Data Protection Rights Center

Privacy Statement of the Rights Center of Carlsen Verlag GmbH

Controller: CARLSEN Verlag GmbH Managing directors: Renate Herre, Joachim Kaufmann

Contact details DPO:

Data Subjects: The following privacy policy applies to all persons in contact with the Carlsen Rights Department - regardless of whether they are authors, illustrators, graphic designers, (potential) licensees, agents, colleagues from other publishers, event organizers, or other persons acting in the sphere of activities. 

For the sake of simplicity, only parties interested in rights will be discussed below. This refers to all persons who are interested in our products, and whose personal data are thus collected and processed electronically for this purpose.

Processing activity: We will record personal data when initial contact is established. Initial contact is established when you contact us directly via email or telephone, or via our website. You can also download reading copies from our website directly. In this case, we ask you to fill in a form with the following information: surname, first name, company’s contact details such as name, address, telephonenumbers, professional e-mail address and other data serving the publishing purpose and business relationship, We will connect your personal data with the ISBN of the requested reading copy. Your data will be processed in our CRM-system Salesforce Salescloud. We send automated e-mails to our partners with the help of Salesfore Marketingcloud. 

 Processing purposes: The collection, processing or use of data is based on the following purposes:  

In addition to the general business purpose, these further processes are primarily the distribution of information (forwarding of previews and rights lists, mailings and general communication), and dispatch of review copies (print and digital) as well as invitations to events such as trade fairs. 

Any other processing or use (for example, conveyance to third parties) is - with the exception of the necessary disclosure in the sense of the publishing purpose - not permitted. In addition, exceptions to this are transfers to which the publisher is legally obliged (for example, as part of the employment relationship, etc.). 

Legal basis: Processing of the data of our potential and current Carlsen Rights Department’s  business partner  is, if applicable, Article 6 (1) lit. b GDPR, otherwise: Article 6 (1) f GDPR and the legitimate interest in the effective exercise of the license rights.  

Data Recipient categories: The following recipient categories can view this data: Employees of the Rights Department of Carlsen Verlag GmbH, if necessary, employees of other departments, apprentices, as well as employees of our delivery services,  Zeitfracht GmbH, Industriestraße 23, 70565 Stuttgart; Buchzentrum AG, Industriestraße Ost 10, CH-4614 Hägendorf; and Mohr Morawa Buchvertrieb GmbH, Sulzengasse 2, A-1230 Vienna. 

Data that you provide to us via our website (e.g. in forms for purchase, newsletter registration, as part of a competition) is currently stored in the Salesforce Sales Cloud ( Germany GmbH, Erika-Mann-Str. 31, 80636 Munich, Germany) on servers in Germany and France (or generally in the EU). 

For sending our newsletters, for automated mailings we use the Salesforce Marketing Cloud. For this purpose, the newsletter subscriber's data is transferred from Salescloud to Marketing Cloud. The Salesforce Marketing Cloud data is stored and processed on Salesforce servers in the USA. Salesforce undertakes with binding internal data protection rules in accordance with Art. 46 para. 2 b) and Art. 47 EU-DSGVO (so-called binding corporate rules) to maintain an appropriate level of data protection even when processing data outside the European Union.

 Handling with personal Data 

Data retention: Personal information will only be stored and processed as long as necessary for the purposes for which it was obtained or to comply with legal requirements regarding reporting or retention of documents. 

Each party interested in rights has the right to object to the processing of his/her personal data and to make use of the right to lodge a complaint to the supervisory authority. 

 Parties have the right of gratuitous access to their stored data as well as a right to the rectification, blocking, restriction of processing, data portability, or erasure of this data. Excepted from this are data whose rectification, blocking or erasure conflict with legal, statutory or contractual retention periods or which must be stored for billing purposes. 

There is no obligation on the part of the data subject to provide his/her data. 

If the controller intends to process the personal data for a purpose other than that for which it was obtained, the controller shall provide the data subject with information about that other purpose and all other relevant information prior to such further processing. 

Due to current circumstances, such as a change in the relevant data protection provisions, this privacy statement will be updated, if necessary. 

Information on the personal data is provided by the above persons at: