal, tax or accounting reasons.

We have a detailed retention policy for ensuring that we do not hold personal data for any longer than we justifiably need to. For further information on our retention policy contact Bauer Data Protection Officer.

20. Questions regarding this Privacy Policy

If you have comments or questions related to this Privacy Policy please email Bauer Data Protection Officer and we will respond as promptly and as fully as we can.

Complaints will be dealt with by the Data Protection Officer and will be responded to within 30 days. If you are not satisfied with the response you should refer your complaint to the ICO https://ico.org.uk/concerns/

21. Your California privacy rights

Under California Civil Code Section 1798.83, if you live in California and your business relationship with us is mainly for personal, family or household purposes, you may ask us about the information we release to other organisations for their marketing purposes. To make such a request, please email Bauer Data Protection Officer with “Request for California privacy information ”in the subject line. You may make this type of request once every calendar year. We will email you a list of categories of personal data we revealed to other organisations for their marketing purposes in the last calendar year, along with their names and addresses. Not all personal data shared in this way is covered by Section 1798.83 of the California Civil Code.

22. Changes to this Privacy Policy

This Privacy Policy will be amended from time-to-time if we make any important changes in the way that we collect, store and use personal data. We may notify you by sending an email to your last known email address or writing to your last known postal address to direct you to the Privacy Policy if the changes are material. Our dispatch of a communication to you will, in any event, constitute notification. Any changes will be effective immediately.