Source: https://www.ott-yacht.de/service_privacypolice_en.html
Timestamp: 2019-04-20 18:55:41+00:00

Document:
The following text has been translated from https://translate.google.com/ into English language. In case of any misunderstandings, ambiguities or other wrong interpretations which may occur due to the translation the relevant text will be the German one.
"Profiling" means any kind of automated processing of personal data which involves the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular aspects relating to job performance, economic situation, health, personal Analyze or predict preferences, interests, reliability, behavior, location or location of this natural person.
"Responsible person" means the natural or legal person, authority, body or other body that decides, alone or together with others, the purposes and means of processing personal data.
In accordance with Art. 32 DSGVO, we take into account the state of the art, the implementation costs and the type the scope, circumstances and purposes of the processing and the different likelihood and severity of the risk to the rights and freedoms of natural persons; appropriate technical and organizational measures to ensure a level of protection commensurate with the risk.
Our online offer works furthermore with an SSL certificate. SSL (Secure Socket Layer) is a protocol for the authentication and encryption of Internet connections. Authentication uses a certificate issued by a special certification authority (SSL certificate), which guarantees that the open online offer is genuine. This check is intended to rule out that there may be unauthorized access to sensitive data and that it is possible to check at any time whether a user is still in the secure area of the online offer, simply because the URL (internet address) in the address bar at the top of the web browser window starts with the string "https://..." instead of just "http://...". If you fill in and submit one of the contact forms offered on our online offer, your data will also be transmitted encrypted and thus protected against unauthorized access by third parties.
Insofar as we commission third parties to process data on the basis of a so-called "contract processing contract", this is done on the basis of Art. 28 DSGVO.
In accordance with Art. 17 DSGVO, they have the right to demand that the relevant data be deleted without delay, or, alternatively, to require a restriction of the processing of the data in accordance with Art. 18 DSGVO.
However, we may use in the future also cookies on the website www.ott-yacht.de, simply to make your stay more comfortable. You will then be informed on this page.
"Cookies" are small files, which are stored on users' computers. Different information can be stored within the cookies. A cookie is primarily used to store the information about a user (or the device on which the cookie is stored) during or after his visit to an online offer. Temporary cookies, or "session cookies" or "transient cookies", are cookies that are deleted after a user leaves an online service and closes his browser. In such a cookie, e.g. the contents of a shopping cart in an online shop or a login status are saved. The term "permanent" or "persistent" refers to cookies that remain stored even after the browser has been closed. Thus, e.g. the login status will be saved if users visit it after several days. Likewise, in such a cookie the interests of the users can be stored, which are used for range measurement or marketing purposes. A "third party cookie" refers to cookies that are offered by providers other than the person responsible for the online offer (otherwise, if it is only their cookies, this is called "first-party cookies").
We process the data of our customers, clients and interested parties (uniformly referred to as "customers") in accordance with Art. 6 para. 1 lit. b. DSGVO in order to provide you with our contractual or pre-contractual services. The data processed, the nature, scope and purpose and necessity of their processing are determined by the underlying mandate. This includes in principle inventory and master data of the customer (name, address, etc.), as well as the contact data (e-mail address, telephone, etc.), the contract data (content of the commission, fees, terms, information about the companies / Insurers / services) and payment data (commissions, payment history, etc.). We may also process information about the characteristics and circumstances of persons or things belonging to them, if this is part of our mission. This can e.g. Information about personal circumstances, mobile or immovable property.
As part of our assignment, it may also be necessary for us to use special categories of data in accordance with Art. Art. 9 para. 1 DSGVO, here in particular information on the health of a person process. For this we get, if necessary, gem. Art. 6 (1) (a), Art. 7, Art. 9 (2) lit. a DSGVO an explicit consent of the customers.
To the extent necessary for the fulfillment of the contract or as required by law, we disclose or transmit the data of customers in the context of coverage, conclusion and settlement of contracts data to providers of brokered services / objects, insurers, reinsurers, brokerage pools, technical service providers, other service providers, such as. Cooperating associations, as well as financial service providers, credit institutions and capital investment companies as well as social security funds, tax authorities, tax consultants, legal advisers, auditors, insurance ombudsmen and the institutions Federal Financial Supervisory Authority (BaFin). Furthermore, we can hire subcontractors, such as Under mediator. We obtain the consent of the customer if this is required for the disclosure / transmission of the consent of the customer (which may be the case, for example, in the case of special categories of data pursuant to Art. 9 DSGVO).
The deletion of the data takes place after expiration of legal warranty and comparable obligations, whereby the necessity of the storage of the data is checked every three years; otherwise the legal storage obligations apply.
In the case of legal archiving obligations, the deletion takes place after its expiration. In particular, according to German law in the insurance and financial sector, records of records must be kept for 5 years, broker notes for 7 years and broker contracts for 5 years, as well as 6 years for documents relevant to commercial law and 10 years for tax-relevant documents.
We process the data of our contractual partners, prospects and others Clients, customers, clients, clients or contractual partners (uniformly referred to as "contractual partners") in accordance with Art. 6 para. 1 lit. b. DSGVO in order to provide you with our contractual or pre-contractual services. The data processed, the nature, scope and purpose and necessity of their processing are determined by the underlying contractual relationship.
The data will be deleted if the data is no longer required for the fulfillment of contractual or statutory duties of care and for the handling of any warranty and comparable obligations, whereby the necessity of keeping the data is reviewed every three years; otherwise the legal storage obligations apply.
As part of the fulfillment of contracts, we set the payment service providers on the basis of Art. 6 para. 1 lit. b. DSGVO. Incidentally, we use external payment service providers on the basis of our legitimate interests. Art. 6 para. 1 lit. b. DSGVO, in order to offer our users effective and secure payment options.
We process the applicant data only for the purpose and in the context of the application process in accordance with the legal requirements. The processing of the applicant data takes place in order to fulfill our (pre-) contractual obligations in the context of the application process within the meaning of Art. 6 para. 1 lit. b. DSGVO Art. 6 para. 1 lit. f. DSGVO if the data processing e.g. becomes necessary for us in the context of legal proceedings (in Germany additionally § 26 BDSG applies).
Insofar as special categories of personal data within the meaning of Art. 9 (1) DSGVO are voluntarily communicated within the framework of the application procedure, their processing is additionally carried out in accordance with Art. 9 (2) lit. b DSGVO (e.g., health information such as disability or ethnic origin). Insofar as special categories of personal data within the meaning of Art. 9 (1) DSGVO are requested from applicants in the context of the application procedure, their processing is additionally carried out in accordance with Art. 9 para. 2 lit. a DSGVO (for example health data if necessary for the profession).
The cancellation is subject to a legitimate cancellation of the candidate, after the expiration of a period of six months, so that we can answer any follow-up questions to the application and meet our obligations under the Equal Treatment Act. Invoices for any reimbursement of travel expenses will be archived in accordance with tax regulations.
When contacting us (eg via contact form, e-mail, telephone or via social media), the information provided by the user to process the contact request and its processing acc. Art. 6 para. 1 lit. b) DSGVO processed. The user information can be stored in a Customer Relationship Management System ("CRM System") or comparable request organization.
The hosting services we use are designed to provide the following services: infrastructure and platform services, computing capacity, storage and database services, e-mail delivery, security and technical services Maintenance services that we use for the purpose of operating this online offer.
Logfile information is stored for security purposes (for example, to investigate abusive or fraudulent activities) for a maximum of 7 days and then deleted. Data whose further retention is required for evidence purposes is excluded from the deletion until the final clarification of the respective incident.
We leverage our legitimate interests (ie, interest in analysis, optimization and economic operation our online offer within the meaning of Art. 6 (1) lit. DSGVO) the services of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, ("Google").
We use Google's online AdWords marketing tool "AdWords" to place ads on the Google advertising network (e.g., in search results, in videos, on websites, etc.) so that they are displayed to users who have a suspected interest in the ads. This allows us to more specifically display ads for and within our online offer so that we only present ads to users that potentially match their interests. If a user e.g. Showing ads for products he's been looking for on other online offers is called remarketing. For these purposes, upon access to our and other websites where the Google Advertising Network is active, Google will immediately execute a Google code and become so-called (re) marketing tags (invisible graphics or code, also known as ")." Web beacons ") incorporated into the website. With their help, the user is provided with an individual cookie, i. a small file is saved (instead of cookies, comparable technologies can also be used). In this file is noted which web pages the user visited, for what content he is interested and what offers the user has clicked, as well as technical information about the browser and operating system, referring web pages, visit time and other information on the use of the online offer.
The data of the users are pseudonym processed within the Google advertising network. That Google stores and processes e.g. not the name or e-mail address of the users, but processes the relevant data cookie-related within pseudonymous user profiles. That from the perspective of Google, the ads are not managed and displayed to a specifically identified person, but to the cookie owner, regardless of who that cookie owner is. This does not apply if a user has explicitly allowed Google to process the data without this pseudonymization. The information collected about users will be transmitted to Google and stored on Google's servers in the US.
We incorporate the fonts ("Google Fonts") provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Privacy police: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
We use our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 (1) lit. DSGVO) Social Plugins ("Plugins") of the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland ("Facebook"). The plugins can represent interaction elements or content (eg videos, graphics or text contributions) and can be recognized by one of the Facebook logos (white "f" on blue tile, the terms "Like", "Like" or a "thumbs up" sign ) or are marked with the addition "Facebook Social Plugin". The list and look of Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/.
When a user invokes a feature of this online offer that includes such a plugin, their device establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to the device of the user and incorporated by him into the online offer. In the process, user profiles can be created from the processed data. We therefore have no influence on the amount of data that Facebook collects with the help of this plugin and therefore informs users according to our level of knowledge.
If a user is a Facebook member and does not want Facebook to collect data about him via this online offer and link it to his member data stored on Facebook, he must log out of Facebook and delete his cookies before using our online offer. Additional settings and disagreements on the use of data for promotional purposes are possible within the Facebook profile settings: https: // www.facebook.com/settings?tab=ads or via the US http: // www.aboutads.info/choices/ or the EU page http://www.youronlinechoices.com/ . The settings are platform independent, i. they are adopted for all devices, such as desktop computers or mobile devices.

References: Art. 32
 Art. 28
 Art. 17
 Art. 18
 Art. 6
 Art. 9
 Art. 6
 Art. 7
 Art. 9
 Art. 9
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 § 26
 Art. 9
 Art. 9
 Art. 9
 Art. 9
 Art. 6
 Art. 6
 Art. 6