Privacy
1. Data Controller
The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Serviceplan Social & Culture GmbH & Co. KG
Steinhöft 9
20459 Hamburg
Germany
Innings is an editorial initiative operated by Serviceplan Social & Culture GmbH & Co. KG.
2. Data Protection Officer
You may contact our Data Protection Officer at:
Dr. Georg F. Schröder, LL.M.
Serviceplan Group SE & Co. KG
Friedenstraße 24
81671 Munich
Germany
Email: datenschutz@serviceplan.com
3. General Information
We process personal data only where this is necessary to provide and operate the INNINGS website and newsletter, respond to enquiries, fulfil legal obligations or protect our legitimate interests. Personal data means any information relating to an identified or identifiable natural person.
4. Website Hosting and Server Log Files
When you visit the website, the hosting provider automatically collects technical information in server log files. This information may include:
- IP address
- date and time of access
- requested page or file
- referrer URL
- browser type and version
- operating system
- access status and HTTP status code
- amount of data transferred
This processing is necessary to deliver the website securely, reliably and efficiently, to detect technical problems and to prevent misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and technically stable operation of the website.
Server log files are generally deleted after [to be confirmed] days unless longer storage is necessary to investigate a security incident, comply with a legal obligation or establish, exercise or defend legal claims. The information is not combined with other data sources for advertising purposes. The hosting provider processes this information on our behalf in accordance with Article 28 GDPR.
5. Cookies and Similar Technologies
This website uses only cookies and similar technologies that are strictly necessary for the operation, security and functionality of the website, unless otherwise stated in this Privacy Policy. The use of strictly necessary technologies is based on Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Any subsequent processing of personal data is based on Article 6(1)(f) GDPR.
Non-essential analytics, advertising or tracking technologies are not activated without your prior consent. Should additional services be introduced, this Privacy Policy and the website's consent settings will be updated accordingly.
6. INNINGS Newsletter and Substack
The INNINGS newsletter is provided using Substack, a service operated by:
Substack Inc.
548 Market Street, PMB 72296
San Francisco, CA 94104
United States
When you subscribe to the newsletter, the following information may be processed:
- email address
- name, if provided voluntarily
- subscription status
- date and time of registration
- IP address used during registration
- technical device and browser information
- delivery, opening and link-click information, where you have consented to such measurement
The information is processed to manage subscriptions, deliver the newsletter, document consent, prevent misuse and – where permitted – understand how readers interact with our editorial content.
The legal basis for sending the newsletter is your consent pursuant to Article 6(1)(a) GDPR. Where cookies, tracking pixels or similar technologies are used to measure newsletter performance, these are activated only with your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.
You may withdraw your consent at any time with effect for the future by clicking the unsubscribe link included in every newsletter or by contacting us using the details provided above. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
After unsubscribing, your information will be removed from the active distribution list. Information required to demonstrate that valid consent was obtained may be retained for as long as necessary to comply with legal obligations or defend against legal claims.
Providing an email address is voluntary. Without it, however, we cannot send you the newsletter.
Substack's Role and International Data Transfers
Substack processes subscriber information on our behalf as a data processor under a data processing agreement. For certain platform-related purposes – including account administration, platform security, recommendations and Substack's own analytics – Substack may also act as an independent data controller.
Substack is based in the United States. Personal data may therefore be transferred to and processed in the United States or other countries outside the European Economic Area.
According to its Publisher Agreement, Substack relies on the EU–US Data Privacy Framework and, where applicable, the European Commission's Standard Contractual Clauses as safeguards for international data transfers.
Further information is available in the Substack Privacy Policy and the Substack Publisher Agreement and Data Processing Addendum.
If a Substack subscription form is embedded directly into the INNINGS website, a connection to Substack's servers may be established when the form is loaded. Non-essential Substack functionality must not be loaded before any legally required consent has been obtained.
7. Contacting Us
If you contact us by email or through another communication channel, we process the information you provide – including your name, contact details and the content of your enquiry – to respond to your request. Depending on the nature of the enquiry, the legal basis is Article 6(1)(b) GDPR for pre-contractual or contractual communication or Article 6(1)(f) GDPR for other enquiries. Our legitimate interest lies in responding to messages addressed to us. The information will be deleted once the enquiry has been resolved unless statutory retention obligations or legitimate interests require longer storage.
8. Recipients of Personal Data
Personal data may be disclosed to service providers that support us in operating the website and newsletter, particularly hosting, IT and newsletter service providers.
These service providers process personal data on our behalf and in accordance with our instructions where required by law. Personal data may also be disclosed to authorities, courts or other parties where this is required by law or necessary to establish, exercise or defend legal claims.
9. Storage Periods
We retain personal data only for as long as necessary for the purpose for which it was collected. Longer retention may apply where required by statutory retention obligations, where consent must be documented or where information is needed to establish, exercise or defend legal claims.
10. Your Rights
Subject to the applicable legal requirements, you have the right to:
- request access to your personal data
- request the correction of inaccurate or incomplete information
- request the deletion of your personal data
- request restriction of processing
- receive personal data you have provided in a structured, commonly used and machine-readable format
- object to processing based on legitimate interests
- withdraw consent at any time with effect for the future
- lodge a complaint with a data protection supervisory authority
Where processing is based on Article 6(1)(f) GDPR, you have the right to object at any time on grounds relating to your particular situation. Where personal data is processed for direct marketing purposes, you may object at any time without providing reasons.
To exercise your rights, please contact:
Serviceplan Social & Culture GmbH & Co. KG
Steinhöft 9
20459 Hamburg
Germany
11. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.
The supervisory authority responsible for Hamburg is:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Straße 22
20459 Hamburg
Germany
Email: mailbox@datenschutz.hamburg.de
Website: www.datenschutz-hamburg.de
12. Automated Decision-Making
We do not use personal data collected through the INNINGS website or newsletter to make decisions based solely on automated processing that produce legal or similarly significant effects.
13. Changes to This Privacy Policy
We may update this Privacy Policy if our website, newsletter services or legal obligations change. The current version will always be available on this website.