Prestel Publishing Legal Notice - Data Privacy


This website is operated by
Prestel Verlag | München • London • New York |
Neumarkter Str. 28 | D - 81673 München

Tel.: +49 (0)89/ 4136 - 0 | Fax: +49 (0)89/ 4136 - 3721

Prestel Verlag | Penguin Random House Verlagsgruppe GmbH | Amtsgericht Gütersloh HRB 2810

Management:Thomas Rathnow (Vorsitzender), Tilo Eckardt, Britta Egetemeier, Grusche Juncker, Thomas Pichler

VAT Number: DE811148890

Prices: All prices on our website are in US Dollars and British Pounds and are subject to change without notice.

© 2020 Prestel Verlag • Penguin Random House Verlagsgruppe GmbH

Information regarding data protection and the use of person-related data by Penguin Random House Verlagsgruppe GmbH (Data Protection Guidelines)

Penguin Random House Verlagsgruppe GmbH Privacy Notice

I. Processing of personal data


The controller, responsible for the processing of your personal data, is Penguin Random House Verlagsgruppe GmbH, Neumarkter Straße 28, 81673 Munich (referred to here as “Penguin Random House”). You can contact the Penguin Random House data protection officer at:

2. What is personal data?

Personal data is any information relating to an identified or identifiable natural person such as their name, email address, telephone number, postal address or the IP address of their computer.

3. What data is processed?

3.1 Data that is provided by you
Any time that you enter into a contract with us, fill out a login field or provide us with consent we process the personal data provided by you, in particular data within the meaning of clause 2.

3.2 Data that is automatically collected
In order to show information on our website that is relevant to you we also process the following data:
• the address of the page you viewed on our website
• the address of the website that you visited immediately prior to our website (the so-called “referrer”)
• the date and time of your visit
• features of your device, in particular the operating system, the browser you used and the window size of your browser
• the IP address of your device in the internet
• randomly selected identification numbers that we store on your device. We use these identification numbers to recognise your device on our website. Technically, these identification numbers are stored in, for example, so-called
• “cookies” or
• “eTags”.
• device identifiers that are comprised of individual characteristics of your device. These device identifiers also help us in recognising your device on our website. Examples of such device identifiers are:
• the “Ad ID” of Apple’s iOS operating system
• the “Advertising ID” of Android’s operating system

4. When do we process your data?

4.1 Conclusion of contracts and pre-contractual measures
On the one hand, we process your personal data if you order products from Penguin Random House internet sites, if you register for a user profile or service with Penguin Random House, if you decide to take part in competitions and/or to subscribe to newsletters or if you provide us with a manuscript. Unless stated otherwise in the following provisions the legal basis for the processing of data in each of these cases is Article 6(1)(b) GDPR (Performance of a contract).

4.2 Running the website
On the other hand, we also process your personal data in order to offer you the best possible products, services, offers and content on this website, wherever possible customized for you, and to make your visit to our website as informative and productive as possible. Unless stated otherwise in the following provisions the legal basis for the processing of data in each of these cases is Article 6(1)(f) GDPR (Legitimate interests, based on our interest in providing you with the most attractive website possible).

5. Purposes of data processing

5.1 Handling of orders in our online shop
If you order products or services from our online shop we need to process your personal data in order to conclude and perform the contract and for the handling of your order, including payment and delivery. If you pay by credit card we obtain the so-called payment ID and the last four digits of your credit card number from our payment provider. These serve to authenticate and match your order, thus enhancing your security. The personal data required to carry out the payment is collected directly by the payment service provider. Your individual password is stored in an encrypted form so that you can log in for a subsequent order. The password itself is only visible to you. The legal bases for the processing of data as described above are Article 6(1)(b) GDPR (Performance of a contract, for the performance and handling of contracts) or Article 6(1)(f) GDPR (Legitimate interests, based on our interest in offering you a secure option for paying by credit card).
Any personal data processed in relation to orders is erased, at the latest, upon expiry of statutory warranty periods unless we are barred from doing so by statutory obligations of retention.

5.2 Individual competitions
If you provide personal data for one-off participation in a competition, separately from any contract and regardless of whether or not you have a profile with Penguin Random House, Penguin Random House will process this personal data solely for the proper running of the competition, in particular in order to determine and notify the winners. The legal basis for the processing of data here is Article 6(1)(a) GDPR (Consent).
Your data will be erased after the competition has been concluded unless there are other legal grounds for continued processing.

5.3 Consent for direct marketing
If you consent to receive direct marketing from us, e.g. by way of email, separately from any contract and regardless of whether or not you have a profile with Penguin Random House, we use your personal data solely to carry out the corresponding direct marketing activity. The legal basis for the processing of data in connection with any such direct marketing is Article 6(1)(a) GDPR (in conjunction with your consent).
You can revoke your consent at any time and opt out of the direct marketing, e.g. by clicking on the unsubscribe link at the end of a marketing email. Revoking consent will not affect the legality of any data processing carried out before the revocation of consent.

5.4 Direct marketing to interested parties and customers
We send emails with information about our products and services to potentially interested circles of people (in particular members of the press, business contacts). In our opinion we have a legitimate interest within the meaning of Article 6(1)(f) GDPR, namely in providing our authors and speakers with the maximum publicity for their work and thereby contributing to diversity of opinion. Conversely, the email recipients are presumably interested for professional reasons in regularly receiving up-to-date information about new products and services from us.

5.5 Collection of data when you contact us
If you contact us by email or via our contact form the data provided by you will be stored by us in order to process your query and, if appropriate, to contact you. The legal basis for this is Article 6(1)(f) GDPR. If the purpose of contact was to enter into a contract with us then Article 6(1)(b) GDPR constitutes a further legal basis.

5.6 Download codes
When you redeem a download code you will be asked to provide your email address. DigitalStores GmbH, our processor and technical partner for the delivery of downloads, will store your email address together with an individual numerical code. This numerical code will be added as a digital watermark to the data file you download. If, in the course of investigating any unauthorised distribution of content, we determine on the basis of the digital watermark that your download is the source, DigitalStores GmbH will provide us with the email address linked to your download so that we can contact you for clarification of the matter.
The legal bases for this processing of data are, on the one hand, Article 6(1)(b) (Performance of contract) and, on the other hand, Article 6(1)(f) (Legitimate interests, based on our interest in protecting works published by us from unauthorised access and illegal copying and distribution.)

5.7 Processors
Penguin Random House has entered into order processing contracts with processors who are carefully chosen, supervised and bound by instructions, in the area of IT security and system control, in relation to market research, in the creation of customer profiles and in the administration and running of competitions/sweepstakes.

II. Tracking tools for website analysis

1. General
We aim to provide the best possible online experience. So we use so-called “tracking” tools to enhance our online content. The tracking tools enable us to measure use of our online content and the effectiveness of our online advertising. With the help of tracking tools we collect, in particular, the following information:
• Which links on other websites do online users click on to get to
• Which of our pages are visited, when, how often, and in what order?
• What information are users of our website looking for?
• Which links or content do users of our website click on?

On the basis of this information we are able to create statistics that help us to understand the following questions:
• Which of our pages are particularly attractive to users of our website?
• Which products interest our (potential) customers the most?
• What content should we make available to our (potential) customers?
For these purposes we particularly use the automatically collected data referred to above in clause I.3.2. The data is stored solely under a pseudonym (i.e. a random identification number).
The legal basis for this processing of data is Article 6(1)(f) GDPR (Legitimate interests, based on Penguin Random House’s interest in adapting the website to the interests and requirements of its users) to the extent that no other legal basis is set out below.

2. Google Analytics
We use Google Analytics, a web analysis service provided by Google, Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA, referred to in the following as "Google").
The information that is generated with the help of Google Analytics, about your use of this website, is transferred by your browser to a Google server in the USA, where it is stored for up to 14 months. There is currently no decision from the EU Commission determining whether the USA generally provides an adequate level of data protection. Google has however undertaken to comply with the EU-US Privacy Shield Framework, published by the US Department of Commerce, on the collection, use and retention of personal data from member states of the EU. You can find further information on this here:
This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are processed in a shortened form and any connection to an identifiable person can be excluded. If any data collected about you can be connected to you personally this will therefore be immediately excluded and the personally identifiable data promptly deleted.
You can find more information on Google Analytics’ handling of user data in Google’s data protection policy:
You can prevent the collection and transfer to Google of any data connected to your use of the website (incl. your IP address) as well as Google’s processing of this data by downloading and installing the browser plugin available under the following link:

3. Google AdWords/ Remarketing
We also use the remarketing function in Google AdWords, a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (referred to in the following as “Google”).
Random House uses the remarketing function to show users of its website advertising, based on their interests, on other websites within the Google advertising network (i.e. on Google itself, so-called “Google adverts”, or on other websites). The user’s interaction with our website is analysed, in particular which content the user was interested in, so that they can be shown targeted advertising on other pages they visit after our website. In order to do this Google stores cookies in the browsers of users who visit certain Google services or websites within the Google Display Network. Information on these users’ visits is then collected through these cookies. This number serves as unique identification of a web browser on a specific computer and not to identify a person; no personal data is stored. The user can prevent the cookie being stored through the settings on their browser software. The user can also deactivate Google’s use of cookies by installing the plugin provided in the following link: You can find more information on Google Adwords as well as Google’s data protection policy under:

We also use Doubleclick by Google. Doubleclick by Google is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). The purpose of Doubleclick by Google is to show you advertising that is relevant to you. You see this advertising on our website and on the websites of other providers who collaborate with Google.
Our website stores for Google a so-called “cookie” in your browser together with a pseudonymised identification number (ID). When you visit our website (or other websites where the provider uses Doubleclick by Google) Google recognises your browser by means of this cookie ID. In doing so Google is attempting to collect the following information:
• Which websites have you visited?
• Which adverts from Google were shown to you?
• Which of these adverts did you click on?
Google then selects the advertising that it shows to you on the basis of this information. You can manage what advertising Google shows to you here. You can find further information on advertising by Google here. Further information on Google’s data protection is available here.
Google runs its servers in the USA, i.e. in a third country outside the EU. Google’s DoubleClick service transfers your data to these servers. There is currently no decision from the EU Commission determining whether the USA generally provides an adequate level of data protection. Google has however undertaken to comply with the EU-US Privacy Shield Framework, which provides appropriate and adequate guarantees. More information on this is available here.
The legal basis for the involvement of Doubleclick by Google as described in this section is Article 6(1)(f) GDPR (Legitimate interests, based on our interest in marketing the website for advertising purposes). Google is solely responsible for how it collects and processes the data accumulated in this manner.

5. Quantcast
PenguinRandom House uses the services of Quantcast for user measurement and advertising purposes. Quantcast only knows you as an anonymous unique identifier and associates information about your website visits or app use with this identifier, not with your name, email address or any other personal data. You can learn more about Quantcast’s commitment to confidentiality and data protection in the Quantcast Privacy Policy. You can opt out of advertising and data collection by Quantcast on the Quantcast-opt-out-page or through the more extensive opt-out service provided by the European Digital Advertising Alliance.
You can opt out of any future collection or use of data by Quantcast by clicking here on the link “Click here to opt out” in order to set an opt-out cookie in your browser: If at any time you delete all the cookies on your computer you will need to re-set the opt-out cookie.

6. Stats (Jetpack)
Penguin Random House uses the web analysis service Jetpack (previously: Stats), in order to analyse and make regular improvements to the use of our website. By using the statistics obtained we can improve our content and make it more interesting to you, the user. We also use this system to protect the security of the website e.g. in recognising attacks or viruses. For the exceptional cases where personal data is transferred to the USA, Automattic Inc. has agreed to comply with the EU-US Privacy Shield, The legal basis for the use of Jetpack is Article 6(1)(f) GDPR. (Legitimate interests, based on Random House’s interest in adapting the website to the interests and requirements of its users).
Cookies are stored on your computer in order to carry out this analysis. (For more detail on cookies please see clause 3.) The information gathered is stored on a server in the USA. Please note that if you prevent the storage of cookies this might restrict full use of this website. It is possible to prevent storage of cookies through the settings on your browser or by clicking on the button “Click here to Opt-out” under
This website uses Jetpack with an extension, through which IP addresses are processed in a shortened form directly after their collection in order to exclude any connection to an identifiable person.
Information on the third party supplier: Automattic Inc., 60 29th Street #343, San Francisco, CA 94110–4929, USA,, and the third party supplier of tracking technology: Quantcast Inc., 201 3rd St, Floor 2, San Francisco, CA 94103–3153, USA,

7.adality GmbH
Penguin Random House uses the anonymising technology of adality GmbH ( to create anonymised information, which in turn is used to optimize the quality of advertising. As part of this process a cookie-based analysis is used that contains only an anonymised identifier and no personal data. If you do not wish to see optimized advertising you can object to the use of adality cookies at any time (

III. Use of social media plugins

Penguin Random House currently uses the following social media plugins: Facebook, Google+ and Twitter. We use the so-called two-click solution. This means that when you visit our site no personal data whatsoever is initially passed on to the plugin providers. You can identify the plugin provider through the marking on the icon, through their initial letter or their logo. We provide you with the opportunity to communicate directly with the plugin provider via this button. Only if you click on the marked field, thus activating it, does the plugin provider receive information that you have called up the corresponding website from our online presence. In addition, the data referred to under clause I.3.2 is relayed. In the case of Facebook and Xing, according to the provider of each in Germany, the IP address is anonymised immediately after it has been collected. By activating the plugin, personal data is transferred from you to the corresponding plugin provider and stored there (in the case of US providers, in the USA). As plugin providers carry out data collection principally through the use of cookies we recommend deleting all cookies through the security settings on your browser before clicking on the greyed out icon.
We have no influence over the data collected and the manner in which it is processed nor do we know the full extent of the data collection, the purposes of the processing or the length of time that data is retained. We also have no information in respect to the deletion of collected data by the plugin provider.
The plugin provider stores the data collected about you as a user profile and uses this for the purposes of advertising, market research and/or targeted design of its website. This utilisation is carried out in particular (also in relation to users who are not logged in) to display targeted advertising and to inform other users of the social network of your activity on our website. You have the right to object to the creation of a user profile though to do so you must contact the plugin provider in question to lodge your objection. By using these plugins we provide you with the opportunity to interact with social networks and other users so that we can improve our online presence and make it more interesting for you as a user. The legal basis for the use of social media plugins is Article 6(1)(f) GDPR (Legitimate interests, based on Random House’s interest in offering you a website with the networking opportunities of social media or Article 6(1)(b) GDPR (Performance of contract i.e. the transfer of data is required to comply with your user relationship with the plugin provider or, if applicable, Article 6(1)(a) GDPR (Consent in the context of the two-click solution).
The data is transferred regardless of whether or not you have an account with the plugin provider and are logged in to such account. If you are logged in with the plugin provider any of your data collected by us will be directly linked to your existing account with the plugin provider. If you click on the activated button and e.g. set up a link to the page, the plugin provider will also store this information in your user account and disclose this publicly to your contacts. We recommend that you routinely log out after using a social network, in particular before activating the button as in this way you can avoid any linking to your profile with the plugin provider.
Further information on the purpose and extent of data collection and processing by plugin providers is available in the following data protection notices. These also contain further information on your rights in this area and how to manage your settings to protect your privacy.

The addresses of the relevant plugin providers and URLs with their data protection policies:
a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA;; further information on data collection:, and Facebook complies with the EU-US Privacy Shield,
b) Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; Google complies with the EU-US Privacy Shield,
c) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; Twitter complies with the EU-US Privacy Shield,
d) Pinterest Inc., 808 Brannan St., San Francisco, CA 94103-4904, USA; Pinterest complies with the EU-US Privacy Shield,

IV. Your rights

You have the following rights in connection with your personal data:
• the right of access,
• the right to rectification or erasure,
• the right to restriction of processing,
• the right to object to processing,
• the right to data portability.
You also have the right to lodge a complaint with a supervisory authority about our processing of your personal data.

May 2018


For comments relating to the content oft the website generally, please email us at Klaus Greifenstein

Site design by Bewegte Werbung

Technical realization by arvato systems