Privacy Policy

Privacy policy | Bader Hotelbetriebs GmbH
Status 01.10.2024

Who we are
The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:
Bader Hotelbetriebs GmbH
Heimstettener Straße 12
85599 Parsdorf near Munich
Germany
+49 89 24415470
info@dasbaderhotel.com
www.dasbaderhotel.com

Contacting the data protection officer
The data protection officer of the controller is
DataCo GmbH
Nymphenburger Str. 86
80636 Munich
Germany
+49 89 7400 45840
www.dataguard.de

Your rights
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

the right to information (Art. 15 GDPR)
You have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the following information:
• Processing purposes
• Categories of personal data
• Recipients or categories of recipients
• Planned storage duration or the criteria for determining this duration
• the existence of the rights to rectification, erasure, restriction or objection
• Right to lodge a complaint with the competent supervisory authority
• If applicable, origin of the data (if collected from a third party)
• If applicable, the existence of automated decision-making including profiling with meaningful information about the logic involved, the scope and the expected effects
• Possible transfer of personal data to a third country or international organization

right to rectification (Art. 16 GDPR)
If your personal data is incorrect or incomplete, you have the right to request immediate correction or completion of the personal data.

right to restriction of processing (Art. 18 GDPR)
If one of the following conditions is met, you have the right to request that the processing of your personal data be restricted:
• You contest the accuracy of your personal data for a period enabling us to verify the accuracy of the personal data.
• In the event of unlawful processing, you object to the erasure of the personal data and instead request the restriction of the use of the personal data.
• We no longer need your personal data for the purposes of processing, but you need your personal data to assert, exercise or defend your legal claims, or
• after you have lodged an objection to the processing, for the duration of the examination as to whether our legitimate reasons outweigh your reasons.

right to erasure (“right to be forgotten”) (Art. 17 GDPR)
If one of the following reasons applies, you have the right to demand the immediate deletion of your personal data:
• Your data are no longer necessary for the processing purposes for which they were originally collected.
• you withdraw your consent and there is no other legal basis for the processing.
• You object to the processing and there are no overriding legitimate grounds for the processing, or you object pursuant to Art. 21 (2) GDPR.
• Your personal data is being processed unlawfully.
• The deletion is necessary to fulfill a legal obligation under Union law or the law of the Member State to which we are subject.
• The personal data was collected in relation to information society services offered in accordance with Article 8 (1) GDPR.
Please note that the above reasons do not apply if the processing is necessary:
• To exercise the right to freedom of expression and information;
• For compliance with a legal obligation or for the performance of a task carried out in the public interest to which we are subject.
• For reasons of public interest in the area of public health.
• For archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes.
• for the assertion, exercise or defense of legal claims.

right to data portability (Art. 20 GDPR)
You have the right to receive your personal data in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.

right to object to certain data processing (Art. 21 GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR. This also applies to profiling based on these provisions.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.

right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
A list of the competent supervisory authorities in Germany can be found on the website of the Federal Commissioner for Data Protection at the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

    Provision of the website and creation of log files

    description and scope of data processing
    Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
    The following data is collected:
    • Information about the browser type and version used
    • The user’s operating system
    • Date and time of access
    • Websites from which the user’s system accesses our website
    • Websites that are accessed by the user’s system via our website
    • Browser language, access device, time spent on our websites,
    This data is stored in the log files of our system.
    This data is not stored together with other personal data of the user.

    purpose of data processing
    Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
    Data is stored in log files to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. The data is not analysed for marketing purposes in this context.

    legal basis for data processing
    The legal basis for the temporary storage of data and log files is Art. 6 (1) (f) GDPR.

    duration of storage
    The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
    If the data is stored in log files, this is the case after seven days at the latest . Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymized so that it is no longer possible to identify the accessing client.

    exercise your rights
    The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. The user can object to this. Whether the objection is successful must be determined as part of a weighing of interests.

      Use of cookies

      description and scope of data processing
      When you visit our website, we use technical aids for various functions, in particular cookies, which can be stored on your end device. When you access our website and at any time thereafter, you have the choice of whether you generally allow cookies to be set or which individual additional functions you would like to select. You can make changes in your browser settings or via our Consent Manager.
      Cookies are text files or information in a database that are stored on your hard disk and assigned to the browser you are using so that certain information can flow to the place that sets the cookie. Below we describe the type of cookies we use:
      We use technically necessary cookies that are required for the technical structure of the website. Without these cookies, our website cannot be displayed (completely correctly) or the support functions are not possible.
      The following data is stored and transmitted by the technically necessary cookies:
      • Language settings
      • Log-in information
      • Use of website functions
      • Search terms entered
      • Frequency of page views
      • Track user status (also within the browser), code for changes to the contents of the shopping cart,
      We use cookies on our website that are not technically necessary. Cookies that are not technically necessary are text files that are not only used for the functionality of the website, but also collect other data.
      By setting technically unnecessary cookies, the following data is processed:
      • IP address
      • Date and time the website was accessed
      • Customization of advertisements to the user
      • Tracking of surfing behavior
      • Linking the website visit with other social media platforms

      purpose of data processing
      The purpose of using technically necessary cookies is to ensure the functionality of our website. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized even after a page change.
      We require the technically necessary cookies for the following applications:
      • Transfer of language settings
      • Remembering search terms
      • Shopping cart
      • Functionality of the website
      Cookies that are not technically necessary are used for the purpose of improving the quality of our website, its content and thus our reach and efficiency. By setting these cookies, we learn how the website is used and can thus constantly optimize our offer. In particular, these cookies serve the following purposes:
      We use technically unnecessary cookies to improve this website and your overall user experience.

      legal basis for data processing
      The provisions of the Telecommunications Digital Services Data Protection Act (TDDDG) apply to the storage of information in the end user’s end device and/or access to information already stored in the end user’s end device. If the setting and reading of cookies is technically necessary, this is done to ensure the functionality of our website. In this case, cookies are stored and accessed on your end device on the basis of Section 25 (2) No. 2 TDDDG. This storage and access to the information in your end device serves to make it easier for you to use our website and to be able to offer you our services as you have requested. Some functions of our website do not work without the use of these cookies and could therefore not be offered. The cookies are generally deleted at the end of the session (e.g. logging out or closing the browser) or after a specified period of time. Information on different storage periods for cookies can be found in the following sections of this privacy policy.
      Insofar as cookies are used that are not technically necessary, this is done on the basis of your express consent, which you can give via the cookie banner. In this case, the basis for storing and accessing information is Section 25 (1) TDDDG in conjunction with Art. 6 (1) (a), Art. 7 GDPR. You can revoke your consent at any time with effect for the future or subsequently grant it again by configuring your cookie settings accordingly. Alternatively, you can prevent the storage of cookies by making the appropriate settings in your browser software. Please note that the browser settings you make only apply to the browser you are using. If personal data is processed following the storage of and access to the information on your end device, the provisions of the GDPR apply. You can find information on this in the following sections of this privacy policy.

      exercise your rights
      You can withdraw your consent to the use of cookies at any time and manage your consent preferences at the following link: https://www.dasbaderhotel.com/de/datenschutz/

        Webshop

        We offer a webshop on our website.
        We use the following webshop software for this purpose:
        WooCommerce of the provider WooCommerce Ireland Ltd, Grand Canal Dock, 25 Herbert Pl, Dublin, D02 AY86 (hereinafter referred to as WooCommerce).

        You can find more information in the provider’s privacy policy:
        https://automattic.com/privacy/
        The website and the web shop are hosted on our own servers. Third parties do not have access to server log files.
        The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The information stored is
        • Information about the browser type and version used
        • The user’s operating system
        • Date and time of access
        This data is not merged with other data sources. This data is collected on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – the server log files must be recorded for this purpose.
        We have concluded an order processing contract with the relevant service provider, in which we oblige the relevant service provider to protect user data and not to pass it on to third parties.
        The website server is geographically located in Germany.

        Payment options

        description and scope of data processing
        We offer our customers various payment options for processing their orders. Depending on the payment option, we forward customers to the platform of the relevant payment service provider. After completing the payment process, we receive the customer’s payment data from the payment service providers or our house bank and process it in our systems for invoicing and accounting purposes.
        Payment in advance
        If you have chosen to pay in advance, we will not process any data other than the data transmitted by your bank. These are only used to check the receipt of payment.

        purpose of data processing
        The transmission of payment data to payment service providers serves to process the payment, e.g. when you purchase a product and/or make use of a service.

        legal basis for data processing
        The legal basis for data processing is Art. 6 (1) (b) GDPR, as the processing of the data is necessary for the execution of the concluded purchase contract.

        duration of storage
        All payment data and data on any chargebacks will only be stored for as long as they are required for payment processing and possible processing of chargebacks and debt collection as well as to combat misuse.
        Furthermore, payment data may be stored beyond this if and as long as this is necessary to comply with statutory retention periods or to pursue a specific case of misuse.
        Your personal data will be deleted upon expiry of the statutory retention obligations, i.e. after 10 years at the latest.

        exercise your rights
        If the data is required to fulfill a contract or to carry out pre-contractual measures, premature deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.

          Newsletter

          description and scope of data processing
          You can subscribe to a free newsletter on our website. When you subscribe to the newsletter, the data from the input screen is transmitted to us.
          In order to provide this service, we collect the following data from you:
          • Salutation
          • Email address
          • Surname
          • First name
          Your consent is obtained for the processing of the data as part of the registration process and reference is made to this privacy policy.
          No data is passed on to third parties in connection with the data processing for sending newsletters. The data is used exclusively for sending the newsletter.

          purpose of data processing
          The purpose of collecting the user’s email address is to send the newsletter.
          The collection of other personal data as part of the registration process serves to prevent misuse of the services or the email address used.

          legal basis for data processing
          The legal basis for the processing of data after registration for the newsletter by the user is Art. 6 (1) (a) GDPR if the user has given consent.

          duration of storage
          The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user’s email address is therefore stored for as long as the subscription to the newsletter is active.
          The other personal data collected during the registration process is generally deleted after a period of seven days .

          exercise your rights
          The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose, there is a corresponding link in every newsletter.
          This also makes it possible to withdraw consent to the storage of personal data collected during the registration process.

            Contact via email

            description and scope of data processing
            It is possible to contact us via the email address provided on our website. In this case, the user’s personal data transmitted with the email will be stored.
            The data is used exclusively for processing the conversation.

            purpose of data processing
            In the case of contact by email, this also constitutes the necessary legitimate interest in the processing of the data.

            legal basis for data processing
            The legal basis for processing the data transmitted in the course of sending an email is Art. 6 (1) (f) GDPR. Our legitimate interest is to respond to your request sent by email in the best possible way.
            If the email contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR.

            duration of storage
            The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
            The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

            exercise your rights
            If the user contacts us by email, they can object to the storage of their personal data at any time by sending an email to (info@dasbaderhotel.com). In such a case, the conversation cannot be continued.
            All personal data stored in the course of contacting us will be deleted in this case.

              Application by email

              description and scope of data processing
              You can send us your application by email. We will record your email address and the data you provide in the email.

              purpose of data processing
              We process the personal data from your application email solely for the purpose of processing your application.

              legal basis for data processing
              The legal basis for the processing of your data is the initiation of a contract at the request of the data subject, Art. 6 (1) (b) GDPR and § 26 (1) (1) BDSG.

              duration of storage
              After completion of the application process, the data will be stored for up to 2 months. Your data will be deleted after 2 months at the latest. In the event of a legal obligation, the data will be stored in accordance with the applicable provisions.

                Company appearances
                Instagram: Instagram, Part of Meta Platforms Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland
                On our company page, we provide information and offer Instagram users the opportunity to communicate.
                If you carry out an action on our Instagram corporate presence (e.g. comments, posts, likes, etc.), you may make personal data (e.g. real name or photo of your user profile) public.
                However, since we generally or largely have no influence on the processing of your personal data by Instagram, we cannot make any binding statements about the purpose and scope of the processing of your data.
                We use our corporate presence in social networks to communicate and exchange information with (potential) customers. In particular, we use the company presence to effectively conduct prize competitions in which users may participate. We contact users via Instagram to inform them about the successful participation.
                Every user is free to publish personal data through activities.
                Insofar as we process your personal data in order to evaluate your online behaviour, offer you competitions or carry out lead campaigns, this is done on the basis of your express declaration of consent, Art. 6 (1) (a), Art. 7 GDPR.
                The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Art. 6 (1) (f) GDPR. Our legitimate interest here is to respond to your inquiry in the best possible way and to be able to provide the requested information.
                If the contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR.
                The data generated by the company website is not stored in our own systems.
                For the processing of your personal data in third countries, we have provided suitable guarantees in the form of standard data protection clauses in accordance with Art. 46 (2) (c) GDPR. A copy of the standard data protection clauses can be requested from us.
                You can object to the processing of your personal data that we collect in the context of your use of our corporate presence at any time and assert your rights as a data subject as set out in the “Your rights” section of this privacy policy. To do so, send us an informal email to info@dasbaderhotel.com. You can find more information on the processing of your personal data by Instagram and the corresponding objection options here:
                Instagram: https://help.instagram.com/519522125107875

                Pinterest: Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland
                On our company page, we provide information and offer Pinterest users the opportunity to communicate.
                If you carry out an action on our Pinterest company website (e.g. comments, posts, likes, etc.), you may make personal data (e.g. real name or photo of your user profile) public.
                However, since we generally or largely have no influence on the processing of your personal data by Pinterest, we cannot make any binding statements about the purpose and scope of the processing of your data.
                We use our corporate presence in social networks to communicate and exchange information with (potential) customers. In particular, we use the company presence to inform you about our product portfolio and to let you participate in prize competitions.
                Every user is free to publish personal data through activities.
                Insofar as we process your personal data in order to evaluate your online behaviour, offer you competitions or carry out lead campaigns, this is done on the basis of your express declaration of consent, Art. 6 (1) (a), Art. 7 GDPR.
                The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Art. 6 (1) (f) GDPR. Our legitimate interest here is to respond to your inquiry in the best possible way and to be able to provide the requested information.
                If the contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR.
                The data generated by the company website is not stored in our own systems.
                For the processing of your personal data in third countries, we have provided suitable guarantees in the form of standard data protection clauses in accordance with Art. 46 (2) (c) GDPR. A copy of the standard data protection clauses can be requested from us.
                You can object to the processing of your personal data that we collect in the context of your use of our corporate presence at any time and assert your rights as a data subject as set out in the “Your rights” section of this privacy policy. To do so, please send us an informal email to info@dasbaderhotel.com. You can find more information on the processing of your personal data by Pinterest and the corresponding objection options here:
                Pinterest: https://policy.pinterest.com/de/privacy-policy

                Use of company presences in professional networks

                scope of data processing
                The company website is used for applications, information/PR and active sourcing. We have no information on the processing of your personal data by the companies jointly responsible for the company website. Further information can be found in the privacy policy of:
                • LinkedIn
                On our website we provide information and offer users the opportunity to communicate.
                The company website is used for applications, information/PR and active sourcing.
                We do not have any information on the processing of your personal data by the companies jointly responsible for the corporate presence. Further information can be found in LinkedIn’s privacy policy:
                https://www.linkedin.com/legal/privacy-policy
                If you carry out an action on our company website (e.g. comments, posts, likes, etc.), you may make personal data (e.g. real name or photo of your user profile) public.

                legal basis for data processing
                The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Art. 6 (1) (f) GDPR. Our legitimate interest here is to respond to your inquiry in the best possible way and to be able to provide the requested information.
                If the contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR.

                purpose of data processing
                The purpose of our company website is to inform users about our services. Every user is free to publish personal data through activities.

                duration of storage
                The data generated by the company website is not stored in our own systems.

                exercise your rights
                You can object to the processing of your personal data that we collect in the context of your use of our corporate presence at any time and assert your rights as a data subject as set out in the “Your rights” section of this privacy policy. To do so, please send us an informal email to the email address stated in this privacy policy.
                Further information on exercising your rights can be found here:
                LinkedIn:
                https://www.linkedin.com/legal/privacy-policy

                  Hosting

                  The website is hosted on servers of a service provider commissioned by us.
                  Our service provider is:
                  Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin . Further information can be found in the provider’s privacy policy: https://www.strato.de/datenschutz/
                  The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The information stored is
                  • Information about the browser type and version used
                  • The user’s operating system
                  • Date and time of access
                  • Websites from which the user’s system accesses our website
                  • Websites that are accessed by the user’s system via our website
                  • Browser language, access device, time spent on our websites,
                  This data is not merged with other data sources. This data is collected on the basis of Art. 6 (1) (f) GDPR. Our legitimate interest in processing this data is to display our website without errors and to optimize its functions.
                  The location of the website server is geographically located in the European Union (EU) or the European Economic Area (EEA).
                  Integrated third-party services
                  We use various service providers to provide the services we offer on the website.
                  In general, we have a legitimate interest in sharing your data with the relevant service providers if these services are essential for the provision of the basic service offered on the website in order to provide the relevant website service.
                  If such services are required for additional services, extended functions or additional purposes, your personal data will only be passed on to service providers if you give your consent.
                  You can withdraw your consent to the use of integrated third-party services at any time and manage your consent settings here: https://www.dasbaderhotel.com/de/datenschutz/

                  Use of CleverReach

                  scope of the processing of personal data
                  To send our newsletter, we use the CleverReach software, which is operated by CleverReach GmbH & Co KG, Mühlenstraße 43, 26180 Rastede, Germany (hereinafter referred to as CleverReach). CleverReach is a provider of email marketing and enables us to communicate directly with potential customers via email newsletters. If you register for the newsletter, the data you enter when registering for the newsletter will be transmitted to CleverReach and stored there. This allows further personal data to be stored and analyzed, in particular the user’s activity (in particular which pages have been visited and which elements have been clicked on) and device and browser information (in particular the IP address and operating system). Your data is also stored by CleverReach for this purpose. Your data will not be passed on to third parties for the purpose of receiving the newsletter and CleverReach does not obtain the right to pass on your data.
                  Further information on the processing of data by CleverReach can be found here:
                  https://www.cleverreach.com/de/datenschutz/

                  Purpose of data processing
                  The CleverReach plug-in is used to acquire new customers for our newsletter and to create, send and analyze newsletter campaigns.

                  legal basis for the processing of personal data
                  The legal basis for the processing of users’ personal data is generally the consent of the user in accordance with Art. 6 (1) (a) GDPR.

                  duration of storage
                  The data will be stored and analysed until the recipient objects to the processing of the data or stops receiving the newsletter.

                  Exercising your rights
                  You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

                  You can withdraw your consent to the storage of data and its use for sending the newsletter by CleverReach at any time. You can revoke your consent at any time by sending an email to info@cleverreach.com or by clicking on the link provided in every newsletter.
                  Further information on objection and removal options vis-à-vis CleverReach can be found at
                  https://www.cleverreach.com/de/datenschutz/

                  Use of the Instagram plugin

                  scope of the processing of personal data
                  We use plugins of the Instagram service of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA and its representative in the Union Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter referred to as Facebook). The integrated Instagram buttons are used by us to enable a link to our Instagram profile. A widget is also integrated, which enables us to display certain photos and videos from our Instagram profile on our online presence When you visit one of our pages that contains such a plug-in, your browser establishes a direct connection to a Facebook server. The content of the plug-ins is transmitted directly to your browser and integrated into the online presence. Data is automatically transmitted to Instagram and stored on its servers. This transmitted data includes connection data (such as your IP address, date and time, the URL accessed) as well as the browser and operating system used.

                  Your visit to our pages can thus be tracked by Instagram, even if you do not actively use the plug-in functions. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our pages with your user account. If you want to prevent this direct assignment, you must log out of Instagram before visiting our online presence.
                  You can find more information on this in Instagram’s privacy policy:
                  https://help.instagram.com/155833707900388

                  Purpose of the data processing

                  The use of the Instagram plug-in serves to improve the external presentation of our company.

                  legal basis for the processing of personal data
                  The legal basis for the processing of users’ personal data is generally the consent of the user in accordance with Art. 6 (1) (a) GDPR.

                  duration of storage
                  Your personal information will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law, e.g. for tax and accounting purposes.

                  Exercising your rights
                  You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

                  You can prevent the collection and processing of your personal data by Instagram by preventing the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

                  Further information on objection and removal options vis-à-vis Instagram can be found at https://help.instagram.com/155833707900388

                    Use of Pinterest

                    scope of the processing of personal data
                    We use the Pinterest plugin of Pinterest Inc, 808 Brannan Street San Francisco, CA 94103-490, USA (hereinafter referred to as Pinterest) on our online presence. Users can save content from our online presence to their Pinterest account using the Pinterest plugin. Your browser establishes a connection with the Pinterest servers in the USA. This allows personal data to be stored and analyzed, in particular the user’s activity (in particular which pages have been visited and which elements have been clicked on) as well as device and browser information (in particular the IP address and operating system).

                    We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Pinterest.

                    Further information on the processing of data by Pinterest can be found here: https://policy.pinterest.com/de/privacy-policy

                    Purpose of the data processing
                    The use of Pinterest serves to improve the user-friendliness of our website.

                    legal basis for the processing of personal data
                    The legal basis for the processing of users’ personal data is generally the consent of the user in accordance with Art. 6 (1) (a) GDPR.

                    duration of storage
                    Your personal information will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law, e.g. for tax and accounting purposes.

                    Exercising your rights
                    You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

                    You can prevent the collection and processing of your personal data by Pinterest by preventing the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

                    Further information on objection and removal options vis-à-vis Pinterest can be found at https://policy.pinterest.com/de/privacy-policy

                    Integration of plugins via external service providers

                    description and scope of data processing
                    We integrate certain plugins on our website via external service providers in the form of content delivery networks. When you visit our website, a connection is established to the servers of the providers we use to retrieve content and store it in the cache of the user’s browser. As a result, personal data may be stored and analyzed in server log files, in particular device and browser information (especially the IP address and operating system). We use the following service:
                    • WordPress

                    purpose of data processing
                    The use of the functions of these services serves to deliver and accelerate online applications and content.

                    legal basis for data processing
                    This data is collected on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website.

                    duration of storage
                    Your personal information will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law.

                    exercise your rights
                    Information on exercising your rights against WordPress can be found at: https://automattic.com/de/privacy/

                    Changes to the privacy policy
                    We reserve the right to amend the privacy policy in order to adapt it to any changes in the legal situation or changes to the service and data processing.
                    This privacy policy was created with the support of DataGuard.