Privacy Policy

Data Protection at a Glance


1. General Information

The fol­low­ing infor­ma­tion pro­vides a sim­ple overview of what hap­pens to your per­son­al data when you vis­it this web­site. Per­son­al data is any data with which you can be per­son­al­ly iden­ti­fied. Detailed infor­ma­tion on the sub­ject of data pro­tec­tion can be found in our data pro­tec­tion dec­la­ra­tion list­ed below this text.

Data Col­lec­tion on This Web­site
Who is respon­si­ble for data col­lec­tion on this web­site?
The data pro­cess­ing on this web­site is car­ried out by the web­site oper­a­tor. You can find their con­tact details in the sec­tion “Infor­ma­tion about the Respon­si­ble Enti­ty” in this data pro­tec­tion dec­la­ra­tion.

How do we col­lect your data?
Your data is col­lect­ed, on the one hand, by you pro­vid­ing it to us. This can, for exam­ple, be data that you enter into a con­tact form. Oth­er data is col­lect­ed auto­mat­i­cal­ly or with your con­sent by our IT sys­tems when you vis­it the web­site. This is pri­mar­i­ly tech­ni­cal data (e.g., inter­net brows­er, oper­at­ing sys­tem, or time of page access). This data is col­lect­ed auto­mat­i­cal­ly as soon as you enter this web­site.

What do we use your data for?
Part of the data is col­lect­ed to ensure the error-free pro­vi­sion of the web­site. Oth­er data may be used to ana­lyze your user behav­ior. If con­tracts can be con­clud­ed or ini­ti­at­ed via the web­site, the trans­mit­ted data will also be processed for con­tract offers, orders, or oth­er inquiries.

What rights do you have regard­ing your data?
You have the right at any time to receive infor­ma­tion free of charge about the ori­gin, recip­i­ent, and pur­pose of your stored per­son­al data. You also have the right to request the cor­rec­tion or dele­tion of this data. If you have giv­en con­sent to data pro­cess­ing, you can revoke this con­sent at any time for the future. Fur­ther­more, you have the right, under cer­tain cir­cum­stances, to request the restric­tion of the pro­cess­ing of your per­son­al data. You also have the right to lodge a com­plaint with the com­pe­tent super­vi­so­ry author­i­ty. You can con­tact us at any time regard­ing this and oth­er ques­tions on the sub­ject of data pro­tec­tion.

Ana­lyt­ics Tools and Third-Par­ty Tools
When vis­it­ing this web­site, your surf­ing behav­ior may be sta­tis­ti­cal­ly eval­u­at­ed. This is main­ly done with so-called ana­lyt­ics pro­grams. Detailed infor­ma­tion about these ana­lyt­ics pro­grams can be found in the fol­low­ing data pro­tec­tion dec­la­ra­tion.

2. Hosting

We host the con­tent of our web­site with the fol­low­ing provider:

All-Inkl
The provider is ALL-INKL.COM — Neue Medi­en Mün­nich, Own­er René Mün­nich, Haupt­straße 68, 02742 Frieder­s­dorf (here­inafter All-Inkl). Details can be found in All-Inkl’s data pro­tec­tion dec­la­ra­tion: https://all-inkl.com/datenschutzinformationen/. The use of All-Inkl is based on Art. 6(1)(f) GDPR. We have a legit­i­mate inter­est in the most reli­able pre­sen­ta­tion of our web­site. If cor­re­spond­ing con­sent has been request­ed, the pro­cess­ing is car­ried out exclu­sive­ly based on Art. 6(1)(a) GDPR and § 25(1) TDDDG, inso­far as the con­sent includes the stor­age of cook­ies or access to infor­ma­tion on the user’s device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TDDDG. Con­sent can be revoked at any time.

Data Pro­cess­ing Agree­ment
We have con­clud­ed a data pro­cess­ing agree­ment (DPA) for the use of the above-men­tioned ser­vice. This is a con­tract required by data pro­tec­tion law, which ensures that the ser­vice process­es the per­son­al data of our web­site vis­i­tors only accord­ing to our instruc­tions and in com­pli­ance with the GDPR.

3. General Information and Mandatory Data Protection Information

The oper­a­tors of this web­site take the pro­tec­tion of your per­son­al data very seri­ous­ly. We treat your per­son­al data con­fi­den­tial­ly and in accor­dance with the statu­to­ry data pro­tec­tion reg­u­la­tions and this data pro­tec­tion dec­la­ra­tion. When you use this web­site, var­i­ous per­son­al data is col­lect­ed. Per­son­al data is data with which you can be per­son­al­ly iden­ti­fied. This data pro­tec­tion dec­la­ra­tion explains what data we col­lect and what we use it for. It also explains how and for what pur­pose this hap­pens. We point out that data trans­mis­sion over the inter­net (e.g., com­mu­ni­ca­tion by email) may have secu­ri­ty vul­ner­a­bil­i­ties. Com­plete pro­tec­tion of data from access by third par­ties is not pos­si­ble.

Infor­ma­tion about the Respon­si­ble Enti­ty
The enti­ty respon­si­ble for data pro­cess­ing on this web­site is:

Dr. Manuel Bech­er
Amaz­ing Ger­many Trav­el GmbH
Hum­boldt­straße 9
95444 Bayreuth
Mobile +49 175 7202511
Email: manuel.becher@amazing-germany.travel

The respon­si­ble enti­ty is the nat­ur­al or legal per­son who, alone or joint­ly with oth­ers, decides on the pur­pos­es and means of pro­cess­ing per­son­al data (e.g., names, email address­es, etc.).

Stor­age Dura­tion
Unless a more spe­cif­ic stor­age peri­od is men­tioned with­in this data pro­tec­tion dec­la­ra­tion, your per­son­al data will remain with us until the pur­pose for data pro­cess­ing no longer applies. If you assert a legit­i­mate request for dele­tion or revoke con­sent to data pro­cess­ing, your data will be delet­ed unless we have oth­er legal­ly per­mis­si­ble rea­sons for stor­ing your per­son­al data (e.g., tax or com­mer­cial reten­tion peri­ods); in the lat­ter case, dele­tion will occur after these rea­sons no longer apply.

Gen­er­al Infor­ma­tion on the Legal Bases for Data Pro­cess­ing on This Web­site
If you have con­sent­ed to data pro­cess­ing, we process your per­son­al data based on Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if spe­cial cat­e­gories of data under Art. 9(1) GDPR are processed. In the case of explic­it con­sent to the trans­fer of per­son­al data to third coun­tries, data pro­cess­ing is also based on Art. 49(1)(a) GDPR. If you have con­sent­ed to the stor­age of cook­ies or access to infor­ma­tion on your device (e.g., via device fin­ger­print­ing), data pro­cess­ing is addi­tion­al­ly based on § 25(1) TDDDG. Con­sent can be revoked at any time. If your data is required for con­tract ful­fill­ment or to car­ry out pre-con­trac­tu­al mea­sures, we process your data based on Art. 6(1)(b) GDPR. Fur­ther­more, we process your data if it is nec­es­sary to ful­fill a legal oblig­a­tion based on Art. 6(1)© GDPR. Data pro­cess­ing may also be based on our legit­i­mate inter­est pur­suant to Art. 6(1)(f) GDPR. The rel­e­vant legal bases in each indi­vid­ual case are explained in the fol­low­ing para­graphs of this data pro­tec­tion dec­la­ra­tion.

Note on Data Trans­fer to Third Coun­tries That Are Not Secure Under Data Pro­tec­tion Law and to US Com­pa­nies Not Cer­ti­fied Under DPF
We use, among oth­er things, tools from com­pa­nies based in third coun­tries that are not secure under data pro­tec­tion law, as well as US tools whose providers are not cer­ti­fied under the EU-US Data Pri­va­cy Frame­work (DPF). When these tools are active, your per­son­al data may be trans­ferred to these coun­tries and processed there. We point out that in third coun­tries that are not secure under data pro­tec­tion law, a lev­el of data pro­tec­tion com­pa­ra­ble to that of the EU can­not be guar­an­teed. We note that the USA, as a safe third coun­try, gen­er­al­ly has a lev­el of data pro­tec­tion com­pa­ra­ble to the EU. Data trans­fer to the USA is per­mis­si­ble if the recip­i­ent is cer­ti­fied under the “EU-US Data Pri­va­cy Frame­work” (DPF) or has suit­able addi­tion­al safe­guards. Infor­ma­tion on trans­fers to third coun­tries, includ­ing data recip­i­ents, can be found in this data pro­tec­tion dec­la­ra­tion.

Recip­i­ents of Per­son­al Data
In the course of our busi­ness activ­i­ties, we coop­er­ate with var­i­ous exter­nal enti­ties. This some­times also requires the trans­fer of per­son­al data to these exter­nal enti­ties. We only trans­fer per­son­al data to exter­nal enti­ties if this is nec­es­sary for con­tract ful­fill­ment, if we are legal­ly oblig­ed to do so (e.g., trans­fer of data to tax author­i­ties), if we have a legit­i­mate inter­est under Art. 6(1)(f) GDPR in the trans­fer, or if anoth­er legal basis per­mits the data trans­fer. When using proces­sors, we only trans­fer per­son­al data of our cus­tomers based on a valid data pro­cess­ing agree­ment. In the case of joint pro­cess­ing, a joint pro­cess­ing agree­ment is con­clud­ed.

Revo­ca­tion of Your Con­sent to Data Pro­cess­ing
Many data pro­cess­ing oper­a­tions are only pos­si­ble with your express con­sent. You can revoke con­sent you have already giv­en at any time. The legal­i­ty of the data pro­cess­ing car­ried out until the revo­ca­tion remains unaf­fect­ed by the revo­ca­tion.

Right to Object to Data Col­lec­tion in Spe­cial Cas­es and to Direct Mar­ket­ing (Art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS DATA PROTECTION DECLARATION. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) GDPR). IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING PURPOSES; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ART. 21(2) GDPR).

Right to Lodge a Com­plaint with the Com­pe­tent Super­vi­so­ry Author­i­ty
In the event of vio­la­tions of the GDPR, data sub­jects have the right to lodge a com­plaint with a super­vi­so­ry author­i­ty, in par­tic­u­lar in the Mem­ber State of their habit­u­al res­i­dence, place of work, or the place of the alleged vio­la­tion. The right to lodge a com­plaint exists with­out prej­u­dice to oth­er admin­is­tra­tive or judi­cial reme­dies.

Right to Data Porta­bil­i­ty
You have the right to have data that we process auto­mat­i­cal­ly based on your con­sent or in ful­fill­ment of a con­tract hand­ed over to you or to a third par­ty in a com­mon, machine-read­able for­mat. If you request the direct trans­fer of the data to anoth­er con­troller, this will only be done to the extent tech­ni­cal­ly fea­si­ble.

Infor­ma­tion, Cor­rec­tion, and Dele­tion
With­in the frame­work of the applic­a­ble legal pro­vi­sions, you have the right at any time to free infor­ma­tion about your stored per­son­al data, its ori­gin and recip­i­ents, and the pur­pose of the data pro­cess­ing, and, if applic­a­ble, a right to cor­rec­tion or dele­tion of this data. You can con­tact us at any time regard­ing this and oth­er ques­tions about per­son­al data.

Right to Restric­tion of Pro­cess­ing
You have the right to request the restric­tion of the pro­cess­ing of your per­son­al data. You can con­tact us at any time regard­ing this. The right to restric­tion of pro­cess­ing exists in the fol­low­ing cas­es:

  • If you dis­pute the accu­ra­cy of your per­son­al data stored with us, we usu­al­ly need time to ver­i­fy this. Dur­ing the ver­i­fi­ca­tion peri­od, you have the right to request the restric­tion of the pro­cess­ing of your per­son­al data.
  • If the pro­cess­ing of your per­son­al data was/is unlaw­ful, you can request the restric­tion of data pro­cess­ing instead of dele­tion.
  • If we no longer need your per­son­al data, but you need it to exer­cise, defend, or assert legal claims, you have the right to request the restric­tion of the pro­cess­ing of your per­son­al data instead of dele­tion.
  • If you have lodged an objec­tion under Art. 21(1) GDPR, a bal­anc­ing of your inter­ests and ours must be car­ried out. As long as it is not yet clear whose inter­ests pre­vail, you have the right to request the restric­tion of the pro­cess­ing of your per­son­al data.
    If you have restrict­ed the pro­cess­ing of your per­son­al data, this data – apart from its stor­age – may only be processed with your con­sent or for the asser­tion, exer­cise, or defense of legal claims or for the pro­tec­tion of the rights of anoth­er nat­ur­al or legal per­son or for rea­sons of impor­tant pub­lic inter­est of the Euro­pean Union or a Mem­ber State.

SSL or TLS Encryp­tion
For secu­ri­ty rea­sons and to pro­tect the trans­mis­sion of con­fi­den­tial con­tent, such as orders or inquiries that you send to us as the site oper­a­tor, this site uses SSL or TLS encryp­tion. You can rec­og­nize an encrypt­ed con­nec­tion by the fact that the address line of the brows­er changes from “http://” to “https://” and by the lock sym­bol in your brows­er line. If SSL or TLS encryp­tion is acti­vat­ed, the data you trans­mit to us can­not be read by third par­ties.

4. Data Collection on This Website
Cookies

Our web­sites use so-called “cook­ies.” Cook­ies are small data pack­ets and do not cause any dam­age to your device. They are either stored tem­porar­i­ly for the dura­tion of a ses­sion (ses­sion cook­ies) or per­ma­nent­ly (per­ma­nent cook­ies) on your device. Ses­sion cook­ies are auto­mat­i­cal­ly delet­ed after your vis­it ends. Per­ma­nent cook­ies remain stored on your device until you delete them your­self or an auto­mat­ic dele­tion occurs through your web brows­er. Cook­ies can orig­i­nate from us (first-par­ty cook­ies) or from third-par­ty com­pa­nies (so-called third-par­ty cook­ies). Third-par­ty cook­ies enable the inte­gra­tion of cer­tain ser­vices from third-par­ty com­pa­nies with­in web­sites (e.g., cook­ies for pro­cess­ing pay­ment ser­vices). Cook­ies have var­i­ous func­tions. Many cook­ies are tech­ni­cal­ly nec­es­sary because cer­tain web­site func­tions would not work with­out them (e.g., the shop­ping cart func­tion or the dis­play of videos). Oth­er cook­ies can be used to eval­u­ate user behav­ior or for adver­tis­ing pur­pos­es. Cook­ies that are nec­es­sary to car­ry out the elec­tron­ic com­mu­ni­ca­tion process, to pro­vide cer­tain func­tions you desire (e.g., for the shop­ping cart func­tion), or to opti­mize the web­site (e.g., cook­ies to mea­sure the web audi­ence) (nec­es­sary cook­ies) are stored based on Art. 6(1)(f) GDPR unless anoth­er legal basis is spec­i­fied. The web­site oper­a­tor has a legit­i­mate inter­est in stor­ing nec­es­sary cook­ies for the tech­ni­cal­ly error-free and opti­mized pro­vi­sion of its ser­vices. If con­sent to the stor­age of cook­ies and com­pa­ra­ble recog­ni­tion tech­nolo­gies has been request­ed, the pro­cess­ing is car­ried out exclu­sive­ly based on this con­sent (Art. 6(1)(a) GDPR and § 25(1) TDDDG); con­sent can be revoked at any time. You can set your brows­er to inform you about the set­ting of cook­ies and allow cook­ies only in indi­vid­ual cas­es, exclude the accep­tance of cook­ies for cer­tain cas­es or in gen­er­al, and acti­vate the auto­mat­ic dele­tion of cook­ies when clos­ing the brows­er. Dis­abling cook­ies may lim­it the func­tion­al­i­ty of this web­site. You can find out which cook­ies and ser­vices are used on this web­site in this data pro­tec­tion dec­la­ra­tion.

Con­tact Form
If you send us inquiries via the con­tact form, your details from the inquiry form, includ­ing the con­tact details you pro­vid­ed there, will be stored by us for the pur­pose of pro­cess­ing the inquiry and in case of fol­low-up ques­tions. We do not pass on this data with­out your con­sent. The pro­cess­ing of this data is based on Art. 6(1)(b) GDPR if your inquiry is relat­ed to the ful­fill­ment of a con­tract or is nec­es­sary to car­ry out pre-con­trac­tu­al mea­sures. In all oth­er cas­es, the pro­cess­ing is based on our legit­i­mate inter­est in the effec­tive pro­cess­ing of the inquiries addressed to us (Art. 6(1)(f) GDPR) or on your con­sent (Art. 6(1)(a) GDPR) if this has been request­ed; con­sent can be revoked at any time. The data you enter in the con­tact form will remain with us until you request us to delete it, revoke your con­sent to stor­age, or the pur­pose for data stor­age no longer applies (e.g., after your inquiry has been processed). Manda­to­ry statu­to­ry pro­vi­sions – in par­tic­u­lar reten­tion peri­ods – remain unaf­fect­ed.

Inquiry by Email, Tele­phone, or Fax
If you con­tact us by email, tele­phone, or fax, your inquiry, includ­ing all result­ing per­son­al data (name, inquiry), will be stored and processed by us for the pur­pose of pro­cess­ing your request. We do not pass on this data with­out your con­sent. The pro­cess­ing of this data is based on Art. 6(1)(b) GDPR if your inquiry is relat­ed to the ful­fill­ment of a con­tract or is nec­es­sary to car­ry out pre-con­trac­tu­al mea­sures. In all oth­er cas­es, the pro­cess­ing is based on our legit­i­mate inter­est in the effec­tive pro­cess­ing of the inquiries addressed to us (Art. 6(1)(f) GDPR) or on your con­sent (Art. 6(1)(a) GDPR) if this has been request­ed; con­sent can be revoked at any time. The data you send to us via con­tact requests will remain with us until you request us to delete it, revoke your con­sent to stor­age, or the pur­pose for data stor­age no longer applies (e.g., after your request has been processed). Manda­to­ry statu­to­ry pro­vi­sions – in par­tic­u­lar statu­to­ry reten­tion peri­ods – remain unaf­fect­ed.

5. Analytics Tools and Advertising

Matomo

This web­site uses the open-source web ana­lyt­ics ser­vice Mato­mo. With the help of Mato­mo, we are able to col­lect and ana­lyze data about the use of our web­site by web­site vis­i­tors. This allows us, among oth­er things, to find out when which page views were made and from which region they come. We also col­lect var­i­ous log files (e.g., IP address, refer­rer, browsers used, and oper­at­ing sys­tems) and can mea­sure whether our web­site vis­i­tors per­form cer­tain actions (e.g., clicks, pur­chas­es, etc.). The use of this ana­lyt­ics tool is based on Art. 6(1)(f) GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in ana­lyz­ing user behav­ior to opti­mize both its web offer­ing and its adver­tis­ing. If cor­re­spond­ing con­sent has been request­ed, the pro­cess­ing is car­ried out exclu­sive­ly based on Art. 6(1)(a) GDPR and § 25(1) TDDDG, inso­far as the con­sent includes the stor­age of cook­ies or access to infor­ma­tion on the user’s device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TDDDG. Con­sent can be revoked at any time.

IP Anonymiza­tion
We use IP anonymiza­tion for analy­sis with Mato­mo. Your IP address is short­ened before analy­sis so that it can no longer be clear­ly assigned to you.

Cook­ie­less Analy­sis
We have con­fig­ured Mato­mo so that Mato­mo does not store cook­ies in your brows­er.

Host­ing
We host Mato­mo exclu­sive­ly on our own servers, so all analy­sis data remains with us and is not passed on.

6. Newsletter

Newslet­ter Data
If you would like to receive the newslet­ter offered on the web­site, we require an email address from you as well as infor­ma­tion that allows us to ver­i­fy that you are the own­er of the spec­i­fied email address and agree to receive the newslet­ter. Fur­ther data is not col­lect­ed or only col­lect­ed on a vol­un­tary basis. We use this data exclu­sive­ly for send­ing the request­ed infor­ma­tion and do not pass it on to third par­ties. The pro­cess­ing of the data entered in the newslet­ter reg­is­tra­tion form is based exclu­sive­ly on your con­sent (Art. 6(1)(a) GDPR). You can revoke your con­sent to the stor­age of the data, the email address, and their use for send­ing the newslet­ter at any time, for exam­ple via the “unsub­scribe” link in the newslet­ter. The legal­i­ty of the data pro­cess­ing oper­a­tions already car­ried out remains unaf­fect­ed by the revo­ca­tion. The data you pro­vide to us for the pur­pose of sub­scrib­ing to the newslet­ter will be stored by us or the newslet­ter ser­vice provider until you unsub­scribe from the newslet­ter and will be delet­ed from the newslet­ter dis­tri­b­u­tion list after you unsub­scribe or after the pur­pose no longer applies. We reserve the right to delete or block email address­es from our newslet­ter dis­tri­b­u­tion list at our dis­cre­tion with­in the scope of our legit­i­mate inter­est under Art. 6(1)(f) GDPR. Data stored by us for oth­er pur­pos­es remains unaf­fect­ed by this. After you unsub­scribe from the newslet­ter dis­tri­b­u­tion list, your email address may be stored by us or the newslet­ter ser­vice provider in a black­list if this is nec­es­sary to pre­vent future mail­ings. The data from the black­list is used only for this pur­pose and is not merged with oth­er data. This serves both your inter­est and our inter­est in com­ply­ing with legal require­ments when send­ing newslet­ters (legit­i­mate inter­est with­in the mean­ing of Art. 6(1)(f) GDPR). Stor­age in the black­list is not time-lim­it­ed. You can object to the stor­age if your inter­ests out­weigh our legit­i­mate inter­est.

7. Plugins and Tools

YouTube with Enhanced Data Pro­tec­tion
This web­site embeds videos from the YouTube web­site. The oper­a­tor of the web­site is Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land. When you vis­it one of these web­sites on which YouTube is embed­ded, a con­nec­tion to YouTube’s servers is estab­lished. This tells the YouTube serv­er which of our pages you have vis­it­ed. If you are logged into your YouTube account, you enable YouTube to direct­ly asso­ciate your surf­ing behav­ior with your per­son­al pro­file. You can pre­vent this by log­ging out of your YouTube account. We use YouTube in enhanced data pro­tec­tion mode. Accord­ing to YouTube, videos played in enhanced data pro­tec­tion mode are not used to per­son­al­ize brows­ing on YouTube. Ads dis­played in enhanced data pro­tec­tion mode are also not per­son­al­ized. No cook­ies are set in enhanced data pro­tec­tion mode. How­ev­er, so-called local stor­age ele­ments are stored in the user’s brows­er, which, sim­i­lar to cook­ies, con­tain per­son­al data and can be used for recog­ni­tion. Details about the enhanced data pro­tec­tion mode can be found here: https://support.google.com/youtube/answer/171780. Addi­tion­al data pro­cess­ing oper­a­tions may be trig­gered after acti­vat­ing a YouTube video, over which we have no influ­ence. The use of YouTube is in the inter­est of an appeal­ing pre­sen­ta­tion of our online offer­ings. This con­sti­tutes a legit­i­mate inter­est with­in the mean­ing of Art. 6(1)(f) GDPR. If cor­re­spond­ing con­sent has been request­ed, the pro­cess­ing is car­ried out exclu­sive­ly based on Art. 6(1)(a) GDPR and § 25(1) TDDDG, inso­far as the con­sent includes the stor­age of cook­ies or access to infor­ma­tion on the user’s device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TDDDG. Con­sent can be revoked at any time. Fur­ther infor­ma­tion about data pro­tec­tion at YouTube can be found in their data pro­tec­tion dec­la­ra­tion at: https://policies.google.com/privacy?hl=en. The com­pa­ny is cer­ti­fied under the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the USA intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the USA. Every com­pa­ny cer­ti­fied under the DPF com­mits to adher­ing to these data pro­tec­tion stan­dards. Fur­ther infor­ma­tion can be obtained from the provider at the fol­low­ing link: https://www.dataprivacyframework.gov/participant/5780.

Google Fonts (Local Host­ing)
This site uses so-called Google Fonts, pro­vid­ed by Google, for the uni­form dis­play of fonts. The Google Fonts are installed local­ly. There is no con­nec­tion to Google servers. Fur­ther infor­ma­tion about Google Fonts can be found at https://developers.google.com/fonts/faq and in Google’s data pro­tec­tion dec­la­ra­tion: https://policies.google.com/privacy?hl=en.

Font Awe­some (Local Host­ing)
This site uses Font Awe­some for the uni­form dis­play of fonts. Font Awe­some is installed local­ly. There is no con­nec­tion to servers of Fonti­cons, Inc. Fur­ther infor­ma­tion about Font Awe­some can be found in the data pro­tec­tion dec­la­ra­tion for Font Awe­some at: https://fontawesome.com/privacy.

Google Maps
This site uses the Google Maps map ser­vice. The provider is Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land. With the help of this ser­vice, we can embed map mate­r­i­al on our web­site. To use the func­tions of Google Maps, it is nec­es­sary to store your IP address. This infor­ma­tion is usu­al­ly trans­ferred to a Google serv­er in the USA and stored there. The provider of this site has no influ­ence on this data trans­fer. If Google Maps is acti­vat­ed, Google may use Google Fonts for the uni­form dis­play of fonts. When you access Google Maps, your brows­er loads the required web fonts into your brows­er cache to dis­play texts and fonts cor­rect­ly. The use of Google Maps is in the inter­est of an appeal­ing pre­sen­ta­tion of our online offer­ings and the easy find­abil­i­ty of the loca­tions we spec­i­fy on the web­site. This con­sti­tutes a legit­i­mate inter­est with­in the mean­ing of Art. 6(1)(f) GDPR. If cor­re­spond­ing con­sent has been request­ed, the pro­cess­ing is car­ried out exclu­sive­ly based on Art. 6(1)(a) GDPR and § 25(1) TDDDG, inso­far as the con­sent includes the stor­age of cook­ies or access to infor­ma­tion on the user’s device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TDDDG. Con­sent can be revoked at any time. Data trans­fer to the USA is based on the stan­dard con­trac­tu­al claus­es of the EU Com­mis­sion. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/. More infor­ma­tion on how user data is han­dled can be found in Google’s data pro­tec­tion dec­la­ra­tion: https://policies.google.com/privacy?hl=en. The com­pa­ny is cer­ti­fied under the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the USA intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the USA. Every com­pa­ny cer­ti­fied under the DPF com­mits to adher­ing to these data pro­tec­tion stan­dards. Fur­ther infor­ma­tion can be obtained from the provider at the fol­low­ing link: https://www.dataprivacyframework.gov/participant/5780.

Word­fence
We have inte­grat­ed Word­fence on this web­site. The provider is Defi­ant Inc., Defi­ant, Inc., 800 5th Ave Ste 4100, Seat­tle, WA 98104, USA (here­inafter “Word­fence”). Word­fence serves to pro­tect our web­site from unwant­ed access or mali­cious cyber­at­tacks. For this pur­pose, our web­site estab­lish­es a per­ma­nent con­nec­tion to Wordfence’s servers so that Word­fence can com­pare its data­bas­es with the access­es made on our web­site and block them if nec­es­sary. The use of Word­fence is based on Art. 6(1)(f) GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in pro­tect­ing its web­site from cyber­at­tacks as effec­tive­ly as pos­si­ble. If cor­re­spond­ing con­sent has been request­ed, the pro­cess­ing is car­ried out exclu­sive­ly based on Art. 6(1)(a) GDPR and § 25(1) TDDDG, inso­far as the con­sent includes the stor­age of cook­ies or access to infor­ma­tion on the user’s device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TDDDG. Con­sent can be revoked at any time. Data trans­fer to the USA is based on the stan­dard con­trac­tu­al claus­es of the EU Com­mis­sion. Details can be found here: https://www.wordfence.com/help/general-data-protection-regulation/.

Data Pro­cess­ing Agree­ment
We have con­clud­ed a data pro­cess­ing agree­ment (DPA) for the use of the above-men­tioned ser­vice. This is a con­tract required by data pro­tec­tion law, which ensures that the ser­vice process­es the per­son­al data of our web­site vis­i­tors only accord­ing to our instruc­tions and in com­pli­ance with the GDPR.

Source:
https://www.e‑recht24.de