Source: http://www.stiftl-oktoberfest.de/oktoberfest-tent-en/impressum/privacy-policy.php
Timestamp: 2019-04-24 18:23:09+00:00

Document:
2.	Person responsible in the meaning of. Art. 4 Para. 7 General Data Protection Regulation (GDPR) is René Schön, Angerstraße 18, 85123 Karlskron, Tel.: +49 8454 962199, Mobil: +49 176 21175165, E-Mail: dsb@vextec.de (see also via „Imprint“ at our Website). You can contact the person responsible for data protection via e-mail at dsb@vextec.de or via our postal address with the addition " Data Protection ".
4.	If you send us e-mail messages or other messages, in particular comments, or enter them directly on the Website, we will retain such messages in order to process the request, respond to questions and improve the Website, products and services. We delete the data arising in this context after the storage is no longer necessary or limit the processing if statutory retention obligations exist.
5.	If you provide feedback (for example on the Website), we may use and disclose this feedback for any purpose, as long as we do not provide it with your personal data, i.e. anonymously or pseudonymously. The collection of data contained in such feedback and the handling of all personal data contained therein is in accordance with the data protection principles set out herein.
6.	You have the right to ask about your personal data free of charge at any time. Furthermore, you have the right at any time to revoke your consent to the use of your personal data with effect for the future and to request correction or deletion of the data stored by us.
e)	Right to object to the processing of your personal data pursuant to Art. 21 para. 2 GDPR (if the data are processed for the purpose of direct marketing) or pursuant to Art. 21 para. 1 GDPR (if the processing is carried out pursuant to Art. 6 para. 1 sentence 1 e) or f) GDPR, for reasons arising from your particular situation, unless we have compelling grounds for processing that outweigh your interests or the processing serves to assert, exercise or defend legal claims).
i)	Please contact the data protection officer via the contact details per Section 2 above to request information and for withdrawal as well as for notification of a request for deletion; the data protection officer will then provide the information immediately or confirm the execution of your request for deletion. A deletion requested by you will then be carried out subject to statutory retention obligations. If a deletion cannot take place completely due to legal storage obligations, we limit the processing of the data concerned and inform you accordingly.
b)	The data created by users within the scope of using the website is stored on servers operated in our name. However, the server operators are subject to the same data protection standards as we are and are operated in the European Union.
c)	To prevent unauthorized access to your personal data, our website is encrypted using HTTPS technology.
c)	You can set your browser to notify you when a cookie is sent. This opens up the possibility of either accepting or rejecting a cookie. The information collected and analyzed is used to improve the services and the website, to personalize the web experience, and to allow easy login to permanently set login cookies.
d)	We may use the services of third parties to evaluate the efficiency of the website and services and to determine how visitors use the website and or the services and, where appropriate, to provide a personalized user experience when evaluating cookies. The website may use web beacons (tracking pixels) and cookies provided by third parties for this purpose. The information collected by the provider includes the pages visited, navigation patterns and similar data. This data enables us to find out which product information is most interesting for users and which offers users prefer to view. Furthermore, we do not exclude the possibility that we transmit anonymous usage data for market research purposes. Although we may have commissioned third parties to log the data originating from our website, we have control over how this data may or may not be used. The cookie itself does not contain any personal data, but if you provide personal data when visiting the website and do not delete the cookie from your browser after providing this data, the provider collects the non-personal data stored in the cookie (such as the number of visits to the provider) and stores and processes this anonymously.
a)	On our website you have the option of contacting us via the contact data provided at the website.
b)	In order to be able to process your request, we ask you to provide personal data. This includes your name, e-mail address and other information such as the subject of your inquiry and your message text. In addition to the mandatory fields, you can also enter additional information. Optionally, address and/or telephone number can be specified.
c)	The personal data transmitted to us from your above-mentioned details as well as the time of contacting us will only be used for the purpose for which you made them available to us when contacting us - in particular the processing of your inquiry. The information you provide will only be used to process your request. The data will not be used for other purposes or passed on to third parties without your express consent. Excluded from this - insofar as it is necessary to fulfil your request - are partner companies. These could be, for example: Our suppliers, payment and logistics partners and our trading partners. If there are no legal storage obligations, your personal data will be deleted after the request has been processed.
d)	The legal basis for data processing is Art. 6 para. 1 p. 1 f) DSGVO. Our legitimate interest is that we need your data in order to process or respond to your communication.
a)	On our website, you can use the "Reservations" form on the website to request a table reservation and, if necessary, other services.
b)	In order to be able to process your request, we ask you to provide personal data in our input mask. This includes your name and e-mail address, a telephone number and other information such as the subject of your inquiry and your message text.
c)	This information enables us to respond to your request and to start the reservation process. The communication of the data provided by you in this context is expressly on a voluntary basis.
d)	The personal data transmitted to us from your above-mentioned details as well as the time of contacting us will only be used for the purpose for which you made them available to us when contacting us - in particular the processing of your inquiry. The information you provide will only be used to process your request. The data will not be used for other purposes or passed on to third parties without your express consent. Excluded from this - if it is necessary for the fulfilment of your inquiry - are other companies of our group of companies. If there are no legal storage obligations, your personal data will be deleted after the request has been processed.
e)	The legal basis for data processing is Art. 6 para. 1 sentence 1 b) DSGVO. Our legitimate interest is that we need your data in order to process or respond to your reservation request.
a)	We currently use the following social media plug-ins: Facebook, Google. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can recognize the provider of the plug-in used by the logo shown and/or the additional text information. We offer you the possibility to communicate directly with the provider of the plug-in via such a button. But only if you click on the marked field and thereby activate it, the plug-in provider receives the information that you have accessed the corresponding website. In the case of Facebook, the IP address is anonymized immediately after collection, according to the respective provider in Germany. By activating the plug-in, personal data is transferred from you to the respective plug-in provider and stored there (for US providers in the USA). Since the plug-in provider collects data mainly via cookies, we recommend that you delete all cookies before clicking on not yet activated button by using your browser's security settings.
b)	We have no influence on the data collected and data processing processes, nor are we aware of the full extent of data collection, the purposes of processing, the storage periods. We also have no information on the deletion of the data collected by the plug-in provider.
c)	The plug-in provider stores the data collected about you as user profiles and uses these for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation takes place in particular (also for not logged in users) for the representation of demand-fair advertisement and in order to inform other users of the social network about your activities on our website. You have a right of objection to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Through the plug-ins we offer you the possibility to interact with social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 Para. 1 S. 1 lit. f GDPR.
d)	The data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected with us will be directly assigned to your existing account with the plug-in provider. If you click the activated button and, for example, link the page, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, especially before activating the button, as this way you can avoid being assigned to your profile with the plug-in provider.
as well as https://www.facebook.com/about/privacy/your-info. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
f)	We have included YouTube videos in our online offer, which are stored on https://www.youtube.com and can be played directly from our website. These are all integrated in the "extended data protection mode", i.e. no data about you as a user will be transmitted to YouTube if you do not play the videos. Only when you play the videos will the above data be transmitted. We have no influence on this data transmission.
g)	On this website we use the offer of Google Maps. This allows us to display interactive maps directly on the website and enables you to conveniently use the map function.

References: Art. 4
 Art. 21
 Art. 21
 Art. 6
 Art. 6
 Art. 6
 Art. 6