Privacy Policy

Information on the Processing of Your Data

In accordance with Article 12 of the General Data Protection Regulation (hereinafter: GDPR), we are obligated to inform you about the processing of your data when you use our website. We take the protection of your personal data very seriously, and this privacy policy informs you about the details of the processing of your data as well as your related legal rights.

We reserve the right to amend this privacy policy with effect for the future, particularly in the event of further development of the website, the use of new technologies, or changes to the legal framework or relevant case law.

We recommend that you read this privacy policy from time to time and print or copy it for your records.

Definitions

"Website" or "Internet presence" refers below to all pages of the data controller on www.hotel-oberstdorf.de.

"Personal data" means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. Personal data therefore includes, for example, a person's name, email address, and telephone number, but also potentially data about preferences, hobbies, and memberships.

"Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

*Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction. * “Pseudonymisation” means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.

“Consent” means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

“Google” means Google, LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Contact information for Google in the European Union can be obtained from: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

3. Scope

This privacy policy applies to all pages of www.hotel-oberstdorf.de. It does not extend to any linked websites or online presences of other providers.

3. Responsible Provider/Provider's Representative in the European Union (EU)

The following entity is responsible for the processing of personal data within the scope of this privacy policy:

Hotel Oberstdorf
Oberstdorfer Hotel Besitz und Betriebs GmbH & Co. KG
Reute 20, 87561 Oberstdorf
Telephone: +49 (0) 8322/ 940 770; Fax: +49 (0) 8322/ 940 777 00; Email: info@hotel-oberstdorf.de

Data Protection Questions

Should you have any questions regarding data protection in relation to our company or our website, you can contact our data protection officer:

Mandatory information about the data protection officer pursuant to Article 37 Paragraph 7 of the General Data Protection Regulation (GDPR):
Spirit Legal LLP Attorneys at Law
Attorney at Law and Data Protection Officer
Peter Hense
Postal address:
Data Protection Officer
c/o Hotel Oberstdorf
Oberstdorfer Hotel Besitz und Betriebs GmbH & Co. KG
Reute 20, 87561 Oberstdorf

Contact via encrypted online form:

"Contact the data protection officer": https://www.spiritlegal.com/de/datenschutzbeauftragter-anfragen.html

Security

We have implemented comprehensive technical and organizational measures to protect your personal data from unauthorized access, misuse, loss, and other external disruptions. To this end, we regularly review our security measures and adapt them to the latest technological standards.

Your Rights

You have the following rights with regard to your personal data, which you can assert against us:

Right of access (Art. 15 GDPR),
Right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR),
Right to restriction of processing (Art. 18 GDPR),
Right to object to processing (Art. 21 GDPR),
Right to withdraw your consent (Art. 7 para. 3 GDPR),
Right to receive the data in a structured, commonly used, machine-readable format (“data portability”) and the right to transmit the data to another controller if the conditions of Art. 20 para. 1 lit. a, b GDPR are met (Art. 20 GDPR)

You can assert your rights by contacting us using the contact details provided in the section “Controller” or by contacting our designated data protection officer.

You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data (Art. 77 GDPR).

3. Use of the Website, Access Data

You can generally use our website for purely informational purposes without disclosing your identity. When you access individual pages of the website in this way, only access data is transmitted to our web hosting provider so that the website can be displayed to you. The following data is collected:

Browser type/browser version
Operating system used
Language and version of the browser software
Hostname of the accessing device
IP address
Website from which the request originates
Content of the request (specific page)
Date and time of the server request
Access status/HTTP status code
Referrer URL (the previously visited page)
Amount of data transferred
Time zone difference to Greenwich Mean Time (GMT)

The temporary processing of the IP address by the system is necessary to technically enable the delivery of the website to your computer. Processing your IP address for the duration of the session is required for this purpose. The legal basis for this processing is Article 6(1)(f) GDPR.

The access data is not used to identify individual users and is not combined with other data sources. The access data is deleted when it is no longer required for the purpose for which it was processed. In the case of data collection for the provision of the website, this occurs when you end your visit to the website.

IP addresses are stored in log files to ensure the website's functionality. We also use the data to optimize the website and to ensure the security of our IT systems. The data is not used for marketing purposes. The data is generally deleted after a maximum of seven days; further processing is possible in individual cases. In such cases, the IP address is deleted or anonymized so that it is no longer possible to identify the requesting client.

The collection of data for the provision of the website and the processing of data in log files is essential for the operation of the website. You can object to this processing. In the event of your justified objection, we will review the situation and either cease or adjust the data processing, or explain our compelling legitimate grounds for continuing the processing.

Cookies

In addition to the access data mentioned above, so-called cookies are stored in the internet browser of your device when you use the website. These are small text files containing a sequence of numbers that are stored locally in the browser's cache. Cookies do not become part of your computer system and cannot execute programs. They serve to make our website more user-friendly. The use of cookies may be technically necessary or for other purposes (e.g., analyzing/evaluating website usage).

a) Technically Necessary Cookies

Some elements of our website require that the requesting browser can be identified even after a page change. The following data is processed in the cookies:

Language settings
Items in the shopping cart
Login information

The user data collected by technically necessary cookies is not used to create user profiles. We also use so-called "session cookies," which store a session ID that allows different requests from your browser to be associated with the same session. Session cookies are necessary for using the website. In particular, they allow us to recognize your device when you return to the website. We use this cookie to recognize you on subsequent visits to the website if you have an account with us; otherwise, you would have to log in again each time you visit. The legal basis for this processing is Article 6(1)(f) GDPR. We use session cookies to make using the website more attractive and efficient. Session cookies are deleted as soon as you log out or close your browser.

Most browsers are preset to automatically accept cookies. You can object to the processing of your data by cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, some website functions may no longer be fully available.

b) Cookies that are not technically necessary

We also use cookies on the website that enable us to analyze users' browsing behavior. The following data, for example, is stored and processed in these cookies:

Search terms entered
Frequency of page views
Use of website functions

These cookies are used to make the website more efficient and user-friendly. The legal basis for this processing is Article 6(1)(f) GDPR. Cookies that are not technically necessary are automatically deleted after a predetermined period, which may vary depending on the cookie.

You can object to the processing of your data by cookies. If you do not wish to use cookies, you can generally or selectively block the storage of cookies or delete cookies that have already been stored by changing your browser settings. You can also choose to be notified before a cookie is set. Should you change your browser settings regarding the use of cookies or disable cookies altogether, the functionality of this website may be limited.

If we integrate third-party cookies into our website, we will inform you separately below.

c) Cookie Banner Notice

When you access the website, an information banner will inform you about the use of cookies for analytical purposes and refer you to this privacy policy. This banner will also explain how you can prevent the storage of cookies in your browser settings.

Contacting Our Company

When you contact our company, for example, by email or via the contact form on the website, we process the personal data you provide in order to answer your inquiry.

Providing a name or pseudonym and a valid email address is mandatory for processing inquiries submitted via the contact form on the website. When you send us a message, the following data is also processed:

IP address
Date/time of registration

The legal basis for this processing is Article 6(1)(f) GDPR or Article 6(1)(b) GDPR if the contact is aimed at concluding a contract.

We process the personal data from the input form solely for the purpose of handling your inquiry. In the case of contact via email, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our IT systems.

In this context, the data is not disclosed to third parties. The data is processed exclusively for handling the conversation. We delete the data collected in this context once processing is no longer necessary, or restrict processing to compliance with existing statutory retention obligations.

You have the right to object to the processing of your personal data for contact requests at any time. This applies, in particular, if the processing is not necessary for the performance of a contract with you, as explained in the preceding description of the functions. In such a case, the processing of the request may not be continued. In the event of your justified objection, we will review the situation and either cease or adjust the data processing or demonstrate to you our compelling legitimate grounds for continuing the processing.

Processing and Disclosure of Personal Data for Contractual Purposes

We process your personal data if and to the extent that this is necessary for the initiation, establishment, execution, and/or termination of a legal transaction with our company. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b) GDPR.

Once the purpose for which the data was collected has been fulfilled (e.g., contract processing), the personal data will be blocked or deleted from further processing, unless we are entitled to further storage and processing in the respective context based on your consent (e.g., consent to the processing of your email address for sending electronic advertising mail), a contractual agreement, legal authorization (e.g., authorization to send direct marketing), or legitimate interests (e.g., retention for the enforcement of claims).

... Your personal data will be disclosed to the extent that:

it is necessary for the establishment, execution, or termination of legal transactions with our company (e.g., when disclosing data to a payment service provider/shipping company for the processing of a contract with you), (Art. 6 para. 1 sentence 1 lit. b) GDPR), or
a subcontractor or agent whom we use exclusively for the provision of the offers or services you have requested requires this data (unless you are expressly notified otherwise, such agents are only authorized to process the data to the extent necessary for the provision of the offer or service), or
there is an enforceable official order (Art. 6 para. 1 sentence 1 lit. c) GDPR), or
there is an enforceable court order (Art. 6 para. 1 sentence 1 lit. c) GDPR), or
we are legally obligated to disclose the data (Art. 6 para. 1 sentence 1 lit. c) GDPR). c) GDPR) are obligated to do so, or
processing is necessary to protect the vital interests of the data subject or another natural person (Art. 6 para. 1 sentence 1 lit. d) GDPR), or
we are authorized or even obligated to disclose the data for the purposes of pursuing overriding legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).

Your personal data will not be disclosed to any other persons, companies, or bodies unless you have effectively consented to such disclosure. The legal basis for processing is then Art. 6 para. 1 sentence 1 lit. a) GDPR.

Processing and Disclosure of Personal Data in the Online Ordering System

If you wish to place an order or make a booking in our online shop, it is necessary for the initiation and conclusion of the contract that you provide personal data such as your name, address, and email address. The mandatory information required for order and contract processing is marked accordingly; providing further information is voluntary. We process your data for order processing, in particular by forwarding payment data to your chosen payment service provider or our bank. As part of your booking or booking request, the booking information is also transferred to external operators of internet booking engines (e.g., TourOnline AG, Borsigstraße 26, 73249 Wernau, "DIRS 21") for contract fulfillment or preparation. The legal basis for this processing is Article 6 Paragraph 1 Sentence 1 Letter b) GDPR. To prevent unauthorized access to your personal data, the ordering process on the website is encrypted using SSL/TLS technology.

You can voluntarily create a customer account, in which we store your data for future visits to the website. When you create a customer account, the data you provide will be processed. You can edit or delete all other data, including your customer account, yourself after successful registration.

``` We delete the data collected in this context once its storage is no longer necessary, or restrict its processing if legal retention obligations exist. Due to mandatory commercial and tax regulations, we are obligated to retain your address, payment, and order data for ten years. Two years after the termination of the contract, we restrict processing and reduce it to compliance with existing legal obligations.

Registration/Password-Protected Area of the Website

If you wish to use the password-protected area of our website, you must register using the following information:

Email address
Name
Username
Self-chosen password

You are not required to use your real name; pseudonymous use is permitted.

Furthermore, the following data is processed at the time of registration:

IP address
Date/time of registration

The data is deleted as soon as it is no longer required for the purpose for which it was processed. This applies to data collected during the registration process if the registration on the website is canceled or modified.

The following functions are available to you in the password-protected area:

Edit your profile data,

View completed orders/bookings,

Manage, change, or cancel your newsletter subscription,

If you use the password-protected area of the website, for example, to edit your profile data or view completed orders and bookings, we also process the data about you that is necessary for initiating or fulfilling the contract, in particular address data and payment information. The legal basis for this processing is Article 6 Paragraph 1 Sentence 1 Letter b) GDPR. The data will be deleted as soon as it is no longer required for the purpose for which it was processed or if there are no overriding legitimate interests that prevent its deletion. Due to mandatory commercial and tax regulations, we are obligated to retain your address, payment, and order data for a period of ten years. Two years after the termination of the contract, we will restrict the processing of your data and reduce it to compliance with existing legal obligations.

If you have voluntarily provided additional data (e.g., regarding interests, size, age, gender, children, preferences, wish list), we will process this data, which is not necessary for initiating or fulfilling a contract, as long as you use the password-protected area and unless you delete it yourself beforehand. Our purpose is to optimize your use of the website. The legal basis for this is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR.

You can object to the processing of your voluntarily provided data. You can manage, change, or delete your voluntary information yourself at any time in the password-protected area. You are free to take action according to the section "Your Rights," and we ask that you contact our company as a first step if you have any complaints.

Processing of Personal Data in Accordance with Section 30 of the Federal Registration Act (BMG)

Accommodation establishments, particularly hotels, are required by Section 30 of the Federal Registration Act (BMG) to collect the following data from guests on the day of arrival and to have the registration form signed by the guest:

Date of arrival and expected departure,
Surname,
First names,
Date of birth,
Nationalities,
Address,
Number of accompanying persons and their nationalities in the cases specified in Section 29 Paragraph 2 Sentences 2 and 3,
Serial number of the recognized and valid passport or passport substitute document for foreign nationals.

If applicable, further data for the collection of tourist tax and spa tax

We are obligated to collect, process, and transfer this data within the framework of the BMG. The legal basis for this processing is Art. 6 Para. 1 Sentence 1 lit. c) GDPR.

We will delete this data or restrict its processing as soon as it is permissible under the provisions of the Federal Data Protection Act (BDSG) and if you have not given your consent (Art. 6 para. 1 sentence 1 lit. a) GDPR) and we have no other legitimate interest in continuing the processing.

3. Registration for Events

You can register as an organizer for events organized by our company or events in which our company is represented on the website. The legal basis for processing your data for participation in events is Art. 6 para. 1 sentence 1 lit. b) GDPR. The processing is necessary for the establishment, execution, or termination of legal transactions with our company (e.g., also when transferring data to a payment service provider/shipping company for the execution of a contract with you).

In the registration form, you must provide, among other things, your name, your company, your telephone number, and your email address. The purpose of the processing is to organize the event you have requested. If you have expressed interest in a personal appointment, your data will also be processed for the preparation and execution of the appointment.

Your data will be shared with third parties (e.g., payment service providers, shipping companies, and the event organizer) for the purposes of payment processing, sending event materials, and registering the event with the organizer. We do not plan to transfer your personal data to a so-called third country.

We will delete the data collected in this context once its storage is no longer necessary, or restrict its processing if there are legal retention obligations.

3. Application Process

We are pleased that you are interested in us and have applied or are applying for a position in our company. Below, we would like to provide you with information on the processing of your personal data in connection with your application. We process the data necessary for the online application process (e.g., name, email address, and location) as well as data that you have sent us in connection with your application in order to assess your suitability for the position (or other open positions in our company, if applicable) and to conduct the application process.

The legal basis for processing your personal data in this application process is primarily Section 26 of the German Federal Data Protection Act (BDSG) as amended on May 25, 2018. According to this section, the processing of data necessary for the decision regarding the establishment of an employment relationship is permitted. Should the data be required for legal proceedings after the application process has concluded, data processing may be carried out based on the requirements of Article 6 of the GDPR, in particular for the purposes of pursuing legitimate interests pursuant to Article 6(1)(f) of the GDPR. Our interest in this case lies in asserting or defending against legal claims.

Data from unsuccessful applicants will be deleted after six months. If you have consented to the further storage of your personal data, we will add your data to our applicant pool. Data in the applicant pool will be deleted after two years. If you are offered a position as part of the application process, the data from the applicant data system will be transferred to our human resources information system.

We use a specialized software provider for our application process. This provider acts as a service provider for us and may, in connection with the maintenance and support of the systems, also gain access to your personal data. We have concluded a data processing agreement with this provider, which ensures that data processing is carried out lawfully.

Your application data will be reviewed by the HR department upon receipt of your application. Suitable applications will then be forwarded internally to the department heads responsible for the respective open position. The further process will then be coordinated. Within the company, only those individuals who require access to your data for the proper execution of our application process have access to it.

You have the right to object to the processing of your data at any time. This applies, in particular, if the processing is not necessary for the performance of a contract with you, which we will explain in the preceding description of the functions. In the event of your justified objection, we will review the situation and either cease or adjust the data processing, or explain to you our compelling legitimate grounds for continuing the processing.

Email Marketing

Customer Retention

We reserve the right to process the email address you provided during registration/ordering/booking in accordance with legal regulations in order to send you the following content by email during or after contract processing, provided you have not already objected to this processing of your email address:

further interesting offers from our portfolio,
information about events organized by our company,
technical information,
sending our catalog,
inquiries regarding special requests,
overview of possible leisure activities,
information on how to get here by public transport.

The legal basis for this processing is Article 6(1)(f) GDPR. We process your data as described above for customer care purposes and to improve our services. We will delete your data when you unsubscribe from the newsletter, but no later than two years after the termination of the contract.

Please note that you can object to receiving direct marketing at any time without incurring any costs other than the transmission costs at basic rates. To do so, click on the unsubscribe link in the newsletter or send us your objection to the contact details provided in the "Responsible Provider" section.

Newsletter

You have the option to subscribe to our email newsletter on the website, which will keep you regularly informed about the following:

Offers from our portfolio,
Company events,
Offers (including events) from third parties, provided you have given your consent.

New items/collections,
Special offers/limited-time offers

The following personal data is required to receive the newsletter.

Recipient (name or pseudonym)
Valid email address

Subscription to our email newsletter uses a double opt-in process. After you enter the required information, we will send an email to the address you provided, asking you to explicitly confirm your newsletter subscription (by clicking a confirmation link). This ensures that you actually want to receive our email newsletter. If you do not confirm within 24 hours, we will block the information you submitted and automatically delete it after a maximum of one month.

Furthermore, the following data is processed at the time of subscription:

IP address
Date/time of newsletter subscription
Time of your confirmation link

We process your IP address, the time of newsletter subscription, and the time of your confirmation to document your newsletter subscription and prevent misuse of your personal data. The legal basis for processing is Article 6(1)(f) GDPR. We process this data for up to two years after the termination of the contract. If the newsletter subscription is made outside of a contract, we process this data for up to two years after the end of the usage process. We delete this data when the newsletter subscription ends.

After your confirmation, we process the email address and name/pseudonym of the recipient for the purpose of sending our email newsletter. The legal basis for processing is Article 6(1)(a) GDPR. We delete this data when you unsubscribe from the newsletter.

You can withdraw your consent to the processing of your email address for receiving the newsletter at any time, either by sending us a message (see the contact details in the section "Responsible Provider/Representative of the Provider in the European Union") or by clicking the unsubscribe link in the newsletter.

Email Marketing Service “Tramino”

We use Tramino for sending newsletters. The provider is Tramino, Peter Traskalik, Weststraße 30, 87561 Oberstdorf, Germany. Tramino provides a service that allows us to organize and analyze newsletter distribution. The data you enter for newsletter subscription (e.g., email address) is stored on Tramino's servers in Germany.

Our newsletters sent via Tramino allow us to analyze the behavior of newsletter recipients. This includes analyzing how many recipients opened the newsletter and how often each link in the newsletter was clicked. Using conversion tracking, we can also analyze whether a predefined action (e.g., purchasing a product on our website) occurred after clicking a link in the newsletter.

The evaluation of this information helps us understand the reading habits of our recipients so that we can better tailor and distribute our newsletter content. The legal basis for processing is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR. We process this data for up to two years after the termination of the contract. If the newsletter subscription is made outside of a contract, we process this data for up to two years after the end of the usage process. We delete this data when the newsletter subscription ends. We have no knowledge of, nor any influence over, the storage period at Tramino. For more information, please see Tramino's privacy policy at: https://www.tramino.de/datenschutz.html

You can object to the processing at any time with effect for the future by clicking on the unsubscribe link at the end of the newsletter. This will simultaneously end the processing for receiving the newsletter and for statistical analysis. A separate objection to sending via Tramino or to the statistical analysis is not possible.

Payment Service Provider (PSP)

Disclosure of Personal Data for "Purchase on Account"

In the case of payment on account, we reserve the right to forward the data you provide during the ordering/booking process to external companies (e.g., the Association of Creditreform Clubs, Hellersbergstraße 12, D-41460 Neuss) for the purpose of conducting a credit check.

This data transfer is based on Article 6 Paragraph 1 Sentence 1 Letter f) GDPR, as we provide the service in advance and bear the risk of default when you purchase on account. We delete the data collected in this context once its storage is no longer necessary, or restrict its processing if there are statutory retention obligations.

You can object to this processing at any time; however, the "Purchase on Account" payment method may then no longer be available to you.

Disclosure of Personal Data for Legal Enforcement/Address Tracing/Debt Collection Purposes

In the event of non-payment, we reserve the right to disclose the data provided during the ordering/booking process to a lawyer and/or external companies (e.g., the Association of Creditreform Clubs, Hellersbergstraße 12, D-41460 Neuss) for the purposes of address tracing and/or legal enforcement, provided there is a legitimate interest pursuant to Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

Furthermore, we may disclose your data if this is necessary to protect our rights, as well as the rights of our affiliated companies, our cooperation partners, our employees, and/or the users of our website. Under no circumstances will we sell or rent your data to third parties. This data transfer is based on Art. 6 Para. 1 Sentence 1 lit. f) GDPR.
...``
```
````````````````````````````)`)`)```)`)```)`)`)`)`)`)`)`)`)`)`)`)`)`)`)`)
```)
]``)`)`)`)`)`)`)
```)
]`)`)`)`)`)`)`)
```)
```)
```)
```)
```)
```)
```)`)`)`)`)`)`)`)`)`)`)`)
```)
```)
```)
```)`)`)`)`)`)`)`)`)`)
```)
```) We delete the data collected in this context once storage is no longer necessary, or restrict processing if there are legal retention obligations.

You have the right to object to the processing of your data at any time. This applies, in particular, if the processing is not necessary for the performance of a contract with you, which we will explain in the preceding description of the functions. In the event of your justified objection, we will review the situation and either cease or adjust the data processing, or demonstrate to you our compelling legitimate grounds for continuing the processing.

Hosting

We use external hosting services to provide the following services: infrastructure and platform services, computing capacity, storage resources and database services, security, and technical maintenance services. All data necessary for the operation and use of our website is processed in this process.

We use external hosting services for the operation of this website. We use external hosting services to ensure the efficient and secure provision of our website. The legal basis for this processing is Article 6(1)(f) GDPR.

The collection of data for the provision and use of the website and the processing of data via external web hosts is essential for the operation of the website. You can object to this processing. In the event of your justified objection, we will review the situation and either cease or adjust the data processing, or explain to you our compelling legitimate grounds for continuing the processing.

Integration of Third-Party Content

The website integrates third-party content, such as videos, maps, RSS feeds, or graphics from other websites. This integration always requires that the providers of this content (“third-party providers”) are aware of the users' IP addresses. Without the IP address, they cannot send the content to the respective user's browser. The IP address is therefore necessary for displaying this content.

``` We strive to use only third-party content providers who process IP addresses solely for content delivery. However, we have no control over whether these third-party providers process IP addresses for other purposes, such as statistical analysis. To the extent that we are aware of such practices, we inform you below. Some third-party providers may process data outside the European Union.

*You can object by installing a JavaScript blocker such as the browser plugin 'NoScript' (www.noscript.net) or by disabling JavaScript in your browser.

However, this may result in limited functionality on the website.*

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter: “reCAPTCHA”) on our website. The service provider is Google.

reCAPTCHA is used to verify whether data entered on the website (e.g., in a contact form) is entered by a human or by an automated program. To this end, reCAPTCHA analyzes the behavior of website visitors based on various characteristics. This analysis begins automatically as soon as the user accesses the website. For the analysis, reCAPTCHA evaluates various pieces of information (e.g., IP address, the visitor's time spent on the website, or mouse movements). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run entirely in the background. You will not be notified that an analysis is taking place.

The processing is based on Article 6 Paragraph 1 Sentence 1 Letter f) GDPR. We have a legitimate interest in protecting our website from abusive automated access and unsolicited email advertising (spam). We have no knowledge of, nor any influence over, the storage period for reCAPTCHA.

You have the right to object to the processing of your data at any time. This is the case, in particular, if the processing is not necessary for the performance of a contract with you, as explained in the preceding description of the functions. In such a case, the processing of your request may not be able to continue. In the event of your justified objection, we will review the situation and either cease or adjust the data processing, or demonstrate to you our compelling legitimate grounds for continuing the processing.

Further information on Google reCAPTCHA and Google's privacy policy can be found at the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

3. Google Web Fonts

We use web fonts provided by Google for the uniform display of fonts. When you visit a page, your browser loads the necessary web fonts into its cache to display text and fonts correctly.

For this purpose, your browser must connect to Google's servers. This allows Google to know that our website was accessed via your IP address. The use of Google Web Fonts is in the interest of a consistent and appealing presentation of our online content. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR. We have no knowledge of, nor any influence over, the storage period at Google.

You can object to the processing by changing your browser settings so that your browser does not support web fonts – however, a standard font from your computer will then be used.

Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.

YouTube Videos

We use plugins from the video platform YouTube.de or YouTube.com on our website. This service is operated by YouTube LLC (headquartered at 901 Cherry Avenue, San Bruno, CA 94066, USA; "YouTube"), represented by Google. These plugins allow us to embed visual content ("videos") that we have published on YouTube.de or YouTube.com on this website as well.
...``
```
``````````````````````)`````````````````````````````````````````````````````````````````````````````
```
``````````````````````````````````````````````````` The videos are all embedded in "enhanced privacy mode," meaning that no data about you as a user is transmitted to YouTube unless you play the videos. Only when you play the videos will the data described below be transmitted. We have no control over this data transmission.

By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data described in the "Access Data" section is transmitted. This occurs regardless of whether YouTube provides a user account that you are logged into, or whether no user account exists. If you are logged into Google, your data will be directly associated with your account. If you do not want this association with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and processes them for advertising, market research, and/or the needs-based design of its website. Such analysis is carried out in particular (even for users who are not logged in) to provide targeted advertising and to inform other users of the social network about your activities on our website. Google also processes your personal data in the USA and has committed to the EU-US Privacy Shield framework, "https://www.privacyshield.gov/EU-US-Framework".

The legal basis for this processing is Article 6(1)(f) GDPR. The processing serves to make our website more attractive and to offer you additional services. We have no knowledge of, nor any influence over, the storage period at YouTube.

You have the right to object to this processing, and to exercise this right, you must contact YouTube. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, some website functions may no longer be fully available.

Further information on the purpose and scope of data processing by YouTube can be found in the privacy policy at https://www.google.de/intl/de/policies/privacy.

Integration of Google Maps
This website also uses the "Google Maps" service from Google to display maps or map sections, thus enabling you to conveniently use the map function on the website.

By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in the "Access Data" section is transmitted to Google. This occurs regardless of whether Google provides a user account that you are logged into, or whether no user account exists. If you are logged into Google, your data will be directly associated with your account. If you do not wish to have your activity associated with your Google profile, you must log out before activating the button.

Google stores your data as usage profiles and processes it for advertising, market research, and/or to tailor its website to user needs. This analysis is carried out in particular (even for users who are not logged in) to provide targeted advertising and to inform other users of the social network about your activities on our website.

You have the right to object to this processing, but you must contact Google to exercise this right. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, some website functions may no longer be fully available.

Further information on the purpose and scope of data processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights and settings options to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has committed to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework. Further information on the Google Maps Terms of Service can be found at https://www.google.com/intl/de_de/help/terms_maps.html.

Services for Statistical, Analytical, and Marketing Purposes

We use third-party services for statistical, analytical, and marketing purposes. This allows us to provide you with a user-friendly and optimized website experience. These third-party providers use cookies to manage their services (see the "Cookies" section above). Unless otherwise explained below, no personal data is processed.

Some third-party providers offer the option to directly object to the use of their respective services, for example, by setting an opt-out cookie.

*If you activate a corresponding opt-out cookie, the external provider will no longer process data about your usage behavior. It is also possible to selectively object to a specific set of external services. If you change your browser or device, or delete all cookies, you will need to set the opt-out cookie again.

``` Furthermore, you can also directly object to the use of cookies via the opt-out platform of the German Association for the Digital Economy (BVDW) at http://www.meine-cookies.org/cookies_verwalten/praeferenzmanager.html or via the deactivation page of the Network Advertising Initiative at http://www.networkadvertising.org/choices. Further information on usage-based advertising and opt-out options can also be found at the following link: http://www.youronlinechoices.com/de

Below, we inform you about the external services currently used on our website, the purpose and scope of the respective data processing in each case, and your existing options for objecting.

Google Analytics

To optimally tailor our website to your interests, we use Google Analytics, a web analytics service provided by Google. Google Analytics uses so-called "cookies" (see the section "Cookies" above), which are stored on your computer and enable an analysis of your use of the website. The information generated about your use of this website is transmitted to and processed by Google on servers in the United States.

If IP anonymization is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity for us, and to provide us with other services relating to website activity and internet usage.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

This website uses Google Analytics with the extension "_anonymizeIp()". This extension shortens IP addresses before further processing, thus preventing them from being linked to a specific individual. Therefore, any personal data collected about you is immediately anonymized and the personal data is promptly deleted.

We use Google Analytics to analyze and regularly improve the use of our website. The statistics allow us to improve our services and make them more interesting for you as a user. In the exceptional cases where personal data is transferred to the USA, Google has committed to the EU-US Privacy Shield framework (https://www.privacyshield.gov/EU-US-Framework). The legal basis for processing data using Google Analytics is Article 6(1)(f) GDPR. The analytics cookies are deleted after a maximum of fourteen months.

*You have the right to object. You can prevent the storage of cookies by adjusting your browser settings; however, please note that in this case, you may not be able to fully utilize all the functions of this website. You can also prevent Google from collecting and processing data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de

Further information from the third-party provider Google can be found here.
...``
``
```
```
```
```
```
```
```
```
````
````
````
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
```
` http://www.google.com/analytics/terms/de.html,

http://www.google.com/intl/de/analytics/learn/privacy.html,

http://www.google.de/intl/de/policies/privacy.

Usage-Based Online Advertising

Google AdWords Conversion Tracking

We use Google AdWords, a service provided by Google, to advertise our attractive offers on external websites using advertising materials (so-called Google AdWords). We can determine the success of individual advertising measures based on the data from these campaigns. Our aim is to show you advertising that is relevant to you, to make our website more interesting for you, and to ensure fair billing for advertising costs.

These advertisements are delivered by Google via so-called "ad servers." We use ad server cookies for this purpose, which allow us to measure certain parameters for success, such as ad impressions or user clicks. If you access our website via a Google ad, Google AdWords will store a cookie on your computer. These cookies typically expire after 30 days and are not intended to personally identify you. The following data is generally stored in this cookie for analysis purposes: the unique cookie ID, the number of ad impressions per placement (frequency), the last impression (relevant for post-view conversions), and opt-out information (indicating that the user no longer wishes to be targeted).

These cookies enable Google to recognize your internet browser. If a user visits certain pages of an AdWords customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page. Each AdWords customer is assigned a different cookie. Therefore, cookies cannot be tracked across the websites of different AdWords customers. We ourselves do not process any personal data in the aforementioned advertising measures. We only receive statistical analyses from Google. These analyses allow us to identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of these advertising tools, and in particular, we cannot identify users based on this information.

Due to the marketing tools used, your browser automatically establishes a direct connection to Google's server. We have no control over the scope and further processing of the data collected by Google through the use of this tool and are therefore informing you to the best of our knowledge: By integrating AdWords Conversion, Google receives the information that you have accessed the relevant part of our website or clicked on one of our ads. If you are registered with a Google service, Google can associate your visit with your account. Even if you are not registered with Google or are not logged in, it is possible that the provider will learn and store your IP address.

The legal basis for processing your data is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR. We have no knowledge of, nor any influence over, the storage period at Google.

*You can prevent participation in this tracking process in various ways:

by adjusting your browser settings accordingly; in particular, blocking third-party cookies will prevent you from receiving ads from third-party providers;

By disabling cookies for conversion tracking by configuring your browser to block cookies from the domain "www.googleadservices.com" (https://www.google.de/settings/ads). This setting will be deleted if you clear your cookies.

By disabling interest-based ads from providers participating in the self-regulatory "About Ads" campaign via the link http://www.aboutads.info/choices. This setting will be deleted if you clear your cookies.

By permanently disabling them in your Firefox, Internet Explorer, or Google Chrome browser via the link http://www.google.com/settings/ads/plugin. Please note that in this case, you may not be able to fully utilize all the features of this offer.*

Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org.

Google has committed to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.

Google DoubleClick

We continue to use Google's online marketing tool "DoubleClick" on this website. DoubleClick uses cookies to display relevant ads to users, improve campaign performance reports, and prevent users from seeing the same ads multiple times. A cookie ID—a pseudonymous identification number assigned to your browser—allows Google to track which ads are displayed in which browser and thus prevent them from being shown repeatedly. This pseudonym is linked to information about user activity on the website. This enables Google and its partner sites to display ads based on previous website visits. Furthermore, DoubleClick can use the cookie ID to track conversions related to ad requests. For example, if a user sees a DoubleClick ad and later visits the advertiser's website using the same browser and makes a purchase.

The information generated by DoubleClick cookies is transferred to and stored by Google on a server in the USA. Google complies with the data protection regulations of the EU-US Privacy Shield agreement and is certified under the Privacy Shield framework (https://www.privacyshield.gov/EU-US-Framework). Data is only transferred to third parties in accordance with legal requirements or for data processing on behalf of Google. According to Google, DoubleClick cookies do not contain any personally identifiable information.

Due to the marketing tools used, your browser automatically establishes a direct connection to Google's server. We have no control over the scope and further processing of the data collected by Google through the use of this tool and therefore inform you to the best of our knowledge: By integrating DoubleClick, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can associate your visit with your account. Even if you are not registered with Google or are not logged in, it is possible that the provider will learn and store your IP address.

The legal basis for processing is Article 6(1)(f) GDPR. The DoubleClick cookies are deleted after six months at the latest. We use DoubleClick to show you advertising that may be of interest to you, in order to make our website more interesting for you.

*You can prevent participation in this tracking process and thus exercise your right to object in several ways:

By adjusting your browser settings accordingly; in particular, blocking third-party cookies will prevent you from receiving ads from third-party providers;

By deactivating cookies for conversion tracking by configuring your browser to block cookies from the domain "www.googleadservices.com" (https://www.google.de/settings/ads). Please note that this setting will be deleted if you delete your cookies.

* By deactivating interest-based ads from providers participating in the self-regulatory "About Ads" campaign via the link http://www.aboutads.info/choices. This setting will be deleted if you delete your cookies.

By permanently deactivating them in your Firefox, Internet Explorer, or Google Chrome browser via the link http://www.google.com/settings/ads/plugin

Further information about DoubleClick can be found at: https://www.google.de/doubleclick, http://support.google.com, https://policies.google.com/privacy?hl=de (for general Google privacy policy).

Google Remarketing

In addition to AdWords Conversion, we use Google Remarketing. This is a process that allows us to re-engage with you. This application enables us to display our advertisements to you during your subsequent internet browsing after you have visited our website. This is done using cookies stored in your browser, which Google uses to record and analyze your browsing behavior across various websites. This allows Google to recognize your previous visit to our website. According to Google, the data collected for remarketing purposes is not combined with any personal data that Google may process. In particular, Google states that pseudonymization is used in remarketing.

The legal basis for this processing is Article 6(1)(f) GDPR. We have no knowledge of, nor any influence over, the storage period at Google.

You can prevent participation in this tracking process and thus exercise your right to object in several ways:

by adjusting your browser settings accordingly; in particular, blocking third-party cookies will prevent you from receiving ads from third-party providers;

by disabling conversion tracking cookies by configuring your browser to block cookies from the domain "www.googleadservices.com" (https://www.google.de/settings/ads). This setting will be deleted if you clear your cookies.

by disabling interest-based ads from providers participating in the "About Ads" self-regulatory campaign via the link http://www.aboutads.info/choices. This setting will also be deleted if you clear your cookies.

by permanently disabling tracking in your Firefox, Internet Explorer, or Google Chrome browser via the link http://www.google.com/settings/ads/plugin.*

Social Media Plugins

Our website uses social media plugins. These are provided by the following providers:

Facebook (provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, email: impressum-support@support.facebook.com, privacy policy at: https://www.facebook.com/privacy/explanation; http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has committed to the EU-US Privacy Shield. https://www.privacyshield.gov/EU-US-Framework; hereinafter: "Facebook")

Google (see the definitions, https://www.google.com/policies/privacy/partners/?hl=de. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework)

Instagram Inc., 1601 Willow Road, Menlo Park, California 94025, USA;

Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA;

Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA (https://twitter.com/privacy). Twitter has certified its compliance with the EU-US Privacy Shield framework (https://www.privacyshield.gov/EU-US-Framework).

YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA (https://policies.google.com/privacy?hl=de&gl=de). YouTube has certified its compliance with the EU-US Privacy Shield framework (https://www.privacyshield.gov/EU-US-Framework).

The plugins are identified on our website by the aforementioned text or by small stylized symbols.

We offer you the option to communicate directly with the plugin provider via the button. The plugin provider only receives information that you have accessed the corresponding page of our website if you click on the marked field and thereby activate it. In addition, the data mentioned in the "Access Data" section will be transmitted.

According to the respective providers, in the case of Facebook and Xing, the IP address is anonymized immediately after collection in Germany. By activating the plugin, your personal data is transmitted to the respective plugin provider and processed there (in the USA for US-based providers). Since the plugin provider collects data primarily via cookies, we recommend that you delete all cookies via your browser's security settings before clicking on the grayed-out box.

` ... We have no influence over the data collected and the processing operations, nor are we aware of the full extent of the data processing, the purposes of the processing, or the storage periods. We also have no information regarding the deletion of the collected data by the plug-in provider.

The plug-in provider stores the data collected about you as user profiles and processes them for advertising, market research, and/or the needs-based design of its website. Such analysis is carried out in particular (even for users who are not logged in) to display targeted advertising and to inform other users of the social network about your activities on our website.

The legal basis for the use of the plug-ins is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR. The plug-ins allow you to interact with social networks and other users, enabling us to improve our services and make them more interesting for you.

*You have the right to object to the creation of these user profiles. To exercise this right, you must contact the respective plug-in provider. You can also prevent the creation of user profiles and thus exercise your right to object in various ways:

by adjusting your browser settings accordingly. In particular, blocking third-party cookies will prevent you from receiving ads from third-party providers;

by deactivating interest-based ads from providers participating in the self-regulatory campaign "About Ads" via the link "http://www.aboutads.info/choices". This setting will be deleted if you delete your cookies.*

Data is transferred regardless of whether you have an account with the plug-in provider and are logged in. If you are logged in to the plug-in provider, the data we collect from you will be directly associated with your existing account with that provider. If you click the activated button and, for example, For example, if you link to the page, the plug-in provider also saves this information in your user account and shares it publicly with your contacts.

We recommend that you regularly log out of social networks after using them, and especially before activating the button, as this prevents the plug-in provider from associating your activity with your profile.