GENERAL DATA PROTECTION REGULATION

Data Privacy Policy
1.  Introduction

I, Kai Bellinghausen, take the protection of your personal data seriously! I treat your personal data confidentially and in accordance with the stipulations of the statutory data privacy regulations and this data privacy policy

With the following information i would like to give you – the respective “data subject” – an overview of the processing of your personal data by me, the “person responsible”. In addition, i would like to give you an insight into your rights arising from data privacy law.

In principle, my website can be used without entering personal data. If you want to use my company’s special services via my website (contact form, booking), processing of personal data will be required. The data of my travelers collected upon registration will be used to process the booking order and for customer care, i.e. the processing is necessary to fulfill the purpose of the contract; Art. 6 para. 1 sentence 1 lit. b GDPR. Furthermore, the processing is deemed necessary to protect the legitimate interests of the person responsible and is not disproportionate; Art. 6 para. 1 sentence 1 lit. f GDPR.

Your  personal data, for example your name, address or email address, will always be processed in accordance with the General Data Protection Regulation (GDPR) and the stipulations of  the national data protection regulations applicable to “Kai Bellinghausen Photography”. With this data privacy policy i would like to inform you about the scope and purpose of the personal data i collect, use and process.

As the controller, i have implemented numerous technical and organizational measures to ensure as comprehensive a protection as possible with regard to the personal data processed via this website. Nevertheless, Internet-based data transmissions can generally have security loopholes, thus absolute protection cannot be guaranteed.

2. Responsible body

Responsible body within the meaning of the GDPR is

Kai Bellinghausen Photography
Wandsbeker Chaussee 47

22089 Hamburg

Phone: +4917645855308
E-Mail: bellinghausen.kai@gmail.com

3. Definitions

The data privacy policy

is based on the terminology used by the European directors and regulators when adopting the General Data Protection Regulation (GDPR) . My privacy policy is designed to be easy to read and understand for both the public and for you, my customers, guests and business partners. To ensure that this is the case, i would like to specify and explain the terms used in advance.

I use the following terms in this data privacy policy:

Personal data

Personal data is any information relating to an identified or identifiable natural person. An identifiable person is a natural person who, directly or indirectly, in particular by assigning an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics, expresses the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person can be identified.

Affected person

Affected person is any identified or identifiable natural person whose personal data are processed by the controller (my company).

Processing

Processing is any operation or series of operations carried out with or without the help of automated processes in connection with personal data such as the collection, organization, organization, storage, adaptation or modification, reading, querying, use, the disclosure by transmission, distribution or any other form of provision, comparison or linking, restriction, deletion or destruction.

Restriction of processing

Restriction of processing is the marking of stored personal data with the aim of restricting their future processing.

Profiling

Profiling is any type of automated processing of personal data, which consists in the fact that this personal data is used to evaluate certain personal aspects that relate to a natural person, in particular to aspects related to work performance, economic situation, health, personal Analyze or predict the preferences, interests, reliability, behavior, location or relocation of this natural person.

Pseudonymization

Pseudonymization is the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organizational measures that ensure that the personal data cannot be assigned to an identified or identifiable natural person.

Processor

Processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the person responsible.

Recipient

The recipient is a natural or legal person, public authority, agency or other body to which personal data is disclosed, regardless of whether it is a third party or not. However, authorities that may receive personal data as part of a specific investigation mandate under EU law or the law of the Member States are not considered recipients.

Third party

A third party is a natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons who are authorized to process the personal data under the direct responsibility of the controller or processor.

Consent

Consent is any expression of will voluntarily given by the data subject for the specific case in an informed manner and unequivocally in the form of a declaration or other clear confirmatory act, with which the data subject indicates that they consent to the processing of their personal data.

4. Legal basis for data processing

Art. 6 para. 1 sentence 1 lit. a GDPR serves my company as the legal basis for processing operations in which i obtain consent for a specific processing purpose.

If the processing of personal data is necessary to fulfill a contract to which you are a party, as is the case, for example, with processing operations that are necessary for the execution of a trip or the provision of other services or considerations, the data processing is based on Art. 6 para. 1 sentence 1 lit. b GDPR. The same applies to processing operations that are necessary to carry out pre-contractual efforts, for example in cases of inquiries about my products or services.

If i’m obliged by law to process personal data, such as to fulfill tax obligations, the data processing is based on Art. 6 Para. 1 S. 1 lit. c GDPR.

In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or other natural persons. This is the case, for example, if a visitor to my company was injured and their name, age, health insurance data or other vital information had to be passed on to a doctor, a hospital or other third parties. The data processing would then be based on Art. 6 para. 1 sentence 1 lit. d GDPR.

Ultimately, processing operations can be based on Art. 6 Para. 1 S. 1 lit. f GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this provision if processing is necessary to safeguard the legitimate interests of my company or a third party, provided that the interests, fundamental rights and freedoms of the data subject shall not outweigh such interests . I’m allowed to carry out these data processing operations since they have been explicitly specified and deemed legitimate by the European legislator. The European legislator opined that a legitimate interest within the meaning of Art. 6 Para. 1 S. 1 lit. f GDPR can reasonably be assumed if you are a customer of my company (recital 47 sentence 2 GDPR).

5.Types of data processed
5.1 Data categories

I process the following categories of data to process your trip and to protect my legitimate interests: inventory, contact, content, contract, payment, usage, meta and communication data.

5.2 Special categories of data

In principle, no special categories of data are processed, unless these are processed by the user, e.g. if there are allergies and intolerances that should be communicated to the Kai Bellinghausen.

5.3. Categories of data subjects

Visitors and users of my online offer, customers, interested parties, suppliers, business partners, tour operators

6 minimum age 16 years

In order to use / fill in my booking forms, you must be at least 16 years old. If this is not the case, please ask your parents for permission to fill in and send the form. Since i can only process your data, i.e. process your request or booking, with the consent of your parents, I ask you to obtain this permission in advance.

7 technology
7.1 SSL / TLS encryption

This site uses an SSL or TLS encryption with the SHA-256 bit security algorithm with RSA encryption. You can recognize an encrypted connection by the fact that “https: //” appears in the address line of the browser instead of “http: //” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data that you transmit to me cannot be read by third parties.

7.2 Data collection when visiting the website

If you only use my website for informational purposes, i.e. if you do not register or otherwise provide me with information, i only collect data that your browser transmits to my server (in so-called “server log files”). Every time you or an automated system calls me a page, my website collects a series of general data and information. This general data and information will be stored in the server’s log files. The following data can be recorded

·      Browser types and versions used,

·      the operating system used by the accessing system,

·      the website from which an accessing system reaches my website (so-called referrer),

·      the sub-websites which are accessed via an accessing system on my website,

·      the date and time of access to the website,

·      an Internet protocol address (IP address),

·      the Internet service provider of the accessing system.

When using this general data and information, i do not draw any conclusions from it regarding your identity. This information is in fact needed to

·      deliver the content of my website correctly,

·      optimize the content of my website and the advertising for it,

·      ensure the long-term functionality of my IT systems and the technology used and

·      to provide law enforcement authorities with the information necessary for law enforcement in the event of a cyberattack.

This data and information is therefore evaluated by me both statistically and with the aim of increasing data protection and data security in my company in order to ultimately ensure the highest level of protection of the personal data i process. The data of the server log files are stored separately from all personal data provided by a data subject and are deleted every 2 weeks.

The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. f GDPR. my legitimate interest results from the data collection purposes specified above.

8. Disclosure of data to third parties

Your personal data will not be transmitted to third parties for purposes other than those specified hereunder.

I only transmit your personal data to third parties if the following applies:

·      Art. 6 para. 1 sentence 1 lit. a GDPR: you have given your express consent

·      Art. 6 para. 1 sentence 1 lit. b GDPR: the disclosure is necessary for the processing of contractual relationships with you

·      Art. 6 para. 1 sentence 1 lit. c GDPR: there is a legal obligation  disclose the data

·      Art. 6 para. 1 sentence 1 lit. f GDPR: the transmission

·       is permitted to protect my legitimate interests and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data

   9. Cookies

   9.1 General information about cookies

I use cookies on my website. These are small files created automatically by your browser and saved on your IT system (laptop, tablet, smartphone, etc.) when you visit my website. Cookies do not harm your end device and do not contain viruses, trojans or other malware.

Information is stored in the cookie, which results in connection with the specific device used. However, this does not mean that i immediately become aware of your identity.

On the one hand, the use of cookies ensures that the use of our offer is more convenient for you. For example, i use so-called session cookies to recognize that you have already visited individual pages on our website. Session cookies are automatically deleted after leaving my site.

In addition, i also use temporary cookies, i.e. cookies stored on your device for a specific period of time, to optimize user-friendliness. If you visit my site again to use my services, it is automatically recognized that you have already been with us and which entries and settings you have made so that you do not have to enter them again.

On the other hand, i use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer. These cookies enable me to automatically recognize when you visit my site again that you have already been with me. These cookies are automatically deleted after a defined time.

The data processed by cookies are required for the purposes mentioned to protect our legitimate interests and those of third parties in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR.

Most browsers accept cookies automatically. However, by configuring your browser accordingly you can prevent it from placing cookies on your computer or ensure that you are notified before a new cookie is placed. Please note that the complete deactivation of cookies might mean that you cannot use all features of our website.

10. Contents of our website
10.1 Registration as a customer

You have the option of registering as a customer on our website by providing personal data.

The following personal data are transmitted to me: first name, surname, address, cell phone number, email, date of birth. This data is used for registration. You can delete your customer account at any time and send a message to our address as specified above. I save and use the data you provide for contract processing. After completion of the contract, your data will be blocked with due regard to statutory retention periods and deleted after expiry of such retention periods, unless you have expressly consented to the further use of your data or I’m allowed to further use such data by statutory legal provisions  on which we will inform you accordingly below.

 10.2 Data processing for travel arrangements

The personal data collected by me will be transmitted to the company /companies commissioned with the realisation of the tour as far as this is necessary to process your booking. The legal basis for the transmission of the data is Art. 6 Para. 1 S. lit. b GDPR.

10.3 Establishing contact / contact form

When you contact me (e.g. via contact form or email), the following personal data is collected: first name, last name, email, telephone number. This data is stored and used exclusively for the purpose of answering your request or for contacting you as well as for the technical administration regarding your request. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 Para. 1 S. lit. f GDPR. If your request aims at the conclusion of a contract, the additional legal basis for the data processing is Art. 6 Para. 1 S. lit. b GDPR. Your data will be deleted after the final processing of your request. This is the case if it can be inferred from the circumstances that the matter concerned has been finally clarified and if no statutory retention requirements apply.

10.4 Application management / job exchange

I collect and process applicants’ personal data for the purpose of handling the application process. Data processing can also be done electronically. This is particularly the case if an applicant sends me the relevant application documents electronically, e.g. by email. If i conclude an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If i do not conclude an employment contract with the applicant, the application documents will be deleted six months after the announcement of the rejection decision. In order to be able to prove equal treatment during the application process, i have a legitimate interest in storing the applicants´ data for the period within which claims can be asserted and i -consequently- have to provide e.g. evidence in a legal proceeding under the German General Equal Treatment Act (AGG).

Data processing for application management is carried out solely on the basis of our legitimate interest pursuant Art. 6 Para. 1 S. lit. f GDPR.


11 Newsletter delivery

Existing customers:

If you have provided me with your email address upon purchase of a trip, i’m entitled to sending you emails to this email address on a regular basis about offers and trips similar to those already purchased. I do not need to obtain separate consent from you for this in accordance with Section 7 (3) UWG. The respective data processing is based solely on our legitimate interest in personalized direct advertising in accordance with Art. 6 Para. 1 S. lit. f GDPR. If you have initially objected to the use of your email address for this purpose, we will not send you any emails. You are entitled to object to the use of your email address for advertising at any time with future effect by notifying me. Upon receipt of your objection, we will immediately stop using your email address for advertising purposes. If you are interested, you can subscribe to the newsletter on our website. The personal data transmitted to me when you subscribe to the newsletter are determined by the registration mask used for this purpose.

I inform our customers on a regular basis about our offers by means of a newsletter. The newsletter of our company can only be received by you if you have subscribed to the newsletter by providing a valid email address. For legal reasons, a confirmation email will be sent to the email address given in your newsletter request in a double opt-in procedure. This confirmation email helps me to ensure that you, as the owner of the email address, have actually authorized the receipt of the newsletter.

When you subscribe to the newsletter, i also save the IP address of the IT system you are using at the time of subscription, as well as the date and time of the subscription itself. The collection of this data is necessary for me to understand the (possible) misuse of your e-mail address at a later point in time and therefore serves our legal protection.

The personal data collected when you register for the newsletter will only be used to deliver our newsletter. In addition, subscribers to the newsletter could be informed by email if this is necessary for the operation of the newsletter service or for a registration in this regard, as could be the case in the event of changes to the newsletter offer or changes in the technical circumstances. The personal data collected as part of the newsletter service is not transmitted to third parties. You can unsubscribe from our newsletter at any time. The consent regarding the storage of personal data that you have given me for delivering the newsletter can be revoked at any time. For the purpose of revoking said consent, i provide an opt-out link in every newsletter.
If you wish to unsubscribe from the newsletter, please click the unsubscribe link at the end of the newsletter or send an email with your request to: bellinghausen.kai@gmail.com

The legal basis for data processing for the purpose of delivering the newsletter is Art. 6 Para. 1 S. lit. a GDPR.


11.1 CleverReach

This website uses technology provided by CleverReach (CleverReach GmbH & Co. KG, Mühlenstr. 43, D- 26180 Rastede) to deliver newsletters

CleverReach is a newstter service with which the newsletter dispatch can be organized and analyzed. The data you enter for newsletter subscription (e.g. email address) will be saved on CleverReach’s servers in Germany and Ireland.

Our newsletters sent with CleverReach enable me to analyze the behavior of newsletter recipients such as – inter alia- how many recipients open the newsletter message and how often each link contained in the newsletter is clicked. With the help of so-called conversion tracking, it can also be analyzed whether a predefined action (e.g. the purchase of a product on our website) has taken place after clicking the link in the newsletter. For more information on data analysis through the CleverReach newsletter service, please see: www.cleverreach.com/de/funktion/reporting-und-tracking/.

Data will be processed solely if you have given your consent pursuant to Art. 6 Para. 1 S. lit. a GDPR. You can revoke your consent at any time by unsubscribing from the newsletter. The lawfulness of data processing that has already taken place prior to you unsubscribing from the newsletter shall remain unaffected.

If you do not wish any analysis by CleverReach to happen, you must unsubscribe from the newsletter. For this purpose, i provide a link in every newsletter message.

The data you have given me for the purpose of subscribing to the newsletter will be processed by me until you unsubscribe from the newsletter and, after your unsubscribing from the newsletter, will be deleted from both our servers and the servers of CleverReach.

You may learn more about CleverReach’s data privacy regulations at: www.cleverreach.com/de/datenschutz/.

Such an evaluation is carried out in particular in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interests in displaying personalized advertising, carrying-out market research and / or designing our website to meet your needs.

12 Web Analysis
12.1 Facebook Pixel (Custom Audience)
This website uses the “Facebook Pixel” by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”). If explicit consent is given, the behavior of users can be tracked after they have seen or clicked on a Facebook advertisement. This procedure conduces to evaluate the effectiveness of Facebook advertisements for statistical and market research and helps to optimize future advertising efforts.

The data collected is anonymous to me; consequently, i cannot identify the user. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising efforts in accordance with its data privacy policy (https://www.facebook.com/about/privacy/). You can enable Facebook and its partners to place advertisements on and outside of Facebook. A cookie can also be stored on your computer for these purposes. These processing operations take place only if express consent is given in accordance with Art. 6 Para. 1 S. lit. a GDPR.

Users who are older than 13 but have not yet reached the age of 16 do need the consent of their parents in order to use Facebook pixel.

Facebook Inc., based in the USA, is certified under the US-European data privacy agreement “Privacy Shield”, which guarantees compliance with the data privacy level applicable in the EU.

In order to deactivate the use of cookies on your IT system, you can configure your internet browser in a way that no cookies can be stored on your IT system or cookies that have already been stored will be deleted. Disabling all cookies can, however, mean that certain features of our website can no longer be performed. You can block the use of cookies by third parties on the following website of the Digital Advertising Alliance: www.aboutads.info/choices/

Alternatively, you can click on the “Disable Facebook Tracking” button below to prevent future collection of your data when you visit this website. An opt-out cookie is set. This opt-out cookie is only effective in this browser and only for our website and is furthermore stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. Please note that after deactivating Facebook tracking, our website will only function to a limited extent and elements from Facebook may not be displayed. If you would like to reactivate tracking, simply click “Re-Activate Facebook Tracking “.

Disable Facebook Tracking                 Re-activate Facebook Tracking

12.2 Google Analytics
On my website i use Google Analytics, a web analytics service provided by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”). In this context, pseudonymized usage profiles are created and cookies (see section 4 hereunder) are used. The information collected by the cookie about your usage of this website such as

·      Browser type / version,

·      operating system used,

·       referrer URL (the previously visited page),

·       host name of the accessing computer (IP address),

·       time of the server request,

will be transmitted to and stored by Google on servers located in the United States. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage for market research and the needs-based design of this website. This information may also be transmitted to third parties if required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that an assignment is not possible (IP masking).

You can prevent the installation of cookies by configuring your browser software accordingly; however, i would like to point out that in this case not all features of our website can be used to the full extent.

Google Analytics is used for optimizing and designing our website as required, which constitutes a legitimate interest within the meaning of Art. 6 Para. 1 S. lit. f GDPR.

You can prevent the collection of data generated by the cookie and related to your use of our website (including your IP address) and the processing of your data by Google Analytics by installing the Google Analytics opt-out browser add-on available under https: //tools.google.com/dlpage/gaoptout?hl=de.

Especially when using browsers on mobile devices, you can alternatively prevent Google Analytics from collecting data by clicking on the following link:


Click here to be excluded from Google Analytics measurement


An opt-out cookie is placed which prevents the future collection of your data when you access this website. The opt-out cookie is only effective in this browser and only for our website and is stored on your device. If you delete the cookies placed in this browser, you have to reset the opt-out cookie.

Further information on data privacy regarding Google Analytics is provided here support.google.com/analytics/answer/6004245.

I have implemented Google Analytics with activated IP anonymization. This means that the IP address of the user is encrypted by Google on the territory of member states of the European Union or contracting states of the Agreement on the European Economic Area. Only in exceptional cases, the full IP address is transmitted directly to a Google server in the USA and encrypted there.

12.3 Google Analytics Remarketing
I have implemented Google Remarketing services on this website. Google remarketing is a function of Google AdWords that enables a company to provide advertisements to Internet users who have previously accessed the company’s website. The integration of Google Remarketing therefore allows a company to create user-related advertising and consequently to display interest-based advertisements to the Internet user.

Google Remarketing is operated by Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of Google remarketing is to display interest-based advertising. Google remarketing enables me to display advertisements via the Google advertising network or to display them on other websites that are customized with regard to the individual needs and interests of Internet users.

Google remarketing places a cookie on the data subject’s IT system. This will enable Google to identify visitors of our website whenever they subsequently access websites that are also part of the Google advertising network. Every time you access a website which operates Google Remarketing, your internet browser will automatically be uniquely identified by Google. As part of this technical process, Google gains knowledge about your personal data, such as your IP address or surfing behavior, which Google uses, inter alia, to display interest-relevant advertising.

Cookies are used to store personal information, such as the websites you visit. Each time you visit our website, personal data, including your IP address, is transmitted directly to Google in the United. The personal data are stored by Google on servers located in the United States. Google may transmit these personal data to third parties.

You can prevent the setting of cookies by our website, as already described above, at any time by configuring the internet browser you use accordingly and  thus permanently object to the setting of cookies. The said configuration of the internet browser used also prevents Google from placing a cookie on your IT system. In addition, a cookie already placed by Google Analytics can be deleted at any time via the internet browser or other software programs.

You can also object to Google’s interest-based advertising by clicking the link www.google.de/settings/ads from every internet browser used and entering the desired settings there.

Such an evaluation is carried out in particular in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in displaying personalized advertising, doing market research and / or designing our website to meet your needs.

Further information and the applicable data privacy policy of Google can be found at www.google.de/intl/de/policies/privacy/.


13. Advertising
13.1 Google (AdWords) remarketing
Our website uses the internet service Google AdWords remarketing in order to advertise this website in the Google search results as well as on third-party websites. The service provider is Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). For this purpose, Google places a cookie in the internet browser of your end device, which automatically enables- based on which pages you access- interest-based advertising by using a pseudonymous cookie ID. The respective data processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 Para. 1 S. lit. f GDPR.

Any further data processing will only take place if you have agreed to Google linking  your internet and app browser history to your Google account and using information from your Google account to personalize advertisements that will be displayed to you on the internet .If you are logged in to Google in this case while accessing  our website, Google uses your data combined with Google Analytics data to create and define target group lists for cross-device remarketing. To do this, Google temporarily links your personal data to Google Analytics data to form target groups.

You can permanently deactivate the setting of cookies for advertising specifications by downloading and installing the browser plug-in available via the following link: www.google.com/settings/ads/onweb/

Alternatively, you can inform the Digital Advertising Alliance at www.aboutads.info about the placement of cookies and enter specific settings. Finally, you can configure your browser in a way that you are notified about the placement of cookies and thus be able to decide on a case-by-case basis whether to accept them or exclude the acceptance of specific cookies or cookies in general. If cookies are not accepted, the functionality of our website may be restricted.

Google LLC, based in the USA, is a certified entity regarding the US-EU Privacy Shield.The EU-US Privacy-Shield is an agreement between the European Union and the USA that guarantees the compliance with European data protection standards in the USA.

For further information on Google and its data privacy policy regarding advertising please click here: www.google.com/policies/technologies/ads/

13.2 Google AdWords with conversion tracking

I have integrated Google AdWords on this website. Google AdWords is an internet advertising service that allows advertisers to place advertisements in both the Google search engine results and the Google advertising network. Google AdWords enables an advertiser to define certain keywords in advance, by means of which an advertisement is only displayed in the Google search engine results if the user uses the search engine to retrieve a keyword-relevant search result. The ads are distributed within the Google advertising network on topic-related websites by using an automatic algorithm and in accordance with the previously defined keywords.

Google AdWords is operated by Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

I use Google AdWords to advertise our website by displaying interest-based advertising on the websites of third-party companies, in the search engine results of the Google search engine and by displaying third-party advertising on our website.

If you access our website via a Google ad, Google places a so-called conversion cookie on your IT system. A conversion cookie becomes ineffective after thirty days and is in no way used to identify you. The conversion cookie is used to determine whether certain sub-pages of our website, such as the booking or inquiry form, have been accessed. The conversion cookie enables both me and Google to determine whether a user, who has accessed our website via an AdWords ad, has generated sales, i.e. has completed or canceled a booking.

Google uses the personal data and further information collected through the use of the conversion cookie to compile visitor statistics for our website. I use these visitor statistics to determine the total number of users who were referred to me by AdWords ads, i.e. to determine the success or failure of the respective AdWords ad and to optimize our AdWords ads for the future. Neither our company nor any other Google AdWords advertisers receive information from Google that can be used to identify you.

The conversion cookie is used to save personal data, such as the websites you visit. Each time you access our website, personal data, including the IP address of the internet connection you use, is transmitted to Google in the United States. These personal data are stored by Google on servers located in the United States. Google may transmit these personal data to third parties.

You can prevent the placement of cookies by our website at any time by configuring the internet browser you use accordingly and thus object permanently to the placement of cookies. Such a configuration of your internet browser also prevents Google from placing a conversion cookie on your IT system. Furthermore, a cookie already placed by Google AdWords can be deleted at any time via your internet browser or other software programs.

You can also object to Google’s interest-based advertising by to calling up the link www.google.de/settings/ads from your internet browser and entering the desired settings.

Such an evaluation is carried out in particular in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interests in the display of personalized advertising, market research and / or the needs-based design of its website.

14. Affiliate programs

15 Plugins and other services
15.1 Google Maps
On my website i use Google Maps (API), an internet service provided by Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Google Maps is a web service for displaying interactive (land) maps to visually display geographic information. By using this service, e.g.  our location can be shown to you and any trip can be made easier.

As soon as you call up those sub-pages into which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers in the USA and saved there, regardless of whether Google provides a user account that you are logged in to or whether you do not have user account. If you are logged in to a Google  user account, your data will be assigned directly to your account. If you do not wish to be associated with your Google profile, you must log out of your Google user account. Google saves your data (even regarding users who are not logged in) as usage profiles and evaluates them. Such evaluation is carried out in particular in accordance with Art. 6 (1) lit. f GDPR based on Google’s legitimate interests in displaying personalized advertising, carrying out market research and / or designing its website in line with requirements. You have a right to object to the creation of these user profiles, although you must contact Google to exercise it.

Google LLC, based in the USA, is a certified entity regarding the US-EU Privacy Shield.The EU-US Privacy-Shield is an agreement between the European Union and the USA that guarantees the compliance with European data protection standards in the USA.

If you do not agree to the future transmission of your data to Google when using Google Maps, you can also completely deactivate the Google Maps web service by switching off the JavaScript application in your browser. Subsequently, Google Maps and thus the map display on this website cannot be used any longer.

I use Google Maps to ensure an attractive presentation of our online offers and to make it easier to determine and find the locations i have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 Para. 1 S. lit. f GDPR.

For Google’s terms of use please click here www.google.de/intl/de/policies/terms/regional.html; the additional terms of use for Google Maps can be found at www.google.com/intl/de_US/help/terms_maps.html

For further detailed information on data privacy regarding the use of Google Maps please access the Google website (“Google Privacy Policy”) via the following link: www.google.de/intl/de/policies/privacy/

15.2 Google Tag Manager
This website uses Google Tag Manager, a cookie-free domain that does not collect any personal data.

In Google Tag Manager, i have stored a user-defined script tag with JavaScript code that enables you to opt-out from Google Analytics Tracking and Facebook Pixel. You can find both opt-out links placed in the respective sections of our data privacy policy.

With this tool “website tags” (i.e. keywords, which are integrated in HTML elements) can be implemented and managed via an interface. By using the Google Tag Manager, i can automatically determine which button, link or personalized image you have actively clicked on and thus are able determine which content of our website is of particular interest to you.

The tool also triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If you have set a deactivation either at domain or at cookie level, this remains in effect for all tracking tags that are implemented with Google Tag Manager.

Google Tag Manager is used for convenient and easy use of our website. This constitutes a legitimate interest within the meaning of Art. 6 Para. 1 S. lit. f GDPR.

15.3 YouTube (videos)
I have integrated YouTube components on this website. YouTube is an Internet video portal that enables video publishers to post video clips free of charge and other users to view, evaluate and comment on them free of charge. YouTube allows the publication of all types of videos, which is why complete film and TV programs, but also music videos, trailers or videos made by users themselves can be accessed via the Internet portal.

YouTube is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

Each time you access one of our website´s individual pages on which a YouTube component (YouTube video) has been integrated, the Internet browser on your IT system is automatically prompted by the respective YouTube component to download the display of the respective YouTube component from YouTube. Further information on YouTube can be found at www.youtube.com/yt/about/de/. In the context of this technical process, YouTube and Google receive information as to which specific subpage of our website you are accessing.

If you are logged in to YouTube at the same time as accessing our website, YouTube recognizes which specific subpage of our website you are visiting when calling up a subpage that contains a YouTube video. This information is collected by YouTube and Google and assigned to your YouTube account.

YouTube and Google always receive information about the fact that you have visited our website via the YouTube component if you are logged in to YouTube at the same time as accessing our website; this happens regardless of whether you click on a YouTube video or not. If you do not want this information to be transmitted to YouTube and Google, you can prevent the transmission by logging out of your YouTube account before accessing our website.

YouTube is used to ensure the  convenient and easy use of our website. This represents a legitimate interest within the meaning of Art. 6 Para. 1 S. lit. f GDPR.

The data privacy policy published by YouTube that is available at www.google.de/intl/de/policies/privacy/, provides information about the collection, processing and use of personal data by YouTube and Google.

15.4 Facebook plugins (like button)

I have integrated plugins provided by the social network Facebook that is operated by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA into our website. You can recognize the Facebook plugins by the Facebook logo on the “Like” button on our site. You can find an overview of the Facebook plugins here: developers.facebook.com/docs/plugins/.

When you access our website, the plugin sets up a direct connection between your browser and the Facebook server. Facebook receives the information that you have visited our site along with your IP address. If you click on the Facebook “Like” button while being logged in to your Facebook account, you can link the content of our website to your Facebook profile. This enables Facebook to assign your visit to our website to your user account. I would like to point out that we -as the provider of the website- do not have any knowledge about the content of the data transmitted to Facebook or about how the respective data are used by Facebook.

Facebook is certified under the Privacy Shield Agreement and thus guarantees to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

Via the integrated plugins, Facebook receives the information that a user has called up the respective web page of the online offer. If the user is logged in to their Facebook account, Facebook can assign the visit to their Facebook account. If users interact with the plugins, for example by pressing the Like button or leaving a comment, your device will transmit the respective information directly to a Facebook server on which it will be saved. Even if a user is not a member of Facebook, Facebook will possibly save his IP address. According to Facebook, only an anonymized IP address is saved in Germany.

The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as the related rights and setting options for protecting the privacy of the users can be found in Facebook’s data privacy information: www.facebook.com/about/privacy/.

If you are a Facebook member and do not wish Facebook to collect data about you via this online offer and link it to your member data stored on Facebook, you must log out of your Facebook account before using our online offer and delete your cookies. Further settings and objections regarding the use of personal data for advertising purposes are possible within the Facebook profile settings: www.facebook.com/settings or via the US website www.aboutads.info/choices/ or the EU website www.youronlinechoices. com. The settings are independent from the platform, i.e. they are adopted for all devices, such as desktop computers or mobile devices.

Alternatively, you can click on the “Disable Facebook Tracking” button below to prevent future collection of your data when you access this website. An opt-out cookie is placed. This opt-out cookie is only effective in this browser and only for our website and is saved on your device. If you delete the cookies in this browser, you have to place the opt-out cookie again. Please note that after deactivating Facebook tracking, our website will only function to a limited extent and elements from Facebook may not be displayed. If you would like to reactivate Facebook tracking, simply click “Activate Facebook tracking again”.

16.5. Instagram plug-in
Functions of the Instagram service are integrated on our website. These functions are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to our website with your user account. I would like to point out that, as the provider of the website, i do not have any knowledge of the content of the data transmitted or on how it is used by Instagram. For more information, see Instagram’s data privacy policy: instagram.com/about/legal/privacy/

16 Your rights as a data subject
16.1 Right to confirmation
You have the right to request confirmation from me as to whether personal data in question is being processed.

16.2 Right to information, Art. 15 GDPR
You have the right to receive information from me free of charge at any time about the personal data stored about you and a copy of this data.

16.3 Right to rectification, Art. 16 GDPR

You have the right to request me to rectify any inaccurate or incomplete personal data i hold about you.

17.4 Right to Erasure, Art. 17 GDPR

You have the right to have your personal data i hold about you erased, if i do not have a legal reason to continue to process and hold it..
According to legal requirements, particular personal data is held for 6 years pursuant §  257 (1) HGB (commercial books, inventories, opening balance sheets, annual accounts, commercial letters, booking receipts, etc.) and for 10 years pursuant § 147 (1) AO (books, records, management reports , Booking vouchers, commercial and business letters, documents relevant for taxation, etc.).

I delete requests if they are no longer necessary. I check the necessity every two years. I delete inquiries and emails that resulted in a booking every three and a half years after the end of the calendar year in which the contract was fulfilled. In the case of statutory archiving obligations, i will delete the respective data after expiry of the statutory retention periods (end of commercial law (6 years) and tax law (10 years) retention obligation).

16.5 Restriction of processing, Art. 18 GDPR

You have the right to ask me to restrict how i process your data subject to Art. 18 GDPR. In this case i will be permitted to store the data but not to further process it.

16.6 Data portability, Art. 20 GDPR
You are entitled to receive personal data that you have provided to us in a structured, commonly used and machine-readable format or – if technically feasible – to demand that i transfer those data to a third party. You also have the right to transfer this data to another controller without hindrance from me, provided that the processing is based on consent in accordance with Art. 6 Para. 1 S. lit. a GDPR or Art. 9 Para. 2 S. lit. a GDPR or on a contract in accordance with Art. 6 Para. 1 S. lit. b GDPR and the processing is carried out by using automated processes, unless the processing is necessary for the performance of a task that is in the public interest or for the exercise of official authority that has been transferred to me.

.

16.7 Right to object to data processing, Art. 21 GDPR
You have the right to object to the processing of your personal data at any time on grounds relating to your particular situation provided that the data processing is based on Art. 6 Para. 1 S. lit. e (data processing in the public interest) or f (data processing based on a balance of interests) GDPR.

This also applies to profiling within the meaning of Article 4 (4) GDPR that is based on the aforementioned provisions.

If you file an objection, i will no longer process your personal data unless i can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
In individual cases, i process personal data in order to operate direct mail. You can object to the processing of personal data for the purpose of such advertising at any time. This also applies to profiling insofar as it is connected to such direct advertising. If you object to the processing for direct marketing purposes, i will no longer process the personal data for these purposes.

In addition, you have the right, on grounds relating to your particular situation, to object to the processing of personal data concerning you, which i do for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. 1 GDPR unless such processing is necessary to perform a task in the public interest.

You are free to exercise your right to object in connection with the use of information society services, regardless of Directive 2002/58 / EC, by using automated procedures that use technical specifications.

16.8 Withdrawal of consent pursuant Art. 7 GDPR

If you have given me your consent to process your data but change your mind later, you have the right to withdraw your consent at any time by sending an email or written letter to our contact address as stated above. I will stop processing your data accordingly.

16.9 Complaint to a supervisory authority

You have the right to lodge a complaint with the competent supervisory authority about how i process your personal data.

17 Routine storage, deletion and blocking of personal data

I only process and store your personal data for the period of time necessary to achieve the storage purpose or stipulated by applicable statutory provisions.

If the retention purpose ceases to exist or a stipulated retention period expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

18 Duration of retention of personal data

The criterion for the duration of the retention of personal data is the respective statutory retention period, stipulated by German law (Commercial Code, GoBD and Tax Code). After expiry of the statutory retention period, the respective data will be routinely deleted, provided that it is no longer required to perform or initiate a contract.

19 Up-to-dateness of the data privacy policy; amendments

This data privacy policy is currently effective and was last updated in June 2018.

I may amend this data privacy policy from time to time due to the further development of our websites and offers or due to changes to legal or official requirements. This only applies, however, to declarations regarding data processing. If user consent is required or parts of the data privacy policy contain stipulations regarding the contractual relationship with the users, i will only amend the privacy policy if the user consents to the amendment. Users are asked to inform themselves regularly about the content of the data privacy policy.

Es wird ein Opt-out-Cookie gesetzt, das die zukünftige Erfassung deiner Daten beim Besuch dieser Website verhindert. Der Opt-out-Cookie gilt nur in diesem Browser und nur für unsere Website und wird auf deinem Gerät abgelegt. Löschst du die Cookies in diesem Browser, musst du das Opt-out-Cookie erneut setzen.

Weitere Informationen zum Datenschutz im Zusammenhang mit Google Analytics finden Sie etwa in der Google Analytics-Hilfe (https://support.google.com/analytics/answer/6004245?hl=de).

11.3 Google Analytics Remarketing

Wir haben auf dieser Internetseite Dienste von Google Remarketing integriert. Google Remarketing ist eine Funktion von Google-AdWords, die es einem Unternehmen ermöglicht, bei solchen Internetnutzern Werbung einblenden zu lassen, die sich zuvor auf der Internetseite des Unternehmens aufgehalten haben. Die Integration von Google Remarketing gestattet es einem Unternehmen demnach, nutzerbezogene Werbung zu erstellen und dem Internetnutzer folglich interessenrelevante Werbeanzeigen anzeigen zu lassen.

Betreibergesellschaft der Dienste von Google Remarketing ist die Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Zweck von Google Remarketing ist die Einblendung von interessenrelevanter Werbung. Google Remarketing ermöglicht es uns, Werbeanzeigen über das Google-Werbenetzwerk anzuzeigen oder auf anderen Internetseiten anzeigen zu lassen, welche auf die individuellen Bedürfnisse und Interessen von Internetnutzern abgestimmt sind.

Google Remarketing setzt ein Cookie auf Ihrem IT-System der betroffenen Person. Mit der Setzung des Cookies wird Google eine Wiedererkennung des Besuchers unserer Internetseite ermöglicht, wenn dieser in der Folge Internetseiten aufruft, die ebenfalls Mitglied des Google-Werbenetzwerks sind. Mit jedem Aufruf einer Internetseite, auf welcher der Dienst von Google Remarketing integriert wurde, identifiziert sich dein Internetbrowser automatisch bei Google. Im Rahmen dieses technischen Verfahrens erhält Google Kenntnis über personenbezogene Daten, wie deine IP-Adresse oder das Surfverhalten, welche Google unter anderem zur Einblendung interessenrelevanter Werbung verwendet.

Mittels des Cookies werden personenbezogene Informationen, beispielsweise die durch dich besuchten Internetseiten, gespeichert. Bei jedem Besuch unserer Internetseiten werden demnach personenbezogene Daten, einschließlich deiner IP-Adresse, an Google in den Vereinigten Staaten von Amerika übertragen. Diese personenbezogenen Daten werden durch Google in den Vereinigten Staaten von Amerika gespeichert. Google gibt diese über das technische Verfahren erhobenen personenbezogenen Daten unter Umständen an Dritte weiter.

Du kannst die Setzung von Cookies durch unsere Internetseite, wie oben bereits dargestellt, jederzeit mittels einer entsprechenden Einstellung des genutzten Internetbrowsers verhindern und damit der Setzung von Cookies dauerhaft widersprechen. Eine solche Einstellung des genutzten Internetbrowsers würde auch verhindern, dass Google ein Cookie auf deinem IT-System setzt. Zudem kann ein von Google Analytics bereits gesetzter Cookie jederzeit über den Internetbrowser oder andere Softwareprogramme gelöscht werden.

Ferner besteht für Sie die Möglichkeit, der interessenbezogenen Werbung durch Google zu widersprechen. Hierzu musst du von jedem genutzten Internetbrowser aus den Link www.google.de/settings/ads aufrufen und dort die gewünschten Einstellungen vornehmen.

Eine solche Auswertung erfolgt insbesondere gemäß Art. 6 Abs. 1 lit.f DS-GVO auf Basis unseres berechtigten Interesses an der Einblendung personalisierter Werbung, Marktforschung und/oder bedarfsgerechten Gestaltung seiner Website.

Weitere Informationen und die geltenden Datenschutzbestimmungen von Google können unter www.google.de/intl/de/policies/privacy/ abgerufen werden.

12 Werbung
12.1 Google (AdWords) Remarketing

Unsere Website nutzt die Funktionen von Google AdWords Remarketing, hiermit werben wir für diese Website in den Google-Suchergebnissen, sowie auf Dritt-Websites. Anbieter ist die Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Zu diesem Zweck setzt Google ein Cookie im Browser deines Endgeräts, welches automatisch mittels einer pseudonymen Cookie-ID und auf Grundlage der von dir besuchten Seiten eine interessensbasierte Werbung ermöglicht. Die Verarbeitung erfolgt auf Basis unseres berechtigten Interesses an der optimalen Vermarktung unserer Website gemäß Art. 6 Abs. 1 lit. f DS-GVO.

Eine darüberhinausgehende Datenverarbeitung findet nur statt, sofern du gegenüber Google zugestimmt hast, dass dein Internet- und App-Browserverlauf von Google mit deinem Google-Konto verknüpft wird und Informationen aus deinem Google-Konto zum Personalisieren von Anzeigen verwendet werden, die du im Web betrachtest. Bist du in diesem Fall während des Seitenbesuchs unserer Webseite bei Google eingeloggt, verwendet Google deine Daten zusammen mit Google Analytics-Daten, um Zielgruppenlisten für geräteübergreifendes Remarketing zu erstellen und zu definieren. Dazu werden deine personenbezogenen Daten von Google vorübergehend mit Google Analytics-Daten verknüpft, um Zielgruppen zu bilden.

Du kannst die Setzung von Cookies für Anzeigenvorgaben dauerhaft deaktivieren, indem du das unter folgendem Link verfügbare Browser-Plug-in herunterlädst und installierst: www.google.com/settings/ads/onweb/

Alternativ kannst du dch bei der Digital Advertising Alliance unter der Internetadresse www.aboutads.info über das Setzen von Cookies informieren und Einstellungen hierzu vornehmen. Schließlich kannst dz deinen Browser so einstellen, dass du über das Setzen von Cookies informiert wirst und einzeln über deren Annahme entscheiden oder die Annahme von Cookies für bestimmte Fälle oder generell ausschließen kannst. Bei der Nichtannahme von Cookies kann die Funktionalität unserer Website eingeschränkt sein.

Google LLC mit Sitz in den USA ist für das us-europäische Datenschutzübereinkommen “Privacy Shield” zertifiziert, welches die Einhaltung des in der EU geltenden Datenschutzniveaus gewährleistet.

Weitergehende Informationen und die Datenschutzbestimmungen bezüglich Werbung und Google können Sie hier einsehen: www.google.com/policies/technologies/ads/

12.2 Google AdWords mit Conversion-Tracking

Wir haben auf dieser Internetseite Google AdWords integriert. Google AdWords ist ein Dienst zur Internetwerbung, der es Werbetreibenden gestattet, sowohl Anzeigen in den Suchmaschinenergebnissen von Google als auch im Google-Werbenetzwerk zu schalten. Google AdWords ermöglicht es einem Werbetreibenden, vorab bestimmte Schlüsselwörter festzulegen, mittels derer eine Anzeige in den Suchmaschinenergebnissen von Google ausschließlich dann angezeigt wird, wenn der Nutzer mit der Suchmaschine ein schlüsselwortrelevantes Suchergebnis abruft. Im Google-Werbenetzwerk werden die Anzeigen mittels eines automatischen Algorithmus und unter Beachtung der zuvor festgelegten Schlüsselwörter auf themenrelevanten Internetseiten verteilt.

Betreibergesellschaft der Dienste von Google AdWords ist die Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Der Zweck von Google AdWords ist die Bewerbung unserer Internetseite durch die Einblendung von interessenrelevanter Werbung auf den Internetseiten von Drittunternehmen und in den Suchmaschinenergebnissen der Suchmaschine Google und eine Einblendung von Fremdwerbung auf unserer Internetseite.

Gelangst du über eine Google-Anzeige auf unsere Internetseite, wird auf deinem IT-System durch Google ein sogenannter Conversion-Cookie abgelegt. Ein Conversion-Cookie verliert nach dreißig Tagen seine Gültigkeit und dient nicht zu deiner Identifikation. Über den Conversion-Cookie wird, sofern das Cookie noch nicht abgelaufen ist, nachvollzogen, ob bestimmte Unterseiten, beispielsweise die Buchungs- oder Anfragemaske auf unserer Internetseite aufgerufen wurde. Durch den Conversion-Cookie können sowohl wir als auch Google nachvollziehen, ob ein Nutzer, der über eine AdWords-Anzeige auf unsere Internetseite gelangt ist, einen Umsatz generierte, also eine Buchung vollzogen oder abgebrochen hat.

Die durch die Nutzung des Conversion-Cookies erhobenen Daten und Informationen werden von Google verwendet, um Besuchsstatistiken für unsere Internetseite zu erstellen. Diese Besuchsstatistiken werden durch uns wiederum genutzt, um die Gesamtanzahl der Nutzer zu ermitteln, welche über AdWords-Anzeigen an uns vermittelt wurden, also um den Erfolg oder Misserfolg der jeweiligen AdWords-Anzeige zu ermitteln und um unsere AdWords-Anzeigen für die Zukunft zu optimieren. Weder unser Unternehmen noch andere Werbekunden von Google-AdWords erhalten Informationen von Google, mittels derer du identifiziert werden kannst.

Mittels des Conversion-Cookies werden personenbezogene Informationen, beispielsweise die durch dich besuchten Internetseiten, gespeichert. Bei jedem Besuch unserer Internetseiten werden demnach personenbezogene Daten, einschließlich der IP-Adresse des von dir genutzten Internetanschlusses, an Google in den Vereinigten Staaten von Amerika übertragen. Diese personenbezogenen Daten werden durch Google in den Vereinigten Staaten von Amerika gespeichert. Google gibt diese über das technische Verfahren erhobenen personenbezogenen Daten unter Umständen an Dritte weiter.

Du kannst die Setzung von Cookies durch unsere Internetseite jederzeit mittels einer entsprechenden Einstellung des genutzten Internetbrowsers verhindern und damit der Setzung von Cookies dauerhaft widersprechen. Eine solche Einstellung des genutzten Internetbrowsers würde auch verhindern, dass Google einen Conversion-Cookie auf deinem IT-System setzt. Zudem kann ein von Google AdWords bereits gesetzter Cookie jederzeit über den Internetbrowser oder andere Softwareprogramme gelöscht werden.

Ferner besteht für dich die Möglichkeit, der interessenbezogenen Werbung durch Google zu widersprechen. Hierzu musst du von deinem genutzten Internetbrowser aus den Link www.google.de/settings/ads aufrufen und dort die gewünschten Einstellungen vornehmen.

Eine solche Auswertung erfolgt insbesondere gemäß Art. 6 Abs. 1 lit.f DS-GVO auf Basis unserer berechtigten Interessen an der Einblendung personalisierter Werbung, Marktforschung und/oder bedarfsgerechten Gestaltung seiner Website.

Weitere Informationen und die geltenden Datenschutzbestimmungen von Google können unter www.google.de/intl/de/policies/privacy/ abgerufen werden.

13 Affiliateprogramme 

14 Plugins und andere Dienste
14.1 Google Maps

Auf unserer Website verwenden wir Google Maps (API) von Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Maps ist ein Webdienst zur Darstellung von interaktiven (Land-)Karten, um geographische Informationen visuell darzustellen. Über die Nutzung dieses Dienstes kann dir beispielsweise unser Standort angezeigt und eine etwaige Anfahrt erleichtert werden.

Bereits beim Aufrufen derjenigen Unterseiten, in die die Karte von Google Maps eingebunden ist, werden Informationen über deine Nutzung unserer Website (wie z.B. deine IP-Adresse) an Server von Google in den USA übertragen und dort gespeichert. Dies erfolgt unabhängig davon, ob Google ein Nutzerkonto bereitstellt, über das du eingeloggt bist, oder ob kein Nutzerkonto besteht. Wenn du bei Google eingeloggt bist, werden deine Daten direkt deinem Konto zugeordnet. Wenn du die Zuordnung mit deinem Profil bei Google nicht wünschst, musst du dich aus deinem Google-Benutzerkonto ausloggen. Google speichert deine Daten (selbst für nicht eingeloggte Nutzer) als Nutzungsprofile und wertet diese aus. Eine solche Auswertung erfolgt insbesondere gemäß Art. 6 Abs. 1 lit.f DS-GVO auf Basis der berechtigten Interessen von Google an der Einblendung personalisierter Werbung, Marktforschung und/oder bedarfsgerechter Gestaltung seiner Website. Dir steht ein Widerspruchsrecht zu gegen die Bildung dieser Nutzerprofile, wobei du dich zur Ausübung dessen an Google richten musst.

Google LLC mit Sitz in den USA ist für das us-europäische Datenschutzübereinkommen “Privacy Shield” zertifiziert, welches die Einhaltung des in der EU geltenden Datenschutzniveaus gewährleistet.

Wenn du mit der künftigen Übermittlung deiner Daten an Google im Rahmen der Nutzung von Google Maps nicht einverstanden bist, besteht auch die Möglichkeit, den Webdienst von Google Maps vollständig zu deaktivieren, indem du die Anwendung JavaScript in deinem Browser ausschaltest. Google Maps und damit auch die Kartenanzeige auf dieser Internetseite kann dann nicht genutzt werden.

Die Nutzung von Google Maps erfolgt im Interesse einer ansprechenden Darstellung unserer Online-Angebote und an einer leichten Auffindbarkeit der von uns auf der Website angegebenen Orte. Dies stellt ein berechtigtes Interesse im Sinne von Art. 6 Abs. 1 lit. f DS-GVO dar.

Die Nutzungsbedingungen von Google kannst du unter www.google.de/intl/de/policies/terms/regional.html einsehen, die zusätzlichen Nutzungsbedingungen für Google Maps findest du unter www.google.com/intl/de_US/help/terms_maps.html

Ausführliche Informationen zum Datenschutz im Zusammenhang mit der Verwendung von Google Maps findest du auf der Internetseite von Google (“Google Privacy Policy”): www.google.de/intl/de/policies/privacy/

14.2 Google Tag Manager

Diese Webseite verwendet Google Tag Manager, eine cookielose Domain die keine personenbezogenen Daten erfasst.

Durch dieses Tool können “Website-Tags” (d.h. Schlagwörter, welche in HTML Elemente eingebunden werden) implementiert und über eine Oberfläche verwaltet werden. Durch den Einsatz des Google Tag Manager können wir automatisiert nachvollziehen, welchen Button, Link oder welches personalisierte Bild du aktiv angeklickt hast und können sodann festhalten, welche Inhalte unserer Webseite für dich besonders interessant sind.

Das Tool sorgt zudem für die Auslösung anderer Tags, die ihrerseits unter Umständen Daten erfassen. Google Tag Manager greift nicht auf diese Daten zu. Wenn du auf Domain- oder Cookie-Ebene eine Deaktivierung vorgenommen hast, bleibt diese für alle Tracking-Tags bestehen, die mit Google Tag Manager implementiert werden.

Die Nutzung von Google tag Manager erfolgt im Interesse einer komfortablen und einfachen Nutzung unserer Internetseite. Dies stellt ein berechtigtes Interesse im Sinne von Art. 6 Abs. 1 lit. f DS-GVO dar.

14.3 YouTube (Videos)

Wir haben auf dieser Internetseite Komponenten von YouTube integriert. YouTube ist ein Internet-Videoportal, dass Video-Publishern das kostenlose Einstellen von Videoclips und anderen Nutzern die ebenfalls kostenfreie Betrachtung, Bewertung und Kommentierung dieser ermöglicht. YouTube gestattet die Publikation aller Arten von Videos, weshalb sowohl komplette Film- und Fernsehsendungen, aber auch Musikvideos, Trailer oder von Nutzern selbst angefertigte Videos über das Internetportal abrufbar sind.

Betreibergesellschaft von YouTube ist die YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. Die YouTube, LLC ist einer Tochtergesellschaft der Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Durch jeden Aufruf einer der Einzelseiten dieser Internetseite, die von uns betrieben wird und auf welcher eine YouTube-Komponente (YouTube-Video) integriert wurde, wird der Internetbrowser auf deinem IT-System automatisch durch die jeweilige YouTube-Komponente veranlasst, eine Darstellung der entsprechenden YouTube-Komponente von YouTube herunterzuladen. Weitere Informationen zu YouTube können unter www.youtube.com/yt/about/de/ abgerufen werden. Im Rahmen dieses technischen Verfahrens erhalten YouTube und Google Kenntnis darüber, welche konkrete Unterseite unserer Internetseite durch dich besucht wird.

Sofern die betroffene Person gleichzeitig bei YouTube eingeloggt ist, erkennt YouTube mit dem Aufruf einer Unterseite, die ein YouTube-Video enthält, welche konkrete Unterseite unserer Internetseite du besuchst. Diese Informationen werden durch YouTube und Google gesammelt und deinem YouTube-Account zugeordnet.

YouTube und Google erhalten über die YouTube-Komponente immer dann eine Information darüber, dass du unsere Internetseite besucht hast, wenn du zum Zeitpunkt des Aufrufs unserer Internetseite gleichzeitig bei YouTube eingeloggt bist; dies findet unabhängig davon statt, ob du ein YouTube-Video anklickst oder nicht. Ist eine derartige Übermittlung dieser Informationen an YouTube und Google von dir nicht gewollt, kannst du die Übermittlung dadurch verhindern, dass du dich vor einem Aufruf unserer Internetseite aus deinem YouTube-Account ausloggst.

Die Nutzung von YouTube erfolgt im Interesse einer komfortablen und einfachen Nutzung unserer Internetseite. Dies stellt ein berechtigtes Interesse im Sinne von Art. 6 Abs. 1 lit. f DS-GVO dar.

Die von YouTube veröffentlichten Datenschutzbestimmungen, die unter www.google.de/intl/de/policies/privacy/ abrufbar sind, geben Aufschluss über die Erhebung, Verarbeitung und Nutzung personenbezogener Daten durch YouTube und Google.

14.4 Facebook-Plugins (Like-Button)

Auf unseren Seiten sind Plugins des sozialen Netzwerks Facebook, Anbieter Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, integriert. Die Facebook-Plugins erkennen Sie an dem Facebook-Logo oder dem “Like-Button” (“Gefällt mir”) auf unserer Seite. Eine Übersicht über die Facebook-Plugins findest du hier: developers.facebook.com/docs/plugins/.

Wenn du unsere Seiten besuchst, wird über das Plugin eine direkte Verbindung zwischen deinem Browser und dem Facebook-Server hergestellt. Facebook erhält dadurch die Information, dass du mit deiner IP-Adresse unsere Seite besucht hast. Wenn du den Facebook “Like-Button” anklickst, während du in deinem Facebook-Account eingeloggt bist, kannst du die Inhalte unserer Seiten auf deinem Facebook-Profil verlinken. Dadurch kann Facebook den Besuch unserer Seiten deinem Benutzerkonto zuordnen. Wir weisen darauf hin, dass wir als Anbieter der Seiten keine Kenntnis vom Inhalt der übermittelten Daten sowie deren Nutzung durch Facebook erhalten. Weitere Informationen hierzu findest du in der Datenschutzerklärung von Facebook unter de-de.facebook.com/policy.php.

Wenn du nicht wünschst, dass Facebook den Besuch unserer Seiten deinem Facebook-Nutzerkonto zuordnen kann, logge dich bitte aus deinem Facebook-Benutzerkonto aus.

14.5. Instagram Plug-In

Auf unseren Seiten sind Funktionen des Dienstes Instagram eingebunden. Diese Funktionen werden angeboten durch die Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. Wenn du in deinem Instagram-Account eingeloggt bist kannst du durch Anklicken des Instagram-Buttons die Inhalte unserer Seiten mit deinem Instagram-Profil verlinken. Dadurch kann Instagram den Besuch unserer Seiten deinem Benutzerkonto zuordnen. Wir weisen darauf hin, dass wir als Anbieter der Seiten keine Kenntnis vom Inhalt der übermittelten Daten sowie deren Nutzung durch Instagram erhalten. Weitere Informationen hierzu findest du in der Datenschutzerklärung von Instagram: instagram.com/about/legal/privacy/

15 Ausführendes Luftfahrtunternehmen

Die EG-Verordnung Nr. 2111 vom 14.12.05 verpflichtet Reiseveranstalter, Reisevermittler und Vermittler von Beförderungsverträgen, Reisende vor der entsprechenden Flugbeförderung über die Identität jeder ausführenden Fluggesellschaft zu unterrichten, sobald diese feststeht. Soweit dies bei Buchung noch nicht der Fall ist, muss zunächst die wahrscheinlich ausführende Fluggesellschaft angegeben werden. Bei Wechsel der ausführenden Fluggesellschaft nach erfolgter Buchung ist der Kunde unverzüglich zu unterrichten.

Die aktuelle Liste der Luftfahrtunternehmen, gegen die in der EU eine Betriebsuntersagung ergangen ist (Black-List) finden Sie über die Internetseite ec.europa.eu/transport/modes/air/safety/air-ban_en

16 Deine Rechte als betroffene Person
16.1 Recht auf Bestätigung

Du hast das Recht, von uns eine Bestätigung darüber zu verlangen, ob betreffende personenbezogene Daten verarbeitet werden.

16.2 Recht auf Auskunft Art. 15 DS-GVO

Du hast das Recht, jederzeit von uns unentgeltliche Auskunft über die zu deiner Person gespeicherten personenbezogenen Daten sowie eine Kopie dieser Daten zu erhalten.

16.3 Recht auf Berichtigung Art. 16 DS-GVO

Du hast das Recht, die Berichtigung dich betreffender unrichtiger personenbezogener Daten zu verlangen. Ferner steht der betroffenen Person das Recht zu, unter Berücksichtigung der Zwecke der Verarbeitung, die Vervollständigung unvollständiger personenbezogener Daten zu verlangen.

16.4 Löschung Art. 17 DS-GVO

Du hast das Recht, von uns zu verlangen, dass die dich betreffenden personenbezogenen Daten unverzüglich gelöscht werden, sofern einer der gesetzlich vorgesehenen Gründe zutrifft und soweit die Verarbeitung nicht erforderlich ist.

16.5 Einschränkung der Verarbeitung Art. 18 DS-GVO

Du hast das Recht, von uns die Einschränkung der Verarbeitung zu verlangen, wenn eine der gesetzlichen Voraussetzungen gegeben ist.

16.6 Datenübertragbarkeit Art. 20 DS-GVO

Du hast das Recht, die dich betreffenden personenbezogenen Daten, welche uns durch dich bereitgestellt wurden, in einem strukturierten, gängigen und maschinenlesbaren Format zu erhalten. Du hast außerdem das Recht, diese Daten einem anderen Verantwortlichen ohne Behinderung durch uns, dem die personenbezogenen Daten bereitgestellt wurden, zu übermitteln, sofern die Verarbeitung auf der Einwilligung gemäß Art. 6 Abs. 1 lit. a DS-GVO oder Art. 9 Abs. 2 lit. a DS-GVO oder auf einem Vertrag gemäß Art. 6 Abs. 1 lit. b DS-GVO beruht und die Verarbeitung mithilfe automatisierter Verfahren erfolgt, sofern die Verarbeitung nicht für die Wahrnehmung einer Aufgabe erforderlich ist, die im öffentlichen Interesse liegt oder in Ausübung öffentlicher Gewalt erfolgt, welche uns übertragen wurde.

Ferner hast du bei der Ausübung deines Rechts auf Datenübertragbarkeit gemäß Art. 20 Abs. 1 DS-GVO das Recht, zu erwirken, dass die personenbezogenen Daten direkt von einem Verantwortlichen an einen anderen Verantwortlichen übermittelt werden, soweit dies technisch machbar ist und sofern hiervon nicht die Rechte und Freiheiten anderer Personen beeinträchtigt werden.

16.7 Widerspruch Art. 21 DS-GVO

Du hast das Recht, aus Gründen, die sich aus deiner besonderen Situation ergeben, jederzeit gegen die Verarbeitung dich betreffender personenbezogener Daten, die aufgrund von Art. 6 Abs. 1 lit. e (Datenverarbeitung im öffentlichen Interesse) oder f (Datenverarbeitung auf Grundlage einer Interessenabwägung) DS-GVO erfolgt, Widerspruch einzulegen.

Dies gilt auch für ein auf diese Bestimmungen gestütztes Profiling im Sinne von Art. 4 Nr. 4 DS-GVO.

Legst du Widerspruch ein, werden wir deine personenbezogenen Daten nicht mehr verarbeiten, es sei denn, wir können zwingende berechtigte Gründe für die Verarbeitung nachweisen, die deinen Interessen, Rechte und Freiheiten überwiegen, oder die Verarbeitung dient der Geltendmachung, Ausübung oder Verteidigung von Rechtsansprüchen.

In Einzelfällen verarbeiten wir personenbezogene Daten, um Direktwerbung zu betreiben. Du kannst jederzeit Widerspruch gegen die Verarbeitung der personenbezogenen Daten zum Zwecke derartiger Werbung einlegen. Dies gilt auch für das Profiling, soweit es mit solcher Direktwerbung in Verbindung steht. Widersprichst du gegenüber uns der Verarbeitung für Zwecke der Direktwerbung, so werden wir die personenbezogenen Daten nicht mehr für diese Zwecke verarbeiten.

Zudem hast du das Recht, aus Gründen, die sich aus deiner besonderen Situation ergeben, gegen die dich betreffende Verarbeitung personenbezogener Daten, die bei uns zu wissenschaftlichen oder historischen Forschungszwecken oder zu statistischen Zwecken gemäß Art. 89 Abs. 1 DS-GVO erfolgen, Widerspruch einzulegen, es sei denn, eine solche Verarbeitung ist zur Erfüllung einer im öffentlichen Interesse liegenden Aufgabe erforderlich.

Ihnen steht es frei, im Zusammenhang mit der Nutzung von Diensten der Informationsgesellschaft, ungeachtet der Richtlinie 2002/58/EG, ihr Widerspruchsrecht mittels automatisierter Verfahren auszuüben, bei denen technische Spezifikationen verwendet werden.

16.8 Widerruf einer datenschutzrechtlichen Einwilligung

Du hast das Recht, eine Einwilligung zur Verarbeitung personenbezogener Daten jederzeit mit Wirkung für die Zukunft zu widerrufen.

16.9 Beschwerde bei einer Aufsichtsbehörde

Du hast das Recht, dich einer für Datenschutz zuständigen Aufsichtsbehörde über unsere Verarbeitung personenbezogener Daten zu beschweren.

17 Routinemäßige Speicherung, Löschung und Sperrung von personenbezogenen Daten

Wir verarbeiten und speichern deine personenbezogenen Daten nur für den Zeitraum, der zur Erreichung des Speicherungszwecks erforderlich ist oder sofern dies durch Rechtsvorschriften, welchen unser Unternehmen unterliegt, vorgesehen wurde.

Entfällt der Speicherungszweck oder läuft eine vorgeschriebene Speicherfrist ab, werden die personenbezogenen Daten routinemäßig und entsprechend den gesetzlichen Vorschriften gesperrt oder gelöscht.

18 Dauer der Speicherung von personenbezogenen Daten

Das Kriterium für die Dauer der Speicherung von personenbezogenen Daten ist die jeweilige gesetzliche Aufbewahrungsfrist. Nach Ablauf der Frist werden die entsprechenden Daten routinemäßig gelöscht, sofern sie nicht mehr zur Vertragserfüllung oder Vertragsanbahnung erforderlich sind.

19 Aktualität und Änderung der Datenschutzerklärung

Diese Datenschutzerklärung ist aktuell gültig und hat den Stand Mai 2018.

Quellenangabe: https://t3n.de/datenschutz/ und https://www.e-recht24.de/muster-datenschutzerklaerung.html