This English version is provided for information only. The German version is legally binding.
1. Controller
The controller responsible for the processing of personal data on this website and in connection with orders is:
Gebr. Mann Verlag GmbH
Kyffhäuserstraße 11
10781 Berlin
Germany
Telephone: +49 30 700 13 88-0
E-mail: info@gebrmann.de
Represented by the Managing Director Daniel Ralf Schmitz. Register court: Amtsgericht Charlottenburg, HRB 280299 B.
We have not appointed a data protection officer, as there is no legal obligation to do so (Section 38 German Federal Data Protection Act, BDSG).
2. Overview
We process personal data only to the extent necessary to operate this website, to answer enquiries and to process orders, or where you have given your consent. The legal bases are in particular Art. 6(1)(a) GDPR (consent), (b) (contract and pre-contractual measures), (c) (legal obligation, e.g. retention under commercial and tax law) and (f) (legitimate interests).
3. Hosting by Shopify and server log files
Our website is hosted by Shopify. For users outside North America, the provider is Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland. Technical processing may also be carried out by Shopify Inc., 151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada (together “Shopify”).
When you visit the website, your browser transmits technically necessary data to Shopify: IP address, date and time of access, page visited, referrer URL, browser type and version, and operating system. This data serves the secure and stable provision of the website. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and functional operation of the website. The storage period of the log files is determined by Shopify.
Shopify processes this data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. Transfers to Canada are based on the adequacy decision of the European Commission; transfers to other third countries are based on the standard contractual clauses of the European Commission (Art. 46(2)(c) GDPR). Further information: https://www.shopify.com/legal/privacy.
4. Cookies and consent
We use technically necessary cookies and similar technologies, for example to store your language selection and your cookie settings. The legal basis is Section 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG) in conjunction with Art. 6(1)(f) GDPR.
We only use cookies and similar technologies that are not necessary, for example for analysis or marketing purposes, with your consent, which we obtain via a cookie banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw or change your consent at any time with effect for the future via the “Cookie settings” link in the footer of every page. Information on the cookies used by Shopify: https://www.shopify.com/legal/cookies.
5. Contact and ordering by e-mail
If you write to us or place an order by e-mail, we process the information contained in your message, in particular your name, delivery and billing address, e-mail address, telephone number if applicable, and the titles ordered. We use this data to handle your enquiry and to process your order. The legal basis is Art. 6(1)(b) GDPR; for general enquiries, Art. 6(1)(f) GDPR (our legitimate interest in responding).
Our e-mail account is operated by Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland, as processor (Google Workspace). Where data is transferred to the USA in this context, this is based on the certification of Google LLC under the EU-US Data Privacy Framework (Art. 45 GDPR) and on standard contractual clauses.
6. Recipients in the processing of orders
To process your order, we pass on the necessary data (name, delivery and billing address, e-mail address, order data) to the following recipients:
Medien Service Runge GmbH (Runge Verlagsauslieferung), Bergstraße 2, 33803 Steinhagen, Germany. Runge handles warehousing and shipping on our behalf and in this respect acts as our processor pursuant to Art. 28 GDPR. Runge carries out invoicing, payment monitoring and dunning in its own name, because Runge acquires our claim to the purchase price. For these purposes, Runge processes your data as an independent controller. The legal basis is Art. 6(1)(b) and (f) GDPR (legitimate interest in the handling of receivables).
Shipping service providers commissioned by Runge with delivery. They receive your name and delivery address to the extent necessary for delivery.
Our tax advisers, to the extent necessary for accounting and for compliance with tax obligations (Art. 6(1)(c) GDPR).
Data is not transferred for any other purposes.
7. Storage period
We delete personal data as soon as it is no longer required for the respective purpose. We retain data from orders for as long as retention obligations under commercial and tax law apply (Section 257 German Commercial Code, HGB; Section 147 German Fiscal Code, AO; six, eight or ten years depending on the document). We delete general correspondence once the enquiry has been dealt with conclusively and no retention obligation applies.
8. Obligation to provide data
We need the information required to process an order (name, addresses, e-mail address) in order to conclude the contract. Without it, we cannot execute the order. There is no automated decision-making, including profiling.
9. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). A message to info@gebrmann.de is sufficient.
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, Germany, www.datenschutz-berlin.de.
10. Right to object
Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21(1) GDPR). We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. You may object to processing for direct marketing purposes at any time without giving reasons (Art. 21(2) GDPR). An informal objection sent to info@gebrmann.de is sufficient.
Last updated: 29 September 2026