1. introduction
Protecting the data of our customers, employees and business partners and respecting the fundamental right to informational self-determination are important to us. Data protection and data security are therefore particularly important to us.
We also want to know who is processing our data and why.
For this reason, it is generally possible to use our website without providing personal data; however, if you wish to take advantage of special offers or services, such as contacting us or registering for a newsletter, etc., it may be necessary to process personal data.
The processing of personal data, such as the name, address, e-mail address or telephone number of a data subject, is always carried out in accordance with the General Data Protection Regulation and in accordance with the country-specific data protection regulations applicable to our company.
With this privacy policy, we would like to inform you about the type, scope and purpose of the personal data collected, used and processed by our company. You will also be informed about the rights to which you are entitled.
Our privacy policy is based on the terms
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC) General Data Protection Regulation (GDPR) (as amended) and
- the Act on the Adaptation of Data Protection Law to Regulation (EU) 2016/679 and on the Implementation of Directive (EU) 2016/680 (Data Protection Adaptation and Implementation Act EU - DSAnpUG-EU) Federal Law Gazette Volume 2017 Part I No. 44, issued on 5 July 2017, page 2097, as amended (Federal Data Protection Act)
- as well as other relevant data protection regulations or laws (e.g. Telecommunications Act, Telemedia Act, Criminal Code).
2. responsible party
The entity responsible for data processing under data protection law is
Halbersbacher Hospitality Group GmbH
Represented by the managing director Arne Mundt
Mollistrasse 10
18209 Bad Doberan
Tel: +49 (0)38203 2139-0
Fax: +49 (0)38203 2139-10
E-mail: arne.mundt@halbersbacher.de
Web: www.halbersbacher.de
3. data protection officer
Any data subject can contact our data protection officer directly, verbally, in writing or by email at any time with any questions or suggestions regarding data protection.
Our data protection officer can be contacted using the following contact details
Niklas Hanitsch c/o secjur GmbH
Steinhöft 9, 20459 Hamburg, Germany
Tel: +49 (0)40 228 599 520
E-mail: dsb@secjur.com
4. server location
The infrastructure of our online presence (web hosting and homepage) and the processing of personal data on a server (e.g. Cloud Server, Virtual Server Cloud, Managed Cloud Hosting, Managed Server, Dedicated Server, Dynamic Cloud Server, Virtual Server (Linux/Windows), Container Cluster) and for parts of our office infrastructure (online accounting, e-mail marketing) is provided to us by a service provider (hoster) in Germany.
We have concluded an order processing contract with the hoster in accordance with Art. 28 GDPR, so that it is also contractually ensured that processing is carried out in accordance with data protection requirements and that your rights are guaranteed.
We cannot rule out the possibility that we may have access to your personal data or that of your employees or customers in the course of providing support. This takes place exclusively in the context of contract fulfilment (support) with you or your company and taking into account the order processing contract or main contract concluded with you. The legal basis for processing is Art. 6 para. 1 lit. b GDPR. As a rule, we delete the data after the end of our support assignment, e.g. after the end of remote maintenance.
In individual cases, longer storage may be necessary, e.g. because unauthorised access to data must be clarified. This data will be deleted after the investigation has been completed, unless it has to be stored for longer for other purposes (e.g. criminal prosecution, etc.) or by order of the authorities.
5 SSL/TLS encryption
For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption.
TLS (Transport Layer Security) and its predecessor SSL (Secure Sockets Layer) are encryption technologies that enable secure access to the internet. Both protocols are so-called end-to-end encryption, i.e. the information is encrypted before being sent by the sender (e.g. a client) and only decrypted by the recipient (e.g. a web server). This is made possible by asymmetric encryption of the information and the exchange of a common symmetric session key between the communication partners. Only the communication partners can decrypt the information, as the encryption technologies also check the authenticity of the communication partners and they must first acquire the corresponding certificates from a special certification authority (e.g. Sectiga (formerly Comodo), Thawte, RapidSSL, GeoTrust, DigiCert, etc.).
Data that you transmit via this website cannot be read by third parties due to SSL or TLS encryption.
You can recognise the encryption of our website by the fact that you access it with "https://". You can also recognise the use of this technology by the small lock symbol in your browser.
6 Your rights
According to the data protection regulations, you have various rights that you can assert against us or, if applicable, against our contractual partners. We will inform you about your rights below.
Right to confirmation
You have the right to request confirmation from us as to whether personal data concerning you is being processed. If you wish to exercise this right, you can contact our data protection officer or us at any time.
Right to information
Any person affected by the processing of personal data has the right granted by the European legislator of directives and regulations to obtain from the controller free information about the personal data stored about them and a copy of this information at any time. Furthermore, the European legislator has granted the data subject access to the following information
- the purposes of the processing,
- the categories of personal data being processed
- the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations
- where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
- the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing
- the existence of the right to lodge a complaint with a supervisory authority
- if the personal data are not collected from the data subject: All available information about the origin of the data,
- the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Furthermore, you have a right to information as to whether personal data has been transferred to a third country - a country outside the European Union or the European Economic Area - or to an international organisation. If this is the case, you have the right to obtain information about the appropriate safeguards in connection with the transfer.
If you wish to exercise this right, you can contact our data protection officer or us at any time.
Right to rectification
Any person affected by the processing of personal data has the right granted by the European legislator of directives and regulations to demand the immediate correction of incorrect personal data concerning them. Furthermore, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary declaration, taking into account the purposes of the processing.
If you wish to exercise this right, you can contact our data protection officer or us at any time.
Right to erasure ("right to be forgotten")
You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the following grounds applies and insofar as the processing is not necessary
The personal data have been collected or otherwise processed for such purposes for which they are no longer necessary.
You withdraw consent on which the processing is based according to point (a) of Article 6(1) of the GDPR, or point (a) of Article 9(2) of the GDPR, and where there is no other legal ground for the processing.
You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
The personal data has been processed unlawfully.
The deletion of the personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject.
The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.
If one of the above-mentioned reasons applies and you wish to have personal data stored by us deleted, you can contact our data protection officer or another employee of the data controller at any time. Our data protection officer will ensure that the request for erasure is complied with immediately.
If we have made the personal data public and our company is obliged to erase the personal data in accordance with Article 17(1) of the GDPR, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform other data controllers who process the published personal data that you have requested the erasure of all links to this personal data or of copies or replications of this personal data from these other data controllers, unless the processing is necessary.
Right to restriction of processing
You have the right to obtain from us restriction of processing where one of the following applies
The accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data.
The processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead.
We no longer need the personal data for the purposes of the processing, but you require the data for the establishment, exercise or defence of legal claims.
You have objected to processing pursuant to Art. 21 (1) GDPR pending the verification whether the legitimate grounds of the controller override yours.
If one of the above conditions is met and you wish to request the restriction of personal data stored by us, you can contact our data protection officer or us at any time.
Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, provided that the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
Furthermore, when exercising your right to data portability pursuant to Art. 20 para. 1 GDPR, you have the right to obtain that the personal data be transferred directly by us to another controller, insofar as this is technically feasible and provided that this does not adversely affect the rights and freedoms of other persons.
To assert the right to data portability, you can contact our data protection officer or another employee at any time.
Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR. This also applies to profiling based on these provisions.
In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
If we process your data for the purpose of direct marketing, you have the right to object at any time to the processing of your data for the purpose of such marketing. This also applies to profiling insofar as it is associated with such direct advertising. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
To exercise your right to object, you can contact our data protection officer or us directly. You are also free to exercise your right to object in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.
Automated decisions in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, provided that the decision
is not necessary for the conclusion or fulfilment of a contract between you and us, or
is authorised by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or
with your express consent.
You also have the right to have us review or intervene in the automated decision, to express your own point of view and to contest the decision.
To assert this right, you can contact our data protection officer or us at any time.
Right to withdraw consent under data protection law
You have the right to withdraw your consent to the processing of personal data at any time.
To assert the right to withdraw consent under data protection law, you can contact our data protection officer or another employee at any time.
Right to lodge a complaint with the competent supervisory authority
In the event of a breach of data protection law, you have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based.
The following link provides a list of the state data protection officers and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
7. cookies
We or the service providers we use use cookies are small data packets (small text files consisting of numbers and letters) that are used to store certain information locally on the user's end device for a certain period of time. This can be used, for example, to recognise the user's computer when the page is called up again or to save the contents of a form or shopping basket. Tracking services use cookies to store collected information.
Some cookies are automatically deleted when you close your web browser (so-called transient cookies). These include session cookies in particular. These cookies store a so-called session ID, which can be used to assign various requests from your web browser to the current session. This makes it possible to recognise your end device when you return to our website. Session cookies are deleted as soon as you log out or close the web browser.
In some cases, cookies are only deleted after a specified period of time (so-called persistent cookies). The storage period varies depending on the cookie.
If you do not agree to the storage of cookies, you can deactivate the storage of cookies in the settings of your web browser. You can delete existing cookies in the settings of your web browser.
You can also object to the collection and forwarding of personal data or prevent the processing of this data by deactivating ("blocking") the execution of Java Script in your browser. You can also install script blockers that prevent the execution of codes. You can find script blockers here, for example:
https://addons.mozilla.org/de/firefox/addon/noscript/
https://chrome.google.com/webstore/detail/umatrix/ogfcmafjalglgifnmanfmnieipoejdcf
Further information on cookies can be found, for example, at Bundesverband Digitale Wirtschaft (BVDW) e.V., Berliner Allee 57, 40212 Düsseldorf, www.bvdw.org. The BVDW e.V. provides additional information on the website http://meine-cookies.org/.
Of course, you can also view our website without cookies. There is also no obligation to accept the use of cookies. Most browsers accept cookies automatically. To restrict the storage of cookies, you must configure your browser settings accordingly. You must make the settings separately for each browser and for each end device that you use.
We would also like to point out that if you use script blockers or delete existing cookies or prevent the storage of cookies, you may not be able to use all the functions of our website to their full extent.
You can determine the storage duration of cookies via your browser by displaying the cookies (usually by clicking on the "i" next to the address bar, e.g. in Firefox or Google Chrome).
We use cookies, e.g. as part of tracking services, to optimise our offer for you. If you have an account, we use cookies to identify you for subsequent visits.
Our legitimate interest in data processing lies in the aforementioned purposes. The legal basis is Article 6 paragraph 1 sentence 1 letter f) GDPR.
8 Tracking
The cookies explained are used for tracking services ("tracking"), among other things. This involves collecting and storing data about the behaviour of visitors to websites. This enables this data to be analysed. As a rule, tracking services store their information in a small text file (so-called "cookies"). Typically, it is analysed where visitors come from, which areas of the site were viewed for how long and how often.
Tracking services are primarily used to optimise the website (weak point analysis) and for marketing purposes (increasing page views, newsletter subscriptions, etc.).
9. data transfers
When processing personal data, the data is also transferred to other companies.
Data transfers within the EU are subject to the requirements of the General Data Protection Regulation and are therefore regularly lawful. You can find a list of current EU countries here: https://europa.eu/european-union/about-eu/countries_de
For the transfer of personal data to countries outside the EU (so-called third countries), further requirements must be met in accordance with Art. 44 et seq. GDPR, further requirements must be met. An adequate level of protection exists if, on the basis of its national legislation and its application, the existence and effective functioning of one or more independent supervisory authorities and its international obligations, a level of protection exists in the third country that is equivalent to the level of protection granted in the GDPR.
With the decision of the European Commission (2016/1250) of 12 July 2016 on the so-called EU-U.S. Privacy Shield, a basis for data transfers to the USA has been available since 1 August 2016.
Personal data may only be transferred to the USA if the recipient has acceded to the agreement and the certification is valid. By joining, they have committed the US companies to observe and accept the provisions of European data protection law. Additional information on the EU-U.S. Privacy Shield can be found on the website of the European Commission(https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/eu-us-privacy-shield_de). You can find a current presentation of the listed companies here: https://www.privacyshield.gov/list
We have therefore checked in advance whether the US company in question is included in the list of the US Department of Commerce and whether the expiry date of the certification has not yet been reached.
10. contact form
If you contact us by e-mail or via the contact form on the website, the personal data you enter and transmit (e.g. name, e-mail address, contact details, IP address) will be automatically stored for the purpose of processing your enquiry or contacting you. This personal data will not be passed on to third parties. If we use a service to send emails, we ensure that data protection standards are complied with (e.g. by concluding an order processing contract and selecting a service provider based within the scope of the General Data Protection Regulation).
The data entered in the contact form is processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR).
You can revoke your consent and thus stop further communication by e-mail at any time without giving reasons. There are no costs - apart from the connection charges - for withdrawing consent. You can withdraw your consent by sending us an informal message (see contact details in this notice or in the legal notice).
After your cancellation, we will delete your e-mail address and the other data, unless you have expressly consented or agree to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration (e.g. for contract processing). Mandatory statutory provisions - in particular statutory or officially mandated retention periods - remain unaffected.
11 Newsletter
If you register to receive our newsletter, we process the data required for sending it (e.g. title, name, contact details). The data is processed on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.
You can revoke your consent and thus unsubscribe from the newsletter at any time without giving reasons. There are no costs for this - apart from the connection fees. You can either revoke your consent or unsubscribe by sending us an informal message (see contact details in this notice or in the legal notice) or via a link provided in the newsletter.
After you unsubscribe, we will delete your email address and other data unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration (e.g. for contract processing). Mandatory statutory provisions - in particular statutory or officially mandated retention periods - remain unaffected.
12 Tools and service providers used
We use various Tools for our website and also use service providers. Below we inform you about which tool from which provider we use for which purpose. We have summarised additional information on the functions mentioned there (e.g. cookies, tracking) and on the security of data processing in third countries in these notes and declarations on data protection. You can find these additional notices or statements under the respective keyword (e.g. "Cookies", "Tracking", "Privacy Shield", etc.).
12.1 Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
The storage of Google Analytics cookies is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.
IP anonymisation
We have activated the IP anonymisation function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Browser plugin
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plugin available at the following link: https: //tools.google.com/dlpage/gaoptout?hl=de
Objection to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this website: Deactivate Google Analytics.
You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
Order data processing
We have concluded a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Demographic characteristics with Google Analytics
This website uses the "demographic characteristics" function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section "Objection to data collection".
12.2 Google AdWords and Google conversion tracking
This website uses Google AdWords. AdWords is an online advertising programme of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google").
As part of Google AdWords, we use what is known as conversion tracking. When you click on an advert placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the Internet browser stores on the user's computer. These cookies lose their validity after 30 days and are not used to personally identify the user. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user has clicked on the ad and has been redirected to this page.
Each Google AdWords customer receives a different cookie. The cookies cannot be tracked via the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their advert and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can object to this use by easily deactivating the Google Conversion Tracking cookie via your Internet browser under user settings. You will then not be included in the conversion tracking statistics.
The storage of "conversion cookies" is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.
You can find more information about Google AdWords and Google Conversion Tracking in Google's privacy policy: https://www.google.de/policies/privacy/.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.
12.3 Facebook Pixel
Our website uses the visitor action pixel from Facebook, Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook") to measure conversions.
This allows the behaviour of site visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimised.
The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy: https://www.facebook.com/about/privacy/. This enables Facebook to place adverts on Facebook pages and outside of Facebook. This use of the data cannot be influenced by us as the site operator.
You can find further information on protecting your privacy in Facebook's privacy policy: https://www.facebook.com/about/privacy/.
You can also deactivate the remarketing function "Custom Audiences" in the settings for adverts at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged in to Facebook to do this.
If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.
12.4 YouTube
Our website uses plugins from the Google-operated YouTube site. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.
When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited.
If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
Further information on the handling of user data can be found in YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.
12.5 Vimeo
Our website uses plugins from the video portal Vimeo. The provider is Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA.
When you visit one of our pages equipped with a Vimeo plugin, a connection to the Vimeo servers is established. The Vimeo server is informed which of our pages you have visited. Vimeo also obtains your IP address. This also applies if you are not logged in to Vimeo or do not have a Vimeo account. The information collected by Vimeo is transmitted to the Vimeo server in the USA.
If you are logged into your Vimeo account, you enable Vimeo to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your Vimeo account.
Further information on the handling of user data can be found in Vimeo's privacy policy at: https://vimeo.com/privacy.
12.6 Google Web Fonts
This site uses so-called web fonts provided by Google for the standardised display of fonts. When you access a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Google's servers. This informs Google that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
If your browser does not support web fonts, a standard font will be used by your computer.
Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.
12.7 Google Maps
This website uses the Google Maps map service via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.
The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
You can find more information on the handling of user data in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.
12.8 MyFonts Counter
On this website we use MyFonts Counter, a web analysis service of MyFonts Inc, 500 Unicorn Park Drive, Woburn, MA 01801, USA. Due to the licence terms, page view tracking is carried out by counting the number of visits to the website for statistical purposes and transmitting them to MyFonts. MyFonts only collects anonymised data. The data may be passed on by activating JavaScript code in your browser. To prevent the execution of Java Script code from MyFonts altogether, you can install a Java Script blocker (e.g. www.noscript.net). Further information on MyFonts Counter can be found in the MyFonts privacy policy at http://www.myfonts.com/info/terms-and-conditions/#Privacy
12.9 SoundCloud
Plugins from the social network SoundCloud (SoundCloud Limited, Berners House, 47-48 Berners Street, London W1T 3NF, United Kingdom) may be integrated on our pages. You can recognise the SoundCloud plugins by the SoundCloud logo on the relevant pages.
When you visit our pages, a direct connection is established between your browser and the SoundCloud server after activating the plugin. SoundCloud then receives the information that you have visited our site with your IP address. If you click on the "Like button" or "Share button" while you are logged into your SoundCloud user account, you can link and/or share the content of our pages with your SoundCloud profile. This allows SoundCloud to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by SoundCloud. Further information on this can be found in SoundCloud's privacy policy at: https://soundcloud.com/pages/privacy.
If you do not want SoundCloud to associate your visit to our pages with your SoundCloud user account, please log out of your SoundCloud user account before activating the SoundCloud plugin content.
12.10 Recruitee
We offer you the opportunity to apply for jobs, internships, etc. online.
In order to participate in the application process, it is necessary to provide some of your personal data (e.g. first name, surname, address, email address and data relating to your educational and/or professional background).
We process the above data exclusively for the purpose of carrying out the application process. The legal basis for the processing is Art. 6 para. 1 sentence 1 letter b GDPR, Art. 88 para. 1 GDPR i.V.m. § Section 26 para. 1 sentence 1 BDSG.
The data will be deleted as soon as it is no longer required for the application process - usually after 6 months.
In the event that the application procedure is followed by an employment relationship, training relationship, internship or other service or employment relationship, the data will not be deleted, but stored for at least the duration of the service or employment relationship.
Deletion will also not take place if further processing and storage of your personal data is necessary in individual cases for the assertion, exercise or defence of legal claims.
You have the option of withdrawing your application at any time. As part of the application process, we only forward the data within the company - and possibly also within the group of companies (e.g. to the company management, works or personnel council, specialist department, personnel department, etc.).
We also offer you the option of having your application included in an applicant pool. This gives us the opportunity to consider your application beyond the specific reason for your application in the context of other future application procedures. Before we include your data in an applicant pool, we will contact you and provide you with further detailed information. You must also expressly consent to being included in the applicant pool.
For recruitment, we use the recruitee tool, Recruitee B.V., Keizergracht 313, 1016 EE Amsterdam, Netherlands. For information on data protection, please refer to the Recruitee B.V. website under the menu items "Data protection" and "GDPR"(https://recruitee.com/de/security-gdpr).
12.11 Customer Alliance
Guest reviews have become an integral part of consumers' selection decisions. We use the "Customer Alliance" tool from the provider CA Customer Alliance GmbH, Ullsteinstr. 130, Turm B, 12109 Berlin, phone: +49 (0)30 762 890 00, e-mail: info@customer-alliance.com.
Information on the provider's data protection can be found here: https://www.customer-alliance.com/de/datenschutzbestimmungen/. We have concluded the contracts required by the GDPR with the service provider. Processing is carried out on the basis of Article 6(1)(f) GDPR, as we have an interest in being rated by our guests.
We pass on the following data to the service provider: surname, first name, email address, travel period. You will be asked by the service provider to rate your stay with us.
12.12 DialogShift chat application
Our website uses the chat application of DialogShift GmbH, Rheinsberger Str. 76/77, 10115 Berlin. This application processes and stores data for the purpose of web analysis, operating the chat application and responding to enquiries.
To operate the chat function, the chat texts are saved and a cookie with a unique ID is set - this is used to recognise you as a customer.
A cookie is a small text file that is stored locally in the cache on your device. With the help of this cookie, our application recognises the device and can call up past chat logs. This cookie is stored for 90 days since it was last used. You can deactivate the storage of cookies in your browser settings. However, the chat function cannot be executed without the use of cookies.
The possible disclosure of e.g. name, e-mail address or a telephone number is voluntary and with the consent to temporarily use and store this data for the purpose of establishing contact until the end of the contact. This personal data will be deleted after 90 days.
The legal basis for data processing is Art. 6 para. 1 lit. F GDPR based on our legitimate interest in effective customer support, for statistical analysis of user behaviour and for optimisation purposes of our offers.
DialogShift offers further information on the collection and use of data as well as your rights and options for protecting your privacy at www.dialogshift.com/de/dsvgo.
13. payment provider
PayPal
We offer payment via PayPal on our website. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal").
If you select payment via PayPal, the payment data you enter will be transmitted to PayPal.
The transmission of your data to PayPal is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the fulfilment of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the effectiveness of data processing operations in the past.
Instant bank transfer
On our website, we offer payment via "Sofortüberweisung". The provider of this payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich (hereinafter referred to as "Sofort GmbH").
With the help of the "Sofortüberweisung" procedure, we receive a payment confirmation from Sofort GmbH in real time and can immediately begin to fulfil our obligations.
If you have decided in favour of the "Sofortüberweisung" payment method, you transmit the PIN and a valid TAN to Sofort GmbH, with which it can log into your online banking account. After logging in, Sofort GmbH automatically checks your account balance and carries out the transfer to us using the TAN you have transmitted. It then immediately sends us a transaction confirmation. After logging in, your turnover, the credit limit of the overdraft facility and the existence of other accounts and their balances are also automatically checked.
In addition to the PIN and TAN, the payment data you have entered and your personal data are also transmitted to Sofort GmbH. Your personal data includes your first and last name, address, telephone number(s), email address, IP address and any other data required for payment processing. The transmission of this data is necessary to establish your identity beyond doubt and to prevent attempts at fraud.
The transmission of your data to Sofort GmbH is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the fulfilment of a contract). You have the option to withdraw your consent to data processing at any time. A revocation does not affect the effectiveness of data processing operations carried out in the past.
Details on payment by instant bank transfer can be found at the following links: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/.
14 Changes
This data protection information will be amended in the event of changes to the technology used, Tools or changes to the offer of this website or for other reasons (e.g. change in the legal situation). You can always find the current version here.
If you are of the opinion that our data protection information is incorrect or incomplete, please contact us.
