Pure Yachting by Marina Balear S.L.
PRIVACY POLICY
Thank you very much for your interest in our website and the information provided there. As we take the protection of the privacy of both the users of our website and our customers very seriously and comply with the statutory provisions on the protection of personal data, such as those contained in the Federal Data Protection Act and the Telemedia Act, we inform you below how we handle your data:
Data collection and data processing
If our website is accessed and files stored there are retrieved, these are logged for statistical purposes and to improve our online offering. The data on accesses and retrievals does not allow us to draw any conclusions about your person. We store the data in so-called server log files. The logged and stored data is as follows Name of the retrieved file, date and time of retrieval, amount of data transferred, notification of the success of the access or retrieval, IP address of the requesting device.
We only collect personal data ourselves if the site user discloses such data to us on a voluntary basis, for example in the form of inquiries (e.g. by electronic mail or by using a contact form on our homepage) or in the context of legal agreements with us.
Controller within the meaning of the General Data Protection Regulation
The controller within the meaning of the General Data Protection Regulation is the operator of the website you are currently visiting. Our contact details can be found in the provider identification (imprint) of the website you are visiting.
Encryption of the transfer of electronic data using the Secure Sockets Layer (SSL for short)
In order to ensure that your personal data cannot be read, changed, duplicated or deleted by unauthorized third parties during electronic transmission between you and us, we use connections that are encrypted using the "Secure Sockets Layer" (SSL) network protocol, for example to receive your inquiries and to process orders by e-mail or via input forms, if such forms are currently available on our homepage.
Such an encrypted connection is activated when the address line of your Internet browser shows
"https://" appears. Otherwise, "http://" is displayed, meaning that without an SSL-coded connection, an "s" is missing in the browser protocol specification.
Data collection and data processing
1. creation of log files when you visit our website
If our website is accessed and the files stored there are retrieved, data is automatically logged. We store this data in so-called server log files. The logged and stored data is specifically as follows:
Name of the retrieved file,
Date and time of retrieval,
Amount of data transferred,
Message about the success of the access or retrieval,
IP address of the requesting device,
Browser type,
Operating system used by the visitor.
This data is not merged with other personal data of the visitor to our website, which is why the information provided does not allow us to draw any conclusions about your person.
Processing purpose
It is necessary to store your IP address because without it, the content of our website cannot be transferred to your computer. Your IP address must remain stored for the duration of the session - i.e. the standing connection between the Internet browser you use to call up or access the website (so-called "client-side application") on the one hand and the server we use to operate the homepage on the other. The purpose of storing your data in server log files is, on the one hand, to ensure the functionality of our website and, on the other hand, to optimize the website you visit. Furthermore, this data helps us to maintain the security of the information technology systems used here.
Legal basis for the processing of data:
The relevant legal basis for the storage of the data and also the server log files is, taking into account the described processing purpose, § 15 I TMG for the period up to and including 24.05.2018, starting from 25.05.2018 then Art. 6 I letter f DS-GVO (processing is necessary to safeguard the legitimate interests of the person responsible or a third party).
Storage duration
We delete the automatically stored access and retrieval data at the point in time at which they are no longer required to achieve the purpose for which they were collected. As far as the provision of our website is concerned, this is the case when the respective session - i.e. the connection between the Internet browser used by you to access the website (so-called "client-side application") on the one hand and the server used by us to operate the website on the other - has ended. The stored IP address and the server log file contained therein are deleted no later than 7 days after the time of storage, so that no assignment of the remaining data (name of the retrieved file, date and time of retrieval, amount of data transferred, notification of the success of the access or retrieval, browser type, operating system used by the visitor) to the requesting device and its IP address can take place.
Option to object
The data collected for the provision of our website and its storage in server log files is indispensable and absolutely necessary for the operation of the website. You therefore have no right to object in this regard.
2. processing of personal data in response to inquiries about our range of products and services
We collect personal data even if the website user discloses such data to us on a voluntary basis in the form of inquiries about the services or products offered on this website (e.g. by electronic mail). The personal data of the enquirer transmitted to us with the inquiry is stored. This data is not passed on to third parties under any circumstances and is used solely for processing the correspondence with the enquirer initiated by the inquiry.
Processing purpose
The processing of the data transmitted to us as part of the service or product-related inquiry serves to process the inquiry and the subsequent response.
Legal basis for the processing of data:
The relevant legal basis for the storage of data transmitted to us in the context of inquiries about our range of services or products is, taking into account the processing purpose described above, for the period up to and including 24.05.2018
§ Section 28 I 1 No. 2 BDSG,
starting from 25.05.2018 then
Art. 6 I letter f GDPR
(processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party). If the request is already aimed at the conclusion of a contract with us, the following is also required for the period up to and including 24.05.2018
§ Section 28 I 1 No. 1 BDSG,
starting from 25.05.2018 then
Art. 6 I letter b, 2nd alternative GDPR is the legal basis for data processing.
Storage duration
We delete the data transmitted to us in the course of service or product-related inquiries or collected by us in this context at the point in time at which they are no longer required to achieve the purpose of their storage. This is the case, as far as an inquiry about our range of services or products is concerned, when the inquiry has been answered by us and it is clear from the circumstances that no further correspondence with the enquirer regarding their request is necessary.
Option to object
The enquirer is entitled to object to the storage of their personal data. However, it will then no longer be possible to respond to the inquiry.
Should you wish to declare such an objection, we kindly ask you in advance to at least use the text form for this purpose and to send the declaration of objection to one of the contact options (postal address, e-mail, fax) specified in the imprint of our homepage. Once the objection has been received, the personal data that was transmitted to us as part of the request and stored here will be deleted immediately.
3. processing of personal data in the event of inquiries about our range of services or products using the "dsa Secure" contact form
To receive and process your inquiries, we use a contact form provided by dsa Marketing AG (www.dsa-marketing.ag; Im Lipperfeld 22 a - 24, 46047 Oberhausen), which is integrated into our homepage by means of an "iFrame". An "iFrame" is an "HTML" element that is positioned within a website in the form of a frame or window. "HTML" in turn is a text-based markup language for websites. The dsa Marketing AG contact form used here is encrypted using the Secure Sockets Layer (SSL) network protocol.
If you send an inquiry via the contact form in question, it will first be forwarded to the servers of dsa Marketing AG, temporarily stored there and then automatically transmitted to us, without the aforementioned company processing the personal data provided in the context of your inquiry for its own purposes or for the purposes of third parties - with the express exception of us. After this last transfer, dsa Marketing AG deletes your personal data in its entirety by means of an automated process. The employees of dsa Marketing AG who monitor this automated transfer and deletion process have, according to the information provided there, issued internal declarations of commitment to comply with data protection requirements and have also undertaken to maintain confidentiality.
Processing purpose
The processing of the data transmitted to us as part of the service or product-related inquiry serves to process the inquiry and the subsequent response.
Legal basis for the processing of data:
The legal basis for data processing when using the "dsa Secure" contact form is that we obtain the voluntary consent of the website visitor,
is available for the period up to and including 24.05.2018
§ 4 I BDSG§§ 12, 13 TMG valid,
starting from 25.05.2018 then
Art. 6 I letter a GDPR
(Consent by the data subject to the processing of personal data concerning him or her for one or more specific purposes).
Obtaining your consent
Before you send the "dsa Secure" contact form you have completed, your attention will be drawn to this data protection declaration, and we will ask for your consent to the associated data processing.
Right of withdrawal
You are entitled to withdraw your consent to the processing of your personal data.
If you wish to revoke your consent, we kindly ask you to at least use the text form and to send the revocation to one of the contact options (postal address, e-mail, fax) specified in the imprint of our homepage. After receipt of the revocation, the personal data will be deleted immediately, unless there is another legal basis for the processing of this data. The legality of the data processing that took place before your revocation on the basis of your consent is not affected by the declaration of revocation.
Storage duration
If you do not withdraw your consent, we will delete the data transmitted to us in the course of service or product-related inquiries or collected by us in this context at the point in time at which they are no longer required for the purpose for which they were stored. This is the case, as far as an inquiry about our range of services or products is concerned, when the inquiry has been answered by us and it is clear from the circumstances that no further correspondence with the enquirer regarding their request is necessary.
Processing of personal data for contract initiation, contract fulfillment and contract amendment
We process those personal data that are necessary for the conclusion of a contract between you and us, for its fulfillment or for its amendment. These data are as follows:
Name and address of the contractual partner,
Type and quantity of the booked service or goods,
the payment method used.
Depending on the subject matter of the (contractual) service concerned, further data may be required.
If the payment method used is the SEPA Direct Debit Scheme, the data will also be processed:
the account details of the contractual partner.
If payment by credit card has been agreed with our contractual partner, the data will also be processed:
the credit card details of the contractual partner. If the purchase of the services and/or goods ordered from us is subject to legal restrictions (such as age restrictions), the data required for the fulfillment of the contract due to the relevant legal restriction in addition to the data already specified above (e.g. the age of the contractual partner in the case of legal age restrictions) will also be processed.
Processing purpose
The processing of the aforementioned data serves to execute the contracts concluded with us, including the provision of services as agreed. Transfer of data to third parties Data required for the fulfillment of the contract will be transferred to third parties in the following cases:
a. Agreed payment method SEPA direct debit: Your account details will be forwarded to the bank processing the payment.
b. Agreed payment method credit card: Your credit card details will be forwarded to the bank or payment service provider processing the payment.
c. Shipment of goods or delivery: Your address and the data on the goods ordered will be forwarded to the shipping or transportation company engaged by us for delivery purposes.
d. Fulfillment of tax obligations: Insofar as we have mandated a tax consultant, the data will be passed on to him to the extent that is absolutely necessary to fulfill the tax obligations that apply to us.
Legal basis for the processing of data:
The relevant legal basis for the processing of the data, taking into account the described processing purpose, is Art. 6 I letter b, 1st alternative GDPR (processing is necessary for the performance of a contract to which the data subject is a party), which also covers processing on the occasion of pre-contractual measures.
Storage duration
We store the data required for the fulfillment and amendment of an existing contractual relationship with us until the expiry of the statutory retention periods, in particular under tax law. For example, the retention period for contracts and standing order documents, insofar as these do not form the basis for accounting, and for shipping documents is currently 6 years in each case (in the case of standing order documents, this period begins after the contract expires), see Section 147 III 1§ of the German Fiscal Code (AO). In accordance with § 147 II§ in conjunction with 147 I No.1, 4 and 4 a§ of the German Fiscal Code (AO), invoices must be kept for ten years.
After expiry of the legally prescribed retention periods, we delete or block the data if it is no longer required for the conclusion or fulfillment of a contract.
If no contract has been concluded between you and us, we will delete the data collected or transmitted for pre-contractual measures if it is clear from the circumstances that further correspondence with you regarding the service or goods to which dialogs or offers from your or our side have referred is no longer necessary.objection option If the processing of your personal data was in connection with pre-contractual measures and these measures have not led to the conclusion of a contract between you and us, you are entitled to object to the data storage.
If you wish to declare such an objection, we ask that you at least use the text form in advance and send the declaration of objection to one of the contact options (postal address, e-mail, fax) given in the imprint of our homepage.
Once the objection has been received, the personal data collected by us or transmitted to us for the purpose of taking pre-contractual measures and stored here will be deleted immediately.
With regard to the data required for the fulfillment of the contract or any changes to the contract, you do not have the right to object due to their necessity for the stated purposes.
Processing in other respects
If the collection and use of personal data is not possible due to actual circumstances and does not fall under any of the above-mentioned constellations, data processing is generally only carried out with the consent of the data subject.
Processing purpose
The collection and use of personal data otherwise only takes place to enable us to operate our website properly and to improve it. Legal basis for the processing of data: The legal basis for those data processing operations for which consent is obtained from the data subject is
Art. 6 I letter a GDPR
(Consent by the data subject to the processing of personal data concerning him or her for one or more specific purposes).
Right of withdrawal
You are entitled to withdraw your consent to the processing of your personal data. If you wish to revoke your consent, we kindly ask you to at least use the text form in advance and to send the revocation to one of the contact options (postal address, e-mail, fax) given in the imprint of our homepage. After receipt of the revocation, the personal data will be deleted immediately, unless there is another legal basis for the processing of this data.
The legality of the data processing that took place before your revocation on the basis of your consent is not affected by the declaration of revocation.
Use of "cookies" to ensure and improve the user-friendliness and user-friendliness of our website
So-called "cookies" are used on our website.
Cookies" are text files that are transmitted to the respective website user at the instigation of the operator of a website when the website is accessed and are temporarily stored in or by the Internet browser of the accessing end device.
A distinction is made between two types of "cookies", namely temporary and permanent cookies.
The temporary "cookies" are automatically deleted from your end device as soon as you close your Internet browser.
Persistent cookies, on the other hand, remain stored on your end device even after you close the Internet browser you are using and can be recognized by the website operator the next time you visit their website, as such cookies usually contain a characteristic sequence of characters known as a "cookie ID". Websites and internet servers assign this string of characters to the web browser on which the permanent cookie was stored. It is therefore possible to uniquely identify your browser using the "cookie ID".
We mainly use temporary "cookies", which are automatically deleted after the end of your visit to our website.
However, permanent cookies are also used, which enable us to recognize your Internet browser the next time you visit our website. Persistent cookies remain on the device you use to access the website until you delete them.
We ourselves use "cookies" to make it easier for visitors or users to navigate our website and to allow them to use certain site functions that would not be available without the use of "cookies".
"Cookies do not cause any damage to your computer. By changing the settings of your Internet browser, you can ensure that you are informed about the impending temporary storage of cookies on your end device. It is also possible to configure your Internet browser so that you do not accept individual or all cookies.
Please bear in mind that if you do not accept the cookies we use, the full functionality of our website may be impaired.
Processing purpose
The purpose we pursue for the processing of personal data by means of the use of cookies is to provide a user-friendly and user-friendly website for the benefit of website visitors and to improve its functionality. Legal basis for the processing of data: The relevant legal basis for the processing of the data is, taking into account the described processing purpose for the period up to and including May 24, 2018
§ 15 I TMG,
starting from 25.05.2018 then
Art. 6 I letter f GDPR
(processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party).
Storage period and deletion
You can delete persistent cookies stored on your device yourself at any time using your internet browser or other software. If you delete persistent cookies from your device, the full functionality of our website may be impaired.
Option to object
By changing the settings of your Internet browser, it is possible to permanently prevent cookie transfers on the device you use to visit or access websites. If you make such changes to your browser settings, you are effectively objecting to the setting of cookies for a period of time determined by you.
Processing of personal data for inquiries about our range of services and products using the "dsa Secure" contact form
To receive and process your inquiries, we use a contact form provided by dsa Marketing AG (www.dsa-marketing.ag; Im Lipperfeld 22 a - 24, 46047 Oberhausen), which is integrated into our website by means of an "iFrame".
An "iFrame" is an "HTML" element that is positioned within a website in the form of a frame or window. "HTML" in turn is a text-based markup language for websites.
The dsa Marketing AG contact form used here is encrypted using the "Secure Sockets Layer" (SSL) network protocol.
If you send an inquiry via the contact form, it will first be forwarded to the servers of dsa Marketing AG, temporarily stored there and then automatically transmitted to us, without the aforementioned company processing the personal data provided in the context of your inquiry for its own purposes or for the purposes of third parties - with the express exception of us.
After this last transfer, dsa Marketing AG deletes your personal data in its entirety by means of an automated process.
The employees of dsa Marketing AG who monitor this automated transmission and deletion process have, according to the information provided, undertaken to comply with data protection requirements and to maintain confidentiality.
The following data is requested from the website visitor as part of the contact form: a) Name of the person making the request,
b) E-mail address of the person making the request,
c) Telephone number of the person making the request,
d) Subject (= reason for making contact).
The data under letters a), b) and d) are mandatory data which are urgently required on this side in order to be able to answer inquiries from a visitor to our website appropriately and on a case-by-case basis.
Processing purpose
The processing of the data transmitted to us as part of the service or product-related inquiry serves to process the inquiry and the subsequent response.
Legal basis for the processing of data
Since we obtain the voluntary consent of the website visitor making inquiries via the "dsa Secure" contact form, the relevant legal basis for the data processing in this regard is
Art. 6 I 1 letter a GDPR
(Consent by the data subject to the processing of personal data concerning him or her for one or more specific purposes).
Obtaining your consent
Before you send the "dsa Secure" contact form you have completed, your attention will be drawn to this data protection declaration, and we will ask for your consent to the associated data processing.
Right of withdrawal
You are entitled to withdraw your consent to the processing of your personal data.
If you wish to withdraw your consent, we kindly ask you to do so at least in text form and to send your declaration of withdrawal to one of the contact options (postal address, e-mail, fax) listed in the legal notice on our website.
After receipt of the revocation, the personal data will be deleted immediately, unless there is another legal basis for the processing of this data.
The legality of the data processing that took place before your revocation on the basis of your consent is not affected by the declaration of revocation.
Storage duration
If you do not withdraw your consent, we will delete the data transmitted to us in the course of service or product-related inquiries or collected by us in this context at the point in time at which it is no longer required for the purpose for which it was stored.
This is the case, as far as an inquiry about our range of services or products is concerned, if the inquiry has been answered by us and it is clear from the circumstances that no further correspondence with the enquirer regarding his request is necessary.
Sending newsletters using the "CleverReach" service
If you wish to receive newsletters from our company, in which we inform you about news about our company and our range of services, by electronic mail, your express consent is first required for us to start our newsletter service for your benefit. Shall.
Once we have received your declaration of consent, we will send you an authorization e-mail in which we ask you to click on the link contained therein, thereby (re)confirming your consent to receive the newsletter.
We use "CleverReach" to send newsletters.
This is a service for organizing and analyzing the sending of newsletters, which is provided by CleverReach GmbH & Co. KG (website: http://www.cleverreach.de; address: Mühlenstraße 43 in 26180 Rastede, Federal Republic of Germany).
On our homepage, we offer you the free option of receiving regular newsletters in which we provide information about news about our company and the services we offer. In this context, we provide an input mask in which you must at least enter your data in order to receive the newsletter:
Your first and last name,
Your e-mail address.
The data you enter in the input mask to receive the newsletter will be stored on servers of CleverReach GmbH & Co. KG, which are located in the Federal Republic of Germany and Ireland, in an area to which we customers of CleverReach GmbH & Co. - but not other KGs or third parties - have password-protected access. The basis for our contract with CleverReach GmbH & Co. KG are the General Terms and Conditions of the aforementioned company, which can be viewed at https://www.cleverreach.de/agb/.
According to its content, CleverReach GmbH & Co. KG does not access the data of newsletter recipients.
The "CleverReach" service analyzes the reach of the respective newsletters to ensure that these e-mail notifications reach the recipients. We only use the individual behavior patterns of the recipients resulting from the analyses to statistically evaluate the success of the newsletter. (By means of the so-called "conversion tracking", "CleverReach" can determine whether you have taken predetermined actions, such as clicking on buttons within the website, after clicking on a hyperlink to our homepage contained in a newsletter.
This information is expressly not passed on to third parties or used for any other purpose.
Further information on data processing using "CleverReach" can be found in the privacy policy of CleverReach GmbH & Co. KG at http://www.cleverreach.de/datenschutz/ Processing purpose
Your e-mail address is collected so that we can successfully send you the newsletter. We need your first name and surname in order to prevent misuse of both our services and the e-mail address we receive via the homepage input mask and to be able to counter this effectively if necessary.
The use of "CleverReach" takes place on this side in order to obtain the possibility to analyze the behavior of the newsletter addressees and to optimize the quality of our homepage, including the content and services provided there, through the information obtained in this way. Among other things, we use the aforementioned service to find out which buttons or pages of our website are accessed via hyperlinks provided in the newsletters, which provides us with a basis for continuously improving our online offering.
Legal basis for the processing of data:
The relevant legal basis for the processing of the data, taking into account the described processing purpose for the period up to and including May 24, 2018, is
§ 4 I BDSG§§ 12, 13 TMG,
starting from 25.05.2018 then
Art. 6 I letter a GDPR
(Consent by the data subject to the processing of personal data concerning him or her for one or more specific purposes).
Obtaining your consent
When you call up the input mask provided for the newsletter subscription on our homepage, you will be informed about the use of "CleverReach", whereby we ask for your consent to the associated data processing on the one hand and draw your attention to this data protection declaration on the other.
Right of withdrawal
You are entitled to withdraw your consent to the processing of your personal data.
If you wish to withdraw your consent, we kindly ask you to do so at least in text form and to send your declaration of withdrawal to one of the contact options (postal address, e-mail, fax) listed in the legal notice on our website.
After receipt of the revocation, the personal data will be deleted immediately, unless there is another legal basis for the processing of this data. The legality of the data processing that took place before your revocation on the basis of your consent is not affected by the declaration of revocation.
Duration of data storage
The data transmitted when you subscribe to the newsletter will be stored until you withdraw your consent. As soon as you declare your revocation to us, this data will be deleted both from the server used here and from the servers of CleverReach GmbH & Co. KG servers.
If we have stored your personal data for purposes other than those mentioned above with regard to the use of "CleverReach" (e.g. for the fulfillment of contracts concluded between you and us), their processing remains unaffected by the revocation of your consent to the newsletter dispatch including its analysis by means of "CleverReach".
Sending newsletters
If you wish to receive newsletters from our company, in which we inform you about news about our company and our range of services, by electronic mail, we first require your express confirmation that we will start our newsletter service for your benefit. Shall.
After receipt of this declaration, we will then send you an authorization e-mail in which we ask you to click on the link contained therein, thereby confirming your consent to receive the newsletter.
You can of course unsubscribe from our newsletter at any time with effect for the future by either clicking on the link provided for this purpose at the end of each newsletter e-mail or by revoking your consent to receive the newsletter by e-mail. Our current e-mail address can be found in the legal notice of this website.
Use of the web analysis service "Matomo"
Our website uses the open source software "Matomo", which is provided by InnoCraft Ltd (www.innocraft.com, 150 Willis St, 6011 Wellington, New Zealand).
The "Matomo" homepage can be accessed via https://matomo.org/
When using the open source software "Matomo", "cookies" are used.
Cookies" are text files that are transmitted to the respective website user at the instigation of the operator of a website when the website is accessed and are temporarily stored in or by the Internet browser of the accessing end device.
A distinction is made between two types of "cookies", namely temporary and permanent cookies.
Temporary cookies are automatically deleted from your device as soon as you close your internet browser. Persistent cookies, on the other hand, remain stored on your end device even after you close the Internet browser you are using and can be recognized by the website operator the next time you visit their website, as such cookies usually contain a characteristic sequence of characters known as a "cookie ID". Homepages and internet servers assign this string of characters to the web browser on which the permanent "cookie" was stored. It is therefore possible to uniquely identify your browser using the cookie ID.
The "cookies" generated by the use of the open source software "Matomo" are recorded, for example:
Date and time of your visit to our homepage,
the homepage you previously accessed,
Information about the Internet browser you are using,
the IP address of the requesting device, which is always shortened before it is saved.
Pseudonymized usage profiles of visitors to our website can be created on the basis of this data.
The designated data is expressly not transferred to third parties, but stored solely on the server used for the operation of our company website.
Processing purpose
We use the web analysis service "Matomo" to optimize the quality of our website, including the content and services provided there. This service enables us to find out how our website is used, which provides us with a basis for continuously improving our online offering.
Legal basis for the processing of data:
The relevant legal bases for the processing of the data are, taking into account the described processing purpose for the period up to and including 24.05.2018
§ Section 15 I TMG and Section 28 I 1 No. 2 BDSG,
starting from 25.05.2018 is the legal basis
Art. 6 I letter f GDPR
(processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party).
Storage period and deletion You can delete persistent cookies stored on your device yourself at any time using your internet browser or other software. If you delete persistent "cookies" used by us from your device, the full functionality of our website may be impaired.
Option to object
By changing the settings of your Internet browser, it is possible to permanently prevent cookie transfers on the device you use to visit or access websites. If you make such changes to your browser settings, you are effectively objecting to the setting of cookies for a period of time determined by you.
You have the option of preventing the actions you take here from being analyzed and linked. This will protect your privacy, but will also prevent the owner from learning from your actions and improving usability for you and other users.
Use of plug-ins from the video portal "YouTube"
We use plug-ins from the video portal "YouTube" operated by YouTube, LLC, (www.youtube.com; address: 901 Cherry Ave, San Bruno, CA 94066, United States of America) on our website. YouTube, LLC, is a subsidiary of Google Inc (www.google.de; address: 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States of America). YouTube, LLC is represented by Google Inc. and the latter is represented by its Board of Directors, see https://www.youtube.com/t/contact_us.
The "YouTube" plug-ins are marked with a "YouTube" logo.
If you access an individual web page on our website, your browser establishes a direct connection with the servers of YouTube, LLC, which results in the content of the respective "YouTube" plug-in being transferred to your internet browser and integrated into the website you have accessed. Through the process described above, YouTube, LLC receives the information that you have accessed our website.
If you are logged into your personal YouTube account when you visit our website, YouTube, LLC, will be able to assign your visit to our website to that account.
If you interact with plug-ins - for example, by clicking on a "YouTube" button - this information is transmitted directly to the servers of YouTube, LLC, and stored there.
We expressly have no influence on the scope and content of the information that the company YouTube, LLC, collects with the plug-ins it provides. In this respect, it cannot be ruled out that the IP address of the device accessing the website will be recorded and that this address will also be transmitted.
For more information on the reason for data collection, the scope of data collection, data use, data processing, your rights to protect your privacy and setting options to protect your privacy by YouTube, LLC, please visit https://www.youtube.com/t/contact_us,
there via the "Data protection" button at the bottom of the page, by clicking on which you will be forwarded directly to https://www.google.de/intl/de/policies/privacy/.
Processing purpose
By using the "YouTube" plug-ins, we are pursuing the purpose of presenting our website in an appealing manner and supplementing the information on the range of services provided on this website.
Legal basis for the processing of the data: The relevant legal basis for the processing of the data, taking into account the fact that your IP address may be transferred to servers of YouTube, LLC, in the USA, is the processing purpose for the period up to and including May 24, 2018
§ 13 II TMG,
starting from 25.05.2018 then
Art. 6 I letter a GDPR
(Consent by the data subject to the processing of personal data concerning him or her for one or more specific purposes).
Obtaining your consent
When you visit our homepage, you will be informed about the use of "YouTube" plug-ins, whereby we ask for your consent to the associated data processing on the one hand and draw your attention to this privacy policy on the other.
Right of withdrawal
You are entitled to withdraw your consent to the processing of your personal data. If you wish to withdraw your consent, we kindly ask you to do so at least in text form and to send the declaration of withdrawal to one of the contact options (postal address, e-mail, fax) given in the imprint of our homepage. After receipt of the revocation, the personal data will be deleted immediately, unless there is another legal basis for the processing of this data. The legality of the data processing that took place before your revocation on the basis of your consent is not affected by the declaration of revocation.
Prevention of any data transfer to YouTube, LLC You can prevent the transfer of personal data to servers of YouTube, LLC, in the USA, which cannot be excluded here, by logging out of your personal "YouTube" account before accessing our website.
Use of "Google Maps API"
The "Google Maps API" service is used on our website. This is a service offered within the European Economic Area and in Switzerland by Google Ireland Limited (www.google.de; address: Gordon House, Barrow Street, Dublin 4, Ireland) to visually display geographic data on a virtual and interactive map.
The use of "Google Maps API" means that when you visit our website, your internet browser establishes a connection to the web servers used by Google Ireland Limited. In the course of the connection between your internet browser and the servers of Google Ireland Limited, data of the site visitor is automatically collected and forwarded to Google Ireland Limited.
We cannot rule out the possibility that the information collected is also the unabridged IP address of the requesting device.
Furthermore, we cannot rule out the possibility that the above-mentioned information, which is personal data, is stored by Google Ireland Limited.
Further information on Google data protection is available from Google Ireland Limited at https://policies.google.com/privacy?hl=de&gl=de.
Processing purpose
We use the "Google Maps API" service to make it as easy as possible to find the places indicated on our homepage and to display them in a visually appealing way.
Legal basis for the processing of data
The relevant legal basis for the processing of the data is taking into account the fact that a transfer of your IP address to servers of Google Ireland Limited cannot be ruled out,
Art. 6 I 1 letter a GDPR
(Consent by the data subject to the processing of personal data concerning him or her for one or more specific purposes).
Obtaining your consent
When you visit our homepage, you will be informed about the use of "Google Maps API", whereby we ask for your consent to the associated data processing on the one hand and draw your attention to this data protection declaration on the other.
Right of withdrawal
You are entitled to withdraw your consent to the processing of your personal data.
If you wish to withdraw your consent, we kindly ask you to do so at least in text form and to send your declaration of withdrawal to one of the contact options (postal address, e-mail, fax) listed in the legal notice on our website.
After receipt of the revocation, the personal data will be deleted immediately, unless there is another legal basis for the processing of this data.
The legality of the data processing that took place before your revocation on the basis of your consent is not affected by the declaration of revocation.
Prevention of data transfer to Google Ireland Limited
By changing the settings of your Internet browser, it is possible to prevent the collection of data concerning you by Google Ireland Limited in the context of the use of "Google Maps API" for the future.
For example, you have the option of deactivating the "JavaScript" program, which interacts with your Internet browser and enables the rapid reloading of functions of a static homepage, in the Internet browser you are using; however, this means that you will no longer be able to use the map function of the "Google Maps API" service for the duration of the deactivation.
Your rights as a data subject affected by data processing
If we process personal data relating to you, you have the following rights vis-à-vis us as a data subject within the meaning of the GDPR:
1. right to information
You are permitted to request information from us as to whether personal data concerning you is being processed by us. If this is the case, you may request information from us free of charge about:
the purposes of processing,
the categories of data whose processing takes place,
the recipients and/or categories of recipients to whom we have disclosed or will disclose the data,
the data retention period provided for here or, if it is impossible to provide specific information in this regard, our criteria for determining the data retention period,
the existence of a right to rectification of the personal data,- the existence of a right to erasure of the personal data,
the existence of a right to restriction of the processing of personal data by the controller within the meaning of the GDPR
the existence of a right to object to the processing of personal data,
the existence of a right to lodge a complaint with a supervisory authority,
all available information on the origin of the data, unless the data was collected from you as the data subject,
the existence of automated decision-making including profiling in accordance with Art. 22 I, IV GDPR and, if such is to be affirmed, meaningful information about the logic involved, the scope and the intended effects of such data processing for you as the data subject within the meaning of the GDPR,
whether a transfer of personal data concerning you to a third country or to an international organization takes place by us or at our instigation, whereby in the event of such a transfer you can also request that we inform you of suitable guarantees within the meaning of Art. 6 para. 1 lit. a GDPR.
46 GDPR.
If you wish to make such a request for information, please send your request in text form to one of the contact options listed in the legal notice on our website.
According to Art. 12 I 2 GDPR, this information can also be provided to the data subject verbally, provided that their identity has been proven in another form.
2. right to data correction and data completion
You can request the correction of your personal data stored by us at any time if it is incorrect, see Art. 16 S.1 GDPR.
The same applies to the completion of incomplete personal data, see Art. 16 sentence 2 GDPR.
If you wish to correct or complete personal data concerning you, please send a request in text form to one of the contact options listed in the legal notice on our website.
3. right to erasure of personal data
As a data subject within the meaning of the GDPR, you can request the immediate deletion of personal data concerning you if one of the following conditions, which can be found in Art. 17 I GDPR, is met:
The personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
the data subject withdraws consent on which the processing is based according to point (a) of Article 6(1) GDPR, or point (a) of Article 9(2) GDPR, and where there is no other legal ground for the processing;
the data subject objects to the processing pursuant to Art. 21 I GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21 II GDPR;
the personal data has been processed unlawfully;
the deletion of personal data is necessary to fulfill a legal obligation under European Union law or the law of the Member States to which the controller is subject;
the personal data were collected in relation to information society services offered in accordance with Art. 8 I GDPR.
If we have made the personal data concerning you public and are obliged to delete it in accordance with Art. 17 I GDPR, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data controllers who process the personal data that you, as a data subject within the meaning of the GDPR, have requested them to delete all links to your personal data or copies or replications of your personal data.
Exceptions to the right to data erasure
According to Art. 17 III GDPR, the rights of data subjects under Art. 17 I and II GDPR do not apply if the data processing
to exercise the right to freedom of expression and information
or
for compliance with a legal obligation which requires processing by European Union or Member State law to which the controller is subject,
or
for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
or
for reasons of public interest in the area of public health in accordance with Art. 9 II letters h and i GDPR and Art. 9 III GDPR
or
for archiving purposes in the public interest, scientific purposes
or
historical research purposes or for statistical purposes pursuant to Art. 89 I GDPR , insofar as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing
or
for the assertion, exercise or defense of legal claims
is required.
4. right to restriction of the processing of personal data
As a data subject within the meaning of the GDPR, you may request that we restrict the processing of personal data concerning you if one of the following conditions set out in Art. 18 I GDPR is met:
The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims
the data subject has objected to processing pursuant to Art. 21 I GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.
If the processing of personal data concerning you has been restricted, such data may only be processed - apart from being stored - with your express consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State, see Art. 18 II GDPR.
According to Art. 18 III GDPR, we are obliged to inform you, insofar as you are a data subject within the meaning of the GDPR, of any restriction of data processing carried out under the conditions of Art. 18 I GDPR; this must be done at a point in time before the restriction is lifted.
5. right to be informed in the event of a notification obligation in connection with the rectification or erasure of personal data or the restriction of processing
If you have asserted your right to rectification or erasure of personal data concerning you or to restriction of processing of this data against us, we are obliged to notify all recipients to whom the relevant data has been disclosed of the rectification or erasure of this data or the data processing restrictions that have taken place, see Art. 19 sentence 1 GDPR.
At your request, you must be informed about the recipients of the personal data concerning you, see Art. 19 sentence 2 GDPR.
Exceptions to the notification obligation
The notification obligation under Section 19 sentence 1 GDPR does not apply if the notification proves to be impossible or involves a disproportionate effort.
6. right to data portability
In accordance with Art. 20 I GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to a controller other than the controller to whom the personal data was provided without hindrance from us, provided that
the processing is based on consent pursuant to Article 6 I (a) GDPR or Article 9 II (a) or on a contract pursuant to Article 6 I (b)
and
the processing is carried out using automated procedures.
According to Art. 20 III 1 GDPR, the right to data portability does not apply to data processing that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
In exercising the right to data portability, you as the data subject have the right to have the personal data transmitted directly from one controller to another, where technically feasible, without adversely affecting the rights and freedoms of others.
7. right to object to data processing
As a data subject within the meaning of the GDPR, you are entitled under Art. 21 I GDPR to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 I (e) or (f); this also applies to profiling based on these provisions.
In the event of an admissible objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
Where personal data are processed for direct marketing purposes, you as the data subject have the right pursuant to Art. 21 II GDPR to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, we will no longer process your personal data for such purposes. You can and may exercise your right to object in connection with the use of information society services by means of automated procedures using technical specifications, notwithstanding Directive 2002/58/EC (ePrivacy Directive).
8. right to withdraw your consent under data protection law
If you have given us your consent to process your personal data, you are entitled to withdraw this consent at any time.
The legality of the data processing that took place before your revocation on the basis of your consent is not affected by the declaration of revocation.
9. your right to automated decisions in individual cases, including profiling
As a data subject within the meaning of the GDPR, you have the right under Art. 22 I GDPR not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you.
Exceptions to this right under Art. 22 I GDPR
According to Art. 22 II GDPR, the aforementioned right does not apply if the automated decision
is necessary for the conclusion or performance of a contract between the data subject and the controller (i.e. between you on the one hand and us on the other),
is authorized by European Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, or
with the express consent of the data subject.
However, the decisions described above, which are exempt pursuant to Art. 22 II GDPR, may not be based on special categories of personal data pursuant to Art. 9 I GDPR, unless Art. 9 II letter a or g applies and appropriate measures have been taken to protect the rights and freedoms as well as the legitimate interests of the data subject.
In the (exceptional) cases mentioned in Art. 22 II GDPR, we take appropriate measures to protect your rights and freedoms as well as your legitimate interests, including at least the right to
to obtain the intervention of a person on the part of the controller,
on the presentation of one's own point of view
and
to challenge the decision.
10. right to lodge a complaint with a supervisory authority
According to Art. 78 I GDPR, if you are a data subject within the meaning of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes the GDPR, without prejudice to any other administrative or judicial remedy.
In accordance with Art. 22 II GDPR, the supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78.
Reservation of the right to change the privacy policy
In order to comply with the applicable legal provisions in your interest and ours, we expressly reserve the right to amend or update this privacy policy. For this reason, we encourage you, without obligation, to take a look at the data protection declaration provided on our website and to read it carefully at regular intervals.
Other notes
We make every effort to protect personal data from access by third parties as far as technically and organizationally possible. We cannot guarantee complete data security when communicating by electronic mail (e-mails), which is why we recommend that you send us confidential information by post.