{"id":25302,"date":"2026-08-04T15:40:37","date_gmt":"2026-08-04T13:40:37","guid":{"rendered":"https:\/\/convit.de\/privacy-policy-2"},"modified":"2026-08-04T15:41:42","modified_gmt":"2026-08-04T13:41:42","slug":"privacy-policy-newsmind-stories","status":"publish","type":"page","link":"https:\/\/convit.de\/en\/privacy-policy-newsmind-stories","title":{"rendered":"Privacy Policy"},"content":{"rendered":"[vc_row type=&#8221;full_width_background&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; bg_color=&#8221;#1E232D&#8221; scene_position=&#8221;center&#8221; top_padding=&#8221;5%&#8221; constrain_group_1=&#8221;yes&#8221; bottom_padding=&#8221;5%&#8221; text_color=&#8221;light&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; row_position_desktop=&#8221;default&#8221; row_position_tablet=&#8221;inherit&#8221; row_position_phone=&#8221;inherit&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221; gradient_type=&#8221;default&#8221; shape_type=&#8221;&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; flex_gap_desktop=&#8221;10px&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<h1>Privacy Notice and Data Protection Documentation<\/h1>\n<h2>Newsmind Stories<\/h2>\n<p>Software-as-a-Service (SaaS) Solution by Convit GmbH<\/p>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=&#8221;in_container&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; scene_position=&#8221;center&#8221; top_padding=&#8221;5%&#8221; constrain_group_1=&#8221;yes&#8221; bottom_padding=&#8221;5%&#8221; text_color=&#8221;dark&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; row_position_desktop=&#8221;default&#8221; row_position_tablet=&#8221;inherit&#8221; row_position_phone=&#8221;inherit&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221; gradient_type=&#8221;default&#8221; shape_type=&#8221;&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; flex_gap_desktop=&#8221;10px&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<h2>1. Purpose and Scope<\/h2>\n<p>This Privacy Notice and Data Protection Documentation describes the processing of personal data in connection with the use of Newsmind Stories, the Software-as-a-Service (SaaS) solution provided by Convit GmbH.<br \/>This document serves both as the product-specific privacy notice for the editorial platform and as documentation of the implemented data protection measures for use in proposals, contractual documentation, and compliance reviews.<br \/>Its scope includes the provision, operation, administration, maintenance, and support of Newsmind Stories, including the associated technical components, interfaces, logging mechanisms, backup and deletion processes, as well as authentication and authorization functions.<br \/>This document does not cover customer-operated systems, end-user devices, customer-managed networks, or third-party systems that are independently connected to Newsmind Stories by the customer and are not operated or controlled by Convit GmbH.<\/p>\n[\/vc_column_text][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<h2>2. Data Controller, Data Protection Officer, and GDPR Roles<\/h2>\n<h3>2.1 Controller for This Privacy Notice<\/h3>\n<p>The controller responsible for this Privacy Notice is:<\/p>\n<p>Convit GmbH<br \/>Schanzenstra\u00dfe 39 | E2<br \/>51063 Cologne<br \/>Germany<br \/>datenschutz@convit.de<br \/>+49 221 29294899<\/p>\n<p>Where Newsmind Stories is operated on behalf of a customer and processes personal data of users or customer-specific editorial content, Convit generally acts as a data processor within the meaning of Article 28 of the General Data Protection Regulation (GDPR). In such cases, the respective customer is the data controller responsible for the processing of personal data. <\/p>\n<h3>2.2 Data Protection Officer<\/h3>\n<p>Convit GmbH has appointed a Data Protection Officer. Contact details are as follows: <\/p>\n<p>Stephanie Linke<br \/>datenschutz@convit.de<br \/>Schanzenstra\u00dfe 39 | E2<br \/>51063 Cologne<br \/>Germany<\/p>\n<h3>2.3 Data Processing Agreement pursuant to Article 28 GDPR<\/h3>\n<p>Where Convit acts as a data processor, the processing of personal data in connection with the operation of Newsmind Stories is carried out on the basis of a Data Processing Agreement (DPA) in accordance with Article 28 GDPR.<br \/>The DPA defines, among other things, the subject matter and duration of the processing, the nature and purpose of the processing, the categories of personal data, the categories of data subjects, the technical and organizational measures (TOMs), as well as the rights and obligations of the contracting parties. <\/p>\n<p>Convit processes personal data exclusively on the documented instructions of the customer. Personal data processed under the Data Processing Agreement is not used by Convit for its own purposes.[\/vc_column_text][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<h2>3. Description of Processing Activities in Newsmind Stories<\/h2>\n<p>Newsmind Stories is a Software-as-a-Service (SaaS) solution for planning, creating, reviewing, managing, and publishing editorial content. The platform supports editorial workflows, topic and campaign planning, task management, approval workflows, integrations with third-party systems, and optional AI-powered assistance features.<br \/>Personal data is processed primarily in connection with user management, authentication, logging, authorization management, and the general use of the application. Editorial content and other business-related information are created and maintained by users or imported from connected systems. The customer determines the content and purpose of such data.<br \/>All data processing takes place within a controlled operating environment. Newsmind Stories is operated as a multi-tenant platform, with each customer\u2019s data logically isolated through dedicated databases for each tenant.[\/vc_column_text][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<h2>4. Categories of Personal Data and Data Subjects<\/h2>\n<h3>4.1 Categories of Personal Data<\/h3>\n<p>Depending on the specific use of the platform, the following categories of personal data may be processed:<\/p>\n<ul>\n<li>User master data, including name, username, email address, and organizational affiliation<\/li>\n<li>Authentication and authorization data, including roles, groups, tenant assignments, and technical user identifiers<\/li>\n<li>Usage and log data, including login events, IP addresses, timestamps, user actions within the application, and security-related events<\/li>\n<li>Communication and support data, where users submit support requests or report incidents<\/li>\n<li>Editorial and business content, where such content is created or uploaded by the customer or its authorized users<\/li>\n<li>Metadata associated with editorial objects, including processing status, responsibilities, approvals, version history, and audit trails<\/li>\n<\/ul>\n<p>Under the intended operating model, Convit neither requires nor prescribes the processing of special categories of personal data as defined in Article 9 GDPR. If the customer processes such data within editorial content, responsibility for that processing remains solely with the customer. <\/p>\n<h3>4.2 Categories of Data Subjects \u2022 Users of the editorial platform<\/h3>\n<ul>\n<li>Administrators of the respective tenant<\/li>\n<li>Technical users and integration accounts<\/li>\n<li>Customer contacts involved in support, operations, or contractual matters<\/li>\n<li>Individuals referenced within editorial content, where such content is processed in Newsmind Stories by the customer<\/li>\n<\/ul>\n[\/vc_column_text][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<h2>5. Purposes of Processing and Legal Bases<\/h2>\n<h3>5.1 Purposes of Processing<\/h3>\n<ul>\n<li>Provision and operation of the Newsmind Stories Software-as-a-Service (SaaS) platform<\/li>\n<li>User management, authentication, and authorization<\/li>\n<li>Implementation and enforcement of role-based access control and permission management<\/li>\n<li>Planning, creation, editing, review, approval, and publication of editorial content<\/li>\n<li>Logging of security-related and operational events<\/li>\n<li>Error analysis, technical support, and incident resolution<\/li>\n<li>Ensuring system availability, integrity, confidentiality, and accountability<\/li>\n<li>Execution of backup, recovery, and data deletion processes in accordance with contractual requirements<\/li>\n<\/ul>\n<h3>5.2 Legal Bases for Processing<\/h3>\n<p>Where Convit acts as a data processor, personal data is processed solely on behalf of and under the documented instructions of the customer in accordance with Article 28 of the General Data Protection Regulation (GDPR). The legal basis for the processing of personal data with respect to data subjects is determined by the respective customer acting as the data controller. <\/p>\n<p>Where Convit processes its own personal data in connection with contract performance, business communications, or technical and organizational security measures, the applicable legal basis may include, depending on the specific processing activity, Article 6(1)(b) GDPR (performance of a contract), Article 6(1)(c) GDPR (compliance with a legal obligation), or Article 6(1)(f) GDPR (legitimate interests).<br \/>[\/vc_column_text][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<h2>6. Hosting, Data Processing within the European Union, and Subprocessors<\/h2>\n<p>Newsmind Stories is hosted in a cloud-based infrastructure located within the European Union. All personal data is stored and processed exclusively in data centers located within the EU. Personal data is not transferred to countries outside the European Economic Area (EEA) unless such a transfer has been explicitly agreed upon contractually or initiated by the customer.  <\/p>\n<p>The platform is operated by Convit GmbH and, where applicable, by contractually engaged infrastructure and hosting providers acting as authorized subprocessors under appropriate data protection agreements in accordance with the GDPR.[\/vc_column_text][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<h2>7. Data Transfers, Third-Party Ecosystem, and Integrations<\/h2>\n<h3>7.1 Transfer of Personal Data to Third Parties<\/h3>\n<p>Convit does not disclose users\u2018 personal data to third parties for its own purposes. In particular, personal data is neither sold nor used for advertising or marketing purposes.<br \/>Personal data may be transferred where necessary to provide the contracted services, where the customer has configured or enabled a specific integration or interface, or where disclosure is required by applicable law. In such cases, the processing is carried out in accordance with the contractual agreements and the documented instructions of the customer.  <\/p>\n<h3>7.2 Third-Party Ecosystem<\/h3>\n<p>Depending on the agreed scope of services, Newsmind Stories can be integrated with external systems such as content management systems (CMS), production systems, publishing and distribution platforms, identity providers, media asset management (MAM) systems, external data sources, or AI services. The nature and scope of the transferred data depend on the customer\u2019s specific system configuration. <\/p>\n<p>All integrations are authenticated, authorized, and operated over encrypted communication channels. Customer-specific interfaces are implemented in coordination with the customer and according to the agreed technical requirements.<br \/>[\/vc_column_text][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<h3>7.3 Overview of Interfaces<\/h3>\n[\/vc_column_text][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<table>\n<thead>\n<tr>\n<th>Interface \/ System Type<\/th>\n<th>Purpose<\/th>\n<th>Data Types<\/th>\n<th>Direction<\/th>\n<th>Security<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Identity Provider \/ Keycloak<\/td>\n<td>User authentication and identity management<\/td>\n<td>User identifiers, roles, groups, token information<\/td>\n<td>Bidirectional \/ authentication flow<\/td>\n<td>OpenID Connect, OAuth 2.0, TLS<\/td>\n<\/tr>\n<tr>\n<td>CMS \/ Publishing Systems<\/td>\n<td>Transfer and publication of editorial content<\/td>\n<td>Editorial content, metadata, status information<\/td>\n<td>Outbound or bidirectional<\/td>\n<td>API authentication, TLS<\/td>\n<\/tr>\n<tr>\n<td>MAM \/ Production Systems<\/td>\n<td>Exchange of media assets and metadata<\/td>\n<td>Media references, metadata, status information<\/td>\n<td>Customer-specific<\/td>\n<td>API authentication, TLS<\/td>\n<\/tr>\n<tr>\n<td>AI Services (where agreed)<\/td>\n<td>AI-assisted features, summarization, and text assistance<\/td>\n<td>Input content and generated output within the respective workflow<\/td>\n<td>Outbound \/ processing by the contracted service<\/td>\n<td>API authentication, TLS, contractual safeguards<\/td>\n<\/tr>\n<tr>\n<td>Monitoring \/ Logging<\/td>\n<td>Operations, security, and troubleshooting<\/td>\n<td>Technical log data and operational information<\/td>\n<td>Internal \/ operational<\/td>\n<td>Access controls, TLS where data is transmitted<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n[\/vc_column_text][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<h2>8. Technical and Organizational Measures<\/h2>\n<p>Convit implements appropriate technical and organizational measures (TOMs) to protect personal data and editorial content processed within Newsmind Stories. These measures are designed to ensure transparency, data minimization, integrity, availability, confidentiality, and the ability to intervene in accordance with applicable data protection requirements. <\/p>\n<h3>8.1 Encryption<\/h3>\n<p>All data transmissions are protected using encrypted communication channels based on current TLS standards, including TLS 1.2 and TLS 1.3. This applies in particular to user access via HTTPS as well as communication with connected services and external interfaces.<br \/>Data stored within the platform is protected using appropriate encryption mechanisms at the storage and\/or database level. Encryption of data at rest is implemented in accordance with current industry standards, for example by using AES-256 or equivalent technologies provided by the underlying infrastructure.  <\/p>\n<h3>8.2 Pseudonymization<\/h3>\n<p>Comprehensive pseudonymization of all data processed within Newsmind Stories is not part of the standard operating model, as editorial collaboration, responsibilities, approval workflows, and auditability generally require data to remain attributable to individual users.<br \/>Where technically feasible and appropriate, technical identifiers, internal IDs, and tenant-specific identifiers are used. Log and operational data are collected only to the extent necessary to ensure system security, operational reliability, troubleshooting, and traceability. <\/p>\n<h3>8.3 Data Minimization and Access Control<\/h3>\n<p>Personal data is processed only to the extent necessary for the operation, use, security, and contractually agreed functionality of the platform. Access to personal data is restricted to authorized individuals and limited to defined business purposes in accordance with the applicable authorization concept. <\/p>\n<h3>8.4 Backups<\/h3>\n<p>To ensure system availability and recoverability, backup copies of relevant data, process states, configurations, data structures, and, where required, transaction histories are created. Backups are used exclusively for disaster recovery and business continuity purposes and are not used for day-to-day operational activities.[\/vc_column_text][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<h2>9. Data Protection by Design and by Default<\/h2>\n<h3>9.1 Privacy by Design<\/h3>\n<p>Newsmind Stories incorporates data protection principles throughout the design, architecture, and ongoing development of the platform. This includes, in particular, tenant-specific data segregation, role-based access control, encrypted communications, logging of relevant events, controlled system integrations, and defined data retention and deletion processes. <\/p>\n<h3>9.2 Privacy by Default<\/h3>\n<p>The platform supports privacy-friendly default settings. Users are granted only those permissions explicitly assigned to them through roles, groups, or individual access rights. Access to data belonging to other tenants is strictly prevented.<br \/>Tracking for advertising, marketing, or profiling purposes is not part of the standard functionality of Newsmind Stories.<br \/>Optional features, integrations, and AI-powered capabilities are provided only within the scope agreed upon with the customer and can be configured according to customer-specific requirements.[\/vc_column_text][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<h2>10. Authentication, Role-Based Access Control, and Authorization Management<\/h2>\n<h3>10.1 Authentication<\/h3>\n<p>User authentication is provided through a dedicated identity management solution, such as a Keycloak deployment, or through the customer\u2019s external Identity Provider (IdP), where such integration has been configured.<br \/>If no external Identity Provider is used, Convit can provide a dedicated Keycloak instance for the customer. This instance enables the management of users, groups, roles, and authentication policies. <\/p>\n<ul>\n<li>Authentication based on established industry standards such as OpenID Connect (OIDC) and OAuth 2.0<\/li>\n<li>Passwords are never stored in plain text and are securely hashed using industry-standard algorithms<\/li>\n<li>Support for password policies and session management policies<\/li>\n<li>Account lockout mechanisms following repeated failed login attempts<\/li>\n<li>Optional multi-factor authentication (MFA) or two-factor authentication (2FA), where enabled or provided by the configured Identity Provider<\/li>\n<\/ul>\n<h3>10.2 Role-Based Access Control and Authorization Management<\/h3>\n<p>Newsmind Stories provides a comprehensive role-based access control (RBAC) model. Permissions are assigned based on roles and can be defined, assigned, modified, and revoked according to customer-specific requirements within each tenant.<br \/>The authorization model follows the principle of least privilege. Users are granted access only to the functions and data required to perform their assigned responsibilities.  <\/p>\n<ul>\n<li>Administrative roles for managing users, roles, permissions, and system configuration<\/li>\n<li>Editorial roles for creating, editing, and managing content<\/li>\n<li>Freigaberollen fu\u0308r Pru\u0308f- und Ver\u00f6ffentlichungsprozesse<\/li>\n<li>Approval roles for review and publication workflows<\/li>\n<li>Technical roles and service accounts for automated integrations and system interfaces<\/li>\n<\/ul>\n[\/vc_column_text][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<h2>11. Logging and Monitoring<\/h2>\n<p>Newsmind Stories supports structured logging of data protection-relevant and security-related events. Logging is implemented to ensure traceability, facilitate troubleshooting, support security monitoring, and meet applicable regulatory and compliance requirements. <\/p>\n<h3>11.1 Logged Events<\/h3>\n<ul>\n<li>Collection, entry, and storage of data, where relevant and technically supported<\/li>\n<li>Modification of data and editorial objects<\/li>\n<li>Read access, data retrieval, reporting, and automated data access, where logging is enabled<\/li>\n<li>Disclosure and transmission of data through technical interfaces, where applicable<\/li>\n<li>Combination, linking, or association of data within the application<\/li>\n<li>Deletion of data and editorial objects<\/li>\n<li>Administrative access<\/li>\n<li>User and permission management activities<\/li>\n<li>Failed login attempts and attempted unauthorized access<\/li>\n<li>System, application, error, and security events<\/li>\n<\/ul>\n<h3>11.2 Log Contents<\/h3>\n<ul>\n<li>Type and description of the logged event<\/li>\n<li>User identifier or technical account identifier<\/li>\n<li>IP address, where required for security monitoring and troubleshooting<\/li>\n<li>Reliable timestamp<\/li>\n<li>Affected object, system component, or interface<\/li>\n<li>Result of the operation, for example successful or failed<\/li>\n<\/ul>\n<h3>11.3 Log Retention and Deletion<\/h3>\n<p>Log data is retained for a defined period. Unless otherwise required by applicable law, a security incident, or a specific contractual agreement, the retention period does not exceed six months.<br \/>Upon expiration of the applicable retention period, log data is automatically deleted. Approval records, editorial revision histories, and other business-critical audit information stored within editorial objects may be retained independently of the technical log files where necessary to support traceability, auditing, or editorial documentation.  <\/p>\n<h3>11.4 Quick Freeze in the Event of Security Incidents<\/h3>\n<p>In the event of a security-related incident, relevant log data that is still available may be preserved using a Quick Freeze procedure and provided to the customer to the extent necessary. Such disclosure is carried out in compliance with applicable legal requirements, contractual obligations, and security policies.[\/vc_column_text][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<h2>12. Data Deletion, Deletion Mechanisms, and Recovery<\/h2>\n<h3>12.1 Data Deletion by Convit<\/h3>\n<p>Personal data and editorial content are retained only for as long as necessary to provide the services, fulfill contractual obligations, or comply with applicable legal requirements. Upon termination of the contractual relationship, data is deleted or returned to the customer in accordance with the contractual agreement, unless statutory retention obligations require continued storage.<br \/>Deletion procedures take into account, among other things, data classification, retention schedules, deletion periods, and, where applicable, the logging of deletion activities. <\/p>\n<h3>12.2 Deletion Features within the Editorial Platform<\/h3>\n<p>Depending on the system configuration and the underlying object model, Newsmind Stories provides functionality for deleting and restoring data. These capabilities may include: <\/p>\n<ul>\n<li>Manual deletion of individual objects or multiple objects through bulk operations<\/li>\n<li>Recycle Bin functionality for deleted objects, where supported for the respective object type<\/li>\n<li>Automated deletion processes based on configured retention periods or system events, where included within the agreed scope of services<\/li>\n<li>Permanent deletion through removal from the Recycle Bin or through defined deletion procedures<\/li>\n<li>Restoration of deleted objects from the Recycle Bin, where technically and functionally supported<\/li>\n<\/ul>\n<h3>12.3 Backup Retention and Handling of Deleted Data<\/h3>\n<p>Backups are retained according to defined retention schedules and are automatically deleted once the applicable retention period has expired. Data that has been deleted from the production environment is not used or processed operationally from backup copies.<br \/>If restoration from a backup becomes necessary, an assessment is performed to determine whether personal data that had previously been deleted could be reintroduced into the production environment. Where applicable, a post-restoration cleanup process is carried out to ensure that such data is removed again in accordance with the original deletion requirements.[\/vc_column_text][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<h2>13. Tenant Isolation<\/h2>\n<p>Newsmind Stories is operated as a multi-tenant platform by default. Multiple customers share a common application environment while maintaining strict separation of their respective data.<br \/>Tenant isolation is implemented at the database level. Each tenant is assigned its own dedicated database within the database management system, ensuring that data belonging to different customers remains logically and physically separated.   <\/p>\n<p>In addition, the application validates and enforces the tenant context for every request. Access to data is restricted exclusively to the tenant to which the authenticated user belongs. Role-based access control (RBAC) provides an additional layer of authorization within each tenant by governing access to application features and data according to assigned permissions.  <\/p>\n<p>A dedicated single-tenant deployment can be provided upon request where contractually agreed.<br \/>[\/vc_column_text][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<h2>14. Support for Data Subject Rights and Information Obligations<\/h2>\n<p>Where Convit acts as a data processor, it supports the customer in fulfilling its obligations under Chapter III of the General Data Protection Regulation (GDPR), insofar as these obligations relate to personal data processed by Convit on the customer\u2019s behalf.<br \/>This includes, in particular, providing information regarding the nature, purpose, and scope of the processing activities performed by Convit where such information is necessary to comply with the transparency obligations under Articles 13 and 14 GDPR or to respond to requests from data subjec<\/p>\n<ul>\n<li>Support in responding to requests for access where personal data is processed within the platform<\/li>\n<li>Support for the correction or deletion of personal data, where technically feasible and contractually agreed<\/li>\n<li>Support for the restriction of processing, where applicable to the affected data<\/li>\n<li>Provision of information regarding processing purposes, categories of personal data, retention periods, and recipients<\/li>\n<li>Support for technical data exports or data provision, where included within the agreed scope of services<\/li>\n<\/ul>\n<p>Requests from data subjects must generally be directed to the respective data controller, i.e., the customer, where Convit acts as a data processor.<br \/>[\/vc_column_text][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<h2>15. Cookies, Local Storage, and User Tracking<\/h2>\n<p>By default, Newsmind Stories does not use cookies during normal operation.<br \/>Information required for authentication, session management, and user sign-in is processed server-side or by the configured identity management component. Where technically necessary, security-related or session-related information may be processed as part of the authentication process without requiring the use of cookies by Newsmind Stories in its standard configuration. <\/p>\n<p>Newsmind Stories does not perform user tracking for advertising, marketing, or profiling purposes. The platform does not set analytics or marketing cookies, nor does it employ tracking technologies to create user profiles. <\/p>\n<p>Browser-based local storage mechanisms are not used for tracking purposes in the standard deployment of Newsmind Stories. Where local storage is used in specific cases, it is solely intended to support application functionality or improve the user experience and is not used to analyze user behavior.<\/p>\n[\/vc_column_text][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<table>\n<thead>\n<tr>\n<th>Technology<\/th>\n<th>Purpose<\/th>\n<th>Requirement<\/th>\n<th>Retention<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Cookies used by Newsmind Stories<\/td>\n<td>Not part of the standard platform operation<\/td>\n<td>Not used<\/td>\n<td>Not applicable<\/td>\n<\/tr>\n<tr>\n<td>Session and Authentication Information<\/td>\n<td>User authentication, session management, and security<\/td>\n<td>Technically required<\/td>\n<td>According to the configured authentication policies<\/td>\n<\/tr>\n<tr>\n<td>Local Settings (where used)<\/td>\n<td>Storage of functional application preferences<\/td>\n<td>Functionally required or configuration-dependent<\/td>\n<td>Depends on application settings and browser configuration<\/td>\n<\/tr>\n<tr>\n<td>Analytics or Marketing Tracking<\/td>\n<td>Not part of the standard operation of the editorial platform<\/td>\n<td>Not used<\/td>\n<td>Not applicable<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n[\/vc_column_text][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<h2>16. Data Retention<\/h2>\n<p>The retention period for personal data depends on the purpose of the processing, the applicable contractual agreements, statutory retention requirements, and the documented instructions of the customer.[\/vc_column_text][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<table>\n<thead>\n<tr>\n<th>Data Category<\/th>\n<th>Retention \/ Deletion<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>User Master Data<\/td>\n<td>Retained for the duration of the user\u2019s authorization or until deleted by the customer, in accordance with contractual requirements<\/td>\n<\/tr>\n<tr>\n<td>Role and Authorization Data<\/td>\n<td>Retained for the duration of the assigned permissions or until modified or removed<\/td>\n<\/tr>\n<tr>\n<td>Log Data<\/td>\n<td>Retained for a defined period of up to six months, after which it is automatically deleted unless an exception applies<\/td>\n<\/tr>\n<tr>\n<td>Editorial Content<\/td>\n<td>Retained in accordance with system usage, configuration, contractual agreements, and the customer\u2019s documented instructions<\/td>\n<\/tr>\n<tr>\n<td>Backups<\/td>\n<td>Retained according to the defined backup retention policy and automatically deleted upon expiration<\/td>\n<\/tr>\n<tr>\n<td>Support Data<\/td>\n<td>Retained for the duration of support activities and in accordance with applicable contractual and legal retention requirements<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n[\/vc_column_text][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<h2>17. Security of Processing and Data Protection Objectives<\/h2>\n<p>The technical and organizational measures implemented in Newsmind Stories are designed to support the data protection objectives established under applicable data protection laws. The following overview maps key security measures to these core data protection objectives.[\/vc_column_text][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<table>\n<thead>\n<tr>\n<th>Data Protection Objective<\/th>\n<th>Implemented Measures<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Transparency<\/td>\n<td>Documentation of processing activities, system interfaces, logging, subprocessors, and data deletion procedures<\/td>\n<\/tr>\n<tr>\n<td>Data Minimization<\/td>\n<td>Processing limited to the user, role, operational, and usage data required for the intended purposes<\/td>\n<\/tr>\n<tr>\n<td>Integrity<\/td>\n<td>Data validation, version control, audit logging of changes, and controlled deployment processes<\/td>\n<\/tr>\n<tr>\n<td>Availability<\/td>\n<td>Monitoring, backups, disaster recovery procedures, and a scalable operating environment<\/td>\n<\/tr>\n<tr>\n<td>Confidentiality<\/td>\n<td>TLS encryption, encryption of data at rest, access controls, and tenant isolation<\/td>\n<\/tr>\n<tr>\n<td>Ability to Intervene<\/td>\n<td>Data deletion capabilities, role management, support for data subject rights, and data recovery mechanisms<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n[\/vc_column_text][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<h2>18. Changes to This Privacy Notice<\/h2>\n<p>This Privacy Notice may be updated to reflect changes in legal, technical, or organizational requirements. The most current version will be made available to the customer upon request or published on the Convit GmbH website.[\/vc_column_text][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<h2>19. Appendices<\/h2>\n<h3>19.1 Summary Matrix of Data Protection Requirements<\/h3>\n[\/vc_column_text][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<table>\n<thead>\n<tr>\n<th>Requirement<\/th>\n<th>Implementation in Newsmind Stories<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>GDPR Core Requirements<\/td>\n<td>Data processing under Article 28 GDPR, processing based on documented customer instructions, technical and organizational measures (TOMs), and hosting within the European Union<\/td>\n<\/tr>\n<tr>\n<td>Subprocessors<\/td>\n<td>Documented in the subprocessor register and contractually integrated in accordance with GDPR requirements<\/td>\n<\/tr>\n<tr>\n<td>Encryption<\/td>\n<td>TLS 1.2 \/ 1.3 for data in transit and encryption of data at rest at the storage and database layers<\/td>\n<\/tr>\n<tr>\n<td>Pseudonymization<\/td>\n<td>No general pseudonymization; use of technical identifiers and data minimization where appropriate<\/td>\n<\/tr>\n<tr>\n<td>Roles and Permissions<\/td>\n<td>Role-Based Access Control (RBAC), principle of least privilege (need-to-know), and flexible assignment and revocation of permissions<\/td>\n<\/tr>\n<tr>\n<td>Privacy by Design \/ Privacy by Default<\/td>\n<td>Tenant isolation, access restrictions, no advertising or marketing tracking by default, and configurable privacy-related features<\/td>\n<\/tr>\n<tr>\n<td>Authentication<\/td>\n<td>Keycloak or an external identity provider using OpenID Connect (OIDC) \/ OAuth 2.0, with optional multi-factor authentication (MFA)<\/td>\n<\/tr>\n<tr>\n<td>Logging<\/td>\n<td>Structured audit logs with timestamps, retained for a maximum of six months<\/td>\n<\/tr>\n<tr>\n<td>Interfaces<\/td>\n<td>Authenticated and encrypted APIs with support for customer-specific integrations<\/td>\n<\/tr>\n<tr>\n<td>Data Deletion<\/td>\n<td>Deletion functions, defined backup retention policies, and post-restore cleanup procedures<\/td>\n<\/tr>\n<tr>\n<td>Tenant Isolation<\/td>\n<td>Dedicated database per tenant and strict enforcement of tenant context throughout the application<\/td>\n<\/tr>\n<tr>\n<td>Third-Party Ecosystem<\/td>\n<td>Third-party services are used only within the agreed scope and on an appropriate contractual and legal basis<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n[\/vc_column_text][\/vc_column][\/vc_row]\n","protected":false},"excerpt":{"rendered":"<p>[vc_row type=&#8221;full_width_background&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; bg_color=&#8221;#1E232D&#8221; scene_position=&#8221;center&#8221; top_padding=&#8221;5%&#8221; constrain_group_1=&#8221;yes&#8221; bottom_padding=&#8221;5%&#8221; text_color=&#8221;light&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; row_position_desktop=&#8221;default&#8221; row_position_tablet=&#8221;inherit&#8221; row_position_phone=&#8221;inherit&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221; gradient_type=&#8221;default&#8221; shape_type=&#8221;&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221;&#8230;<\/p>\n","protected":false},"author":3,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"inline_featured_image":false,"footnotes":""},"class_list":["post-25302","page","type-page","status-publish"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Privacy Policy | Convit GmbH<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/convit.de\/en\/privacy-policy-newsmind-stories\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Privacy Policy | Convit GmbH\" \/>\n<meta property=\"og:description\" content=\"[vc_row type=&#8221;full_width_background&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; bg_color=&#8221;#1E232D&#8221; scene_position=&#8221;center&#8221; top_padding=&#8221;5%&#8221; constrain_group_1=&#8221;yes&#8221; bottom_padding=&#8221;5%&#8221; text_color=&#8221;light&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; row_position_desktop=&#8221;default&#8221; row_position_tablet=&#8221;inherit&#8221; row_position_phone=&#8221;inherit&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221; gradient_type=&#8221;default&#8221; shape_type=&#8221;&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221;...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/convit.de\/en\/privacy-policy-newsmind-stories\" \/>\n<meta property=\"og:site_name\" content=\"Convit GmbH\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-04T13:41:42+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@ConvitGmbH\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"21 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/convit.de\\\/en\\\/privacy-policy-newsmind-stories\",\"url\":\"https:\\\/\\\/convit.de\\\/en\\\/privacy-policy-newsmind-stories\",\"name\":\"Privacy Policy | Convit GmbH\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/convit.de\\\/en#website\"},\"datePublished\":\"2026-08-04T13:40:37+00:00\",\"dateModified\":\"2026-08-04T13:41:42+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/convit.de\\\/en\\\/privacy-policy-newsmind-stories#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/convit.de\\\/en\\\/privacy-policy-newsmind-stories\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/convit.de\\\/en\\\/privacy-policy-newsmind-stories#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\\\/\\\/convit.de\\\/en\\\/home\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Privacy Policy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/convit.de\\\/en#website\",\"url\":\"https:\\\/\\\/convit.de\\\/en\",\"name\":\"Convit GmbH\",\"description\":\"Innovative L\u00f6sungen f\u00fcr die Medienbranche\",\"publisher\":{\"@id\":\"https:\\\/\\\/convit.de\\\/en#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/convit.de\\\/en?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/convit.de\\\/en#organization\",\"name\":\"Convit GmbH\",\"alternateName\":\"Convit GmbH\",\"url\":\"https:\\\/\\\/convit.de\\\/en\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/convit.de\\\/en#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/convit.de\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/convit-logo.svg\",\"contentUrl\":\"https:\\\/\\\/convit.de\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/convit-logo.svg\",\"width\":\"1024\",\"height\":\"1024\",\"caption\":\"Convit GmbH\"},\"image\":{\"@id\":\"https:\\\/\\\/convit.de\\\/en#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/ConvitGmbH\",\"https:\\\/\\\/de.linkedin.com\\\/company\\\/convit-gmbh\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Privacy Policy | Convit GmbH","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/convit.de\/en\/privacy-policy-newsmind-stories","og_locale":"en_US","og_type":"article","og_title":"Privacy Policy | Convit GmbH","og_description":"[vc_row type=&#8221;full_width_background&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; bg_color=&#8221;#1E232D&#8221; scene_position=&#8221;center&#8221; top_padding=&#8221;5%&#8221; constrain_group_1=&#8221;yes&#8221; bottom_padding=&#8221;5%&#8221; text_color=&#8221;light&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; row_position_desktop=&#8221;default&#8221; row_position_tablet=&#8221;inherit&#8221; row_position_phone=&#8221;inherit&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221; gradient_type=&#8221;default&#8221; shape_type=&#8221;&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221;...","og_url":"https:\/\/convit.de\/en\/privacy-policy-newsmind-stories","og_site_name":"Convit GmbH","article_modified_time":"2026-08-04T13:41:42+00:00","twitter_card":"summary_large_image","twitter_site":"@ConvitGmbH","twitter_misc":{"Est. reading time":"21 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/convit.de\/en\/privacy-policy-newsmind-stories","url":"https:\/\/convit.de\/en\/privacy-policy-newsmind-stories","name":"Privacy Policy | Convit GmbH","isPartOf":{"@id":"https:\/\/convit.de\/en#website"},"datePublished":"2026-08-04T13:40:37+00:00","dateModified":"2026-08-04T13:41:42+00:00","breadcrumb":{"@id":"https:\/\/convit.de\/en\/privacy-policy-newsmind-stories#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/convit.de\/en\/privacy-policy-newsmind-stories"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/convit.de\/en\/privacy-policy-newsmind-stories#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/convit.de\/en\/home"},{"@type":"ListItem","position":2,"name":"Privacy Policy"}]},{"@type":"WebSite","@id":"https:\/\/convit.de\/en#website","url":"https:\/\/convit.de\/en","name":"Convit GmbH","description":"Innovative L\u00f6sungen f\u00fcr die Medienbranche","publisher":{"@id":"https:\/\/convit.de\/en#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/convit.de\/en?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/convit.de\/en#organization","name":"Convit GmbH","alternateName":"Convit GmbH","url":"https:\/\/convit.de\/en","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/convit.de\/en#\/schema\/logo\/image\/","url":"https:\/\/convit.de\/wp-content\/uploads\/2020\/04\/convit-logo.svg","contentUrl":"https:\/\/convit.de\/wp-content\/uploads\/2020\/04\/convit-logo.svg","width":"1024","height":"1024","caption":"Convit GmbH"},"image":{"@id":"https:\/\/convit.de\/en#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/ConvitGmbH","https:\/\/de.linkedin.com\/company\/convit-gmbh"]}]}},"_links":{"self":[{"href":"https:\/\/convit.de\/en\/wp-json\/wp\/v2\/pages\/25302","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/convit.de\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/convit.de\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/convit.de\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/convit.de\/en\/wp-json\/wp\/v2\/comments?post=25302"}],"version-history":[{"count":2,"href":"https:\/\/convit.de\/en\/wp-json\/wp\/v2\/pages\/25302\/revisions"}],"predecessor-version":[{"id":25304,"href":"https:\/\/convit.de\/en\/wp-json\/wp\/v2\/pages\/25302\/revisions\/25304"}],"wp:attachment":[{"href":"https:\/\/convit.de\/en\/wp-json\/wp\/v2\/media?parent=25302"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}