Source: https://www.oberstaufen.de/en/dataprotection/
Timestamp: 2019-04-20 02:19:39+00:00

Document:
The use of this website may be associated with the processing of personal data. In order for these processes to be comprehensible for you, we would like to give you an overview of these processes with the information following. In order to ensure fair processing, we would also like to inform you about your rights under the European General Data Protection Regulation (DSGVO) and the Federal Data Protection Act (BDSG).
Responsible for the data processing is Oberstaufen Tourismus Marketing GmbH, Hugo-von-Königsegg-Strasse 8, 87534 Oberstaufen (hereinafter referred to as "we" or "us").
If you have any questions or suggestions about this information or would like to contact us about the assertion of your rights, please submit your request to: info@oberstaufen.de.
The use of this website may result in the processing of personal data. The data protection term "personal data" refers to all information relating to a particular or identifiable person. The IP address can also be a personal data. An IP address is assigned to each Internet-connected device by the ISP so that it can send and receive data. When using the website, we collect information that you provide yourself. In addition, during your visit to the website, we automatically collect certain information about your use of the website.
We process personal data in compliance with the relevant data protection regulations, in particular the DSGVO and the BDSG. A data processing by us takes place only on the basis of a legal permission. When using this website, we process personal data only with your consent (Article 6 (1) sentence 1 a DSGVO), to fulfil a contract of which you are a party or to your request for the implementation of pre - contractual measures (Art. 6 para. 1 sentence 1 b DSGVO), in order to fulfil a legal obligation (Art. 6 (1) sentence 1 c DSGVO) or if the processing is necessary to safeguard our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms which require the protection of personal data predominate (Article 6 (1), first sentence, of the DSGVO).
Unless otherwise stated in the following information, we only store the data for as long as it is necessary to achieve the processing purpose or to fulfil our contractual or legal obligations. Such statutory retention requirements may arise in particular from commercial or tax regulations.
Our website contains a contact form which you can use to send us messages. We process only the data provided by you. The transfer of your data is encrypted.
The legal basis for the data processing is Art. 6 para. 1 sentence. 1 b DSGVO. All mandatory data fields are required to process your request. Non-provisioning means that we cannot process your request. The provision of further data is voluntary. Alternatively, you can send us a message via the contact e-mail.
On our website we offer a blog in which we publish articles on holiday topics. Our blog and website have a comment feature that requires personal information to be used. When you submit a comment, it will be published with the username you provided associated with each post. We recommend that you use a pseudonym instead of your name when choosing your username.
In order to use the comment function, you must enter the username and your e-mail address you have selected. All other information provided by you is voluntary. If you leave a comment, we store your IP address for the aforementioned data.
The legal basis for the storage of your e-mail address of the IP address is Art. 6 para. 1 sentence. 1 f DSGVO. We only use your e-mail in case a third party declares a comment as unlawful and we have to check the incident if necessary. We store your IP address for the purpose of being able to defend ourselves against claims of third parties in case of publication of illegal contents. We will save your e-mail address as long as your comment is publicly visible. We will delete your IP address one week after you publish the comment.
As a matter of principle, we will not review submitted comments prior to publication. However, we reserve the right to delete your comments if you are objected to by third parties as unlawful. You can object to this storage of the above data at any time. In this case we would have to remove your comment from our website.
In order to use certain functions of the website, registration via the website is required. The required information can be seen on the input screen from the registration form. The provision of information marked as mandatory is absolutely necessary in order for the registration to be completed.
The data provided will be processed for the purpose of providing the service. The processing is based on the legal basis of Art. 6 para. 1 sentence 1 b DSGVO. We store your data for the duration of the registration, unless you delete it first.
Through our website you can purchase various products and services. This service is carried out by our service provider INCERT eTourism GmbH & Co KG (Leonfeldnerstrasse 328, A-4040 Linz) on our behalf. All mandatory information is required to carry out the shipment. The legal basis for data processing is Article 6 (1) sentence 1 b DSGVO. If you have any questions, please contact our contact address.
All payment transactions are handled by INCERT and its service providers and is their responsibility. We do not receive any personal payment data from the contracted service providers, only the information as to whether a payment was successful or not. The legal basis for data processing is Article 6 (1) sentence 1 b DSGVO.
Through our website you can book accommodations in our region. As part of the booking or ordering process, we process only the data that you yourself specified in the input mask. We process the data for processing, execution and processing of your booking or order.
The legal basis for the data processing is Art. 6 para. 1 sentence 1 b DSGVO. All data fields marked as mandatory fields are required to process your booking or order. Non-provisioning means that we cannot process your booking or order. The provision of further data is voluntary.
The information on the booking process will be sent to the provider of the specified accommodation.
On our website we offer the possibility to subscribe to our newsletter. After registration, we will inform you regularly about the latest news about our offers. To sign up for the newsletter, a valid e-mail address is required. To verify the e-mail address, you will first receive a login e-mail, which you must confirm via a link (double opt-in).
If you subscribe to the newsletter on our website, we process personal data such as your e-mail address and your name on the basis of your consent. The processing is based on the legal basis of Article 6 (1) (1) a DSGVO.
When registering for the newsletter, we also store the IP address and the date and time of registration. The processing of this data is required in order to be able to prove that the consent has been granted. The legal basis arises from our legal obligation to document your consent under Art. 6 para. 1 sentence 1 c i.V.m. Art. 7 para. 1 DSGVO.
We also analyse the reading behaviour and opening rates of our newsletter. These include click-tracking (openings) and link tracking in the newsletter. The legal basis for the analysis of our newsletter is Art. 6 para. 1 sentence 1 f DSGVO and the processing serves our legitimate interest in the optimization of our newsletter. You can object to this at any time by contacting one of the above contact channels. Please note that in case of an objection we also have to stop the further delivery of the newsletter.
You can revoke a given consent in accordance with Art. 7 para. 3 DSGVO. Such revocation shall not affect the lawfulness of the processing up to the time of revocation on the basis of the consent.
For the purposes of operating this online offering, we make use of Tramino's hosting services for the following, providing our online platform, providing software, computing capacity, disk space and database, security and technical maintenance. Here, we or our hosting provider, process based on our legitimate interests in an efficient and secure provision of this online offer gem. Art. 6 para. 1 sentence 1 f DSGVO i.V.m. Art. 28 DSGVO Content data, personal data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online offer.
Logfile information is stored for security purposes (for example, to investigate abusive or fraudulent activities) for a maximum of 30 days and then deleted. Data whose further retention is required for evidential purposes shall be exempted from the cancellation until final clarification of the incident.
•	We will arrange the contents of your shopping cart to your browser so that you can continue your bookings or orders at a later time.
You can prevent the setting of cookies through our website at any time by means of an appropriate setting of the Internet browser used and thus permanently contradict the setting of cookies. In addition, already set cookies can be deleted at any time in your Internet browser. If you deactivate the setting of cookies permanently, not all functions of our website may be usable.
We use Google Analytics only with an activated IP anonymization. This means that Google's IP address will be shortened within the European Union or in other contracting states of the European Economic Area. Only in exceptional cases will the full IP address of a server be transferred from Google to the USA and shortened there.
The IP address submitted by the user's browser will not be merged with other data provided by Google. Users can prevent the storage of cookies by setting their browser software accordingly.
The legal basis for the use of this service is Art. 6 para. 1 sentence 1 f DSGVO. As a user, you can prevent the collection of information generated by the cookie by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
If you visit our website via a mobile device, you can disable Google Analytics by clicking on this link.
We use Google LLC Marketing and Remarketing Services on our website (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google"). These services allow us to display advertisements in a more targeted manner in order to present users with ads that are tailored to their interests. Over remarketing users will be shown ads and products that have been found to be interested for them in other sites in the Google Network Interest. For this purpose, when you visit our website, Google executes a code and so-called (re) marketing tags are being integrated into the website. With their help, the user is provided with an individual cookie, that means a small file is saved (instead of cookies, comparable technologies can also be used).
The cookies can be set by different domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. This file records which websites users have visited, what content they are interested in, and what has been offered.
In addition, technical information about the browser and operating system, referring websites, visit time and other information on the use of the online offer are stored.
It also collects the IP address of the users, and Google Analytics indicates that the IP address will be shorted within member states of the European Union or other parties to the Agreement on the European Economic Area.
Among the Google marketing services we use, is beside others the online advertising program Google AdWords. In the case of Google AdWords, each advertiser receives a different conversion cookie. Cookies cannot be tracked through AdWords advertisers' websites.
The information collected through the cookie is used to generate conversion statistics for AdWords advertisers who have opted for conversion tracking. Advertisers will see the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, they do not receive information that personally identifies users.
We use services, and content provided by third parties on our website (collectively referred to herein as "Content"). For such integration, processing of your IP address is technically necessary so that the content can be sent to your browser. Your IP address will therefore be transmitted to the respective third-party providers.
In each case, these data processes are used to safeguard our legitimate interests in the optimization and economic operation of our website and are based on the legal basis of Art. 6 para. 1 sentence. 1 f DSGVO.
To integrate the content, the programming language Java is used regularly. You can therefore object to data processing by disabling the execution of Java in your browser. Instructions on how to do this and other safety instructions are available from the Federal Office for Information Security under: https://www.bsi-fuer-buerger.de/BSIFB/DE/Empfehlungen/EinrichtungSoftware/EinrichtungBrowser/Sicherheitsmassnahmen/Java/Java_Sicherheistempfehlungen/java_sicherheitsempfehlungen_node.html.
•	In accordance with Article 15 GDPR and Section 34 BDSG, you have the right to request information about whether and, if applicable, to what extent we process personal data about you or not.
•	You have the right to ask us to correct your data in accordance with Article 16 DSGVO.
•	You have the right to demand the deletion of your personal data in accordance with Article 17 DSGVO and § 35 BDSG.
•	You have the right to restrict the processing of your personal data in accordance with Article 18 DSGVO.
•	You have the right, in accordance with Article 20 of the DSGVO, to receive the personal data that you have provided to us in a structured, common and machine-readable format and to transmit this data to another person in charge.
In accordance with Art. 21 DSGVO, you have the right to refuse any processing based on the legal basis of Art. 6 para. 1 sentence. 1 letter e or letter f DSGVO is based on objection.
If you believe that the processing of your personal data is in violation of the provisions of the DSGVO, you have the right to complain to a supervisory authority in accordance with Art. 77 DSGVO.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 7
 Art. 6
 Art. 7
 Art. 6
 Art. 28
 Art. 6
 Art. 6
 § 35
 Art. 21
 Art. 6
 Art. 77