We would like to provide you with transparent information about how we process personal data of journalists and media outlets in accordance with the General Data Protection Regulation (GDPR).

 

1. Data Controller

Convento GmbH
Oberstraße 4
D-41460 Neuss
Germany

Data Controller:
Rainer Maassen, Managing Director, r.maassen@convento.de

2. Purposes and Legal Basis of Processing

We process personal data to enable PR professionals to send tailored press releases to journalists.
Our service ensures that you only receive content that is relevant to you and your media outlet, thus avoiding unnecessary inquiries. The legal basis for this is our legitimate interest pursuant to Art. 6 (1) (f) GDPR to enable efficient and interest-based matching between media and PR content.

3. Categories of processed data

We process the following data in particular:

  • Media address data
  • Metadata of the media (e.g., circulation, page impressions)
  • Authors’ email addresses (if publicly available or communicated to us)
  • Publicly available media profiles
  • Public profiles of authors
  • Headlines of published articles from the last 12 months
  • Topics and key terms of articles from the last 12 months

4. Origin of the data

The data comes from publicly accessible sources (e.g., websites, press releases, and press articles) or was communicated to us by the data subjects themselves.

5. Storage period

We only store your data for as long as necessary for the purposes stated above. Afterwards, it is deleted unless there are statutory retention periods.

6. Recipients of the data

Only communicators and PR professionals have access to your data. The purpose is to precisely send your messages to interested recipients.
In rare cases, we share data with media observers. They are contractually obligated by us to make the data available only to their clients, the communicators and PR professionals, for the same purpose on their platform.

7. Your Rights

You have the right at any time:

  • To receive information about the data we store (Art. 15 GDPR),
  • To request the correction of inaccurate data (Art. 16 GDPR),
  • To request erasure or restriction of processing (Art. 17, 18 GDPR),
  • To object to processing (Art. 21 GDPR),
  • To withdraw any consent given (Art. 7 GDPR),
  • To lodge a complaint with a supervisory authority (Art. 77 GDPR).

8. Contact for data protection inquiries

Internal contact for data protection and data security:
Michael Gulden, IT Manager, m.gulden@convento.de

External data protection officer:
Südwest Datenschutz, info@suedwest-datenschutz.com

If you have any questions, requests or comments on the subject of data protection, please send an e-mail to dataprotection@convento.de.

At the same time, data protection at Convento is continuously monitored and supported by our external data protection officer.