Privacy Policy in accordance with the GDPR

Name and address of the controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection provisions is:

Address: see legal notice

Rights of the data subject

If personal data concerning you is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

1. Right of access

You may request confirmation from the controller as to whether personal data concerning you is being processed by us.

If such processing exists, you may request information from the controller about the following:

the purposes for which the personal data is processed;
the categories of personal data which are processed;
the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;
the planned duration of storage of the personal data concerning you or, if specific information is not possible, criteria for determining the storage period;
the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
the existence of a right to lodge a complaint with a supervisory authority;
all available information about the origin of the data if the personal data is not collected from the data subject;
the existence of automated decision-making, including profiling, pursuant to Art. 22 para. 1 and 4 GDPR and – at least in these cases – meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

2. Right to rectification

You have a right to rectification and/or completion vis-à-vis the controller if the processed personal data concerning you is inaccurate or incomplete. The controller must carry out the rectification without delay.

3. Right to restriction of processing

Under the following conditions, you may request the restriction of processing of personal data concerning you:

if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
the processing is unlawful and you oppose the erasure of the personal data and request the restriction of the use of the personal data instead;
the controller no longer needs the personal data for the purposes of processing, but you require it for the establishment, exercise or defense of legal claims, or
if you have objected to processing pursuant to Art. 21 para. 1 GDPR and it has not yet been determined whether the legitimate grounds of the controller override your grounds.

If the processing of personal data concerning you has been restricted, such data – apart from storage – may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a member state.

If the restriction of processing has been restricted according to the above conditions, you will be informed by the controller before the restriction is lifted.

4. Right to erasure

a) Obligation to erase

You may request the controller to erase the personal data concerning you without delay, and the controller is obliged to erase this data without delay where one of the following grounds applies:

The personal data concerning you is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
You withdraw your consent on which the processing was based pursuant to Art. 6 para. 1 sentence 1 lit. a or Art. 9 para. 2 lit. a GDPR, and there is no other legal basis for the processing.
You object to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 para. 2 GDPR.
The personal data concerning you has been processed unlawfully.
The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union law or the law of the member states to which the controller is subject.
The personal data concerning you has been collected in relation to information society services offered pursuant to Art. 8 para. 1 GDPR.

b) Information to third parties

If the controller has made the personal data concerning you public and is obliged pursuant to Art. 17 para. 1 GDPR to erase it, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers processing the personal data that you, as the data subject, have requested them to erase any links to, or copies or replications of, that personal data.

c) Exceptions

The right to erasure does not exist insofar as processing is necessary

for exercising the right of freedom of expression and information;
for compliance with a legal obligation which requires processing under Union or member state law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
for reasons of public interest in the area of public health pursuant to Art. 9 para. 2 lit. h and i as well as Art. 9 para. 3 GDPR;
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89 para. 1 GDPR, insofar as the right referred to under section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
for the establishment, exercise or defense of legal claims.

5. Right to be informed

If you have exercised your right to rectification, erasure or restriction of processing vis-à-vis the controller, the controller is obliged to communicate this rectification or erasure of the data or restriction of processing to all recipients to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort.

You have the right vis-à-vis the controller to be informed about those recipients.

6. Right to data portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format. Furthermore, you have the right to transmit this data to another controller without hindrance from the controller to whom the personal data has been provided, where

the processing is based on consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR and
the processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another controller, where technically feasible. Freedoms and rights of other persons must not be adversely affected thereby.

The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right to object

You have the right, on grounds relating to your particular situation, to object at any time to processing of personal data concerning you which is based on Art. 6 para. 1 lit. e or f GDPR; this also applies to profiling based on those provisions.

The controller shall no longer process the personal data concerning you unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

If personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, including profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the option, in connection with the use of information society services – notwithstanding Directive 2002/58/EC – to exercise your right to object by automated means using technical specifications.

8. Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

9. Automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This shall not apply if the decision

is necessary for entering into, or performance of, a contract between you and the controller,
is authorized by Union or member state law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or
is based on your explicit consent.

However, such decisions must not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests have been taken.

With regard to the cases referred to in (1) and (3), the controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

General information on data processing

1. Scope of the processing of personal data

As a matter of principle, we process our users' personal data only insofar as this is necessary to provide a functional website and our content and services. The processing of our users' personal data regularly takes place only with the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.

2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 para. 1 sentence 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis.

In the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 sentence 1 lit. b GDPR serves as the legal basis. This also applies to processing operations necessary for carrying out pre-contractual measures.

Insofar as processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 para. 1 sentence 1 lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require processing of personal data, Art. 6 para. 1 sentence 1 lit. d GDPR serves as the legal basis.

If processing is necessary for the purposes of the legitimate interests pursued by our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 para. 1 sentence 1 lit. f GDPR serves as the legal basis for processing.

3. Data erasure and storage period

The personal data of the data subject shall be erased or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a necessity for further storage of the data for the conclusion or performance of a contract.

Provision of the website and creation of log files

1. Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected in this process:

Information about the browser type and version usedThe user's operating systemThe user's internet service providerThe user's IP addressDate and time of accessWebsites from which the user's system accesses our websiteWebsites accessed by the user's system via our website

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

2. Legal basis for data processing

The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 sentence 1 lit. f GDPR.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary in order to deliver the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

Storage in log files takes place to ensure the functionality of the website. In addition, the data helps us optimize the website and ensure the security of our information technology systems. In this context, the data is not evaluated for marketing purposes.

These purposes also constitute our legitimate interest in data processing pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.

4. Duration of storage

The data is deleted as soon as it is no longer required for the purpose for which it was collected. In the case of data collection for providing the website, this is the case when the respective session has ended.

In the case of storage of the data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or distorted so that it is no longer possible to assign them to the accessing client.

5. Possibility of objection and removal

The collection of data for providing the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no possibility to object.Use of cookies

a) Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.

We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.

The following data is stored and transmitted in the cookies:

Language settings
Items in the shopping cart
Log-in information

In addition, we use cookies on our website that enable analysis of users' browsing behavior.

In this way, the following data can be transmitted:

Entered search terms
Frequency of page views
Use of website functions

The user data collected in this way is pseudonymized by technical precautions. Therefore, it is no longer possible to assign the data to the accessing user. The data is not stored together with other personal data of the users.
When accessing our website, users are informed by an info banner about the use of cookies for analysis purposes and referred to this privacy policy. In this context, there is also a note on how the storage of cookies can be prevented in the browser settings.

b) Legal basis for data processing

The legal basis for the processing of personal data using cookies is Art. 6 para. 1 sentence 1 lit. f GDPR.

c) Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized again even after a page change.

We require cookies for the following applications:

Adoption of language settingsShopping cart

The use of analysis cookies is for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus continually optimize our offering.

These purposes also constitute our legitimate interest in the processing of personal data pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.

d) Duration of storage, possibility of objection and removal

Cookies are stored on the user's computer and transmitted from it to our site. Therefore, you as the user also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.

The transmission of Flash cookies cannot be prevented via the browser settings, but by changing the settings of the Flash Player.

Newsletter

1. Description and scope of data processing

On our website, it is possible to subscribe to a free newsletter. When registering for the newsletter, the following data from the input form is transmitted to us.

Email address
Last name
First name
Salutation
Interests
IP address of the accessing computer
Date and time of registration

In connection with data processing for sending newsletters, the data is not passed on to third parties. The data is used exclusively for sending the newsletter.

2. Legal basis for data processing

The legal basis for processing the data after the user registers for the newsletter is the user's consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

3. Purpose of data processing

The collection of the user's email address serves to deliver the newsletter.

The collection of other personal data during the registration process serves to prevent misuse of the services or the email address used.

4. Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user's email address is therefore stored for as long as the newsletter subscription is active.

The other personal data collected during the registration process is usually deleted after a period of seven days.

5. Possibility of objection and removal

The newsletter subscription may be canceled by the data subject at any time. For this purpose, a corresponding link can be found in every newsletter.

This also enables withdrawal of consent to the storage of the personal data collected during the registration process.

Online booking/inquiry via the website

1. Description and scope of data processing

On our website, there is the option to book and/or inquire about rooms and arrangements. If a user makes use of this option, the data entered in the input form is transmitted to us and stored. This data is: salutation, first name, last name, email address, telephone, address, number of accompanying persons, requests, date, time, room selection, package, price.

If you make an online booking via our websites, this is done through the online reservation system of websLINE Internet- & Marketing GmbH, Sägewerkstrasse 24, 83395 Freilassing, Deutschland. All booking data entered by you is transmitted in encrypted form. websLINE has undertaken to handle your transmitted data in compliance with data protection law. It takes all organizational and technical measures to protect your data.

In this context, the data is not passed on to third parties any further. The data is used exclusively for processing the booking and for communication.

2. Legal basis for data processing

The legal basis for processing the data is the conclusion of an accommodation contract with the user.

3. Purpose of data processing

The processing of the personal data from the input form serves us solely for handling the booking request and processing payments.

4. Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the event of a contractual relationship, we will delete the received data as soon as national, commercial, statutory or contractual retention requirements have been fulfilled.

5. Possibility of objection and removal

The user has the option at any time to object to the processing of their personal data.

Please note that in the event of an objection, the booking cannot be completed or the conversation cannot be continued.

Online booking via other websites

1. Description and scope of data processing

We offer interested parties the option of booking rooms and arrangements via hotel reservation portals (third-party providers). If a user makes use of this option, the data entered in the input form is transmitted to us and stored to the extent permitted by the respective hotel reservation portal in accordance with its own privacy policy. Data may include: first name, last name, email address, telephone, address, number of accompanying persons, expected arrival time, requests, payment data (credit card).

The provided data is transferred to our hotel software via a so-called channel manager. All received booking data is transmitted in encrypted form. Seekda GmbH, Neubaugasse 10/15, A-1070 Wien, Österreich, as provider of the channel manager, has undertaken to handle the transmitted personal data in compliance with data protection law. It takes all organizational and technical measures to protect your data.

In this context, the data is not passed on to third parties any further. The data is used exclusively for processing the booking and, if necessary, for communication.

2. Legal basis for data processing

The legal basis for processing the data is the conclusion of an accommodation contract with the user.

3. Purpose of data processing

The processing of the personal data from the input form serves us solely for handling the booking request and processing payments.

4. Duration of storage

Hotel Esplanade Resort & Spa has no influence on the storage periods at the respective hotel reservation portal.

5. Possibility of objection and removal

The user has the option at any time to object to the processing of their personal data.

Please note that in the event of an objection, the booking cannot be completed or the conversation cannot be continued.

Purchase of a voucher via the website1. Description and scope of data processing

On our website, there is the option to purchase vouchers. If a user makes use of this option, the data entered in the input form is transmitted to us and stored. This data is: salutation, first name, last name, address, email address, telephone, voucher value, personalization of the voucher, shipping options/alternative delivery address, payment method.

If you purchase a voucher value via our websites, this is done through the online ordering platform of websLINE Internet- & Marketing GmbH, Sägewerkstrasse 24, 83395 Freilassing, Deutschland. All order data entered by you is transmitted in encrypted form. websLINE has undertaken to handle your transmitted data in compliance with data protection law. websLINE takes all organizational and technical measures to protect your data.

In this context, the data is not passed on to third parties any further. The data is used exclusively for processing the booking and for communication.

2. Legal basis for data processing

The legal basis for processing the data is the conclusion of a purchase contract with the user.

3. Purpose of data processing

The processing of the personal data from the input form serves us solely for handling the voucher purchase and processing payments.

4. Duration of storage

5. Possibility of objection and removal

The user has the option at any time to object to the processing of their personal data.

Table reservation

1. Description and scope of data processing

On our website, there is the option to reserve a table at our restaurants. If a user makes use of this option, the data entered in the input form is transmitted to us. This data is: salutation, first name, last name, email address, telephone number, details of the table reservation (day, time, number of persons, restaurant).

If you make a table reservation via our websites, this is done through the online reservation system of Bookatable GmbH & Co. KG, Deichstraße 48-50,D-20459 Hamburg, Deutschland. All order data entered by you is transmitted in encrypted form. Bookatable has undertaken to handle your transmitted data in compliance with data protection law. Bookatable takes all organizational and technical measures to protect your data.

In this context, the data is not used or passed on to third parties in any other way.

2. Legal basis for data processing

The legal basis for processing the data is initially our legitimate interest in data processing as well as the user's consent by accepting our conditions for data processing.

3. Purpose of data processing

The processing of the personal data serves solely for table reservation.

4. Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

5. Possibility of objection and removal

The user has the option at any time to object to the publication of their comments for the future.

Application to our company

1. Description and scope of data processing

You have the option of applying for a job advertisement with us or sending us an unsolicited application. You can preferably do this by email or on paper. From our website, you can access our job advertisements. If you make use of this option, we store general information about your person in an administration program. This data is:

SalutationFirst name, last nameAddressDate of birthEmail addressTelephoneApplication dateApplied asWhich department applied forHow applied (by email, via HotelCareer, HogastJobbörse, by post)

In addition, we may internally forward your application to the responsible department manager. In this context, the data is not passed on to third parties any further. The data is used exclusively for processing the application and for communication.

2. Legal basis for data processing

The legal basis for processing the data is otherwise the processing for a pre-contractual relationship or contractual relationship.

3. Purpose of data processing

The processing of personal data serves us solely for handling the application.

4. Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

5. Possibility of objection and removal

As an applicant, you have the option at any time to object to the processing of your personal data.

Please note that in the event of an objection, the application cannot be completed or the conversation cannot be continued.

Online review

1. Description and scope of data processing

Former guests can submit a review for our hotel after check-out. For this purpose, we would like to send you an email within 14 days after departure asking you to submit a hotel review. Each review can be published anonymously upon request. If you did not feel comfortable at our hotel, we would like to take the opportunity to contact you.

If you submit an online review on our website, the data will be stored in the review tool of TrustYou GmbH, Agnes-Pockels-Bogen 1, D-80992 München, Deutschland. TrustYou GmbH has undertaken to handle your transmitted data in compliance with data protection law. It takes all organizational and technical measures to protect your data.

If a former guest makes use of this option of online review, data from the former guest is stored in the review form. This data is: email address as well as voluntary information such as first name, last name, language and the review details.

In this context, the data is not passed on to third parties any further. The data is used exclusively for publishing the review and for mediation in the event of poor reviews.

2. Legal basis for data processing

The legal basis for processing the data is otherwise our legitimate interest in data processing.

3. Purpose of data processing

The purpose of the hotel review is to communicate and summarize hotel guests' opinions via our website so that interested parties can form their own impression of our services and offerings. In addition, the results serve our internal quality management.

4. Duration of storage

The data is not deleted.

5. Possibility of objection and removal

There is always the possibility to have the publication of the review deleted (right to be forgotten). Please let us know which review is concerned.

Contact form and email contact

1. Description and scope of data processing

A contact form is available on our website which can be used for electronic contact. If a user makes use of this option, the data entered in the input form is transmitted to us and stored.

Your consent for the processing of the data is obtained as part of the sending process and reference is made to this privacy policy.

Alternatively, contact can be made via the email address provided. In this case, the user's personal data transmitted with the email will be stored.

In this context, the data is not passed on to third parties. The data is used exclusively for processing the conversation.

2. Legal basis for data processing

The legal basis for processing the data is the user's consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

The legal basis for processing the data transmitted in the course of sending an email is Art. 6 para. 1 sentence 1 lit. f GDPR. If the email contact aims at the conclusion of a contract, the additional legal basis for processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

3. Purpose of data processing

The processing of the personal data from the input form serves us solely for handling the contact request. In the event of contact by email, this also constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the sending process serves to prevent misuse of the contact form and ensure the security of our information technology systems.

4. Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input form of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the relevant matter has been conclusively clarified.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

5. Possibility of objection and removal

The user has the option at any time to withdraw their consent to the processing of personal data. If the user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

If you do not agree with the further processing and use of data by us, you have the option of ticking the following declaration.

I do NOT agree to processing or use of my above-mentioned data.

All personal data stored in the course of contacting us will be deleted in this case.

Use of Facebook Pixel

1. Scope of the processing of personal data

We use the so-called "Facebook Pixel" of the social network Facebook, of Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025 United States or, if you are resident in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland. With this analysis tool, Facebook can determine the users of our website as a target group for the display of advertisements.

2. Legal basis for the processing of personal data

The legal basis for the processing of personal data is Art.6 para.1 sentence 1 lit. f GDPR.

3. Purpose of data processing

The use of Facebook Pixel serves to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes. This allows future advertising measures to be optimized.

4. Duration of storage

We have no information about the duration of storage.

5. Possibility of objection and removal

The collected data remains anonymous for us. It is stored and processed by Facebook. It is possible that a connection can be made to your Facebook profile. Facebook may use this data for its own advertising purposes within the scope of the Facebook Data Policy . If you do not want Facebook to be able to link the use of our website to your Facebook profile, please log out of your user account on Facebook. You can object to collection by Facebook Pixel and the use of your data for the display of Facebook Ads via the following link .

Use of Facebook Plugin

1. Scope of the processing of personal data

We use the plug-in of Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025 United States or, if you are resident in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland. By activating this plug-in, your browser establishes a connection to Facebook's servers. Facebook thereby learns that you are visiting our website with your IP address. In addition, Facebook receives information about date, time, browser type and version, operating system and version as well as Facebook cookies already stored in the browser. From this, Facebook can recognize which websites with Facebook content you have visited. The plug-in is part of Facebook and is only displayed on our page. Any interaction with the plug-in is an interaction on "facebook.com".

If you are logged in to Facebook, your Facebook login number is also transmitted when the plug-in is activated. The visit to our website can therefore be associated with your Facebook account. Depending on the settings of your Facebook account, clicking the plug-in is also published on Facebook. You can avoid this by logging out of your Facebook account before activating the plug-in and deleting all Facebook cookies after visiting websites with Facebook plug-ins.

2. Legal basis for the processing of personal data

The legal basis for processing is Art.6 para.1 sentence 1 lit.a GDPR.

3. Purpose of data processing

Facebook processes this data for finding errors in its own system, improving its own products and adapting them to user behavior, monitoring, placing and individualizing advertising. In addition, the processing also serves localization, recording the manner in which websites with Facebook content are used and the purpose of market research.

4. Duration of storage

According to its own information, Facebook stores the data for up to 90 days. After that, the data is only used further in anonymized form.

5. Possibility of objection and removal

Further information on data use and collection can be found in Facebook's privacy policy at: www.facebook.com/about/privacy.

Use of Google AdWords

1. Scope of the processing of personal data

We use Google AdWords from Google Inc., 1600 Amphiteatre Parkway, Mountain View, CA 94043, United States, on our website. This is an online advertising program in which conversion tracking is used. If you reach our website via a Google advertisement, Google AdWords places a cookie on your computer. A different cookie is assigned to each Google AdWords customer.

2. Legal basis for the processing of personal data

The legal basis for processing is Art.6 para. 1 sentence 1 lit. f GDPR.

3. Purpose of data processing

We only receive knowledge of the total number of users who responded to our advertisement. No information is passed on that would enable us to identify you. The use does not serve tracking back to individuals.

4. Duration of storage

The cookie loses its validity after 30 days.

5. Possibility of objection and removal

You can prevent Google conversion tracking by deactivating the tracking procedure in your browser. Further information can be found at www.google.com/intl/de/policies/privacy.

Use of Google Analytics

1. Scope of the processing of personal data

We use Google Analytics on our website, a web analytics service of Google Inc., 1600 Amphiteatre Parkway, Mountain View, CA 94043, United States.("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and enable analysis of your use of the website. The information generated by the cookie about your use of this website is transferred to a Google server in the USA and stored there. If IP anonymization is activated on this website, however, your IP address will first be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. IP anonymization is active on this website. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity and provide other services related to website use and internet use to the website operator. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; however, we would point out that in this case you may not be able to use all functions of our website to their full extent.

2. Legal basis for the processing of personal data

The legal basis for processing is Art.6 para. 1 sentence 1 lit. f GDPR.

3. Purpose of data processing

The purpose of processing personal data is the targeted addressing of a target group that has already shown initial interest by visiting the site.

4. Duration of storage

Advertising data in server logs is anonymized by Google, according to its own statements, by deleting parts of the IP address and cookie information after 9 or 18 months respectively.

5. Possibility of objection and removal

You can also prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address), as well as the processing of this data by Google, by downloading and installing the browser plug-in available under the following link . Further information can be found at www.google.com/intl/de/policies/privacy.

Use of Google Analytics Remarketing

1. Scope of the processing of personal data

We use the remarketing function of Google Inc., 1600 Amphiteatre Parkway, Mountain View, CA 94043, United States, on our website. Together with Google, we offer you suitable and interest-based advertisements. Google Analytics Remarketing uses cookies. These are stored on your computer. According to Google, no personal data is collected in the process. According to its own statements, there is also no connection to the other Google services.

2. Legal basis for the processing of personal data

The legal basis for processing is Art.6 para. 1 sentence 1 lit. f GDPR.

3. Purpose of data processing

The purpose of processing personal data lies in the targeted addressing of a target group. The cookies stored on your computer recognize you when visiting a website and can therefore display interest-based advertising to you.

4. Duration of storage

Advertising data in server logs is anonymized by Google, according to its own statements, by deleting parts of the IP address and cookie information after 9 or 18 months respectively.

5. Possibility of objection and removal

You can prevent use of the remarketing function by making the settings at the following link . Further information can be found at www.google.com/intl/de/policies/privacy.

Use of Instagram Plugin

1. Scope of the processing of personal data

Plugins of the Instagram service are integrated on our pages. These are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. We use the integrated Instagram buttons to enable linking to our Instagram profile. A widget is also integrated which enables us to display certain photos and videos from our Instagram profile on our website. If you visit one of our pages that contains such a plug-in, your browser establishes a direct connection to an Instagram server. The contents of the plug-ins are transmitted directly to your browser and integrated into the website. In this process, data is automatically transmitted to Instagram and stored on its servers. This transmitted data includes connection data (such as your IP address, date and time, the URL accessed) as well as the browser and operating system used. Your visit to our pages may therefore be tracked by Instagram, even if you do not actively use the plug-in functions. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to our pages with your user account. If you want to prevent this direct association, you must log out of Instagram before visiting our website. Further information can be found in the Instagram Privacy Policy.

2. Legal basis for the processing of personal data

The legal basis for the processing of users' personal data is Art.6 para. 1 sentence 1 lit. f GDPR.

3. Purpose of data processing

Please refer to the Instagram Privacy Policy for information on the purpose of processing personal data.

4. Duration of storage

We have no information about the duration of storage.

5. Possibility of objection and removal

Further information can be found under the following link.

Privacy Policy in accordance with the GDPR requirements