1. General Information
This Privacy Policy explains how personal data is processed when using LYDnews.
LYDnews is a B2B professional platform for marketing, media and AdTech. The service includes freely accessible editorial content as well as functions requiring registration, in particular user accounts, community functions, personal profiles, saved content, topic cards, dashboard functions and other member functions.
Personal data means any information relating to an identified or identifiable natural person. This may include, for example, name, email address, login data, profile information, contributions, usage data or technical access data.
2. Controller
The controller responsible for data processing on this website is:
LYD Ventures GmbH
represented by Managing Director Richard Wagner
Eigelstein 127
50668 Cologne
Germany
Commercial Register: Local Court of Cologne, HRB 126808
Email: info@lydnews.com
3. Data Protection Contact
For questions regarding data protection, the processing of personal data or the exercise of data subject rights, users may contact:
Email: info@lydnews.com
4. Purposes and Legal Bases of Processing
We process personal data only where there is a legal basis for doing so. Depending on the processing activity, the following legal bases may apply in particular:
• Art. 6(1)(a) GDPR, where consent has been given
• Art. 6(1)(b) GDPR, where processing is necessary for the use of the service or for the performance of a user relationship
• Art. 6(1)(c) GDPR, where processing is necessary to comply with legal obligations
• Art. 6(1)(f) GDPR, where processing is necessary for the purposes of legitimate interests
Legitimate interests may include, in particular, the secure and stable operation of the website, further development of the service, prevention of misuse, editorial communication and technical error analysis.
5. Access to the Website and Server Log Files
When LYDnews is accessed, data transmitted automatically by the browser of the device used is processed for technical reasons.
This may include:
• IP address
• date and time of access
• page or file accessed
• amount of data transferred
• browser used
• operating system used
• previously visited page
• access status
• technical error and security information
The processing is carried out in order to provide the website technically, ensure stability and security, analyse errors and prevent misuse.
The legal basis is Art. 6(1)(f) GDPR.
Server log files are stored only for as long as necessary for technical security, error analysis and prevention of misuse. The specific retention period is:
14 days
6. Hosting and Technical Provision
LYDnews is operated by an external hosting provider.
Hosting provider:
Hetzner Online GmbH
Industriestraße 25, 91710 Gunzenhausen, Germany
The hosting provider processes personal data on our behalf to the extent necessary for the operation, security and provision of the website. This may include, in particular, server log files, technical access data, content data, communication data and data from user accounts.
Processing in connection with hosting takes place on servers in Germany within the European Union. In this respect, no transfer to a third country takes place.
A data processing agreement pursuant to Art. 28 GDPR has been concluded with Hetzner Online GmbH.
The legal basis is Art. 6(1)(f) GDPR.
7. Registration and User Account
Registration is required for certain areas of LYDnews. This applies in particular to community functions, personal profiles, saved content, topic cards, dashboard functions and other member functions.
When registering and using a user account, the following data may be processed in particular:
• name or username
• email address
• password in encrypted form
• profile information
• login times
• technical session data
• status of the user account
• user account settings
• saved content, topic cards and learnings
• posts, comments and other submissions
Processing takes place in order to provide the user account, enable access to the members’ area, offer community functions, provide personal saving functions and ensure the technical security of the service.
The legal basis is Art. 6(1)(b) GDPR. Where processing serves the security, prevention of misuse or further development of the service, the legal basis is Art. 6(1)(f) GDPR.
User accounts are stored for as long as the account exists. After deletion of the user account, personal data will be deleted unless statutory retention obligations, security interests or other legitimate reasons prevent deletion.
8. Community Functions and Contributions
LYDnews offers registered users community functions for professional exchange.
When using the community, the following data may be processed in particular:
• name or username
• profile information
• posts
• comments
• reactions
• publication times
• technical usage data
• reports and moderation activities
Community contributions may be visible to other registered users. Depending on the design of the respective function, certain content may also be publicly visible. The specific visibility depends on the relevant function and the platform settings.
Processing takes place in order to provide community functions, enable discussions, moderate content, prevent misuse and ensure the professional quality of the exchange.
The legal basis is Art. 6(1)(b) GDPR. For moderation, prevention of misuse and ensuring the operation of the community, the legal basis is Art. 6(1)(f) GDPR.
Contributions are generally stored for as long as the user account exists or the contribution is required for the community context. After deletion of a user account, contributions may be deleted or retained in anonymised form where technically possible and legally required.
9. Topic Cards, Dashboard and Saved Learnings
Users may save content, learnings, notes or topic cards in the members’ area where these functions are provided.
The following data may be processed in particular:
• saved articles and content
• topic cards
• personal notes
• markings
• saved learnings
• times of saving
• personal settings
Processing takes place in order to provide personal knowledge and saving functions. Where content is personalised on the basis of interests selected by users themselves, the processing serves to provide a personalised feed.
The legal basis is Art. 6(1)(b) GDPR.
This data is stored for as long as the user account exists or until users delete individual content, where the platform offers this function. Statutory retention obligations and legitimate security interests remain unaffected.
10. Contact
If users contact us by email, contact form or by another means, we process the information provided in order to handle the enquiry.
This may include:
• name
• email address
• company
• telephone number
• content of the message
• time of contact
• technical metadata relating to the communication
Processing takes place in order to handle the enquiry and communicate with the person making the enquiry.
The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to a user relationship. In other cases, the legal basis is Art. 6(1)(f) GDPR.
Enquiries will be deleted when they are no longer required and no statutory retention obligations prevent deletion.
11. Feedback During the Pilot Phase
During the pilot phase, users may provide feedback on content, functions, user guidance and user experience.
The following data may be processed in particular:
• name or username
• email address
• content of the feedback
• technical information relating to use
• time of the feedback
Processing takes place in order to improve LYDnews, identify errors and further develop functions.
The legal basis is Art. 6(1)(f) GDPR. Where feedback is expressly requested voluntarily for specific purposes, Art. 6(1)(a) GDPR may serve as the legal basis.
12. Newsletter and Editorial Notifications
If users subscribe to a newsletter or activate editorial notifications, we process the data required for this purpose.
This may include:
• email address
• name, if provided
• time of registration
• confirmation of registration
• IP address at the time of registration and confirmation
• selected topics or settings
• technical sending and delivery data
Processing takes place in order to send the newsletter or the requested notifications.
The legal basis is Art. 6(1)(a) GDPR.
Registration for the newsletter generally takes place using a confirmation procedure. After registration, an email is sent in which the registration must be confirmed.
Newsletter Performance Measurement
Where we analyse the use of our newsletter, the emails may contain technical identifiers that allow us to record whether and when an email was opened and which links were clicked. This may include, in particular, opening time, clicks on links contained in the email, the email client used and technical device information.
This analysis is carried out in order to tailor the newsletter to the interests of recipients, improve content and understand its reach.
The legal basis for performance measurement is Art. 6(1)(a) GDPR. Consent to performance measurement is obtained as part of the newsletter registration process and may be withdrawn at any time with effect for the future. Consent may be withdrawn by unsubscribing from the newsletter.
Users may unsubscribe from the newsletter at any time. A corresponding link is included in every newsletter email. Alternatively, users may unsubscribe by email at:
newsletter@lydnews.com
We use the following service provider for sending newsletters:
Brevo GmbH
Köpenicker Str. 126
10179 Berlin, Germany
Where required, a data processing agreement will be concluded with the service provider.
13. Webinars, Downloads and Events
If users register for webinars, downloads or events, we process the data required for the respective service.
This may include:
• name
• email address
• company
• position
• selected event or download
• participation information
• communication data
Processing takes place in order to provide the respective service, manage registration, conduct the event or service and communicate in connection with it.
The legal basis is Art. 6(1)(b) GDPR. Where consent is obtained, the legal basis is Art. 6(1)(a) GDPR.
14. Sponsored Content and Transfer of Leads to Sponsors
LYDnews offers certain content such as white papers, studies, reports or webinars that are financed by sponsors and for which users are required to provide contact details in order to access them. Such content is identified as sponsored.
The following data may be processed in particular:
• name
• email address
• company
• function or position
• selected content
• time of access
Where content is financed by a sponsor and the contact details provided when requesting the content are transferred to that sponsor, this will take place only on the basis of express consent given in advance. Before any transfer, users will be informed transparently which sponsor will receive the data and for what purpose. The respective sponsor is independently responsible for the further processing of the data transferred to it. Its own privacy policy also applies.
The legal basis for transferring data to the sponsor is Art. 6(1)(a) GDPR. Where the data is processed solely to provide the requested content without being transferred, the legal basis is Art. 6(1)(b) GDPR.
Consent to the transfer of data to sponsors may be withdrawn at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal or the independent processing carried out by the sponsor.
15. Payment Processing and Paid Services
For paid services such as membership subscriptions, paid downloads, events or ticketing, we process the data required for contract performance and billing.
This may include:
• name
• billing address
• email address
• selected service and contract term
• selected payment method
• transaction and booking data
• payment status
• invoice data
Processing takes place in order to establish, perform, bill and manage the respective contract and to comply with statutory obligations.
The actual payment processing is carried out by external payment service providers. Depending on the payment method selected, the data required for payment is transmitted to the respective provider. Complete payment data such as credit card numbers is generally processed exclusively by the payment service provider and is not transmitted to us, or not transmitted to us in full.
Payment Service Providers Used:
Stripe Payments Europe, Limited
1 Wilton Park, Wilton Place, Grand Canal Street Lower
Dublin 2, D02 FX04
Ireland
The privacy policies of the respective payment service providers also apply. Where service providers process personal data on our behalf, a data processing agreement will be concluded where required.
The legal basis for contract performance is Art. 6(1)(b) GDPR. Where statutory retention obligations apply, in particular under commercial and tax law, the legal basis is Art. 6(1)(c) GDPR.
Invoice and accounting-relevant data is stored for the duration of the statutory retention periods. Depending on the type of document, these are generally eight years for accounting records such as invoices and up to ten years for certain other documents under current commercial and tax law.
16. Referral and Recommendation Programme
LYDnews may offer a referral programme through which users can recommend LYDnews to other persons.
The following data may be processed in particular:
• name or username of the referring person
• email address of the referred person
• a personal message, where applicable
• status and assignment of the referral
• time of the referral
If users provide the contact details of a third person, they may do so only if that person has agreed to this. The referred person will receive a one-time invitation and will be informed about the origin of the referral and their rights. The referred person’s data will not be stored or used beyond this unless they register themselves.
Processing takes place in order to provide the referral programme and assign referrals.
The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in promoting the service through personal recommendations. The data of the referred person will be deleted if the invitation does not result in registration and there are no legitimate reasons for further storage.
17. Cookies, Local Storage Technologies and Similar Technologies
LYDnews may use cookies, local storage technologies and similar technologies. These may be necessary to provide the website technically, enable user accounts, manage login sessions, ensure security or save settings.
Technically necessary cookies and storage technologies are used to provide functions expressly requested by users. The legal basis for storing information on the user’s device and accessing such information is Section 25(2) TDDDG. The legal basis for processing personal data is Art. 6(1)(f) GDPR or Art. 6(1)(b) GDPR.
Where cookies or similar technologies are not technically necessary, they will be used only after prior consent has been obtained. This applies in particular to analytics, reach measurement, marketing or tracking technologies. The legal basis for storing information on the user’s device and accessing such information is Section 25(1) TDDDG. The legal basis for the subsequent processing of personal data is Art. 6(1)(a) GDPR.
Consent may be withdrawn at any time with effect for the future.
Further information is provided in the consent banner or cookie settings.
18. Consent Management
LYDnews may use a consent management tool to manage consent.
Provider:
CCM19
Papoo Software & Media GmbH
Germany
The following data may be processed in particular:
• consent status
• time consent was given or refused
• selected categories
• technical identifier
• browser and device information
Processing takes place in order to document and manage consent.
The legal basis is Art. 6(1)(c) GDPR where there is a legal obligation to provide evidence, and Art. 6(1)(f) GDPR for the technical management of consent.
19. Reach Measurement and Analytics
LYDnews may use analytics tools to understand how the website is used, improve content and further develop technical functions.
The following data may be processed in particular:
• page views
• time spent on pages
• click behaviour
• source of access
• device type
• browser
• operating system
• approximate location data
• technical identifiers
Analytics Tool:
LYDnews uses Google Analytics 4 to measure reach and analyse use of the website. Google Analytics 4 is activated only after prior consent has been provided via the consent banner.
Google Analytics 4 is integrated via Google Tag Manager.
The legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
Where privacy-friendly, anonymous or purely technically necessary reach measurement is used without consent, the specific legal basis and technical implementation must be reviewed separately and described precisely here.
20. Advertising, Sponsoring and Performance Measurement for Advertising Partners
LYDnews is financed in part through advertising, sponsoring and sponsored content. In this context, advertising content may be displayed and its delivery measured.
The following data may be processed in particular:
• impressions and visibility of advertising or sponsoring content
• clicks and interactions with advertising or sponsoring content
• page views in the context of advertising
• device type, browser and operating system
• approximate location information derived from the IP address
• technical identifiers
• time of delivery
Processing takes place in order to display advertising and sponsoring content, demonstrate its delivery and effectiveness to advertising partners in aggregated form and further develop the advertising offering. Reporting to advertising partners and sponsors is generally carried out in aggregated, non-personal form.
Where cookies, comparable storage technologies or tracking technologies that are not technically necessary are used for the delivery or measurement of advertising, they will be used only after prior consent. The legal basis is then Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. Consent may be withdrawn at any time with effect for the future.
Services Used:
No external advertising or advertising measurement services are currently used.
Sponsoring and advertising content is delivered internally within the platform. Personalised performance measurement for advertising partners does not currently take place. Reports, where available, are provided only in aggregated, non-personal form.
21. Embedded Content from External Providers
LYDnews may embed content from external providers, such as videos, audio and podcast players, maps, posts, graphics or other media.
When such content is accessed, personal data may be transmitted to the respective providers. This may include, in particular, IP address, technical device information, browser data, time of access and information about the page accessed. In the case of embedded audio and video content, access and playback data may also be processed.
Where possible, external content is embedded in such a way that data is transmitted only after active consent or interaction.
The following providers may be used:
• YouTube / Vimeo / other video provider to be added
• Google Maps
The legal basis is Art. 6(1)(a) GDPR where consent is obtained. In other cases, Art. 6(1)(f) GDPR may apply where there is a legitimate interest in embedding the content and no overriding interests of the data subjects prevent this.
22. Social Media Profiles
LYDnews may operate profiles on social networks in order to provide information about content and communicate with users.
When visiting these profiles, the privacy policies of the respective platforms also apply. For individual platforms, joint controllership within the meaning of Art. 26 GDPR may exist between LYDnews and the platform operator, in particular with regard to statistics and reach functions. In such cases, the relevant agreements of the platform apply and must be added here.
Platforms:
• LinkedIn: https://www.linkedin.com/company/lydnews
If users communicate with LYDnews via social networks, the data transmitted in this context may be processed in order to handle the enquiry.
The legal basis is Art. 6(1)(f) GDPR.
23. Recipients of Personal Data
Personal data will be disclosed to third parties only where this is necessary, there is a legal basis or consent has been given.
Recipients may include, in particular:
• hosting providers
• technical service providers
• email and newsletter service providers
• payment service providers
• analytics and consent management services
• advertising and measurement service providers
• sponsors, where consent has been given to the transfer of leads
• service providers for community and platform functions
• legal and tax advisers
• public authorities, where there is a statutory obligation
Where service providers process personal data on our behalf, we conclude a data processing agreement with them where required.
24. Data from External Sources and Data Partnerships
In certain cases, we process personal data that we have not obtained directly from the data subjects but from other sources. This may occur in particular in connection with content or data partnerships, publicly available professional information or cooperation with service providers.
The following categories of data may be processed in particular:
• professional contact and profile information
• information about companies and positions
• aggregated or anonymised industry and usage data
The source of the data varies depending on the respective case. Sources may include, in particular, partner companies, publicly accessible sources or commissioned service providers.
Where we obtain personal data from other sources, we inform the data subjects in accordance with Art. 14 GDPR unless a statutory exception applies.
The legal basis is Art. 6(1)(f) GDPR where processing serves legitimate interests, or Art. 6(1)(a) GDPR where consent has been given. When producing aggregated industry analyses, we ensure that no reference can be made to individual data subjects.
25. Transfers to Third Countries
Personal data is transferred to countries outside the European Union or the European Economic Area only where the statutory requirements for such transfers are met.
This may apply in particular where service providers used by us are established in a third country or process data there.
In such cases, we ensure that appropriate safeguards are in place, such as an adequacy decision by the European Commission, Standard Contractual Clauses or other safeguards provided for by law.
Specific transfers to third countries may occur in particular in connection with the following services:
Google Analytics 4 / Google Tag Manager
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Parent company: Google LLC, USA.
A transfer of personal data to the USA cannot be ruled out. The legal basis for the use of analytics and tracking technologies is consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. Safeguards include, in particular, the European Commission’s Standard Contractual Clauses as well as additional contractual and technical safeguards implemented by the provider.
Resend
Provider: Plus Five Five, Inc. / Resend, USA.
According to its own information, Resend stores customer data in the USA. Transfers to a third country take place on the basis of appropriate safeguards, in particular Standard Contractual Clauses, where personal data is transferred from the EU to the USA.
Stripe
Provider: Stripe Payments Europe, Limited, Ireland.
In connection with payment processing, processing by Stripe companies or service providers outside the EU/EEA cannot be ruled out. Stripe provides information on international data processing and data protection.
26. Retention Period
Personal data is stored only for as long as necessary for the respective purposes.
The specific retention period depends on the respective purpose of processing, statutory retention obligations, security interests and user account settings.
As a general rule:
• Server log files: 14 days, unless longer storage is required in individual cases to investigate security incidents, misuse or technical disruptions
• User account: for as long as the account exists
• Community contributions: for as long as they are required for the community context or until deletion
• Contact enquiries: until final processing, unless retention obligations apply
• Newsletter data and performance measurement: until consent is withdrawn or the user unsubscribes
• Data from sponsored content and lead transfers: until consent is withdrawn or for as long as required for the respective purpose
• Referral data: until the referral has been assigned. Data of referred persons is retained until registration or deletion
• Payment and invoice data: in accordance with statutory commercial and tax retention periods, generally eight years for accounting records and up to ten years for certain other documents
• Records of consent: for as long as evidence is required
• Tax-related or business-relevant documents: in accordance with statutory retention periods
27. Obligation to Provide Data
The provision of certain personal data is necessary if users wish to create an account, use community functions, save content, use paid services or communicate with LYDnews.
Without the required data, certain functions cannot be provided.
There is no obligation to provide additional voluntary information.
28. Automated Decision-Making
No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.
Where content is personalised on the basis of interests selected or topics saved by users themselves, this does not constitute an automated decision producing legal effects or similarly significantly affecting the user.
If such procedures are used in the future, this Privacy Policy will be amended and the information required by law will be provided.
29. Security
LYDnews implements technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.
These measures may include, in particular, access restrictions, encrypted transmission, secure password storage, role and permission concepts, backups and technical security measures.
The measures are adapted in line with technical developments and the relevant risks.
30. Minors
The LYDnews service is aimed at professional users as well as specialists and executives and is not intended for children or adolescents.
Persons under the age of 16 should not provide us with personal data or use functions requiring registration without the consent of their legal guardians.
We do not knowingly process personal data relating to persons under the age of 16. If we become aware that personal data relating to a minor has been processed without the required consent, we will delete this data unless a statutory retention obligation prevents deletion.
31. Rights of Data Subjects
Under the GDPR, data subjects have various rights. These include, in particular, the right of access, rectification, erasure, restriction of processing, data portability and objection. Consent that has been given may also be withdrawn at any time with effect for the future.
Users have the following rights in particular:
• right of access pursuant to Art. 15 GDPR
• right to rectification pursuant to Art. 16 GDPR
• right to erasure pursuant to Art. 17 GDPR
• right to restriction of processing pursuant to Art. 18 GDPR
• right to data portability pursuant to Art. 20 GDPR
• right to object pursuant to Art. 21 GDPR
• right to withdraw consent pursuant to Art. 7(3) GDPR
• right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR
To exercise these rights, it is sufficient to send a message to:
info@lydnews.com
32. Objection to Processing Based on Legitimate Interests
Where personal data is processed on the basis of Art. 6(1)(f) GDPR, data subjects may object to the processing on grounds relating to their particular situation.
In the event of an objection, we will no longer process the personal data concerned unless there are compelling legitimate grounds for the processing or the processing is required for the establishment, exercise or defence of legal claims.
33. Withdrawal of Consent
Consent that has been given may be withdrawn at any time with effect for the future.
Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before the withdrawal.
Consent may be withdrawn via:
• cookie or consent settings
• unsubscribe link in the newsletter
• email to info@lydnews.com
34. Right to Lodge a Complaint with a Supervisory Authority
Data subjects have the right to lodge a complaint with a data protection supervisory authority.
The competent authority may in particular be the supervisory authority at the data subject’s habitual residence, place of work or the place of the alleged infringement.
For North Rhine-Westphalia, this is:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
(Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen)
Kavalleriestraße 2–4
40213 Düsseldorf
Website: ldi.nrw.de
35. Changes to This Privacy Policy
We may amend this Privacy Policy if legal, technical or organisational requirements change.
The current version is available on LYDnews.