+49 9072 922750

Data protection

With the following privacy policy we would like to give you an overview of the processing of your personal data in connection with the press activity, the procurement of information and thus with the use of our website. We take data protection seriously and treat your personal data in accordance with the new GDPR. The use of our news and this website is possible without providing personal information and is exclusively for the purpose of obtaining news.

We hereby inform you about the nature, scope and purpose of the processing of personal data (hereinafter referred to as "data") within the area of ​​public relations and related websites, functions and content, as well as external online presence, such as web sites. our social media profile. With regard to the terminology used, e.g. "Processing" or "Responsible", we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).


Heiss Public Relations
Susanne Heiss
Albertus Magnus / Siedlung 63
89415 Lauingen

Responsible for privacy:

Susanne Heiss
Albertus Magnus / Siedlung 63
89415 Lauingen

Types of processed data:

We process your personal data in accordance with the provisions of the EU General Data Protection Regulation (DS-GVO), the new Federal Data Protection Act (BDSG-neu) and all other relevant laws.
- Inventory data (e.g., names, addresses).
- contact information (e.g., e-mail, phone numbers).
- content data (e.g., text input, photographs, videos).
- Data from media creators to deliver news

If you are included in the press mailing list, you agree to regularly receive journalistic relevant information and that travel data may be used in press trips / invitations to our clients / partners.

Categories of affected persons

Visitors and users of the news procurement offer. We assume that a legitimate interest of the data processor and thus on Art. 6 para. 1f is supported. (In the following, we refer to the data subjects as "users").

Purpose of processing

- Providing news, press releases of its features and content.
- Answering contact requests and communicating with users.
- Data is collected for the safe conduct of press trips to which you have registered. By signing up, they agree with the purpose-based use for passing on to airlines, railways, hotels, etc. This is necessary and is based on Art. 6 para. 1b GDPR.
- Communication and media work in the sense of legitimate interest with messages without advertising in the sense of competition law.
- If you would like to receive press releases or press newsletters, we need a valid e-mail address from you. After registering for our newsletter, we will confirm your acceptance in the press mailing list.
- Disclosure to third parties may be required if you wish to receive toys or games for review.
- The continued use of your email address for this purpose is based on our entrepreneurial interests and is based on Art. 6 para. 1 lit. F. DSGVO. You can object to the use of your email address at any time. All you need is an email (see above).

Relevant legal bases

In the press lounge, journalists have plenty of up-to-date information. Please contact us if you would like to receive journalistic relevant information such as press releases, media newsletters and invitations to press trips and conferences by email or post. We record them in the press mailing list for specific topics. You can contradict this consent at any time by email to presse [at] heiss-pr.de.

Safety measures

We take appropriate technical and organizational measures in accordance with Art. 32 GDPR in order to ensure a level of protection appropriate to the risk. Password protected address management is available according to Art. 25 GDPR.


Collaboration with processors and third parties

If, in the course of our processing, we disclose data to other persons and companies (contract processors or third parties), transmit them to them or otherwise grant access to the data, this will only be done on the basis of a project approved by them, a press trip - in the group or individual - a request for further information of the customer / region / toy goods or with legal permission (eg if a transmission of the data to third parties, as to payment service providers, in accordance with Art. 6 para. 1 letter b DSGVO is necessary to fulfill the contract), you have a legal obligation, such as air or rail ticket bookings, or on the basis of our legitimate interests (eg the use of agents, webhosters, etc.).

If we commission third parties to process data on the basis of a so-called "contract processing contract", this is done on the basis of Art. 28 GDPR. The data will be used exclusively for the processing of the press trip or press invitation to which you have agreed and deleted after completion of the project at the third party.

When conducting a press travel or press event, you will not be subject to any decision based solely on automated processing - including profiling - in accordance with Art. 22 DS-GVO.

Transfers to third countries

The transfer of personal data to offices in countries outside the European Union, ie to third countries, takes place, for example, if it is necessary for the execution and execution of your press trip, if it is required by law or if you have given us your consent. Subject to legal or contractual permissions, we process or have the data processed in a third country only in the presence of the special conditions of Art. 44 et seq. DSGVO.

Rights of data subjects

You have the right to ask for confirmation as to whether the data in question is being processed and for information about this data as well as for further information and a copy of the data in accordance with Art. 15 GDPR. In accordance with Art. 17 GDPR, you have the right to request that you be deleted from the mailing list and that the relevant data be deleted as well.


You have the right to grant consent in accordance with. Art. 7 para. 3 DSGVO with effect for the future. For this purpose, we have set up the email address datenschutz [at] heiss-pr.de.

Deletion of data

Unless the address data are stored in the context of the interest in the news, the data stored by us will be deleted as soon as they are no longer necessary for their intended purpose and the deletion does not conflict with any statutory storage requirements. Unless the data is deleted because it is required for other and legitimate purposes, its processing will be restricted. That The data is blocked and not processed for other purposes. This applies, for example for data which, for commercial or tax reasons, must be kept for internal office use.

According to legal requirements in Germany, the storage takes place in particular for 10 years according to §§ 147 Abs. 1 AO, 257 Abs. 1 Nr. 1 and 4, Abs. 4 HGB (books, records, management reports, accounting documents, trading books, relevant for taxation Documents, etc.) and 6 years in accordance with § 257 (1) no. 2 and 3, para. 4 HGB (commercial letters).

SSL encryption
Our sites use SSL encryption for security reasons and to protect the transmission of sensitive content, such as the requests you send to us as the site operator. You can recognize an encrypted connection by changing the address line of the browser from "http: //" to "https: //" and the lock symbol in your browser line. If SSL encryption is enabled, the data you submit to us can not be read by third parties.

contact form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored in order to process the request and in case of follow-up questions. We will not share this information without your consent.

The processing of the data entered into the contact form is therefore exclusively based on your consent (Art. 6 (1) lit. DSGVO). You can revoke this consent at any time. An informal message by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

The information you provide in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or delete the purpose for data storage (for example, after your request has been processed). Mandatory statutory provisions - especially retention periods - remain unaffected.

Online presence in social media

We maintain online presence within social networks and platforms in order to communicate with customers, prospects and users active there and to inform them about new news. When calling the respective networks and platforms, the terms and conditions and the data processing guidelines apply to their respective operators.

Unless otherwise stated, we will process users' data as far as they communicate with us within social networks and platforms, e.g. Write posts on our online presence or send us messages.

Created in accordance with guidelines of the DSGVO, in agreement with associations such as VDRJ and data protection generator RA Dr. med. Schwenke.