Bauer Publishing

PRIVACY SHIELD PRIVACY POLICY

Last Updated: August 14, 2017

This Privacy Shield Privacy Policy (this "Policy") applies to all personal information received by Bauer Publishing Group (Bauer) in the United States from the European Economic Area (EEA) (which includes the member states of the European Union (EU) plus Iceland, Liechtenstein and Norway) and from Switzerland. This Policy sets out our practices for collecting, using, maintaining, protecting and disclosing that personal information.

DEFINITIONS

For purposes of this Policy, the following definitions shall apply:

"Agent" means any third party that collects or uses personal information under the instructions of, and solely for, Bauer or to which Bauer discloses personal information for use on Bauer's behalf.

"Bauer" means Bauer Publishing Group, including Bauer Media Group, USA, LLC; Heinrich Bauer North America, Inc.; Heinrich Bauer Publishing, L.P.; Bauer Magazine, L.P.; Bauer Publishing Company, L.P., and Bauer Media Sales, Inc.; and any of its subsidiaries, predecessors and successors in the United States.

"Personal information" means any information or set of information that identifies or could be used by or on behalf of Bauer to identify (together with other information) a living individual. Personal information does not include information that is anonymized or aggregated.

"Sensitive information" means any personal information that reveals race, ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, information that concerns health or sex life, and information about criminal or administrative proceedings and sanctions.

EU-U.S. AND SWISS-U.S. PRIVACY SHIELD PRINCIPLES

Bauer participates in and complies with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the EEA and Switzerland to the United States, respectively. Bauer has certified to the Department of Commerce that it adheres to the Privacy Shield Principles. If there is any conflict between the terms of this Policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view Bauer’s certification, visit https://www.privacyshield.gov/.

Notice

Where Bauer collects personal information directly from individuals in the EEA and Switzerland, it will publicly inform them about its compliance with the EU-U.S. and/or Swiss-U.S. Privacy Shield participation in clear, concise language. This personal information may include basic contact information like name and email address, and billing information. Bauer uses this information to provide requested services and products to customers, customer support for such services and products, to bill customers, and to correspond with customers.

Bauer receives personal information about individuals in the EEA and Switzerland collected by Bauer’s European affiliates. Bauer uses this information to provide analytical and other data processing services to its affiliated companies. Bauer also receives information about employees of Bauer who are located in the EEA and Switzerland, and which is transferred in the context of the employment relationship. Bauer uses this information for internal employment and human resources purposes.

Bauer will subject all personal information received via the Privacy Shield to the EU-U.S. and Swiss-U.S. Privacy Shield Principles. Bauer is subject to the investigative and enforcement authority of the Federal Trade Commission (FTC), is obliged to disclose personal information in response to lawful requests by public authorities, for law enforcement, and national security purposes, and has potential liability for onward transfers to third parties. Additionally, an individual may be allowed to invoke binding arbitration to resolve disputes under certain limited conditions.

Choice

Bauer will offer individuals the opportunity to choose whether their personal information is to be used for a purpose other than the purpose for which it was originally collected or subsequently authorized by the individual. An individual may opt-out of such uses of their personal information by contacting us at the address given below.

Bauer will not use sensitive personal information for a purpose other than the purpose for which it was originally collected or subsequently authorized by the individual unless Bauer has received the individual’s affirmative and explicit consent (opt-in).

Data Integrity

Bauer will use personal information only in ways that are compatible with the purposes for which it was collected or subsequently authorized by the individual. Bauer will take reasonable steps to ensure that personal information is relevant to its intended use, accurate, complete and current.

Transfers to Agents

Bauer may disclose personal information to third party agents that perform functions on Bauer’s behalf, including but not limited to, providers of analytical, hosting, payment processing and other support services. These entities may have access to personal information if needed to perform their functions for Bauer. Bauer does not transfer personal information to non-agent third parties.

Bauer will require its agents to safeguard personal information consistent with this Policy by contract obligating the agent to provide at least the same level of protection as is required by the EU-U.S. and Swiss-U.S. Privacy Shield Principles. Under certain circumstances, Bauer may bear liability for onward transfers of personal data from the EEA where its agent processes personal data inconsistent with the EU-U.S. and Swiss-U.S. Privacy Shield Principles, unless Bauer proves that it is not responsible for the event giving rise to the damages.

Access and Correction

Bauer acknowledges the right of individuals to access their personal data. Upon request, Bauer will grant individuals reasonable access to personal information that it holds about them. In addition, Bauer will take reasonable steps to permit individuals to correct, amend, or delete information that is demonstrated to be inaccurate or incomplete. An individual may request to access their information, or otherwise correct, amend, or delete their information pursuant to the EU-U.S. and Swiss-U.S. Privacy Shield Principles by contacting us at the address given below.

Security

Bauer will take reasonable and appropriate precautions to protect personal information in its possession from loss, misuse and unauthorized access, disclosure, alteration and destruction.

Enforcement

Bauer will conduct compliance audits of its relevant privacy practices to verify adherence to this Policy. Any employee that Bauer determines is in violation of this policy will be subject to disciplinary action.

Bauer is subject to the investigative and enforcement authority of the FTC.

Dispute Resolution – Privacy Shield

In compliance with the EU-U.S. and Swiss-U.S. Privacy Shield Principles, Bauer commits to resolve complaints about your privacy and our collection or use of your personal information. EEA or Swiss individuals with inquiries or complaints regarding this Policy should first contact Bauer at the address given below. Bauer will investigate and attempt to resolve complaints regarding use and disclosure of personal information by reference to the principles contained in this Policy.

Bauer has further committed to refer unresolved privacy complaints under the EU-U.S. and Swiss-U.S. Privacy Shield Principles to an independent dispute resolution mechanism, the BBB EU PRIVACY SHIELD, operated by the Council of Better Business Bureaus. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit the BBB EU PRIVACY SHIELD web site at www.bbb.org/EU-privacy-shield/for-eu-consumers/ for more information and to file a complaint.

Where applicable to the employment relationship, Bauer agrees to cooperate and comply with the EEA and Swiss data protection authorities (DPAs) regarding the unresolved complaints of employee of European-affiliated companies who are located in the EEA and Switzerland. Such employees may direct complaints about their personal information to their respective DPA. For the contact information for your country’s DPA, please contact us at the address given below.

Under certain limited conditions, an individual may be able to invoke binding arbitration as provided under the Privacy Shield to address an otherwise unresolved complaint.

CONTACT INFORMATION

Questions regarding this Policy should be submitted to Bauer by mail to:

Privacy Shield Coordinator
Bauer Publishing Group
270 Sylvan Avenue
Englewood Cliffs, New Jersey 07632

Or by e-mail to privacypolicy@bauerpublishing.com

LIMITATIONS & CHANGES

Adherence by Bauer to the EU-U.S. and Swiss-U.S. Privacy Shield Principles may be limited (a) to the extent required to respond to a legal obligation; (b) to the extent necessary to meet national security, public interest or law enforcement obligations; and (c) to the extent expressly permitted by an applicable law, rule or regulation.

This Policy may be amended from time to time, consistent with the requirements of the EU-U.S. and Swiss-U.S. Privacy Shield Principles. The amended Policy will be made publicly available via Bauer’s website.