Source: https://www.mrscandisfunpark.com/se/data/
Timestamp: 2019-04-23 12:36:18+00:00

Document:
Mr. Scandis Funpark (Scandinavian Park 13, 24983 Handewitt) is the “controller”, as defined by the European General Data Protection Regulation (GDPR), with respect to all data processing carried out on this website. We respect your privacy rights. We know how important the personal data we receive from you (as the user of our website) is. We respect the protection of your personal data and will only collect, store or process the data obtained in accordance with the relevant data protection regulations within the scope of our business purpose.
Personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Where we obtain your consent to certain processing operations involving personal data, the processing will be based on Art. 6(1a) of the European General Data Protection Regulation (GDPR). The processing of personal data that is required for performing a contract we have concluded with you is based on GDPR Art. 6(1b). This also applies to processing operations that are necessary for implementing pre-contractual measures. Where personal data is processed to comply with a legal obligation that applies to our company, the processing will be based on GDPR Art. 6(1c). Where processing is necessary for safeguarding legitimate interests pursued by us or by a third party, and where your interests or fundamental rights and freedoms do not override those legitimate interests, the processing is based on GDPR Art. 6(1f). The legitimate interest of our company regularly is to perform the services owed by us and/or continuously optimise our services and presentations.
Your personal data is erased or blocked as soon as the purpose for storing this data no longer exists. In addition, data may be stored where this is has been provided for by the European or national legislator in Union regulations, laws or other provisions. Data will also be blocked or erased when a storage period provided for by any of the aforementioned legal rules expires, unless this data still needs to be stored for concluding or performing a contract.
•	review for any use that violates the terms of contracts or is otherwise unlawful provided that there are actual indications for this.
This data processing operation is based on GDPR Art. 6(1f). Our legitimate interest follows from the aforementioned data collection purposes. We do not use the data collected for the purpose of identifying you. We do not combine this data with other data sources.
After the user has logged in on our website, “cookies” are stored on the user's computer. A cookie is a small text file in a computer directory that is meant to store cookies. The purpose of this file is to be able to identify the user's computer for the duration of the session. Cookies cannot manipulate the user's end device and can be deleted manually at any time, most easily in the browser. In the settings of your browser you can decide on how cookies should be handled, whether they should be rejected or whether they should only be accepted after they have been confirmed. The purpose of the cookies, in this case “session cookies”, is to expand the features of our website and to make its use as convenient as possible for you. You are free to refuse to accept cookies, but please note that some of the components of our application cannot work properly in this case. Processing data through cookies is necessary for the aforementioned purposes to safeguard our legitimate interests, as well as those of third parties in accordance with GDPR Art. 6(1f).
We collect personal data from you and use this data based on GDPR Art. 6 (1b) where this is necessary to enable you to use our website (usage data). For advertising and market research purposes and to design our website based on users' needs we may also create usage profiles using pseudonyms. You have a right to object to this use of your data at any time. We are not allowed to combine the usage profiles with data regarding the person to whom the pseudonym refers.
If you use the contact form to send us inquiries, we will store your data from the form or the e-mail address provided for contacting you, including the contact data you provided there, only for processing the respective inquiry and in case we have any follow-up questions. We do not disclose this data to third parties without your consent. This use of data in the context of processing your request is based on GDPR Art. 6(1b).
If you want to place an order at our webshop, you need to provide personal data, which we need for processing your order, for the conclusion of the contract. Information that is compulsory as it is necessary for processing the contracts is marked as such; additional information may be provided voluntarily. We process the data provided by you for processing your order. This data processing operation is based on GDPR Art. 6(1b). You have the option of creating a customer account that allows us to store your data for future purchases. If you create an account under “My Account”, the data provided by you will be stored until you revoke your consent to this storage. You can delete all other data, including your user account, in the customer area at any time. We may also process the data provided by you in order to inform you about additional interesting products from our portfolio or send you e-mails with technical information. We have a duty to store your address, payment and order data for a period of ten years under commercial and tax law. However, we restrict processing after two years, i.e. afterwards, your data will only be used to comply with the legal obligations. To prevent unauthorised third-party access to your personal data, in particular financial data, the order process is encrypted using TLS technology.
The use of tracking tools is based on GDPR Art. 6(1f). Their purpose is to ensure, within the scope of our legitimate interests in this respect, a design of our website that is based on users’ needs and the continuous optimisation of our website (through statistical analyses).
This website uses the web analytics service Piwik to analyse and regularly improve the use of our website. The statistics generated allow us to improve our website and make it more interesting to you as the user. This analysis in enabled by placing cookies (see above) on your computer. The controller will only store the data collected this way on its server within the EU. You can stop this analysis by deleting any existing cookies and preventing the storage of new cookies. However, please note that preventing the storage of cookies may prevent you from making full use of this website. You can prevent the storage of cookies through your browser settings. You can prevent the use of Piwik by removing check mark at the bottom of this page which will enable the opt-out plugin. This website uses Piwik with the “AnonymizeIP” extension. This means that all further processing is done with shortened IP addresses. Consequently, they cannot be directly related to a specific person. The IP address transmitted by your browser through Piwik will not be combined with other data collected by us. The Piwik programme is an open source project. The third-party provider information on data privacy is available at http://piwik.org/privacy/policy.
Our website uses the plugin feature of the YouTube platform of Google Inc. (“Google”), San Bruno/California, USA.﻿ A connection to the YouTube servers is created every time you access our website. The YouTube server is informed about your visit to our website. To our knowledge, this does not involve any processing of personal data. However, if you are logged in to your YouTube account, you would enable YouTube to directly allocate your browser history to your personal profile. You can deactivate this allocation by logging out of your account before accessing our website. Further information on this can be found in YouTube's Privacy Notice which is available at https://www.youtube.de/t/privacy.
Our website uses plugins of the social network Facebook, Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. The Facebook plugins can be recognised by the Facebook logo on our website. An overview of the Facebook plugins is available at: http://developers.facebook.com/docs/plugins/. When you visit our website, the plugin establishes a direct connection between your browser and the Facebook server. This way Facebook is informed about the fact that you (with your IP address) visited our website. If you click on the Facebook “Like” button while you are logged in to your Facebook account, you can link to content of our website on your Facebook profile. This allows Facebook to allocate your visit to our website to your user account. Please note that we, as the provider of the website, are not informed about the content of the data transmitted or its use by Facebook. If you don't want Facebook to be able to allocate your visit to our website to your Facebook user account, please log out of your Facebook user account. Further information on this can be found in Facebook's Privacy Notice which is available at http://de-de.facebook.com/policy.php.
We use our Facebook fan page to keep customers informed about us, our products and our services. Of course, it is also a great way to keep in contact and communicate with Facebook users.
Facebook itself is in charge of the technical aspects of data handling. We therefore refer to Facebook’s Data Policy.
However, the European Court of Justice holds that, in some cases, there may be joint responsibility on behalf of both the Facebook fan page and Facebook. Handling of this data is therefore performed according to an agreement on the overall data handling activities, which can be found here and here.
This website uses the services provided by Google Maps. This allows us to display interactive maps to you directly on our website and enables you to comfortably use the map feature. When you visit our website, Google is notified of your accessing the respective web page on our website. In addition, our website transmits the data specified above (in 5.1). This happens both where Google provides a user account through which you are logged in and in situations where there is no user account. If you are logged in to Google, your data is allocated to your account directly. If you do not want this data to be allocated to your Google profile, you need to log out of Google before you click on the button. Google stores your data as user profiles and uses it for advertising and market research purposes and/or to design its website based on users' needs. Data is analysed (even for users that are not logged in) in particular to provide advertising based on users’ needs and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, which can only be exercised by contacting Google, though. Further information on the purpose and scope of data collection and its processing by the plugin provider is available in the privacy notice of the respective provider. The privacy notice also provides additional information regarding your relevant rights and configuration options for the protection of your privacy: www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has committed to complying with the provisions of the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
The processing of your data in this respect is based on GDPR Art. 6(1f). Our legitimate interests are to market the website and to provide access to offerings that are focused on your interests as much as possible to you in this respect.
We use the services of Google Adwords to draw consumers’ attention to our attractive offering on external websites through advertising tools (referred to as “Google Adwords”). Based on the advertising campaign data we can determine the effectiveness of individual advertising measures. The purpose of using this service is to display advertising to you that is of interest to you, to make our website more interesting to you, and to achieve a fair calculation of advertising costs. These advertising tools are delivered by Google through servers referred to as “ad servers”. For this purpose we use ad server cookies that allow us to measure certain parameters, such as the display of ads or clicks by users, in order to determine effectiveness. If you get to our website through a Google ad, Google Adwords places a cookie on your PC. In general, these cookies are only valid for a period of 30 days and are not meant to be used to personally identify you. The analysis values typically stored for this cookie are the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), and opt-out information (a note stating that the user does not want to be approached any more). These cookies enable Google to recognise your internet browser. Where users visit certain pages of the website of an Adwords customer and the cookie stored on the user's computer has not expired yet, Google and the customer can see that the user clicked on the ad and was taken to this page. Each Adwords customer is assigned a different cookie. Consequently, cookies cannot be tracked beyond the websites of Adword customers. We ourselves do not collect or process any personal data in the context of the aforementioned advertising measures. Google only provides statistical analyses to us. These analyses allow us to recognise which of the advertising measures used are particularly effective. We do not receive any additional data from using the advertising tools. In particular, we are not able to identify users based on this information. Based on the marketing tools used, your browser automatically establishes a direct connection with the Google server. We do not have any influence on the extent and the further use of the data that are collected by Google using this tool and therefore inform you to the best of our knowledge: Through the integration of AdWords Conversion, Goggle is notified of the fact that you accessed that particular part of our website or clicked on one of our ads. If you are registered with a Google service, Google can allocate the visit to your account. Even if you are not registered with Google, or are not logged in, there is a possibility that the provider may find out and store your IP address. You have various options for preventing the participation in this tracking method: a) by selecting the appropriate settings in your browser software; in particular, if you refuse to accept third-party cookies, you will not receive any third-party ads anymore; b) by disabling cookies for conversion tracking which is done by blocking cookies from the domain “www.googleadservices.com” in your browser settings https://www.google.de/settings/ads; these settings are deleted when you delete your cookies; c) by disabling the interest-based ads of the providers that are part of the self-regulatory campaign “About Ads” using the link http://www.aboutads.info/choices; these settings are deleted when you delete your cookies; d) by disabling the participation permanently in your Firefox, Internet Explorer or Google Chrome browser at http://www.google.com/settings/ads/plugin. Please note that doing so may prevent you from making full use of all of the features of this website. Further information on Google’s data privacy policies is available at: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. As an alternative, you can visit the website of Network Advertising Initiative (NAI) at http://www.networkadvertising.org. Google has committed to complying with the terms of the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
•	the existence of a right to lodge a complaint with a supervisory authority; all available information regarding the origin of the data if the personal data is not collected from you; the existence of automated decision-making, including profiling, in accordance with GDPR Art. 22(1) and (4) and, at least in these cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.
You also have the right to request information as to whether your personal data is transferred to a third country or an international organisation. In this context you may request to be informed about the appropriate guarantees in accordance with GDPR Art. 46 in connection with the transfer.
You also have a right vis-à-vis us to have your personal data rectified and/or completed where your processed data is inaccurate or incomplete. Where this is the case, we will rectify the data without undue delay.
•	you have objected to the processing in accordance with GDPR Art. 21(1) and it has not been established yet whether our legitimate reasons override your reasons. After you have requested the restriction of the processing of your personal data, this data (aside from its storage) may only be processed with your consent or to establish, exercise or defend legal claims or to protect the rights of another natural person or legal entity or for reasons of an important public interest of the Union or a Member State. We will notify you before the restriction is lifted.
•	Your personal data is no longer required for the purposes for which it was collected or otherwise processed.
•	You revoke any existing consent that formed the basis of processing in accordance with GDPR Art. 6(1a) or Art. 9(2a) and there is no other legal basis for continuing the processing.
•	You object to the processing in accordance with GDPR Art. 21(1) and there are no overriding legitimate grounds for the processing.
•	You object to the processing by way of direct marketing in accordance with GDPR Art. 21(2).
•	Your personal data was processed unlawfully.
•	The erasure of your personal data is necessary to comply with a legal obligation under Union law or the law of the Member States to which we are subject.
•	to establish, exercise or defend legal claims.
Where you have exercised your right to the rectification or erasure of data or the restriction of its processing vis-à-vis us, we have a duty to communicate this rectification or erasure of the data or the restriction of its processing to all recipients to whom your personal data was disclosed, unless this proves impossible or involves disproportionate effort. You have a right to be informed about these recipients.
•	the processing is carried out by automated means. In this respect you also have the right to have us transmit your personal data directly to another controller where this is technically feasible. This right must not adversely affect the rights and freedoms of other persons. The right to data portability does not apply to any processing operation involving personal data that is necessary for the performance of a task in the public interest or carried out in the exercise of official authority vested in us. We do not believe that the data currently being processed within the offering of our website include data that is subject to the right of data portability.
You have the right to object to processing of your personal data that is based on GDPR Art. 6(1e) or (1f) at any time on grounds relating to your particular situation; this also applies to any profiling based on those provisions. In this case we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or unless the data is processed for the establishment, exercise or defence of legal claims. Where your personal data is processed for direct marketing purposes, you have the right to object to processing of personal data concerning you for the purposes of such marketing at any time; this also applies to any profiling related to such direct marketing. Where you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes. In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
You have a right to revoke your consent under data protection law at any time. The revocation of your consent does not affect the lawfulness of the processing carried out based on the consent until the consent was revoked.
You have the right not to be subjected to a decision that is based solely on automated processing, including profiling, which produces legal effects for you or has similar significant negative effects for you. We do not perform such processing operations.
Notwithstanding any additional rights to lodge complaints, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged violation, if you feel that the processing of your personal data violates the GDPR.
We may also use links to websites of other providers on our website. This privacy notice does not apply in this respect. Please read the privacy notice of the respective provider where your use of the websites of these other providers involves the collection, processing or use of personal data. We are not responsible for their data protection policies.
Your personal data is only stored on our servers or servers used on our behalf. These servers can only be accessed, and the data can only be used, by a group of employees and/or service providers with special authorisation and access is limited to that data which is necessary for performing the relevant task. Your data will not be transferred to third parties without your consent. Unless otherwise provided for in this privacy notice, data is not currently being transferred to third countries (countries outside of the European Economic Area – EEA) and there are no plans for doing so in the future.
To protect your personal data, we have implemented technical and organisational measures to ensure that your data is protected against any accidental and/or intentional loss, destruction or manipulation or the access by unauthorised persons. Our protective measures are reviewed on a regular basis and are adapted to keep up with technical advances as required.
We reserve the right to change this privacy notice at any time as required and with reference to the data protection regulations in effect at the time when the privacy notice is changed. Here you can decide whether a unique web analysis cookie may be placed in your browser in order to enable the website operator to collect and analyse various types of statistical data. If you want to decide against such placement, please click on the following link in order to place the Piwik disabling cookie in your browser. The information regarding your visit to this website is currently being collected by Piwik web analytics. Please click here to ensure that the information regarding your visit will not be collected any more.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 6