Data protection
Data protection at a glance
Your cookie setting
[borlabs-cookie type="btn-cookie-preference"
title="Change cookie settings"/] Your cookie selection history [borlabs-cookie
type="consent-history"/]
General information
The following information provides a simple overview of what happens to your personal data
personal data when you visit our website.
Personal data is all data with which you can be personally identified.
can be identified. Detailed information on the subject of data protection can be found
our privacy policy listed below this text.
Data collection on our website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator.
You can find the operator's contact details in the legal notice of this website.
How do we collect your data?
On the one hand, your data is collected when you provide it to us.
This may, for example, be data that you enter in a contact form.
form. Other data is collected automatically when you visit the website by our
IT systems when you visit the website. This is primarily technical data (e.g. internet browser,
operating system or time of the page view). The collection of this data
automatically as soon as you enter our website.
What do we use your data for?
Some of the data is collected to ensure the error-free provision of the website.
to ensure error-free provision of the website. Other data can be used to analyse your user behaviour.
be used to analyse your user behaviour.
What rights do you have regarding your data?
You have the right to receive information free of charge at any time about the origin
recipient and purpose of your stored personal data.
You also have the right to request the rectification or erasure of this data.
request the deletion of this data. If you have given your consent to data processing,
you can revoke this consent at any time for the future. Furthermore
you have the right, under certain circumstances, to request the restriction
processing of your personal data under certain circumstances. Furthermore
right to lodge a complaint with the competent supervisory authority.
Analysis tools and tools from third-party providers
When you visit our website, your surfing behaviour can be statistically evaluated.
be analysed. This is done primarily with cookies and with so-called
analysis programmes. The analysis of your surfing behaviour is generally anonymous
anonymously; the surfing behaviour cannot be traced back to you. You can
object to this analysis or prevent it by not using certain tools.
tools. Detailed information about these tools and about your
objection options can be found in the following privacy policy.
2 General notes and mandatory information
Data protection
The operators of these pages take the protection of your personal data very seriously.
seriously. We treat your personal data confidentially and in accordance with
the statutory data protection regulations and this privacy policy. When
you use this website, various personal data will be collected.
Personal data is data with which you can be personally identified.
can be identified. This privacy policy explains which data we collect
and what we use it for. It also explains how and for what purpose this
happens. We would like to point out that data transmission over the Internet (e.g.
communication by e-mail) may have security gaps. A
complete protection of data against access by third parties is not possible.
Note on the responsible body
The controller responsible for data processing on this website is
Burghotel Sterr Inh. Michael Sterr Neunussberg 35 D - 94234 Viechtach Phone:
+49 (0)9942 - 80 50 e-mail:
info@hotel-sterr.de
The controller is the natural or legal person who alone or jointly with others
or jointly with others, decides on the purposes and means of the processing of
personal data (e.g. names, e-mail addresses, etc.).
Hosting
External hosting
This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers. stored on the hoster's servers. This may primarily involve IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses and other data generated via a website. generated via a website.
The use of the hoster is for the purpose of contract fulfilment vis-à-vis our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). If a corresponding consent has been requested, the processing takes place processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent allows the storage of cookies or access to access to information in the user's end device (e.g. device device fingerprinting) within the meaning of the TDDDG. The consent is revocable at any time. Our hoster will only process your data to the extent necessary for the fulfilment of its service obligations and in accordance with our instructions with regard to this data.
We use the following hoster:
Sebastian Bullermann
Bachstraße
5
94244 Geiersthal
Storage duration
Unless a more specific storage period has been specified in this privacy policy
your personal data will remain with us until the purpose for which it was
for the data processing no longer applies. If you assert an authorised request for deletion
or revoke your consent to data processing, your data will be deleted unless
your data will be deleted unless we have other legally permissible reasons for
reasons for storing your personal data (e.g. retention periods under tax or
retention periods under commercial law); in the latter case, the deletion will take place
deletion takes place after these reasons no longer apply.
Note on data transfer to the USA and other third countries
Among other things, our website uses tools from companies based in the
USA or other third countries that are not secure under data protection law
are integrated. If these tools are active, your personal data may be transferred
transferred to these third countries and processed there. We point out
point out that in these countries no data protection level comparable to the EU
level of data protection can be guaranteed. For example, US companies are
are obliged to disclose personal data to security authorities
authorities without you as the data subject being able to take legal action against this.
against this. It can therefore not be ruled out that US authorities (e.g.
authorities (e.g. secret services) process, analyse and permanently store your data on US servers
process, analyse and permanently store it. We have no influence on these
processing activities.
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent.
possible. You can revoke any consent you have already given at any time.
All you need to do is send us an informal e-mail. The legality of the data processing
data processing carried out until the revocation remains unaffected by the revocation.
Right to object to the collection of data in special cases and to direct advertising (Art. 21 GDPR)
If the data processing is carried out on the basis of Art. 6 para. 1 lit. e or f
GDPR, you have the right to object at any time, on grounds relating to your
particular situation, to object to the processing of your personal data; this
data; this also applies to profiling based on these provisions.
profiling based on these provisions. The respective legal basis on which processing is
processing is based can be found in this privacy policy. If you
objection, we will no longer process your personal data concerned
will no longer process your personal data unless we can demonstrate compelling legitimate grounds
for the processing that outweigh your interests, rights and freedoms
or the processing serves the establishment, exercise or defence of legal
defence of legal claims (objection pursuant to Art. 21 para. 1
GDPR).
If your personal data are processed for the purpose of direct marketing
direct marketing, you have the right to object at any time to the processing
processing of personal data concerning you for the purpose of such
advertising; this also applies to profiling insofar as it is connected with such
direct advertising. If you object, your personal data will
personal data will subsequently no longer be used for the purpose of direct marketing
purposes (objection pursuant to Art. 21 para. 2 GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint
to a supervisory authority, in particular in the Member State of their habitual
their habitual residence, place of work or place of the alleged infringement.
The right to lodge a complaint is without prejudice to any other administrative or judicial
or judicial remedies.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in
fulfilment of a contract, to yourself or to a third party in a commonly
third party in a commonly used, machine-readable format.
If you request the direct transfer of the data to another controller, this will
controller, this will only be done insofar as it is technically feasible.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content
confidential content, such as orders or enquiries that you send to us as the site operator.
to us as the site operator, uses SSL or TLS encryption. An
You can recognise an encrypted connection by the fact that the address line of the browser
changes from "http://" to "https://" and by the lock symbol in your browser line.
browser line. If SSL or TLS encryption is activated, the data that you
data that you transmit to us cannot be read by third parties.
Information, blocking, erasure and rectification
Within the framework of the applicable legal provisions, you have the right at any time
to free information about your stored personal data,
its origin and recipients and the purpose of the data processing and, if applicable
right to rectification, blocking or erasure of this data. For this and
further questions on the subject of personal data, you can contact us at any time at
the address given in the legal notice.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal
data. To do so, you can contact us at any time at the address
address given in the legal notice. The right to restriction of processing
exists in the following cases:
- If you dispute the accuracy of your personal data stored by us, we generally we usually need time to check this. For the you have the right to request the restriction of the processing of your personal processing of your personal data.
- If the processing of your personal data was/is carried out unlawfully unlawful, you may request the restriction of data processing instead of deletion. data processing instead of erasure.
- If we no longer need your personal data, but you need it for the exercise for the exercise, defence or assertion of legal claims, you defence or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.
- If you have lodged an objection pursuant to Art. 21 (1) GDPR, we must a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data. request the restriction of processing.
Objection to advertising e-mails
The use of contact data published in the context of the imprint obligation
for sending unsolicited advertising and information material.
information material is hereby objected to. The operators of the pages
expressly reserve the right to take legal action in the event of unsolicited
sending of advertising information, such as spam e-mails.
3. data collection on our website
Cookies
Our Internet pages use so-called "cookies". Cookies are small
text files and do not cause any damage to your end device. They are
either temporarily for the duration of a session (session cookies) or permanently
permanently (permanent cookies) on your end device. Session cookies
are automatically deleted at the end of your visit. Permanent cookies
remain stored on your end device until you delete them yourself or until an
automatically deleted by your web browser.
In some cases, cookies from third-party companies may also be stored on your end device
device when you visit our website (third-party cookies).
These enable us or you to use certain services of the third-party company
company (e.g. cookies for the processing of payment
payment services).
Cookies have various functions. Many cookies are technically necessary
necessary, as certain website functions would not work without them
(e.g. the shopping basket function or the display of videos). Other
cookies are used to evaluate user behaviour or display advertising.
display advertising.
Cookies that are required to carry out the electronic communication process
(necessary cookies) or to provide certain functions that you have requested (functional cookies
functions (functional cookies, e.g. for the shopping basket function) or to optimise the
optimisation of the website (e.g. cookies to measure the web audience)
are stored on the basis of Art. 6 para. 1 lit. f DSGVO
unless another legal basis is specified. The
The website operator has a legitimate interest in the storage of cookies
for the technically error-free and optimised provision of its services.
If consent to the storage of cookies has been requested, the cookies in question are stored
cookies are stored exclusively on the basis of this consent (Art.
consent (Art. 6 para. 1 lit. a GDPR); the consent can be revoked at any time.
revocable at any time.
You can set your browser so that you are informed about the setting of cookies
informed and only allow cookies in individual cases, exclude the acceptance of
cookies for certain cases or generally exclude them and activate the automatic
delete cookies when you close your browser. With the
deactivating cookies may limit the functionality of this website.
be limited.
Insofar as cookies are used by third-party companies or for analysis purposes
we will inform you about this separately in the context of this data protection
and, if necessary, request your consent.
Cookie consent with Borlabs Cookie
Our website uses Borlabs Cookie's cookie consent technology to
obtain your consent to the storage of certain cookies in your browser
and to document this in compliance with data protection regulations. The provider of this
technology is Borlabs - Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg, Germany
(hereinafter referred to as Borlabs).
When you enter our website, a Borlabs cookie is stored in your browser in which the
in which the consents you have given or the revocation of these consents are
of these consents are stored. This data is not passed on to the
passed on to the provider of Borlabs Cookie.
The data collected will be stored until you ask us to delete it
or delete the Borlabs cookie yourself or until the purpose for data storage
no longer applies. Mandatory statutory retention periods remain unaffected.
Details on data processing by Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.
Borlabs cookie consent technology is used in order to fulfil the legally required
to obtain the legally required consent for the use of cookies.
The legal basis for this is Art. 6 para. 1 sentence 1 lit. c GDPR.
Server log files
The provider of the pages automatically collects and stores information in so-called
so-called server log files, which your browser automatically transmits to us.
These are
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
Contact form and other forms
If you send us enquiries using the form, your details from the form, including the contact
form, including the contact details you provide there and technical data
data, such as your IP address, for processing the enquiry and in the event of
stored by us in the event of follow-up questions. We will not pass on this data without your
consent. The processing of the data entered in the contact form
data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 para.
1 lit. a DSGVO). You can revoke this consent at any time. All you need to do is
an informal message to us by e-mail. The lawfulness of the data processing
data processing operations carried out until the revocation remains unaffected by the revocation. The
data entered by you in the enquiry form will remain with us until you
request deletion, revoke your consent to storage or the purpose for data
purpose for the data storage no longer applies (e.g. after your enquiry has been
of your enquiry). Mandatory statutory provisions - in particular
retention periods - remain unaffected.
Voucher order
This page offers a voucher shop from e-ventis. The provider is
e-ventis GmbH, Neudorf 20, 94481 Grafenau. To use the voucher shop
of e-ventis and the processing of the order process, it is necessary to store your
IP address, browser information (name, version), website, user's operating system
screen resolution of the user, language settings of the browser or operating system of the user and the
of the user's operating system and the data provided by you.
save. When you place and send an order, this data is usually transmitted to an
usually transmitted to an e-ventis server and stored there. The
provider of this site has no influence on this data transfer. The
processing of the data is based on a business purpose in accordance with Art. 6 para. 1 lit. f
GDPR. The website operator has a legitimate interest in offering its own vouchers
vouchers for visitors to the website. The
Payment transactions via the common means of payment are made exclusively via
an encrypted SSL or TLS connection. You can recognise an encrypted connection
You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to
"https://" and by the lock symbol in your browser line. With
encrypted communication, the payment data that you transmit to us cannot be
transmitted to us cannot be read by third parties. More information on the handling
with user data at e-ventis can be found in the privacy policy at https://www.e-ventis.info/de/kontakt/datenschutz/datenschutz.html. We have concluded an order processing contract with e-ventis.
Enquiry by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, your enquiry will be processed
including all resulting personal data (name, enquiry) will be
will be stored and processed by us for the purpose of processing your enquiry.
We will not pass on this data without your consent. The processing
of this data is carried out on the basis of Art. 6 para. 1 lit. b GDPR, insofar as your
request is related to the fulfilment of a contract or is necessary for the
pre-contractual measures is required. In all other cases, the processing is based
processing is based on your consent (Art. 6 para. 1 lit. a GDPR) and/or on our
our legitimate interests (Art. 6 para. 1 lit. f GDPR), as we have a
legitimate interest in the effective processing of enquiries addressed to us.
enquiries addressed to us. The data you send to us via contact enquiries will remain
will remain with us until you ask us to erase it, revoke your consent to its
storage or the purpose for the data storage no longer applies (e.g. after
after your request has been processed). Mandatory legal
provisions - in particular statutory retention periods - remain unaffected.
remain unaffected.
Processing of data (customer and contract data)
We collect, process and use personal data only to the extent necessary for
necessary for the establishment, content or amendment of the legal relationship
are necessary (inventory data). This is done on the basis of Art. 6 para. 1
lit. b GDPR, which permits the processing of data for the fulfilment of a contract or
pre-contractual measures. Personal data about the
use of our website (usage data) are only collected, processed and used to the
only to the extent that this is necessary to enable the user to use the service or to
use of the service or to bill the user. The customer data collected is
deleted after completion of the order or termination of the business relationship.
Statutory retention periods remain unaffected.
Data transmission upon conclusion of a contract for services and digital content
We only transfer personal data to third parties if this is necessary in the context of
necessary for the fulfilment of the contract, for example to the credit institution
commissioned with payment processing. A further transmission of the data does not take place
or only if you have expressly consented to the transfer.
Your data will not be passed on to third parties without your express consent, for example for
purposes of advertising. The basis for data processing is Art.
6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a
contract or pre-contractual measures.
Holiday Check
Our website includes web widgets from HolidayCheck AG Bahnweg 8 CH-8598
Bottighofen Switzerland. Web widgets are small programmes that are
that are integrated into the website and display information from other websites.
websites. The content that is displayed on our website
(ratings/recommendation rate) is always retrieved from the HolidayCheck
HolidayCheck servers, which is recorded in the access logs.
This includes the date and time of the visit; the page from which the request was made
Internet Protocol address (IP address), browser type and version, device type, operating system
-version, device type, operating system and similar technical information. The
legal basis is our legitimate interest pursuant to Art. 6 para. 1 f) GDPR: By
By providing this service, we deliver up-to-date and correct content on
our homepage. The processed data is only used to provide the content
content or the transmission of data that you provide when you submit a review directly
submit a review directly on our website. They are not processed in any other way
processed in any other way, in particular not to analyse user behaviour. The
above-mentioned data are not stored by us in the context of this processing.
stored. Information on data processing by HolidayCheck AG
can be found in the privacy policy on the page www.holidaycheck.de/datenschutz take.
Trip Advisor
Our website includes web widgets from TripAdvisor LLC, 400 1st Avenue,
Needham, MA 02494 USA. If you use the TripAdvisor widget on our website to
page to submit your review, the data you enter will be transmitted to the
provider mentioned. To retrieve the ratings via the
TripAdvisor widget, it is also necessary to provide your IP address,
Browser information (name, version), website, operating system of the user,
screen resolution of the user, language settings of the browser or the user's
operating system of the user to Trip Advisor. This data is usually
usually transmitted to a TripAdvisor server and stored there. The
provider of this site has no influence on the data transfer and on the use
use of the data by TripAdvisor. The use of TripAdvisor is in the interest of
interest of a simple and convenient overview of reviews. This constitutes
a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Further
information can be found in Tripadvisor's privacy policy at https://tripadvisor.mediaroom.com/DE-privacy-policy.
4. analysis tools and advertising
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider
is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin
4, Ireland. Google Analytics uses so-called "cookies". These are
text files that are stored on your computer and that enable your use of the website to be analysed.
use of the website by you. The information generated by the cookie
information about your use of this website is generally transmitted to a Google
Google server in the USA and stored there. The storage
of Google Analytics cookies and the use of this analysis tool are based on
on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a
legitimate interest in the analysis of user behaviour in order to optimise both its
optimise both its website and its advertising.
Browser plugin
You can prevent the storage of cookies by selecting the appropriate settings in your
your browser software; however, we would like to point out that in this case you
in this case you may not be able to use all functions of this website
be able to use all functions of this website to their full extent. You can also prevent the collection of data
data generated by the cookie and related to your use of the website (including your
(including your IP address) to Google as well as the processing of this data by
Google by downloading and installing the browser plugin available at the following link
download and install the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to data collection
You can prevent the collection of your data by Google Analytics by
clicking on the following link. An opt-out cookie will be set which prevents the
collection of your data on future visits to this website:
[borlabs-cookie id="google-analytics" type="btn-switch-consent"/] More
Information on how Google Analytics handles user data can be found in the
Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
Order processing
We have concluded a contract with Google for order processing and
the strict requirements of the German data protection authorities when using Google Analytics.
authorities when using Google Analytics.
Demographic characteristics in Google Analytics
This website uses the "demographic characteristics" function of Google Analytics.
This allows reports to be created that contain statements about the age, gender and
interests of visitors to the site. This data comes from
interest-based advertising from Google and from visitor data from
third-party providers. This data cannot be assigned to a specific person.
You can deactivate this function at any time via the ad settings in your
Google account or prevent the collection of your data by Google Analytics
as described in the section "Objection to data collection".
Storage duration
Data stored by Google at user and event level that is linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymised or deleted after 14 months. You can find details on this under the following link: https://support.google.com/analytics/answer/7667196?hl=de
Facebook Pixel
To measure conversions, our website uses the visitor action pixel from
Facebook, Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook").
("Facebook"). This allows the behaviour of site visitors to be tracked,
after they have been redirected to the provider's website by clicking on a Facebook ad.
were forwarded to the provider's website. This allows the effectiveness of the
Facebook adverts can be evaluated for statistical and market research purposes
purposes and to optimise future advertising measures. The data collected is
anonymous for us as the operator of this website; we cannot draw any conclusions about the
the identity of the user. However, the data is stored and processed by Facebook
and processed so that a connection to the respective user profile is possible
and Facebook can use the data for its own advertising purposes, in accordance with the Facebook Data Usage Policy can use. This allows Facebook to enable the placement of adverts on
Facebook pages and outside of Facebook. This use of the data
of the data cannot be influenced by us as the site operator. The use
of Facebook Pixel is based on Art. 6 para. 1 lit. f GDPR. The
website operator has a legitimate interest in effective advertising measures
including social media. In the data protection information of Facebook
you will find further information on the protection of your privacy: https://de-de.facebook.com/about/privacy/. You can also use the remarketing function "Custom Audiences" in the
Settings for adverts under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen deactivate it. To do this, you must be logged in to Facebook. If you do not have a
Facebook account, you can disable usage-based advertising from Facebook on the
the website of the European Interactive Digital Advertising Alliance
website: http://www.youronlinechoices.com/de/praferenzmanagement/. [borlabs-cookie id="facebook-pixel" type="btn-switch-consent"/]
5th Newsletter
Newsletter data
If you would like to receive the newsletter offered on the website, we require
e-mail address as well as information that allows us to verify that you are the
allow us to verify that you are the owner of the e-mail address provided
and that you agree to receive the newsletter. Further data will
only collected on a voluntary basis. We use this data
exclusively for sending the requested information and do not pass it on to third parties.
to third parties. The processing of the data entered in the newsletter registration form
is processed exclusively on the basis of your consent (Art.
6 para. 1 lit. a GDPR). The consent given for the storage of the data, the e-mail address
e-mail address and its use for sending the newsletter can be revoked at
revoked at any time, for example via the "Unsubscribe" link in the newsletter. The
legality of the data processing operations already carried out remains unaffected by the
cancellation remains unaffected. The data you provide us with for the purpose of subscribing to the newsletter
will be stored by us until you unsubscribe from the newsletter and will be
and deleted after you unsubscribe from the newsletter. Data stored by us for
stored by us for other purposes remain unaffected by this.
Newsletter2Go
This website uses Newsletter2Go to send newsletters. The provider is
Newsletter2Go GmbH, Nürnberger Straße 8, 10787 Berlin, Germany.
Newsletter2Go is a service with which, among other things, the sending of newsletters
can be organised and analysed. The data you enter for the purpose of
newsletter subscription are stored on the servers of Newsletter2Go in Germany.
Germany. If you do not wish to be analysed by Newsletter2Go,
you must unsubscribe from the newsletter. For this purpose, we provide in every
newsletter message provides a corresponding link. You can also
you can also unsubscribe from the newsletter directly on the website.
Data analysis by Newsletter2Go
With the help of Newsletter2Go, we are able to analyse our newsletter campaigns.
analyse our newsletter campaigns. For example, we can see whether a newsletter message has been opened
and which links have been clicked on. In this way, we can, among other things
determine which links were clicked on particularly often. We can also
recognise whether certain previously defined actions were carried out after opening/clicking
were carried out (conversion rate). For example, we can recognise whether you have
have made a purchase after clicking on the newsletter. Newsletter2Go
also enables us to categorise newsletter recipients according to different
categories ("clustering"). The newsletter recipients can be categorised, for example
by age, gender or place of residence. In this way, the
newsletter can be better customised to the respective target groups. Detailed
information on the functions of Newsletter2Go can be found at the following
link: https://www.newsletter2go.de/features/newsletter-software/.
Legal basis
The data processing takes place on the basis of your consent (Art. 6 para. 1
lit. a DSGVO). You can revoke this consent at any time. The
legality of the data processing operations that have already taken place remains
revocation remains unaffected.
Storage duration
The data you provide us with for the purpose of subscribing to the newsletter will be
stored by us until you unsubscribe from the newsletter and deleted from our servers
from our servers as well as from the servers of Newsletter2Go after you unsubscribe from the newsletter.
from the servers of Newsletter2Go. Data stored by us for other purposes remain
remain unaffected by this. You can find more details in the
Newsletter2Go's privacy policy at: https://www.newsletter2go.de/features/datenschutz-2/.
Conclusion of a contract for order processing
We have concluded a contract with Newsletter2Go in which we
Newsletter2Go to protect our customers' data and not to pass it on to third parties.
to third parties. This contract can be viewed under the following link
can be viewed at the following link: https://www.newsletter2go.de/docs/datenschutz/ADV_Muster_Newsletter2Go_GmbH_latest_Form.pdf. [borlabs-cookie id="newsletter_two_go" type="btn-switch-consent"/]
6. plugins and tools
Web Fonts
This site uses so-called web fonts for the standardised display of fonts.
fonts, which are provided by various providers. When you call up a
page, your browser loads the required web fonts into your browser cache in order to display texts
display texts and fonts correctly. For this purpose, the browser you use must
connection to the provider's servers. Through this
provider becomes aware that our website has been accessed via your IP address.
was called up. The use of web fonts is in the interest of a
uniform and appealing presentation of our online offers. This constitutes
a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If your
browser does not support web fonts, a standard font will be used by your
computer will be used. You can find more information about Google Web Fonts at https://developers.google.com/fonts/faqand in Google's privacy policy: https://www.google.com/policies/privacy/. You can find more information about Font Awesome at:
https://fontawesome.com/license
https://fontawesome.com/privacy
Google Maps (with consent)
This site uses the Google Maps map service via an API. The provider is
Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4,
Ireland. In order to guarantee data protection on our website, Google Maps is
is deactivated when you enter our website for the first time. A direct
connection to Google's servers is only established when you activate Google Maps
independently (consent according to Art. 6 para. 1 lit. a GDPR). This
This prevents your data from being transferred to Google the first time you enter the
transmitted to Google the first time you enter the site. After activation, Google Maps will store your
save your IP address. This is then generally transmitted to a Google server in the
Google server in the USA and stored there. The provider of this site has
no influence on this data transfer once Google Maps has been activated.
You can find more information on the handling of user data in the
Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.
Google Translate
In order to make our website available in other languages,
we use Google Translate (operated by Google Inc., 1600 Amphitheatre
Parkway, Mountain View, CA 94043, USA). For reasons of data protection
Google Translate is deactivated by default. Only when you actively
select another language, Google Translate will be activated. In doing so, data is
transmitted to Google. In addition to the URL of the page you are visiting, your
IP address is also transmitted. We have no influence on the data collected and the
data processing operations. We are also not aware of the scope of data collection,
the purposes and the storage periods. Information on how Google handles
your data can be found directly at Google:
http://www.google.com/intl/de_de/policies/privacy/
The use of Google Translate is based on a legitimate interest
within the meaning of Art. 6 para. 1 lit. f GDPR. Namely the appealing presentation
of the website in other languages. Please note that the
computer-generated translation sometimes only approximates the original text
of our website.
Vioma
Vioma
Our website uses the vioma BOOKING booking technology provided by vioma GmbH, Industriestraße 27, 77656 Offenburg ("vioma"). We have concluded an order processing agreement with vioma.
If you make an online booking or a booking enquiry via our website, we require your e-mail address, your travel dates, the product you have booked and your title, first name and surname for processing. In individual cases, we may also ask for your telephone number so that we can contact you quickly, particularly in the event of unforeseen circumstances that affect your booking.
To calculate the valid travel price, the dates of stay, the selected product, the number of people travelling and whether they are adults or children are required. If you are travelling with children, the age of the children will also be requested for the correct travel price calculation. We also ask for the desired means of payment for the trip. If prepayment is used for your travel parameters, you will be forwarded to a payment service provider for the secure processing of the prepayment after selecting the desired payment method. Further information in the form is provided on a voluntary basis.
The processing of your data for the online booking and the online booking request is based on Art. 6 para. 1 lit. b GDPR and serves the fulfilment of a contract or the implementation of pre-contractual measures.
The data you transmit to us will remain with us until the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.
Conclusion of a contract for order processing
In order to ensure data protection-compliant processing, we have concluded an order processing contract with vioma.
Smashballoon
We use the "Instagram Feed" plug-in on our website. The plug-in is developed by Smash Balloon LLC in the USA (https://smashballoon.com/) ("Provider") and is offered as a WordPress plug-in or as a stand-alone PHP plug-in. The plug-in enables us to display the newsfeed of our Instagram fan page directly on our website. To do this, the plug-in retrieves the information from Instagram and integrates it into our website. As far as we are currently aware, no special cookies are set in your browser by this plug-in that collect, process or use personal data. If you click on a link in the newsfeed, you will be redirected to our Instagram fan page. The full range of functions of the plug-in can be viewed at https://de.wordpress.org/plugins/instagram-feed/ and https://smashballoon.com/instagram-feed. Further information on Smash Balloon's data protection can be found here: https://smashballoon.com/gdpr-and-our-plugins/
7. script libraries
We use various script libraries to implement certain functions on our website.
certain functions on our website. If you have activated Java Script in your browser
and have not installed a Java Script blocker, your browser can transmit
transmit personal data to the library server. The
processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. The
website operator has a legitimate interest in the functionality of its website
to programme and optimise the functionality of its website using script libraries. To optimise the
prevent the execution of Java Script code altogether, you can install a
install a Java script blocker.
8. social media
Data processing by social networks
We maintain publicly accessible profiles in social networks. The social networks
social networks used by us can be found below.
Social networks such as Facebook, Twitter etc. can generally analyse your user behaviour
behaviour when you visit their website or a website with integrated social media
integrated social media content (e.g. like buttons or advertising banners)
visit. When you visit our social media presences, numerous
data protection-relevant
processing operations are triggered. In detail:
If you are logged in to your social media account and visit our
social media presence, the operator of the social media portal can assign this visit
assign this visit to your user account. Your personal data
may also be collected under certain circumstances if you are not
logged in or do not have an account with the respective social media portal.
have an account with the respective social media portal. In this case, this data collection takes place, for example, via
cookies that are stored on your end device or by recording your IP address.
IP address.
With the help of the data collected in this way, the operators of the
social media portals can create user profiles in which your preferences and
interests are stored. In this way, interest-based advertising can be
advertising inside and outside the respective social media presence.
be displayed. If you have an account with the respective social network
social network, the interest-based advertising can be displayed on all devices
on which you are logged in or were logged in.
Please also note that we cannot track all processing operations on the social media
on the social media portals. Depending on the provider, therefore
further processing operations may be carried out by the operators of the social media portals.
may be carried out. For details, please refer to the terms of use and
privacy policies of the respective social media portals.
Legal basis
Our social media presences are designed to ensure the broadest possible presence on the
presence on the Internet. This constitutes a legitimate interest
within the meaning of Art. 6 para. 1 lit. f GDPR. The analysis processes initiated by the social networks
initiated by the social networks may be based on different legal bases,
which must be specified by the operators of the social networks (e.g.
Consent within the meaning of Art. 6 para. 1 lit. a GDPR).
Responsible party and assertion of rights
If you visit one of our social media sites (e.g. Facebook), we are jointly responsible
together with the operator of the social media platform for the data processing operations
processing operations triggered during this visit. You can exercise your
rights (information, rectification, erasure, restriction of processing,
data portability and complaint) both vis-à-vis us and vis-à-vis the operator of the
the operator of the respective social media portal (e.g. Facebook).
assert your rights.
Please note that, despite our joint responsibility with the social media
social media portal operators, we do not have full influence on the data processing
data processing operations of the social media portals. Our
possibilities are largely determined by the corporate policy of the
respective provider.
Storage duration
The data collected directly by us via the social media presence will be
deleted from our systems as soon as you ask us to delete it, revoke your
revoke your consent to the storage or the purpose for the
data storage no longer applies. Stored cookies remain on your end device
until you delete them. Mandatory legal provisions - esp.
retention periods - remain unaffected.
We have no influence on the storage period of your data stored by the operators of the social
networks for their own purposes.
For details, please contact the operators of the social networks directly
social networks (e.g. in their privacy policy, see below).
Social networks in detail
We have a profile on Facebook. The provider of this service is
Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2,
Ireland. According to Facebook, the data collected is also transferred to the USA and other third countries.
Facebook also transfers data to the USA and other third countries.
We have concluded an agreement with Facebook on joint processing
(Controller Addendum) with Facebook. This agreement specifies for
which data processing operations we or Facebook are responsible for when
you visit our Facebook page. You can view this agreement at
the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
You can customise your advertising settings yourself in your user account.
yourself. To do this, click on the following link and log in: https://www.facebook.com/settings?tab=ads.
Data transfer to the USA is based on the standard contractual clauses of the
EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
Details can be found in Facebook's privacy policy: </span>https://www.facebook.com/about/privacy/.
We have a profile on Instagram. The provider is Instagram Inc,
1601 Willow Road, Menlo Park, CA, 94025, USA.
Data transfer to the USA is based on the standard contractual clauses of the
EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 und https://de-de.facebook.com/help/566994660333381.
Details on how they handle your personal data can be found in the
Instagram privacy policy: https://help.instagram.com/519522125107875.
