WITHIN
THE LAW
PRIVACY
NOTICE
Foreword
We, Cooper Advertising GmbH, take the protection of your personal data seriously and would like to use this opportunity to inform you about data protection in our company.
Due to the entry into force of the EU General Data Protection Regulation (Regulation (EU) 2016/679; hereinafter referred to as the “GDPR”), additional obligations have been imposed on us within the scope of our responsibilities under data protection law in order to ensure the protection of personal data of individuals affected by processing (hereinafter also referred to as “customer”, “user”, “you”, or “data subject”).
Where we either alone or jointly with others determine the purposes and means of the processing of personal data, this includes, above all, the obligation to inform you transparently about the type, scope, purpose, duration, and legal basis of the processing (cf. Art. 13 and 14 GDPR). With this declaration (hereinafter “Privacy Notice”), we inform you about the way in which your personal data is processed by us.
Our Privacy Notice is modular in structure. It consists of a general section applicable to all processing of personal data and to processing situations that apply each time a website is accessed (A. General), and a specific section which only applies to the processing situation stated there, in particular the visit to a website (B. Website Visits).
To help you find the relevant parts, please refer to the following overview of the structure of the Privacy Notice:
A. General
(1) Definitions
“Personal data” (Art. 4 No. 1 GDPR) means any information relating to an identified or identifiable natural person (“data subject”). A person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, an online identifier, location data, or by reference to information relating to their physical, physiological, genetic, mental, economic, cultural, or social identity. Identifiability may also be given by linking such information or through additional knowledge. The origin, form, or embodiment of the information is irrelevant (photos, video or audio recordings may also contain personal data).
- “Processing” (Art. 4(2) GDPR) means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means. This includes, in particular, the collection (i.e., acquisition), recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal data as well as a change of purpose or means of processing.
- “Controller” (Art. 4(7) GDPR) means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
- “Third party” (Art. 4(10) GDPR) means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data; this also includes other group-affiliated legal entities.
- “Processor” (Art. 4(8) GDPR) means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller, in particular in accordance with its instructions (e.g. IT service providers). In the context of data protection law, a processor is not a third party.
- “Consent” (Art. 4(11) GDPR) of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.
(2) Name and Address of the Controller
The controller responsible for the processing of your personal data pursuant to Art. 4 No. 7 GDPR is:
Cooper Advertising GmbH
Am Kaiserkai 62
20457 Hamburg
Germany
Phone +49 40 22867932-0
Fax +49 40 22867932-1
info@cooper-ads.com
For further information about our company, please refer to the legal notice on our website https://cooper-advertising.com/en/legal-notice/.
(3) Contact Details of the Data Protection Officer
You can contact our data protection officers at: datenschutz@cooper-ads.com
(4) Legal Basis for Data Processing
In principle, the processing of personal data is prohibited by law and only permitted if it falls under one of the following legal bases:
- Art. 6(1)(a) GDPR (“Consent”): If the data subject has given consent for the processing of their personal data for one or more specific purposes;
- Art. 6(1)(b) GDPR: If processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
- Art. 6(1)(c) GDPR: If processing is necessary for compliance with a legal obligation to which the controller is subject (e.g., statutory retention obligations);
- Art. 6(1)(d) GDPR: If processing is necessary to protect the vital interests of the data subject or another natural person;
- Art. 6(1)(e) GDPR: If processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- Art. 6(1)(f) GDPR (“Legitimate Interests”): If processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject (especially where the data subject is a minor).
The storage of information on the end user’s device or access to information already stored is only permissible if justified by one of the following conditions:
- Section 25(1) TTDSG: If the end user has consented based on clear and comprehensive information, in accordance with Art. 6(1)(a) GDPR;
- Section 25(2)(1) TTDSG: If the sole purpose is to carry out the transmission of a communication over a public telecommunications network;
- Section 25(2)(2) TTDSG: If storage or access is strictly necessary to provide a telemedia service explicitly requested by the user.
Where we process data, we specify the applicable legal basis. A single processing activity may also be based on multiple legal grounds.
(5) Data Deletion and Storage Duration
For each processing activity described below, we indicate how long the data is stored and when it is deleted or blocked. Unless a specific retention period is stated, your personal data will be deleted or blocked as soon as the purpose for which it was collected or the legal basis ceases to apply. Data storage generally occurs only on our servers in Germany, subject to any transfer under A.(7) and A.(8).
However, storage may continue beyond the specified time if there is a (pending) legal dispute with you, or if storage is required by statutory regulations applicable to us (e.g., Section 257 HGB, Section 147 AO). Once the statutory retention period has expired, the data will be deleted or blocked unless further storage is necessary and justified by law.
(6) Data Security
We use appropriate technical and organizational security measures to protect your data from accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties (e.g., TLS encryption on our website). These measures are based on the state of the art, implementation costs, the nature, scope, context and purpose of processing, as well as the likelihood and severity of a data breach. Our security measures are continuously improved in line with technological developments.
Further information is available upon request. Please contact our Data Protection Officer (see A.(3).
(7) Cooperation with Processors
Like many larger companies, we use external domestic and international service providers (e.g., in IT, logistics, telecommunications, sales, and marketing) to conduct business. These providers act only according to our instructions and are contractually obligated under Art. 28 GDPR to comply with data protection regulations.
If personal data is transferred between us and our subsidiaries (e.g., for marketing purposes), this is based on existing data processing agreements.
(8) Conditions for Data Transfer to Third Countries
As part of our business relationships, your personal data may be transferred or disclosed to third parties located outside the European Economic Area (EEA), i.e., to third countries. This occurs solely to fulfill contractual and business obligations and to maintain your business relationship with us (legal basis: Art. 6(1)(b) or (f) in conjunction with Art. 44 et seq. GDPR). Details about such transfers are explained below where applicable.
Some third countries are deemed by the European Commission to offer an adequate level of data protection (see list and decisions: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en). In other countries, an equivalent level of protection may not be ensured due to lack of regulation. In such cases, we ensure adequate protection through mechanisms such as Binding Corporate Rules, Standard Contractual Clauses (Art. 46(1), (2)(c) GDPR – see standard clauses), certifications or approved codes of conduct. Please contact our Data Protection Officer (see A.(3)) for more information.
(9) No Automated Decision-Making (Including Profiling)
We do not intend to use your personal data for any form of automated decision-making (including profiling).
(10) No Obligation to Provide Personal Data
We do not make the conclusion of contracts with us dependent on the provision of personal data. As a customer, you are generally not legally or contractually obligated to provide us with your personal data; however, we may be unable to provide certain services or offers if necessary data is not supplied. You will be informed separately if this is exceptionally the case in any of our offerings.
(11) Legal Obligation to Disclose Certain Data
Under certain legal or regulatory obligations, we may be required to disclose lawfully processed personal data to third parties, especially public authorities (Art. 6(1)(c) GDPR).
(12) Your Rights
You may assert your rights as a data subject concerning your processed personal data against us at any time using the contact details provided above in section A.(2). As a data subject, you have the right to:
- in accordance with Art. 15 GDPR, request information about your personal data processed by us. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage duration, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if not collected from you, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
- in accordance with Art. 16 GDPR, request the immediate rectification of inaccurate personal data or the completion of your personal data stored by us;
- in accordance with Art. 17 GDPR, request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
- in accordance with Art. 18 GDPR, request the restriction of the processing of your personal data if you contest the accuracy of the data, the processing is unlawful, or we no longer need the data, but you require it for the establishment, exercise or defence of legal claims;
- in accordance with Art. 20 GDPR, receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or request the transfer of that data to another controller (“data portability”);
- in accordance with Art. 21 GDPR, object to the processing of your personal data, provided that the processing is based on Art. 6(1)(e) or (f) GDPR. This particularly applies if the processing is not necessary for the performance of a contract with you. In the event of such an objection, we kindly ask you to explain the reasons why you object to the processing. If your objection is justified, we will examine the facts and will either cease or adapt the data processing or demonstrate our compelling legitimate grounds for continuing the processing;
- in accordance with Art. 7(3) GDPR, withdraw any consent you have given us – including consent granted before the GDPR came into force (i.e., before 25 May 2018) – at any time. This means we will no longer be allowed to continue the data processing based on this consent in the future;
- in accordance with Art. 77 GDPR, lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. For example, you can contact the supervisory authority responsible for us:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Address: Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany
Email: mailbox@datenschutz.hamburg.de
(13) Amendments to This Privacy Notice
We regularly review our Privacy Notice for compliance with evolving data protection laws, technological developments, or organizational changes. Updates will be announced on our German website: https://cooper-advertising.com/en/privacy-notice/. This Privacy Notice is current as of May 2025.
B. Website Visits
(1) Explanation of Function
You can obtain information about our company and the services we offer, in particular at https://cooper-advertising.com and the associated subpages (hereinafter collectively referred to as: “websites”). When you visit our websites, your personal data may be processed.
(2) Personal Data Processed
When you use our websites purely for informational purposes, we collect, store, and process the following categories of personal data:
“Log data”: When you visit our websites, a so-called log data record (server log file) is temporarily and anonymized stored on our web server. This record contains the following information:
- the page from which the page was requested (referrer URL)
- the name and URL of the requested page
- the date and time of access
- the description of the type, language and version of the web browser used
- the IP address of the requesting computer, which is shortened so that it can no longer be linked to a specific person
- the amount of data transferred
- the operating system
- dem Betriebssystem
- a message indicating whether the request was successful (access status / HTTP status code)
- the GMT time zone differencez
“Contact form data”: When using contact forms, the data submitted via the form is processed (e.g., gender, first and last name, address, company, email address, and the time of submission).
In addition to purely informational use of our website, we also offer a subscription to our newsletter, with which we inform you about current developments in business law and upcoming events. When you register for our newsletter, the following “newsletter data” is collected, stored, and processed:
- the page from which the request was made (referrer URL)
- the date and time of access
- the description of the type of browser used
- the IP address of the requesting computer, shortened so that it can no longer be linked to a specific person
- the email address
- the date and time of registration and confirmation
Please note that when we send the newsletter, we evaluate your user behavior. The emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. To perform the evaluations, we link the aforementioned data and the web beacons to your email address and an individual ID. Links included in the newsletter also contain this ID. The data is collected exclusively in pseudonymized form, i.e., the IDs are not linked with your other personal data, and a direct link to a specific person is excluded.
(3) Purpose and Legal Basis of Data Processing
We process the personal data specified above in accordance with the provisions of the GDPR, other applicable data protection laws, and only to the extent necessary.
Where the processing of personal data is based on Art. 6(1)(f) GDPR, the purposes mentioned simultaneously represent our legitimate interests.
The processing of log data serves statistical purposes and the improvement of the quality of our website, particularly the stability and security of the connection (legal basis: Art. 6(1)(a) or (f) GDPR).
The processing of contact form data is carried out to handle customer inquiries (legal basis: Art. 6(1)(b) or (f) GDPR).
Where storing or accessing information on your device is necessary for data processing, the legal basis is Section 25(1) or (2) TDDDG.
(4) Duration of Data Processing
Your data is only processed for as long as is necessary to achieve the above processing purposes; the legal bases stated in connection with each processing purpose apply accordingly.
With regard to the use and storage duration of cookies, please refer to section A.(5) as well as our cookie policy.
Third-party service providers we engage will retain your data on their systems for as long as necessary to provide the services in accordance with our contract.
Further details on data retention can be found under A.(5) and in the cookie policy.
(5) Disclosure of Personal Data to Third Parties; Legal Basis
The following categories of recipients, who are usually processors (see A.(7)), may have access to your personal data:
- Service providers for operating our website and processing the data stored or transmitted by the systems (e.g., data center services, payment processors, IT security). The legal basis for the transfer is Art. 6(1)(b) or (f) GDPR, unless these are processors;
- Government agencies or public authorities, to the extent necessary to fulfill a legal obligation. The legal basis for the transfer is Art. 6(1)(c) GDPR;;
- Other parties involved in our business operations (e.g., auditors, banks, insurance companies, legal advisors, supervisory authorities, participants in company acquisitions or joint ventures). The legal basis for the transfer is Art. 6(1)(b) or (f) GDPR..
For safeguards ensuring an adequate level of data protection when transferring data to third countries, see section A.(8).
Otherwise, we only transfer your personal data to third parties if you have given your express consent in accordance with Art. 6(1)(a) GDPR.
(6) Use of Cookies, Plugins and Other Services on Our Website
a) Cookies
Our websites use cookies. Cookies are small text files stored on your hard drive and associated with your browser via a specific string of characters. They allow the party setting the cookie to receive certain information. Cookies cannot execute programs or transmit viruses to your computer and therefore cannot cause any damage. Their purpose is to make the overall internet offering more user-friendly and efficient for you.
Cookies can contain data that allow the recognition of the device used. Some cookies, however, contain only information regarding certain settings that are not personally identifiable. Cookies cannot directly identify a user.
There is a distinction between session cookies, which are deleted once you close your browser, and persistent cookies, which are stored beyond a single session. Regarding functionality, cookies are further classified as follows:
- Technical Cookies: Strictly necessary for navigating the website, using basic functions and ensuring security; do not collect personal marketing data or store browsing behavior;
- Performance Cookies: Collect information about how you use our website, such as which pages you visit and whether any errors occur; they do not collect information that identifies you – all collected information is aggregated and anonymous and used only to improve the website;
- Advertising / Targeting Cookies: Help deliver more relevant ads and offers, including third-party ads, and measure the effectiveness of those campaigns; stored for a maximum of 13 months;
- Sharing Cookies: Improve interactivity with third-party services (e.g., social networks); stored for a maximum of 13 months.
The legal basis for cookies strictly necessary to provide a service you expressly requested is Section 25(2)(2) TDDDG. Any other use of cookies requires your explicit and active consent in accordance with Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. This particularly applies to the use of performance, advertising, targeting, or sharing cookies. We only share cookie-derived personal data with third parties if you have given explicit consent under Art. 6(1)(a) GDPR.
b) Cookie Policy
For further information about the cookies we use and how to manage your cookie settings or disable certain types of tracking, please refer to our Cookie Policy.
c) Social Media Plugins
We do not use social media plugins on our websites. If our websites contain icons of social media providers, these are used solely for passive linking to the respective providers’ pages.
(7) Online Applications
You may submit your application to us electronically via email: jobs@cooper-ads.com. Please note that unencrypted emails are not secure during transmission.
Your information is processed for the purpose of handling your application and deciding on the establishment of an employment relationship.
The legal basis is Section 26(1) BDSG.
If an employment relationship is established between you and us, we may further process the personal data already received from you for employment-related purposes under Section 26(1) BDSG.
Your personal data may also be processed if required to defend against legal claims arising from the application process.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the stated purposes.
Your personal data will be deleted no later than 6 months after the end of the application process, unless deletion conflicts with other legitimate interests on our part, or unless you have given us consent (Art. 6(1)(a) GDPR) for longer storage.
Such legitimate interest may include, for example, the duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).
(8) Newsletter
You can subscribe to our newsletter on our website, which we use to inform you about our company’s activities, current information about our services, special offers, promotions, and events.
The legal basis for sending the newsletter is your consent in accordance with Art. 6(1)(a) GDPR in conjunction with Section 7(2)(3) UWG.
We use a double opt-in process for registration. This means that after signing up, we send an email to the specified address asking you to confirm your registration. If confirmation is not provided, your information will be deleted after 3 days.
Upon confirmation, we store your email address for the purpose of sending the newsletter until you withdraw your consent.
We also store your IP address at the time of registration and confirmation for up to three years (statutory limitation period) for evidence purposes in case of disputes.
The legal basis for logging the registration is our legitimate interest in proving a formerly given consent (Art. 6(1)(f) GDPR, see also Art. 7(1) GDPR).
You can revoke your consent to receiving the newsletter at any time and unsubscribe. You may do so by clicking the unsubscribe link provided in each newsletter or by emailing us at: info@cooper-ads.de
NEWSLETTER
Let’s keep in touch
with Cooper
WHY COOPER
